Skip to content
All projects
Reverse Engineering & Malware AnalysisOpen source

Ferivonica (System Internals)

Experimental software that analyzes system behavior using the Windows Hook API, processes keyboard/mouse inputs, and demonstrates reverse engineering capabilities.

Source code

Tech stack

Languages
Frameworks & libraries

Performance & metrics

  • In-memory execution (stealth footprint)
  • Sub-millisecond interrupt interception

Why I built it

To build secure systems, one must first understand how to exploit them. Ferivonica is an experimental research project designed to study how malware, specifically keyloggers and user-emulation bots, interact with the Windows Kernel and intercept hardware streams.

Architecture & decisions

Written purely in low-level C++ to interact directly with the Win32 API. It relies heavily on 'SetWindowsHookEx' to establish global hooks, intercepting keyboard and mouse interrupts (WH_KEYBOARD_LL) before they even reach user-space applications.

Key features

  1. 01Low-level global system hooking
  2. 02Hardware interrupt interception
  3. 03Demonstration of malware behavioral patterns
  4. 04Minimal footprint (in-memory execution)
  5. 05Reverse engineering testbed

Technical review

Note: This tool is strictly for educational and defensive research purposes. By understanding how these hooks operate, I can develop better detection and prevention algorithms for my other security projects.