Skip to content
#

protected-process-light-ppl-wintcb-bypass

Star

Here is 1 public repository matching this topic...

wesmar / kvc

Star 224

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS.

driver-signature-enforcement-bypass-hvci-windows protected-process-light-ppl-wintcb-bypass bypass-dse-load-unsigned-driver-windows11 dump-lsass-memory-protected-process-light kernel-driver-stealth-loading windows-watermark-removal-tool disable-windows-defender-tamper-protection unprotect-process-ppl-wintcb secureboot-disable-unsigned-driver-load pdb-symbol-kernel-exploit secicallbacks-dse-bypass zwflushinstructioncache-redirect patchguard-safe-dse-bypass
  • Updated Apr 20, 2026
  • C++

Improve this page

Add a description, image, and links to the protected-process-light-ppl-wintcb-bypass topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the protected-process-light-ppl-wintcb-bypass topic, visit your repo's landing page and select "manage topics."

Learn more