secureboot

🖥 Windows Bootable USB creator for macOS. 🛠 Patches Windows 11 to bypass TPM and Secure Boot requirements. 👾 UEFI & Legacy Support

💻 🔒 🔑 Secure Boot key manager

iPXE network bootloader

A study in structural evolution. An elegant NixOS environment designed to move with the rhythm of your creative core.

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Framework to join Linux's physical security bricks.

Mosby – More Secure Secure Boot

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

A complete Arch Linux installation guide with luks2 full disk encryption, and logical volumes with lvm2, and added security using secure boot and tpm2 luks key enrollment for auto unlocking encrypted root.

OpenCore 0.6.9 configuration for T480. Optimized for Catalina and Big Sur.

uefi diskless persistence technique + OVMF secureboot bypass

PowerShell scripts for checking and applying Secure Boot CA 2023 updates for Windows.

Bulk assessment and remediation of the Windows Secure Boot 2023 certificate transition on VMware vSphere 8 VMs. Cert deployment and PK enrollment via the ESXi P09 silent path or a SetupMode fallback, with a supported-methods-only mode. BitLocker-aware, optionally snapshots before changes, and includes rollback, snapshot, and NVRAM cleanup modes.

This repository contains the instructions on how to generate and install the Platform Key (PK), Key Exchange Key (KEK) and Signature Database (DB) to enable the Secure Boot functionality in Steam Deck.

A repo that explain how to install Arch Linux featuring encryption, Secure Boot, btrfs and AppArmor.

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

Secure immutable GNU/Linux distro installer

scriptable runtime-writable livecd / hardware wrangler

Satobox is a privacy focused and secure bitcoin full node solution designed for embedded linux devices.