Skip to content

Load patched driver without Test Mode #5

@lyc8503

Description

@lyc8503
Owner

This issue is for discussing how to use patched sandboxie without turning on test mode.

Please use English if possible. (at least attach an English translation for Chinese posts)

Activity

pinned this issue on Oct 9, 2024
lyc8503

lyc8503 commented on Oct 9, 2024

@lyc8503
OwnerAuthor
FlysoftBeta

FlysoftBeta commented on Oct 10, 2024

@FlysoftBeta
coqanklazy

coqanklazy commented on Oct 12, 2024

@coqanklazy

Tested and Working on Windows 23h2: https://github.com/0mWindyBug/KDP-compatible-driver-loader

CAN YOU GUIDE ME?

CuriousBoy0

CuriousBoy0 commented on Oct 28, 2024

@CuriousBoy0

Tested and Working on Windows 23h2: https://github.com/0mWindyBug/KDP-compatible-driver-loader

CAN YOU GUIDE ME?

Have you figured it out yet?

coqanklazy

coqanklazy commented on Oct 29, 2024

@coqanklazy

Tested and Working on Windows 23h2: https://github.com/0mWindyBug/KDP-compatible-driver-loader

CAN YOU GUIDE ME?

Have you figured it out yet?

Not yet, I’m still figuring it out

jackammoka

jackammoka commented on Nov 2, 2024

@jackammoka

Tested and Working on Windows 23h2: https://github.com/0mWindyBug/KDP-compatible-driver-loader

CAN YOU GUIDE ME?

Have you figured it out yet?

can u guide me also?

mine got block by Microsoft's driver blocklist/cert expired
i dont know how to modify the code or use alternative driver

i aslo tried reg add HKLM\SYSTEM\CurrentControlSet\Control\CI\Config /v "VulnerableDriverBlocklistEnable" /t REG_DWORD /d 0 /f
but same problem

CuriousBoy0

CuriousBoy0 commented on Nov 6, 2024

@CuriousBoy0

Copy this guideline that I have written and've asked ChatGPT making it lookin good for yall
My account will be removed by GitHub so copy it and share it : (....
Step-by-Step Guide

1- Fork Sandboxie Plus on GitHub.

2- Create two folders inside the Installer directory:
Release
Output

3- Compile the source code with GitHub Actions. Rename the compiled file (Sandbox_Plus-x64) to SbiePlus64.

4- Download the master source code and place the compiled .exe files into the Release folder.

5- Allow any security alerts in Windows Protection History (unsigned app warning).
6- Download and install Inno Setup.

7- Open Sandboxie-Plus.iss in the Installer folder with Inno Setup.

8- Uncomment these lines in the script by removing ( ; ) before these words below

#define MyAppVersion "0.7.5"
#define MyDrvVersion "5.49.8"
#define MyAppArch "x64"
#define MyAppSrc "SbiePlus64"

9- Compile the script in Inno Setup to create the setup file. Don’t run it yet!

10- (Optional for Windows 11) Disable BitLocker recovery by running:

11- Copy code
Suspend-BitLocker -MountPoint "C:" -RebootCount 0

Enter Test Mode by running:
12- Copy code
bcdedit /set testsigning on Run the setup file to install Sandboxie Plus in Program Files.

13- Download GDRVLoader from https://github.com/zer0condition/GDRVLoader and allow it in Windows Security.

14- Move GDRVLoader.exe to C:\Program Files\SbiePlus64.

15- Disable the Vulnerable Driver Blocklist by running:

16- Copy code
reg add HKLM\SYSTEM\CurrentControlSet\Control\CI\Config /v "VulnerableDriverBlocklistEnable" /t REG_DWORD /d 0 /f Load the driver:

17- Open Command Prompt, navigate to C:\Program Files\SbiePlus64 By:
cd C:\Program Files\SbiePlus64

18- Copy code
GDRVLoader.exe SbieDrv.sys
When prompted, type load.

19- Run Sandboxie Plus to ensure it operates with the loaded driver.

20- (Optional) Use the following certificate information to have support certification:

Copy code
NAME: 52pojie
DATE: 01.04.2099
TYPE: CONTRIBUTOR
SOFTWARE: Sandboxie-Plus
UPDATEKEY: 123456789
SIGNATURE: www.Google.com

That’s it! You should now have Sandboxie Plus set up with compatibility for unsigned drivers on Windows 23H2.
Finally, if it doen't work, ditch windows 11 and switch to Nobara linux

CHEUNG-K-Jeffrey

CHEUNG-K-Jeffrey commented on Jan 1, 2025

@CHEUNG-K-Jeffrey

SignPath - Free Code Signing for Open Source software

lyc8503

lyc8503 commented on Jan 1, 2025

@lyc8503
OwnerAuthor

SignPath - Free Code Signing for Open Source software

I am afraid this project won't offer free signatures for cracked software like this...

