tableflipper

June 3, 2024 ยท View on GitHub

this will bypass / disable patchguard's following checks:

  • Interrupt Descriptor Table
  • System Descriptor Table (Shadow included)

details

for more details just look at PspProcessDelete and KiInitializeUserApc. since this isn't a public repo (yet), im not gonna write an explanation.

compatibility

tested on:

  • win11 21H2