Tools
EfiGuard
Mattiwatti/EfiGuard
EfiGuard is a portable UEFI bootkit for x64 Windows that disables PatchGuard and Driver Signature Enforcement at boot. It is a low-level security research tool for kernel debugging and driver testing.
Topics
Related projects
Windows-Kernel-Explorer2.7kA Windows kernel research tool offering process, file, registry, driver and hook inspection plus low-level system management from Windows XP to 11.
Chaos-Rootkit1.1kA Windows Ring 0 rootkit research project with a GUI, demonstrating kernel techniques such as process hiding, privilege elevation, driver swapping and file protection for security study.
efibooteditor507A graphical editor for (U)EFI boot entries on Linux, Windows and macOS, with import/export, raw EFI backup and restore, and localization support.
winfsp9kA Windows file-system development framework that provides a kernel driver and user-mode APIs, enabling developers to build custom file systems similar to FUSE.
Ventoy80.7kA bootable USB tool that lets you copy multiple ISO and disk images to a drive and boot any of them from a built-in menu.
rufus38.3kA reliable USB formatting and bootable-drive creation utility for Windows, supporting multiple filesystems, ISO and image writing, Windows To Go, checksums and UEFI validation.