{"adoption": {"forks": 542, "observed_at": "2026-08-28T04:07:11.497701+00:00", "stars": 2704}, "canonical_url": "https://ross.abutalabs.com/products/kdu", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Kernel Driver Utility", "domain": ["security", "windows", "developer-tools"], "enriched": true, "function": ["security", "reverse-engineering", "developer-tools"], "health_score": 98, "homepage": null, "language": "C", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["hfiref0x/KDU"], "name": "hfiref0x/KDU", "platform": ["windows", "cli"], "pushed_at": "2026-08-18T00:18:41+00:00", "repo": "hfiref0x/KDU", "stars": 2704, "tags": ["byovd", "driver-loader", "dse-bypass", "kernel", "vulnerable-drivers", "ppl"], "topics": ["loader", "driver-loader", "dse", "byovd"], "urls": [], "use_cases": ["load an unsigned driver into the Windows kernel without signing it", "bypass driver signature enforcement on Windows 10/11", "disable or modify DSE state flags for testing", "launch a process as Protected Process Light (PPL)", "dump the virtual memory of a protected process", "open an arbitrary process with full access handles", "explore Windows kernel internals without setting up a kernel debugger"], "what_it_is": "KDU (Kernel Driver Utility) is a Windows command-line tool that abuses known vulnerable drivers to load unsigned kernel drivers, bypass Driver Signature Enforcement, and manipulate protected processes. It is aimed at security researchers exploring the Windows kernel without a local debugger.", "when_to_avoid": ["you need a production or legitimate driver-loading mechanism", "you are on a non-Windows platform", "you cannot obtain administrative privileges", "you want a tool that avoids using vulnerable drivers (BYOVD is inherently risky and detectable)"], "when_to_choose": ["you need to map a test driver into the kernel on x64 Windows without signing it", "you are researching BYOVD techniques or Windows kernel security", "you need to strip PPL protections from a process during analysis", "you want a DSEFix/TDL-style tool with multiple vulnerable driver providers"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/kdu", "repo": "hfiref0x/KDU", "role": "main", "score": 91}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:11.497701+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:15:51.964396+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ad4e7c4b208354a6783783568f2e6d73f46ff667adc08712546f395517855d52", "fetched_at": "2026-08-28T04:07:11.497701+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/KDU"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 98, "longevity": 100, "rhythm": 76}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2404, "days_push": 16, "days_rel": 81, "gap_med": 58.0, "n_releases_24m": 7}, "score": 91, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}