ValdikSS/Super-UEFIinSecureBoot-Disk

Leverages a three-stage UEFI boot chain (Microsoft-signed shim → PreLoader security policy installer → patched GRUB2) to install an allow-all security policy that bypasses Secure Boot restrictions after one-time manual key enrollment. Supports booting arbitrary unsigned EFI files, kernels, and drivers across BIOS, UEFI, and Secure Boot configurations; the PreLoader stage installs custom UEFI security policies that persist for subsequent boots, enabling unrestricted LoadImage/StartImage calls throughout the system firmware.

831 stars. No commits in the last 6 months.