https://github.com/neomaster831/kurasagi
Windows 11 24H2 Runtime PatchGuard Bypass
https://github.com/neomaster831/kurasagi
24h2 bypass kernel-patch-protection kpp patchguard pg windows windows-11
Last synced: about 1 month ago
JSON representation
Windows 11 24H2 Runtime PatchGuard Bypass
- Host: GitHub
- URL: https://github.com/neomaster831/kurasagi
- Owner: NeoMaster831
- License: apache-2.0
- Created: 2025-08-12T12:26:13.000Z (about 2 months ago)
- Default Branch: master
- Last Pushed: 2025-08-22T06:56:10.000Z (about 1 month ago)
- Last Synced: 2025-08-22T08:49:00.273Z (about 1 month ago)
- Topics: 24h2, bypass, kernel-patch-protection, kpp, patchguard, pg, windows, windows-11
- Language: C++
- Homepage:
- Size: 25.6 MB
- Stars: 162
- Watchers: 3
- Forks: 14
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# kurasagi
`kurasagi` is full POC of PatchGuard bypass for Windows 24H2.
For more information, please refer to the `product` branch, which contains the PDF paper detailing the bypass.
**If any BSOD which is related to `CRITICAL_STRUCTURE_CORRUPTION` (PatchGuard) appears, please create issue with it!**
## Changelog
(2025/08/03) **Caution**: Upgraded to 26100.4652. for 26100.4351 version bypass, refer to commit `80650b9cb71855042659137ecd8936f8a9336a61`.
(2025/08/18) **Caution**: Updated to 26100.4946.
(2025/08/23) Updated to most Windows 11 24H2 versions. Tested on 26100.4946.
## Disclaimers
1. **PLEASE USE IT FOR ONLY EDUCATIONAL PURPOSES!**
2. Do not turn on hypervisor-based security factors when running! (It will BSOD!)
3. Use [kdmapper](https://github.com/TheCruZ/kdmapper) for driver loading.
4. After `kurasagi` has been loaded, we just found there's some weird issue when you allocate pool with `NonPagedPoolExecute` (or `NonPagedPool`, it is same), it is not executable. I'll fix as soon as possible.
# Images
## Credit
Here are the helpful resources I referred to in completing this project. I appreciate these works, ideas, and source codes. Thanks
+ https://blog.tetrane.com/downloads/Tetrane_PatchGuard_Analysis_RS4_v1.01.pdf
+ https://blog.can.ac/2024/06/28/pgc-garbage-collecting-patchguard/
+ https://shhoya.github.io/windows_pgintro.html