🖥 Windows Bootable USB creator for macOS. 🛠 Patches Windows 11 to bypass TPM and Secure Boot requirements. 👾 UEFI & Legacy Support

windows macos objective-c cocoa uefi appkit exfat fat32 tpm grub4dos bootable-usb macos-app wimlib secureboot legacy-bios windows11

• Updated Sep 6, 2026
• C

💻 🔒 🔑 Secure Boot key manager

go linux golang uefi signatures efi secure-boot uefi-secureboot secureboot efi-stub

• Updated Nov 11, 2026
• Go

iPXE network bootloader

firmware network x86-64 ipxe netboot boot x86 uefi pxe aarch64 risc-v s390x aarch32 uefi-boot secureboot loongarch64

• Updated Nov 12, 2026
• C

A study in structural evolution. An elegant NixOS environment designed to move with the rhythm of your creative core.

dotfiles nixos wayland ricing starship amdgpu unixporn nixos-configuration flakes secureboot nushell nvchad ghostty niri

• Updated Apr 21, 2026
• Nix

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot

iso multiboot uefi mbr gpt grub2 uefi-boot bootable-usb liveusb uefi-secureboot secureboot

• Updated Jun 20, 2022

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

android security cryptography monitoring integrity hsm secure-boot authenticity attestation verifiedboot remote-attestation secureboot strongbox grapheneos

• Updated Nov 9, 2026
• Java

Mosby – More Secure Secure Boot

x64 uefi arm64 ia32 secure-boot edk2 uefi-secureboot secureboot uefi-shell

• Updated Oct 28, 2026
• C

Framework to join Linux's physical security bricks.

debian arch boot uefi mortar tpm tpm2 luks bitlocker clevis secureboot

• Updated Feb 28, 2026
• Shell

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

android security cryptography monitoring integrity hsm secure-boot authenticity attestation verifiedboot remote-attestation secureboot strongbox grapheneos

• Updated Nov 12, 2026
• Java

A complete Arch Linux installation guide with luks2 full disk encryption, and logical volumes with lvm2, and added security using secure boot and tpm2 luks key enrollment for auto unlocking encrypted root.

encryption archlinux guide tpm tpm2 luks lvm archlinuxinstallation secureboot fde luks-encryption

• Updated Oct 20, 2026

OpenCore 0.6.9 configuration for T480. Optimized for Catalina and Big Sur.

macos thinkpad hackintosh efi mojave t480 secureboot opencore catalina bigsur

• Updated Aug 25, 2022
• ASL

PowerShell scripts for checking and applying Secure Boot CA 2023 updates for Windows.

powershell windows10 uefi-boot secureboot windows11

• Updated Nov 8, 2026
• PowerShell

uefi diskless persistence technique + OVMF secureboot bypass

persistence malware uefi diskless ovmf secureboot

• Updated Apr 22, 2024
• C

Bulk assessment and remediation of the Windows Secure Boot 2023 certificate transition on VMware vSphere 8 VMs. Cert deployment and PK enrollment via the ESXi P09 silent path or a SetupMode fallback, with a supported-methods-only mode. BitLocker-aware, optionally snapshots before changes, and includes rollback, snapshot, and NVRAM cleanup modes.

certificate vmware powershell esxi vsphere uefi powercli secure-boot bitlocker secureboot

• Updated Jun 18, 2026
• PowerShell

This repository contains the instructions on how to generate and install the Platform Key (PK), Key Exchange Key (KEK) and Signature Database (DB) to enable the Secure Boot functionality in Steam Deck.

steam deck boot secure secureboot steamdeck sbctl

• Updated Nov 3, 2025

A repo that explain how to install Arch Linux featuring encryption, Secure Boot, btrfs and AppArmor.

kde archlinux arch-linux btrfs firejail flatpak tpm apparmor secureboot

• Updated May 17, 2022
• Shell

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

android security cryptography integrity hsm secure-boot authenticity attestation verifiedboot remote-attestation secureboot strongbox

• Updated Jul 28, 2022
• Shell

Secure immutable GNU/Linux distro installer

ubuntu arch fedora centos gentoo distro opensuse uefi gpt selinux verity secureboot appliance-images

• Updated Nov 17, 2024
• Shell

scriptable runtime-writable livecd / hardware wrangler

alpine livecd liveusb secureboot uki

• Updated Oct 17, 2026
• Shell

Native UEFI/EFI utility for Intel CPU power management (2nd-15th Gen). Direct MSR/MMIO access for undervolting, power limits, and V/F curves. Features built-in NVRAM patching (CFG/OC Lock) for Plundervolt research and Secure Boot SelfEnroll with embedded root CA. Bare-metal, self-contained, and driven by UnderVolter.ini. No OS required.

secureboot efi-loader sgx-enclaves secureboot-bypass throttlestop-replacement intel-undervolting cfg-oc-lock-unlock ifrextractor overclocking-lock varoffset-0x3e varstore-0x3 disable-overclocking-lock disable-cfg-lock plundervolt plundervolt-exploit

• Updated Sep 7, 2026
• C