Wezo

Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin permissions or kernel drivers.

Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)

"Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.

Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.

Abusing AsusBiosIoDrv64.sys to gain kernel and process physical/virtual memory access.

Reverse of MSI's MAG X670E TOMAHAWK WIFI bios v1KB (2026-03-20) which claims "Implemented the anti-cheat mechanism" in the release notes.

simple program for xorcrypting and storing files into media files like audios, images and videos while maintaining integrity.

Cross-platform SIMD assembler that emits unified vector instructions to native x86, ARM, and RISC-V machine code.

Register-machine bytecode interpreter for Windows kernel drivers.