Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Directory Services Internals (DSInternals) PowerShell Module and Framework

macOS: mount any linux-supported filesystem read/write using NFS and a microVM

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

A list of public attacks on BitLocker

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

Framework to join Linux's physical security bricks.

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.

Downgrade attack for CVE-2025-48804

Cryptsetup backup upstream repository https://gitlab.com/cryptsetup/cryptsetup

bitpixie Proof of Concept - Bitlocker Decryptor

Configuration guidance for implementing BitLocker. #nsacyber

Bitpixie exploitation PoC

Managing BitLocker from WinPE Environment

YellowKey BitLocker 2026 Bypass – Next-Gen Drive Lock Decryption & Exploit Tool

Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.

Bulk assessment and remediation of the Windows Secure Boot 2023 certificate transition on VMware vSphere 8 VMs. Cert deployment and PK enrollment via the ESXi P09 silent path or a SetupMode fallback, with a supported-methods-only mode. BitLocker-aware, optionally snapshots before changes, and includes rollback, snapshot, and NVRAM cleanup modes.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

vCrypt2Go – Lock-and-Unlock Utilities for VeraCrypt Portable