Projects in Awesome Lists tagged with secure-boot

https://github.com/ventoy/ventoy

A new bootable USB solution.

auto-install bootable-usb bsd chromeos iso-files legacy linux multiboot persistence secure-boot uefi unattended unix usb windows

Last synced: 09 Sep 2025

https://github.com/ventoy/Ventoy

A new bootable USB solution.

auto-install bootable-usb bsd chromeos iso-files legacy linux multiboot persistence secure-boot uefi unattended unix usb windows

Last synced: 13 Mar 2025

https://github.com/pbatard/rufus

The Reliable USB Formatting Utility

bios boot bootable-drives freedos gpt grub grub4dos iso mbr md5 persistence rufus secure-boot sha1 sha256 syslinux uefi usb windows windows-to-go

Last synced: 13 May 2025

https://github.com/foxboron/sbctl

:computer: :lock: :key: Secure Boot key manager

efi efi-stub go golang linux secure-boot secureboot signatures uefi uefi-secureboot

Last synced: 14 May 2025

https://github.com/Foxboron/sbctl

:computer: :lock: :key: Secure Boot key manager

efi efi-stub go golang linux secure-boot secureboot signatures uefi uefi-secureboot

Last synced: 09 Apr 2025

https://github.com/grapheneos/auditor

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

android attestation authenticity cryptography grapheneos hsm integrity monitoring remote-attestation secure-boot secureboot security strongbox verifiedboot

Last synced: 15 May 2025

https://github.com/Wack0/CVE-2022-21894

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

cve-2022-21894 cve-2023-24932 poc secure-boot uefi vulnerability windows-boot

Last synced: 13 May 2025

https://github.com/andreyv/sbupdate

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

secure-boot uefi

Last synced: 13 Mar 2025

https://github.com/foxboron/go-uefi

Linux UEFI library written in pure Go.

secure-boot uefi uefi-secureboot

Last synced: 12 Apr 2025

https://github.com/maximbaz/arch-secure-boot

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

archlinux btrfs btrfs-snapshots secure-boot snapper uefi uefi-boot

Last synced: 01 Aug 2025

https://github.com/grapheneos/attestationserver

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

android attestation authenticity cryptography grapheneos hsm integrity monitoring remote-attestation secure-boot secureboot security strongbox verifiedboot

Last synced: 04 Apr 2025

https://github.com/sandrokeil/yubikey-full-disk-encryption-secure-boot-uefi

Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI

2fa arch-linux full-disk-encryption luks lvm2 secure-boot uefi yubikey

Last synced: 16 Mar 2025

https://github.com/hex-five/multizone-sdk

MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi

attestation container digilent-arty-board firmware fpga freertos hypervisor microkernel multizone risc-v root-of-trust secure-boot secure-element security sifive tee trusted-computing trusted-execution-environment trustzone xilinx

Last synced: 17 Apr 2025

https://github.com/jiazhang0/meta-secure-core

OpenEmbedded layer for the use cases on secure boot, integrity and encryption

efi encryption ima integrity modsign secure-boot security sgx signing-keys tpm tpm2 uefi

Last synced: 20 Apr 2025

https://github.com/Snawoot/linux-secureboot-kit

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

full-disk-encryption linux secure-boot security-automation security-hardening security-tools

Last synced: 14 May 2025

https://github.com/paulveillard/cybersecurity-architecture

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Software & Systems Architecture in Cybersecurity

cybersecurity-education design-patterns design-thinking designer high-availability high-performance-computing metrics performance-monitoring scalability scale scale-up secure-backup secure-boot secure-by-default secure-by-design secure-coding secure-computation secure-storage security-in-artificial-intelligence software-engineering

Last synced: 28 Mar 2025

https://github.com/tpowa/archboot

Archboot is a most advanced, modular Arch Linux boot/install image creation utility to generate bootable media for CD/USB/PXE, designed for installation or rescue operation.

arch arch-installer archboot archlinux archlinux-installer archlinuxarm initramfs initrd installer iso linux mkinitcpio rescue-system secure-boot shell

Last synced: 28 Jun 2025

https://github.com/clsty/arcniso

✨中国用户友好型 archiso✨ <中文|xfce4|安全启动 secure boot>

arch-linux archiso archlinux chinese-simplified secure-boot

Last synced: 15 May 2025

https://github.com/grapheneos-archive/attestationsamples

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

android attestation authenticity cryptography hsm integrity remote-attestation secure-boot secureboot security strongbox verifiedboot