CuriousBoy0

CuriousBoy0 commented on Jan 2, 2025

@CuriousBoy0
jackammoka

jackammoka commented on Jan 20, 2025

@jackammoka
ccchan234

ccchan234 commented on Apr 2, 2025

@ccchan234

what is the price for a signed driver?
we already get SEVERAL ppl here.
could we share it?

thanks

lyc8503

lyc8503 commented on Apr 2, 2025

@lyc8503
OwnerAuthor

what is the price for a signed driver? we already get SEVERAL ppl here. could we share it?

thanks

An EV cert is quite expensive (49USD/month at digicert) and I'm not interested in raising money to sign it. There're some shared certs which maybe cheaper but also risk being revoked at anytime.

After the code is signed, we also have to pass WHQL and get a signature from Microsoft, which also might be a troublesome process.

Hitomiwari

Hitomiwari commented on Apr 3, 2025

@Hitomiwari

I still can't get the driver running without test mode on, anyone solved it yet?

Windows 11 24H2

Robot1me

Robot1me commented on May 26, 2025

@Robot1me

Just want to say that I respect that this fork exists, merely due to the fact that I'm appalled how the open source fork of Sandboxie has come full circle with restrictions and questionable licensing practices. The "Sandboxie Plus Eternal" for $1000 is meme-worthy and the original Sandboxie developers were nowhere close to having that level of audacity. Further irony being that all this driver signing is required to work around this (while the project technically is open source), all while the forked Sandboxie project itself (the Sandboxie Plus one) uses a purloined signing certificate that originally belonged to the Tonalio GmbH. On one hand it's great that an updated fork of Sandboxie exists, yet on the other hand, I can't help but feel that ethics have been falling to the wayside.

bustah2018

bustah2018 commented on Jul 23, 2025

@bustah2018

Anybody found out how to get driver to run without test mode being on?

Using KDP-compatible-driver-loader ends up with invalid signature sandman.exe.sig error even though it loads. Eventually it will BSOD.

GDRVLoader only works with test mode on.

ccchan234

ccchan234 commented on Jul 23, 2025

@ccchan234

Hi all, I know this is a bit off topic, but I really encourage everyone to sponsor Sandboxie Plus (SBP) instead of using unsigned versions. Supporting the author keeps the project alive.

US$1/month (Afadian/Patreon) unlocks the essential blue/red boxes for up to "reasonable" number of PCs—very fair.

US$3/month gives you encrypted boxes, useful as an app locker if you need it (much better than Gilo File Locker).

US$6/month isn’t necessary if you already use Proxifier, unless you need DNS filtering.

Sponsorship is way more affordable and reasonable than the old license model (€60 + €30/year). If you value SBP, please consider supporting the author!

ps: afadian is a chinese platform so author make it 25% cheaper.
i'll say let's use afadian, so more ppl = more bargin power.

CuriousBoy0

CuriousBoy0 commented on Jul 23, 2025

@CuriousBoy0
didgerer

didgerer commented on Aug 6, 2025

@didgerer

The lowest tier available on Patreon seems to be $3 a month, which is quite a lot for a largely static 1 man project you have to rent forever. The site doesn't seem to say anything about Afadian and everything about it looks like a real pain to use in this part of the world.

Bums me out that the more secure sandbox types will always be locked behind a perpetual paywall. The fancy bells and whistles, sure, but hiding your host filesystem from the sandbox is just such a basic feature and was essentially finished years ago. I am glad the project is maintained but I never expected the licensing to be this rough. Sometimes I wonder if they're really losing money overall by pricing out so many potential customers.

ccchan234

ccchan234 commented on Aug 6, 2025

@ccchan234
lyc8503

lyc8503 commented on Aug 6, 2025

@lyc8503
OwnerAuthor

Hi all, I know this is a bit off topic, but I really encourage everyone to sponsor Sandboxie Plus (SBP) instead of using unsigned versions. Supporting the author keeps the project alive.

Yes, unsigned Sandboxie is mainly for test purposes instead of daily use. If you don't want to spend time bypassing Microsoft limitations, you can also try afadian. IIRC it supports paypal & doesn't require a Chinese phone number.

As for the ethical concerns, I'd like to point out that the Sandboxie Plus license explicitly permits using forks for any non-commercial personal purposes, including cracking and circumventing paywalls. As "open-source" software, the official project charges such a high price precisely by leveraging Microsoft's signing restrictions.

ccchan234

ccchan234 commented on Aug 6, 2025

@ccchan234
DaveFace

DaveFace commented on Aug 14, 2025

@DaveFace

If you value SBP, please consider supporting the author!

If the support was one-off (with no expectation of indefinite updates) or what was available for free was worthwhile, then perhaps I'd be willing to support them for extra features. But I don't like their practice of claiming the software is 'open source' and then pay-walling almost all of the features behind a subscription.

It's a shame this no longer seems to work, I guess I'll have to hope the situation changes in future.

lyc8503

lyc8503 commented on Aug 14, 2025

@lyc8503
OwnerAuthor

If this workaround doesn't work on your computer, there's also a stable but troublesome method to self-sign the patched driver with test mode off.

https://github.com/HyperSine/Windows10-CustomKernelSigners

I haven't tried this out myself, but you can try! This should in theory work on Windows 11 as well. Personally I run Sandboxie simply with test mode on.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @DaveFace@lyc8503@ccchan234@bustah2018@FlysoftBeta

        Issue actions

          Load patched driver without Test Mode · Issue #5 · lyc8503/Sandboxie-crack