220 lines
9.1 KiB
Markdown
220 lines
9.1 KiB
Markdown
# MIT License
|
|
|
|
## KVC - Kernel Vulnerability Capabilities Framework
|
|
|
|
**Copyright (c) 2025 Marek Wesołowski (WESMAR)**
|
|
|
|
---
|
|
|
|
## License Grant
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
|
|
|
|
## Attribution Requirement
|
|
|
|
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
|
|
|
|
## Disclaimer of Warranty
|
|
|
|
**THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.**
|
|
|
|
---
|
|
|
|
## About This License
|
|
|
|
### Why MIT License?
|
|
|
|
The MIT License is one of the most permissive and widely-adopted open source licenses, chosen for KVC to:
|
|
|
|
- **Maximize adoption** in security research and education
|
|
- **Encourage contribution** from the global security community
|
|
- **Enable commercial use** without licensing barriers
|
|
- **Maintain simplicity** with minimal legal complexity
|
|
- **Ensure compatibility** with other open source projects
|
|
|
|
### What This Means for Users
|
|
|
|
✅ **Commercial Use Permitted** - Use KVC in business environments without fees
|
|
✅ **Modification Allowed** - Adapt the code for your specific needs
|
|
✅ **Distribution Allowed** - Share KVC with others, modified or unmodified
|
|
✅ **Private Use Permitted** - Use internally without disclosure requirements
|
|
✅ **Patent Use** - Implicit patent grant from contributors
|
|
✅ **Sublicensing Allowed** - Include KVC in larger projects with different licenses
|
|
|
|
### What This Requires
|
|
|
|
📋 **Include License** - This license text must be included with any distribution
|
|
📋 **Include Copyright** - The copyright notice must remain intact
|
|
📋 **No Trademark Rights** - Does not grant rights to use author's trademarks
|
|
|
|
---
|
|
|
|
## Project Information
|
|
|
|
### Repository Details
|
|
- **Project Name:** KVC - Kernel Vulnerability Capabilities Framework
|
|
- **Version:** 1.0.1
|
|
- **Author:** Marek Wesołowski (WESMAR)
|
|
- **Website:** [https://kvc.pl](https://kvc.pl)
|
|
- **Contact:** [marek@wesolowski.eu.org](mailto:marek@wesolowski.eu.org)
|
|
|
|
### Technical Specifications
|
|
- **Platform:** Windows 10/11 (x64)
|
|
- **Language:** C++17, Assembly (MASM)
|
|
- **Architecture:** Ring-0 kernel operations with user-mode control
|
|
- **Purpose:** Windows security research and penetration testing
|
|
|
|
---
|
|
|
|
## Responsible Use Guidelines
|
|
|
|
### Intended Use Cases
|
|
|
|
While this software is freely licensed, users are encouraged to employ it responsibly:
|
|
|
|
#### Legitimate Applications
|
|
- **Security Research** - Academic and professional security studies
|
|
- **Penetration Testing** - Authorized security assessments
|
|
- **Educational Training** - Cybersecurity skill development
|
|
- **Incident Response** - Forensic analysis and threat hunting
|
|
- **System Administration** - Advanced Windows system management
|
|
- **Open Source Contribution** - Improving and extending the framework
|
|
|
|
#### Legal Compliance
|
|
Users must ensure their activities comply with applicable laws and regulations:
|
|
|
|
- **Authorization Required** - Only use on systems you own or have explicit permission to test
|
|
- **Local Laws** - Comply with computer fraud and abuse laws in your jurisdiction
|
|
- **Corporate Policies** - Respect organizational security policies and procedures
|
|
- **Data Protection** - Handle any extracted data according to privacy regulations
|
|
|
|
### Ethical Considerations
|
|
|
|
The open source nature of this license does not diminish the ethical responsibilities of users:
|
|
|
|
- **No Malicious Use** - Do not use for unauthorized access or malicious purposes
|
|
- **Responsible Disclosure** - Report vulnerabilities through appropriate channels
|
|
- **Community Benefit** - Consider contributing improvements back to the project
|
|
- **Knowledge Sharing** - Use for advancing security research and education
|
|
|
|
---
|
|
|
|
## Contributing to KVC
|
|
|
|
### Community Contributions Welcome
|
|
|
|
As an open source project, KVC thrives on community contributions:
|
|
|
|
#### Ways to Contribute
|
|
- **Code Improvements** - Bug fixes, performance enhancements, new features
|
|
- **Documentation** - Improved guides, tutorials, and technical documentation
|
|
- **Testing** - Compatibility testing across Windows versions and configurations
|
|
- **Security Research** - New techniques and methodologies
|
|
- **Educational Content** - Training materials and academic resources
|
|
|
|
#### Contribution Guidelines
|
|
- **Code Quality** - Follow modern C++17 standards and RAII patterns
