Unsigned Driver Mapper for Windows 10/11
September 10, 2025 · View on GitHub
An Unsigned Driver Mapper for Windows 10 22H2 → Windows 11 23H2 that leverages PdFwKrnl to exploit Read/Write IOCTL calls to temporarily disable DSE & PatchGuard and map unsigned drivers.
(Original GitHub repo got deleted, and this is a repost to keep the mapper available.)
Features
- Maps unsigned drivers on Windows 10/11.
- Uses PdFwKrnl for kernel-level IOCTL exploitation.
- Disables DSE (Driver Signature Enforcement) and PatchGuard temporarily.
- Fully tested on BattleEye-protected games: Escape from Tarkov, DayZ, Rainbow Six Siege.
Usage Example
#include <iostream>
#include <windows.h>
#include "Bypass.h"
int main() {
std::cout << " Initializing Offsets...\n";
Bypass::Init(); // Initialize Offsets & Cache Them
std::cout << " Initializing Exploit and Loading Cheat Driver using PdFwKrnl...\n";
Bypass::BypassStatus Status = Bypass::LoadCheatDriver("C:\\Driver.sys", "Driver Service Name", "C:\\Windows\\System32\\PdFwKrnl.sys", "Vuln Service Name"); // Load Cheat Driver & PdFwKrnl
std::cout << " Status: " << Bypass::BypassStatusToString(Status) << std::endl;
Sleep(5000);
driver::unload("Driver Service Name"); // Unload Cheat Driver
return 0;
}