V vvswift

V

_{Just a writer, exposing the weaknesses of certain protection systems.

All projects below are research-only proof-of-concept tools published strictly for authorized security testing, defensive research, and educational purposes.

Any illegal use is expressly prohibited and is entirely at your own risk and responsibility.}

Projects	Language	⭐ Stars	🔀 Forks
Bypass-Protection0x00 — EDR & AV Bypass Arsenal — a comprehensive collection of tools, patches, and techniques for evading modern EDR and antivirus defenses, including AMSI bypass, ETW patching, unhooking NTDLL, and various evasion methods tailored for red team operations and security research.
Shellcode-Injector — PoC shellcode injector using clean syscalls to bypass user-mode hooks in ntdll.dll, featuring dynamic syscall resolution, process injection techniques, and support for custom payloads to aid in penetration testing and malware analysis.
HVNC-windows-remote-toolkit — Remote administration toolkit for Windows based on Hidden VNC, including features like file manager, keystroke logger, PowerShell execution, clipboard monitoring, and stealthy desktop control for remote access scenarios.
blackbox-ave — Linux Rootkit (x86-64 / ARM64) that stealthily hides processes, files, and sockets, hooks syscalls, encrypts network traffic, bypasses SELinux / AppArmor, and provides backdoor access with modular persistence mechanisms for advanced kernel-level evasion.
Keylogger_Win64 — Stealth Win64 keylogger that logs keyboard input, chat messages, URLs, passwords, and clipboard data using low-level Windows APIs, with no external dependencies, anti-debugging features, and encrypted log transmission for covert monitoring.
Chrome-extension-installer — Chromium extension loader with command support for system control, integrated with two Node.js servers for C2 operations, enabling browser-based persistence, data exfiltration, and remote command execution in web environments.