--- title: Projects url: 'https://kvc.pl/projects' markdown: 'https://kvc.pl/projects.md' date: '2026-08-29' description: 'Security and system-level projects by Marek Wesołowski, including KVC, KernelResearchKit, CMDT, WinDefCtl, KvcKiller, UnderVolter, EfiNtfs, VaultGuard, RegEdLin, Onion Downloader, UEFIExtract, BootBypass, WSAPatch, DBXExtractor, XTBrep, and other low-level Windows tools.' --- # Projects Directory Explore the complete catalog of advanced system-level research tools, kernel drivers, firmware utilities, and reverse-engineered Windows internals solutions. All source code, documentation, and executable releases are hosted securely on this server. ## Core Security & Internal Tools - **[KVC - Kernel Vulnerability Capabilities](https://kvc.pl/project-kvc)** *Advanced Windows Security Research & Penetration Testing Framework.* - **[KernelResearchKit](https://kvc.pl/repositories/kernelresearchkit)** *Low-level toolkit for process protection manipulation and kernel exploration.* - **[CmdT](https://kvc.pl/repositories/cmdt)** *TrustedInstaller elevation utility for precise system-level operations in pure Assembly.* - **[WinDefCtl](https://kvc.pl/repositories/windefctl)** *Windows Defender and Security Engine manipulation framework.* - **[KernelLeaker](https://kvc.pl/repositories/kernelleaker)** *Research utility for identifying and analyzing kernel-mode memory leaks.* - **[KvcForensic](https://kvc.pl/repositories/kvcforensic)** *Forensic memory acquisition for protected processes.* - **[UnderVolter](https://kvc.pl/repositories/undervolter)** *Native UEFI undervolting utility for Intel Core processors (2nd-15th Gen, incl. Core Ultra). Built-in NVRAM BIOS variable patcher — no GRUB required.* - **[EfiNtfs & EFI Commander](https://kvc.pl/repositories/ntfs_efi)** *Native NTFS read+write file system driver and dual-panel file manager for UEFI x64 (`EC.efi`, `ntfs.efi`) — pure C, B+tree index splits, MFT growth, LZNT1 and WOF XPRESS/LZX decompression.* - **[VaultGuard](https://kvc.pl/repositories/vaultguard)** *Folder & partition protection in pure x64 MASM — zero CRT, native WinAPI, Windows 11 Dark Mode + Mica, kernel minifilter driver (`vg.sys` / `vg.exe`).* - **[UEFIExtract](https://kvc.pl/repositories/uefiextract)** *Windows x64 utility for parsing and extracting UEFI firmware images. Builds a full tree of Firmware Volumes, FFS files, and sections with transparent decompression.* - **[KvcKiller](https://kvc.pl/repositories/kvckiller)** *Kernel-mode AV/EDR process termination via IOCTL (BYOVD), IFEO Paralyze via offline hive editing — bypasses DACL on protected processes. 90+ built-in targets across 15 vendors.* - **[BootBypass](https://kvc.pl/repositories/bootbypass)** *Native boot-phase DSE/HVCI bypass utility. SUBSYSTEM:NATIVE application registered in BootExecute — runs before any AV/EDR initializes. Patches SeCiCallbacks in live kernel.* - **[LnkForge](https://kvc.pl/repositories/lnkforge)** *C++ command-line tool that builds crafted Windows .lnk shortcut files from scratch. Icon spoofing, fake timestamps, Base64 argument encoding, UAC elevation.* - **[CVE-2026-31431](https://kvc.pl/repositories/cve-2026-31431)** *Local privilege escalation PoC for the Linux kernel AF\_ALG (AEAD) interface. Achieves root shell via splice/page-cache race condition.* - **[WSAPatch](https://kvc.pl/repositories/wsapatch)** *Pure MASM x64 binary patcher for WSABuilds 2407.40000.4.0 — fixes STATUS\_STOWED\_EXCEPTION crash on Windows 11 26H1 caused by AppUriHandlerRegistrationManager.* ## System Utilities - **[Regedit Commander](https://kvc.pl/repositories/regedit)** *Advanced Windows registry manipulation and backup toolkit.* - **[RegEdLin Commander](https://kvc.pl/repositories/regedlin)** *Native GTK4 / libadwaita two-pane offline Windows registry editor on Linux — custom regf parser/writer, live diff, subtree copy, zero libhivex dependency.* - **[Onion Downloader](https://kvc.pl/repositories/oniondownloader)** *Compact native Windows GUI and CLI downloader for Onion services (x64 + ARM64) — multi-circuit parallel range streaming with embedded client-only Tor in 2.67 MiB.* - **[Secure FTP](https://kvc.pl/repositories/sftpplug)** *Modern SFTP/SCP plugin for Total Commander with shell-transfer fallback for restricted hosts.* - **[FileRecoveryTool](https://kvc.pl/repositories/filerecoverytool)** *Low-level disk access for forensic file recovery.* - **[SignGuiPatcher](https://kvc.pl/repositories/signguipatcher)** *Patching utility for GUI signatures.* - **[Notepad (Internals)](https://kvc.pl/repositories/notepad)** *Custom modifications and internals analysis of Windows Notepad.* - **[KeyboardKit](https://kvc.pl/repositories/keyboardkit)** *Low-level keyboard interaction and event hooking framework.* - **[DBXExtractor](https://kvc.pl/repositories/dbxextractor)** *World's fastest DBX extractor. Reads Outlook Express archives and exports each message as EML. Memory-mapped I/O, parallel write pool, GUI + CLI.* - **[KiTTY Password Decryptor](https://kvc.pl/repositories/kittypassworddecryptor)** *Recovers saved KiTTY/PuTTY session passwords from the Windows registry.* - **[XTBrep](https://kvc.pl/repositories/xtbrep)** *High-performance XTB portfolio analyzer (P/L, XIRR, PIT-38 tax calculations, dividends, GUS inflation adjustment) — native C++23 / WinAPI.* ## Classic Recreations (Assembly / C++) - **[Chess](https://kvc.pl/repositories/chess)** *Fully functional Chess engine implemented from scratch.* - **[Tetris](https://kvc.pl/repositories/tetris)** *Classic Tetris game written in raw x64 Assembly.* - **[Minesweeper](https://kvc.pl/repositories/minesweeper)** *Recreation of the classic Minesweeper with architectural optimizations.* --- Looking for Polish-language projects? See **[Projekty PL](https://kvc.pl/projekty-pl)**. --- ## Navigation - Previous: [Home](https://kvc.pl/index.md) - Next: [Projekty PL](https://kvc.pl/projekty-pl.md)