|
|
- **Documentation** - Include comprehensive comments and documentation
|
|
- **Testing** - Verify changes across multiple Windows versions
|
|
- **Compatibility** - Maintain backward compatibility where possible
|
|
- **Attribution** - Contributors will be acknowledged in project documentation
|
|
|
|
### Development Resources
|
|
|
|
#### Technical Documentation
|
|
- **Architecture Overview** - Detailed system design documentation
|
|
- **API Reference** - Complete function and class documentation
|
|
- **Build Instructions** - Compilation and development setup guides
|
|
- **Testing Procedures** - Quality assurance and validation processes
|
|
|
|
#### Community Channels
|
|
- **Primary Contact** - [marek@wesolowski.eu.org](mailto:marek@wesolowski.eu.org)
|
|
- **Project Website** - [https://kvc.pl](https://kvc.pl)
|
|
- **Issue Reporting** - Submit bugs and feature requests via established channels
|
|
|
|
---
|
|
|
|
## Third-Party Components
|
|
|
|
### Dependencies and Libraries
|
|
|
|
KVC may incorporate or link with third-party libraries and components:
|
|
|
|
- **Windows SDK** - Microsoft Windows development libraries (Microsoft license)
|
|
- **Runtime Libraries** - Visual C++ redistributable components (Microsoft license)
|
|
- **Standard Libraries** - C++ standard library implementations (Various licenses)
|
|
|
|
Users should be aware that while KVC itself is MIT licensed, incorporated components may have different licensing terms.
|
|
|
|
### Compliance Verification
|
|
|
|
When distributing KVC or derivative works:
|
|
|
|
1. **Review Dependencies** - Ensure compatibility of all incorporated components
|
|
2. **Include Licenses** - Provide license texts for all third-party components
|
|
3. **Attribution** - Properly credit all contributors and component authors
|
|
4. **Compliance Check** - Verify overall license compatibility
|
|
|
|
---
|
|
|
|
## Version History and Updates
|
|
|
|
### Current Version: 1.0.1
|
|
- Initial open source release under MIT License
|
|
- Complete framework with kernel driver, user-mode tools, and browser extraction
|
|
- Comprehensive documentation and usage examples
|
|
- Support for Windows 10/11 x64 platforms
|
|
|
|
### Future Development
|
|
- **Community-Driven** - Development priorities guided by user needs and contributions
|
|
- **Regular Updates** - Ongoing compatibility updates for new Windows versions
|
|
- **Feature Expansion** - New capabilities based on security research advances
|
|
- **Documentation Improvements** - Enhanced guides and educational materials
|
|
|
|
---
|
|
|
|
## Legal Notices
|
|
|
|
### Export Control
|
|
This software may be subject to export control regulations in various jurisdictions. Users are responsible for compliance with applicable export control laws.
|
|
|
|
### Security Disclaimer
|
|
KVC operates with elevated system privileges and directly manipulates kernel structures. While designed with safety mechanisms, users should:
|
|
|
|
- **Test in Controlled Environments** - Use virtual machines or isolated systems for testing
|
|
- **Backup Critical Data** - Ensure system backups before using advanced features
|
|
- **Antivirus Exclusions** - Add KVC to security software exclusions to prevent conflicts
|
|
- **Administrator Rights** - Only run with appropriate administrative privileges
|
|
|
|
### Liability Limitation
|
|
As specified in the MIT License terms, this software is provided without warranty. Users assume all risks associated with its use.
|
|
|
|
---
|
|
|
|
## Contact and Support
|
|
|
|
### Primary Contact
|
|
**Marek Wesołowski (WESMAR)**
|
|
Email: [marek@wesolowski.eu.org](mailto:marek@wesolowski.eu.org)
|
|
Website: [https://kvc.pl](https://kvc.pl)
|
|
Phone: +48 607-440-283
|
|
|
|
### Business Information
|
|
**WESMAR - Marek Wesołowski**
|
|
Address: Raabego 2b/81, 07-973 Warszawa, Poland
|
|
Tax ID (NIP): 7991668581
|
|
Statistical Number (REGON): 140406890
|
|
|
|
### Support Expectations
|
|
- **Community Support** - Best-effort assistance for open source users
|
|
- **Bug Reports** - Timely response to legitimate security and stability issues
|
|
- **Feature Requests** - Consideration based on community interest and technical feasibility
|
|
- **Commercial Support** - Professional services available upon request
|
|
|
|
---
|
|
|
|
**This MIT License ensures KVC remains freely available for the security research community while encouraging innovation, contribution, and responsible use.**
|
|
|
|
---
|
|
|
|
*Copyright (c) 2025 Marek Wesołowski (WESMAR). All rights reserved under MIT License terms.* |