Skip to content
NeverSightAI edited this page Jul 16, 2026 · 2 revisions

PG1903

Windows kernel driver research project that disables PatchGuard in real time on Windows 10 version 1903 by manipulating NX (no-execute) attributes on PatchGuard context pages. Includes C and x64 assembly memory-scanning routines to locate context structures and neutralize integrity checks.

Primarily useful for studying PatchGuard internals, kernel patch-protection bypass techniques, and Windows kernel integrity mechanisms—not as a general-purpose AC bypass.

Links

Related

PatchGuard · HVCI · Windows Kernel · Reverse Engineering

Clone this wiki locally