Last synced: 09 May 2025

https://github.com/tpowa/Archboot

Archboot is a most advanced, modular Arch Linux boot/install image creation utility to generate bootable media for CD/USB/PXE, designed for installation or rescue operation.

arch arch-installer archboot archlinux archlinux-installer archlnuxarm initramfs initrd installer iso linux mkinitcpio rescue-system secure-boot shell

Last synced: 12 Apr 2025

https://github.com/aneesh-neelam/uefi-secureboot-signtool

Script to sign external Linux kernel modules for UEFI Secure Boot.

linux-kernel linux-kernel-module secure-boot uefi

Last synced: 21 Apr 2025

https://github.com/aneesh-neelam/UEFI-SecureBoot-SignTool

Script to sign external Linux kernel modules for UEFI Secure Boot.

linux-kernel linux-kernel-module secure-boot uefi

Last synced: 30 Apr 2025

https://github.com/pbatard/mosby

Mosby – More Secure Secure Boot

arm64 edk2 ia32 secure-boot secureboot uefi uefi-secureboot uefi-shell x64

Last synced: 02 Jan 2026

https://github.com/pbatard/Mosby

Mosby – More Secure Secure Boot

arm64 edk2 ia32 secure-boot secureboot uefi uefi-secureboot uefi-shell x64

Last synced: 12 May 2025

https://github.com/hex-five/multizone-iot-sdk

MultiZone® Trusted Firmware is the quick and safe way to build secure IoT applications with any RISC-V processor. It provides secure access to commercial and private IoT clouds, real-time monitoring, secure boot, and remote firmware updates. The built-in Trusted Execution Environment provides hardware-enforced separation ...

attestation digilent-arty-board embedded-systems firmware freertos iot lwip mbedtls mqtt multizone ota-firmware-updates risc-v root-of-trust secure-boot tcp-ip tee tls trusted-execution-environment trustzone xilinx-fpga

Last synced: 20 Apr 2025

https://github.com/jirutka/efi-mkuki

EFI Unified Kernel Image Maker

efistub linux secure-boot uefi uefi-boot

Last synced: 06 Oct 2025

https://github.com/redchenjs/wujian100_open

平头哥无剑100开源SoC平台（双核E902，安全启动，BootROM，IOPMP，Mailbox，RSA-2048，SHA-2， WS2812，Flash）

bootrom e902 iopmp mailbox rsa-2048 secure-boot sha-2 spi-flash ws2812 wujian100

Last synced: 13 Apr 2025

https://github.com/wolfssl/documentation

wolfSSL product manuals and documentation.

cryptography documentation getting-started intrusion-detection intrusion-prevention jce jni jsse mqtt secure-boot security ssh ssl tls tpm2

Last synced: 27 Apr 2025

https://github.com/icedterminal/HackBGRT-signed

Windows boot logo changer for UEFI systems

boot boot-logo-changer secure-boot uefi

Last synced: 11 Mar 2025

https://github.com/embetrix/meta-stm32mp15x

OpenEmbedded/Yocto BSP layer for STM32MP15x based MPUs

arm-trusted-firmware bsp industrial lvgl openembedded-layer optee real-time rt-preempt secure-boot security stm32mp1 stm32mp157c-dk2 stm32mp157f-dk2 stm32mp15x yocto-layer

Last synced: 18 Nov 2025

https://github.com/telekom-mms/sectpmctl

sectpmctl - Secure Boot and TPM2 backed LUKS full disk encryption

linux luks secure-boot tpm2

Last synced: 14 Apr 2025

https://github.com/sambacha/macos-secure-profiles

macOS Security Profiles based off of STIG Developed by Apple and DISA for the DOD

macos secure-boot stig-compliant

Last synced: 10 Jun 2025

https://github.com/alttch/tpm-km

yet another pack of scripts for TPM2+Luks

encryption encryption-management linux luks secure-boot tpm2

Last synced: 28 Apr 2025

https://github.com/grapheneos/platform_external_auditor

Auditor app prebuilt using the latest official release of the Auditor app.

android attestation authenticity cryptography grapheneos hsm integrity monitoring remote-attestation secure-boot secureboot security strongbox verifiedboot

Last synced: 13 Apr 2025

https://github.com/cjee21/check-uefisecurebootvariables

PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables.

batch batch-file batch-script command-prompt db dbx kek powershell powershell-script registry secure-boot uefi-secureboot windows windows-10 windows-11 x64 x86-64

Last synced: 19 Aug 2025

https://github.com/Wack0/dubiousdisk

The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)

bitlocker cve-2022-30203 cve-2023-21560 cve-2023-28249 cve-2023-28269 secure-boot uefi vulnerability windows-boot writeup

