All Projects → hfiref0x → Dsefix

hfiref0x / Dsefix

Licence: bsd-2-clause
Windows x64 Driver Signature Enforcement Overrider

Programming Languages

c
50402 projects - #5 most used programming language

Projects that are alternatives of or similar to Dsefix

Ssspinnerbutton
Forget about typical stereotypic loading, It's time to change. SSSpinnerButton is an elegant button with a diffrent spinner animations.
Stars: ✭ 357 (-20.31%)
Mutual labels:  loader
Sqlhooks
Attach hooks to any database/sql driver
Stars: ✭ 397 (-11.38%)
Mutual labels:  driver
Hasql
Performant PostgreSQL driver with a flexible mapping API
Stars: ✭ 415 (-7.37%)
Mutual labels:  driver
Ngx Ui Loader
Multiple Loaders / spinners and Progress bar for Angular 5, 6, 7 and 8+
Stars: ✭ 368 (-17.86%)
Mutual labels:  loader
Dokany
User mode file system library for windows with FUSE Wrapper
Stars: ✭ 4,055 (+805.13%)
Mutual labels:  driver
Css Loader
CSS Loader
Stars: ✭ 4,067 (+807.81%)
Mutual labels:  loader
React Load Script
React component that makes it easy to load 3rd party scripts
Stars: ✭ 347 (-22.54%)
Mutual labels:  loader
Opentabletdriver
Open source, cross-platform, user-mode tablet driver
Stars: ✭ 424 (-5.36%)
Mutual labels:  driver
React Loader Spinner
Collection set of react-spinner for async operation
Stars: ✭ 378 (-15.62%)
Mutual labels:  loader
Phaser Ce Npm Webpack Typescript Starter Project
Project to get you started with your Phaser-CE (using the npm module) game using Typescript and Webpack for building! No hassle asset management, Google Web Font loader, live server, development vs distribution build pipeline, Electron packaging for desktop builds, and more...
Stars: ✭ 414 (-7.59%)
Mutual labels:  loader
Sniper
A powerful & high-performance http load tester
Stars: ✭ 373 (-16.74%)
Mutual labels:  loader
Mac Precision Touchpad
Windows Precision Touchpad Driver Implementation for Apple MacBook / Magic Trackpad
Stars: ✭ 5,107 (+1039.96%)
Mutual labels:  driver
Yaspin
A lightweight terminal spinner for Python with safe pipes and redirects 🎁
Stars: ✭ 413 (-7.81%)
Mutual labels:  loader
Sass Loader
Compiles Sass to CSS
Stars: ✭ 3,718 (+729.91%)
Mutual labels:  loader
Rust Mysql Simple
Mysql client library implemented in rust.
Stars: ✭ 415 (-7.37%)
Mutual labels:  driver
Rethinkdb.driver
🎧 A NoSQL C#/.NET RethinkDB database driver with 100% ReQL API coverage.
Stars: ✭ 350 (-21.87%)
Mutual labels:  driver
Openstorage
A multi-host clustered implementation of the open storage specification
Stars: ✭ 407 (-9.15%)
Mutual labels:  driver
Qmgo
Qmgo - The Go driver for MongoDB. It‘s based on official mongo-go-driver but easier to use like Mgo.
Stars: ✭ 444 (-0.89%)
Mutual labels:  driver
Fuse Box
A blazing fast js bundler/loader with a comprehensive API 🔥
Stars: ✭ 4,055 (+805.13%)
Mutual labels:  loader
Linkedin scraper
A library that scrapes Linkedin for user data
Stars: ✭ 413 (-7.81%)
Mutual labels:  driver

DSEFix

Windows x64 Driver Signature Enforcement Overrider

For more info see Defeating x64 Driver Signature Enforcement http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3322.

System Requirements

x64 Windows Vista/7/8/8.1/10.

Windows 8.1/10: warning, see PatchGuard note below.

DSEFix designed only for x64 Windows.

Administrative privilege is required.

Build

DSEFix comes with full source code. In order to build from source you need Microsoft Visual Studio 2013 U4 and later versions.

How it work

It uses WinNT/Turla VirtualBox kernel mode exploit technique to overwrite global system variable controlling DSE behavior, which itself located in kernel memory space. Prior to Windows 8 it is ntoskrnl!g_CiEnabled - a boolean variable (0 disabled, 1 enabled) and starting from Windows 8 it is CI.DLL!g_CiOptions - combination of flags, where value of 6 is default options and value of 0 is equal to "no integrity checks". If you run DSEFix without parameters it will attempt to disable DSE in a way depending on the system version. If you run DSEFix with "-e" parameter (without quotes) it will attempt to restore DSE controlling variable to default state.

PatchGuard incompatibility

Warning, starting from Windows 8.1 CI.DLL variables protected by Kernel Patch Protection (PatchGuard) as a generic data region. This doesn't mean instant PatchGuard response (BSOD) but will eventually lead to it when PatchGuard will be able to detect modification fact (doesn't really matter if you restore original state). Time of reaction is almost random. It can be almost instanst, or take a hour, two or four etc.

Deprecation

DSEFix based on old Oracle VirtualBox driver which was created in 2008. This driver wasn't designed to be compatible with newest Windows operation system versions and may work incorrectly. Because DSEFix entirely based on this exact VirtualBox driver version LPE it is not wise to use it on newest version of Windows. Consider this repository as depricated/abandonware. The only possible updates can be related only to DSEFix software itself.

Authors

(c) 2014 - 2018 DSEFix Project

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].