PatchGuard bypass at runtime
The DSE bypass mentioned in the first post has been just verified on Windows 11 Pro 22H2 Build: 22621 without a PG BSDO.
You may need to disable Device security->Core isolation->Memory Integrity (HVCI) if you use manual mapper with a vulnerable driver. Any hypervisor (HV) based protection is as good as useless if you disable virtualization in the BIOS.
Post a comment