Skip to content
All projects
Reverse Engineering & Malware AnalysisOpen source

Ferivonica (System Internals)

Experimental software that analyzes system behavior using the Windows Hook API, processes keyboard/mouse inputs, and demonstrates reverse engineering capabilities.

Source code

Tech stack

Languages
Frameworks & libraries

Performance & metrics

  • In-memory execution (stealth footprint)
  • Sub-millisecond interrupt interception

Why I built it

To build secure systems, one must first understand how to exploit them. Ferivonica is an experimental research project designed to study how malware, specifically keyloggers and user-emulation bots, interact with the Windows Kernel and intercept hardware streams.

Architecture & decisions

Written purely in low-level C++ to interact directly with the Win32 API. It relies heavily on 'SetWindowsHookEx' to establish global hooks, intercepting keyboard and mouse interrupts (WH_KEYBOARD_LL) before they even reach user-space applications.

Key features

  1. 01Low-level global system hooking
  2. 02Hardware interrupt interception
  3. 03Demonstration of malware behavioral patterns
  4. 04Minimal footprint (in-memory execution)
  5. 05Reverse engineering testbed

Technical review

Note: This tool is strictly for educational and defensive research purposes. By understanding how these hooks operate, I can develop better detection and prevention algorithms for my other security projects.

Related projects

All projects

Malware Analysis

Ferivonica (Malware Research Suite)

A comprehensive, low-level malware research suite demonstrating global input hooking, credential scraping, automated screen capturing, and disk space manipulation.

  • C
  • C++ (C++17)
  • Windows API
  • +2

Low-Level Graphics

OpenCV & WinAPI Computer Vision Toolkit

A low-level C++ pipeline integrating OpenCV and native Windows GDI for real-time device context manipulation, screen-space spatial tracking, and automated ML dataset sanitization.

  • C++
  • OpenCV
  • Windows API
  • +2

Networking & Protocols

Private

Cyberia & Wired Protocol

A secure, decentralized operating system and network layer built on Wired — a custom, high-performance communication protocol. Instead of HTTP, it uses a mutually encrypted TCP handshake and AES-encrypted WebSocket payloads for strong data confidentiality.

  • Rust
  • C++
  • Tauri
  • +6

Need something similar?

I can build a system like this for you, too.

Describe your project in a few sentences, and we'll work out the right approach and an estimated scope together.

Tell me about your projectBrowse services