Projects Directory

Explore the complete catalog of advanced system-level research tools, kernel drivers, firmware utilities, and reverse-engineered Windows internals solutions. All source code, documentation, and executable releases are hosted securely on this server.

Core Security & Internal Tools

• KVC - Kernel Vulnerability Capabilities
  Advanced Windows Security Research & Penetration Testing Framework.
• KernelResearchKit
  Low-level toolkit for process protection manipulation and kernel exploration.
• CmdT
  TrustedInstaller elevation utility for precise system-level operations in pure Assembly.
• WinDefCtl
  Windows Defender and Security Engine manipulation framework.
• KernelLeaker
  Research utility for identifying and analyzing kernel-mode memory leaks.
• KvcForensic
  Forensic memory acquisition for protected processes.
• UnderVolter
  Native UEFI undervolting utility for Intel Core processors (2nd-15th Gen, incl. Core Ultra). Built-in NVRAM BIOS variable patcher — no GRUB required.
• EfiNtfs & EFI Commander
  Native NTFS read+write file system driver and dual-panel file manager for UEFI x64 (EC.efi, ntfs.efi) — pure C, B+tree index splits, MFT growth, LZNT1 and WOF XPRESS/LZX decompression.
• VaultGuard
  Folder & partition protection in pure x64 MASM — zero CRT, native WinAPI, Windows 11 Dark Mode + Mica, kernel minifilter driver (vg.sys / vg.exe).
• UEFIExtract
  Windows x64 utility for parsing and extracting UEFI firmware images. Builds a full tree of Firmware Volumes, FFS files, and sections with transparent decompression.
• KvcKiller
  Kernel-mode AV/EDR process termination via IOCTL (BYOVD), IFEO Paralyze via offline hive editing — bypasses DACL on protected processes. 90+ built-in targets across 15 vendors.
• BootBypass
  Native boot-phase DSE/HVCI bypass utility. SUBSYSTEM:NATIVE application registered in BootExecute — runs before any AV/EDR initializes. Patches SeCiCallbacks in live kernel.
• LnkForge
  C++ command-line tool that builds crafted Windows .lnk shortcut files from scratch. Icon spoofing, fake timestamps, Base64 argument encoding, UAC elevation.
• CVE-2026-31431
  Local privilege escalation PoC for the Linux kernel AF_ALG (AEAD) interface. Achieves root shell via splice/page-cache race condition.
• WSAPatch
  Pure MASM x64 binary patcher for WSABuilds 2407.40000.4.0 — fixes STATUS_STOWED_EXCEPTION crash on Windows 11 26H1 caused by AppUriHandlerRegistrationManager.

System Utilities

• Regedit Commander
  Advanced Windows registry manipulation and backup toolkit.
• RegEdLin Commander
  Native GTK4 / libadwaita two-pane offline Windows registry editor on Linux — custom regf parser/writer, live diff, subtree copy, zero libhivex dependency.
• Onion Downloader
  Compact native Windows GUI and CLI downloader for Onion services (x64 + ARM64) — multi-circuit parallel range streaming with embedded client-only Tor in 2.67 MiB.
• Secure FTP
  Modern SFTP/SCP plugin for Total Commander with shell-transfer fallback for restricted hosts.
• FileRecoveryTool
  Low-level disk access for forensic file recovery.
• SignGuiPatcher
  Patching utility for GUI signatures.
• Notepad (Internals)
  Custom modifications and internals analysis of Windows Notepad.
• KeyboardKit
  Low-level keyboard interaction and event hooking framework.
• DBXExtractor
  World's fastest DBX extractor. Reads Outlook Express archives and exports each message as EML. Memory-mapped I/O, parallel write pool, GUI + CLI.
• KiTTY Password Decryptor
  Recovers saved KiTTY/PuTTY session passwords from the Windows registry.
• XTBrep
  High-performance XTB portfolio analyzer (P/L, XIRR, PIT-38 tax calculations, dividends, GUS inflation adjustment) — native C++23 / WinAPI.

Classic Recreations (Assembly / C++)

• Chess
  Fully functional Chess engine implemented from scratch.
• Tetris
  Classic Tetris game written in raw x64 Assembly.
• Minesweeper
  Recreation of the classic Minesweeper with architectural optimizations.

Looking for Polish-language projects? See Projekty PL.