VBootkit 2.0 is a program developed by researchers Vipin Kumar and Nitin Kumar and is now available for download under an open-source license. It allows hackers to exploit Windows 7 kernel undetected without modifying any files on the disk, the whole process takes place in memory exploiting trusted kernel files with hacker’s code allowing them to gain control of the user computer without getting detected.

“The objective is to get the Windows 7 (x64) running normally with some of our changes done to the kernel. Also, the Vbootkit 2.0 should pass through all the security features implemented in the kernel without being detected, namely Patchguard v3, Driver signing. No files should be patched on disk, it should run complete in memory to avoid later on detection,” reads an excerpt from the Vbootkit 2.0 presentation.

VBootkit 2.0 modifies the files loaded by Windows 7 in the memory system during the boot process. Thus, no files on the hard drive is modified, making VBootkit 2.0 very difficult to detect.

Download VBootkit