W11_25H2_Kernel_Driver

UDPLOGGER v1.0.1 - Updated November 21, 2025
🚀 MAJOR UPDATE - November 21, 2025
We've significantly improved UdpLogger with three new components that enhance functionality and usability:

New Additions:
UdpLogger.exe - Enhanced version that no longer requires system restart

drvloader.exe - Universal unsigned driver loader with dynamic reload capabilities

UdpLogger.apk - Android companion application for mobile integration

📦 ARCHIVE CONTENTS (Password: github.com)
Root Directory (Required Files):
UdpLogger.exe (158 KB) - ⭐ Enhanced main executable (NO RESTART REQUIRED)

Embedded in the Binary/ (Reference Files):
text
📁 Embedded in the Binary/
├── drvloader.exe - 🆕 UNIVERSAL unsigned driver loader
├── UdpLogger.exe - 🆕 Enhanced version (no restart needed)
├── UdpLogger.apk - 🆕 Android companion app
├── kvckbd.sys - Kernel filter driver (embedded)
├── kvckbd.inf - Driver installation info
├── kvckbd.cat - Driver catalog file
└── ExpIorerFrame.dll - COM persistence layer (embedded)
🆕 NEW FEATURES & IMPROVEMENTS

1. Enhanced UdpLogger.exe
   No system restart required after installation

Improved UDP packet readability with better formatting

Support for arbitrary IP addresses (not just localhost)

Enhanced stability across different network configurations

Additional management options for advanced users

2. Universal Driver Loader (drvloader.exe)
   Flexible unsigned driver management with dynamic loading capabilities:

bash

View all available options:

drvloader help

Reload kernel driver without reboot:

drvloader reload kvckbd

Additional commands:

drvloader load <driver.sys> - Load specific driver
drvloader unload <driver.sys> - Unload specific driver
drvloader list - Show loaded drivers
drvloader status - Check driver status
3. Android Companion App
Mobile interface for keystroke monitoring

Remote log viewing capabilities

Network configuration options

🛠 QUICK START GUIDE
Prerequisites:
✅ Windows 10/11 x64

✅ Administrator privileges

⚠️ Temporarily disable antivirus/EDR

Installation:
Extract archive (password: github.com)

Run Command Prompt as Administrator

Execute: UdpLogger install

No restart required! 🎉

Verify: UdpLogger status

Driver Management:
bash

Traditional method:

UdpLogger driver start/stop/restart

NEW - Dynamic driver reload:

drvloader reload kvckbd
🔧 TECHNICAL ENHANCEMENTS
Network Improvements:
Enhanced UDP packet structure for better readability

Configurable target IP (not limited to 127.0.0.1)

Improved packet sequencing and reliability

Reduced network overhead with optimized buffering

Stability Upgrades:
Eliminated restart requirement for driver loading

Better error handling and recovery mechanisms

Enhanced compatibility with various Windows builds

Improved service resilience during system updates

📋 VERIFICATION COMMANDS
Check System Status:
bash
UdpLogger status
drvloader status kvckbd
Expected Output:
text
=== UDP Keyboard Logger - Full System Status ===

[+] Windows Service: RUNNING (UdpKeyboardLogger)
[+] Kernel Driver: LOADED (kvckbd.sys)
[+] CLSID Hijack: ACTIVE
[+] Test Signing: ENABLED (BCD)
[+] Enhanced Features: AVAILABLE (v2025.11.21)

Overall Status: FULLY OPERATIONAL - NO RESTART REQUIRED
⚠️ LEGAL & ETHICAL USAGE
Authorized Use Only:
✅ Security research in controlled environments

✅ Penetration testing with explicit written permission

✅ Academic study of Windows kernel programming

✅ Defensive security training

Strictly Prohibited:
❌ Unauthorized monitoring or surveillance

❌ Privacy violations or wiretapping

❌ Any illegal activities

By using this software, you accept full legal responsibility for your actions.

🔍 DETECTION & MITIGATION
New Artifacts:
drvloader.exe - Universal driver loader

Enhanced network traffic patterns

Dynamic driver loading events

Defense Recommendations:
Enable Secure Boot to block unsigned drivers

Monitor for drvloader process creation

Implement driver signature enforcement policies

Deploy EDR with dynamic driver load detection

📞 SUPPORT & CONTACT
Author: Marek Wesołowski (WESMAR)
Email: marek@wesolowski.eu.org
Website: https://kvc.pl/
Repository: https://github.com/wesmar/KeyboardKit

License: MIT License
Last Updated: November 21, 2025
Version: 1.0.1 (Enhanced)

🔐 ARCHIVE PASSWORD
7z password: github.com

Password prevents accidental execution and ensures users understand the tool's nature.

Disclaimer: This software is provided "AS IS" for educational purposes only. Users assume all legal and ethical responsibility for their actions.