EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > x64 OS

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-01-2017, 06:14
Fyyre's Avatar
Fyyre Fyyre is offline
Fyyre
 
Join Date: Dec 2009
Location: 0xfffffffe
Posts: 126
Rept. Given: 39
Rept. Rcvd 58 Times in 26 Posts
Thanks Given: 16
Thanks Rcvd at 70 Times in 14 Posts
Fyyre Reputation: 58
Universal PatchGuard and Driver Signature Enforcement Disable

Tool created by myself (Fyyre) and long time friend EP_X0FF. It disable driver signing enforcement and Patch Guard on Windows 7, 8 & 10.

https://github.com/hfiref0x/UPGDSED

I highly recommend run patch.exe -nf -- this switch currently avoid bug we are researching when KiFilterFiberContext function is patch directly.

Enjoy,

-Fyyre
__________________
-Fyyre

--
http://fyyre.ru
Reply With Quote
The Following 3 Users Gave Reputation+1 to Fyyre For This Useful Post:
deroko (07-13-2017), giv (06-08-2017), user1 (06-12-2017)
The Following 14 Users Say Thank You to Fyyre For This Useful Post:
abhi93696 (10-29-2017), Asus (06-15-2017), deroko (07-13-2017), giv (06-08-2017), Insid3Code (07-17-2017), JMP-JECXZ (06-01-2017), Kjacky (08-25-2017), niculaita (06-01-2017), ontryit (06-02-2017), papi (06-01-2017), SinaDiR (06-02-2017), Spiderz_Soft (06-09-2017), TechLord (06-13-2017), user1 (06-12-2017)
  #2  
Old 06-13-2017, 03:17
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 804
Rept. Given: 778
Rept. Rcvd 83 Times in 55 Posts
Thanks Given: 1,334
Thanks Rcvd at 118 Times in 82 Posts
niculaita Reputation: 83
this works if in bios we have bios secure enable ?
__________________
Decode and Conquer
Reply With Quote
  #3  
Old 06-13-2017, 16:16
Fyyre's Avatar
Fyyre Fyyre is offline
Fyyre
 
Join Date: Dec 2009
Location: 0xfffffffe
Posts: 126
Rept. Given: 39
Rept. Rcvd 58 Times in 26 Posts
Thanks Given: 16
Thanks Rcvd at 70 Times in 14 Posts
Fyyre Reputation: 58
Quote:
Originally Posted by niculaita View Post
this works if in bios we have bios secure enable ?
Secureboot? Sorry, no.
__________________
-Fyyre

--
http://fyyre.ru
Reply With Quote
The Following User Says Thank You to Fyyre For This Useful Post:
niculaita (06-14-2017)
  #4  
Old 08-22-2017, 08:33
KNARZ KNARZ is offline
Friend
 
Join Date: Jan 2017
Posts: 2
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 1 Post
KNARZ Reputation: 0
Nice, is there any advantage over WindowsD ?
Reply With Quote
  #5  
Old 08-22-2017, 18:29
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 841
Rept. Given: 486
Rept. Rcvd 1,154 Times in 308 Posts
Thanks Given: 86
Thanks Rcvd at 498 Times in 191 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
From what I can tell WindowsD (https://github.com/katlogic/WindowsD) does not disable PatchGuard.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Says Thank You to mr.exodia For This Useful Post:
niculaita (08-22-2017)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT +8. The time now is 03:47.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX