#1Hardware security modules, TPM, secure enclave, and hardware trust tools.
Kitploit recommended
yasindce1998/barzakhRing -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
abraxas/litebox-snp-fixed-crngHigh local crypto: LiteBox v0.1.0 SNP CrngProvider is public-seed FastRng 0x4d595df4d0f33173
abraxas/litebox-snp-novalidation-userptrHigh local write primitive: LiteBox v0.1.0 SNP UserPtr is NoValidation so guest syscall buf can be a kernel VA
tandasat/minivisorpkgThe research UEFI hypervisor that supports booting an operating system.
darthton/hyperboneMinimalistic VT-x hypervisor for Windows x64 providing syscall, MSR, IDT, and kernel inline hooks plus EPT-based page substitution and TLB splitting.
ionescu007/simplevisorMinimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…
not-matthias/amd_hypervisorRust AMD SVM hypervisor framework with customizable vmexit handlers (MSR, CPUID, RDTSC) and NPT hooking for kernel-level monitoring and research.
tandasat/hello-vt-rpA simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.
valium007/cve-2026-56129Proof-of-concept exploiting the Toshiba qiomem.sys driver to achieve arbitrary physical memory read/write from ring 3, with a companion writeup.
innotecsystem/device-reversingEste repo contiene write-ups de reversing de dispositivos.
karaaslanlabs/kl-security-keyExperimental RP2040 FIDO2/WebAuthn authenticator with packed attestation and documented Windows/Entra interoperability
owasp/owasp-top-10-neocloud-and-ai-data-center-security-risksOWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…
mein-0/gvcidrv64Proof-of-concept exploit for Gigabyte's GVCIDrv64.sys kernel driver, achieving local privilege escalation via arbitrary physical memory and I/O port…
foxboron/atteztAn open-source TPM device-attest-01 CA server
vusec/btrArtifacts for the Branch Target Reuse (BTR) Spectre-v2 attack research, including microarchitecture experiments, attack-surface analysis of JIT…
ntfargo/relapse-exploitPS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…
wrongbaud/spidumpTool for reconstructing SPI flash images via logic analyzer captures