Last synced: 11 Mar 2025

https://github.com/rgl/ovmf-secure-boot-vagrant

ovmf secure boot playground

ovmf sbctl secure-boot uefi uefi-secureboot

Last synced: 08 May 2025

https://github.com/jirutka/efi-mkkeys

Script to easily generate self-signed UEFI keys for Secure Boot

linux secure-boot uefi uefi-boot

Last synced: 13 Apr 2025

https://github.com/analogdevicesinc/max78000-secure-loader

Secure boot loader for MAX78000

ai algorithm-protection analog-devices artificial-intelligence copy-protection deep-learning ip-protection machine-learning maxim maxim-integrated secure-boot

Last synced: 22 Apr 2025

https://github.com/kulkansecurity/secureboot-signer

This script automates the signing and loading of the VMware modules when secure boot is enabled.

linux linux-kernel secure-boot vmware vmware-player vmware-workstation

Last synced: 30 Oct 2025

https://github.com/ericonr/generate-sb-efi

Automate generation of Secure Boot signed single file kernel images

efi linux secure-boot secureboot uefi

Last synced: 24 Aug 2025

https://github.com/alive4ever/openwrt

My own fork to contribute to OpenWrt. For your own usage, please directly fork the upstream repository.

embedded secure-boot uefi

Last synced: 11 Mar 2025

https://github.com/dadevel/secboot

Utility to secure your Linux boot process.

secure-boot tpm-pin unified-kernel-image

Last synced: 07 May 2025

https://github.com/qjerome/cryptboot-rs

Command line utility to manage Linux setup with encrypted boot partition and secure boot

hardening linux secure-boot

Last synced: 04 Apr 2025

https://github.com/open-power/sb-signing-utils

Secureboot Signing Utilities

openpower ppc64 secure-boot

Last synced: 12 Apr 2025

https://github.com/laurie0131/uefi_aware_os_pres

How the OS and UEFI Work together, Requirements, Secure Boot, SMM, coreboot

secure-boot slideshow tianocore

Last synced: 02 Mar 2025

https://github.com/fnkr/fedora-secure-boot

Load custom kernel modules with secure boot enabled on Fedora.

fedora linux-kernel-module secure-boot

Last synced: 23 Mar 2025

https://github.com/matedev01/Joel_atecc608a

USB OTP Security System: A project combining the ESP32-S3 microcontroller, ATECC608A CryptoAuthentication device, Windows driver, and LibUSB for secure communication, OTP generation, and time synchronization. 🚀

driver esp32 esp32s3 firmware flash-encrypt hmac libusb otp secure-boot security usb visualgdb

Last synced: 29 Oct 2025

https://github.com/sunsetmkt/securebootpolicyreset

This is an archive of SecureBootPolicyReset-x64.zip in case someone locks their UEFI with Windows Team version or so.

secure-boot uefi uefi-secureboot uefi-shell windows

Last synced: 04 Mar 2025

https://github.com/philipyip1988/fedora

Linux Fedora Installation Guide on Dell 2 in 1 Convertible with a UEFI BIOS. This guide discusses how to make a Fedora Bootable USB on Windows and Linux, modify the UEFI BIOS Setup for Linux Installation, gives a beginner overview of the GNOME Desktop environment and how to customise it with tweaks and extensions.

dell fedora fedora-workstation gnome gnome-extensions gnome-tweaks linux oem secure-boot touchscreen tutorial uefi

Last synced: 24 Aug 2025

https://github.com/matedev01/joel_atecc608a

USB OTP Security System: A project combining the ESP32-S3 microcontroller, ATECC608A CryptoAuthentication device, Windows driver, and LibUSB for secure communication, OTP generation, and time synchronization. 🚀

driver esp32 esp32s3 firmware flash-encrypt hmac libusb otp secure-boot security usb visualgdb

Last synced: 27 Feb 2025

https://github.com/philipyip1988/linux

Linux Installation Guide (Fedora and Ubuntu) on Dell 2 in 1 Convertible with a UEFI BIOS. This guide discusses how to make a Bootable USB on Windows and Linux, modify the UEFI BIOS Setup for Linux Installation, gives a beginner overview of the GNOME Desktop environment and how to customise it with tweaks and extensions.

convertible dell dell-laptops fedora gnome gnome-extensions gnome-tweaks intel intel-rapid-storage-technology intel-vmd linux oem secure-boot touchpad touchscreen tutorial ubuntu uefi