{"id":13590010,"url":"https://github.com/basil00/WinDivertTool","last_synced_at":"2025-04-08T12:32:21.339Z","repository":{"id":71320680,"uuid":"204824961","full_name":"basil00/WinDivertTool","owner":"basil00","description":"WinDivert detection and management","archived":false,"fork":false,"pushed_at":"2019-10-22T00:07:57.000Z","size":34,"stargazers_count":74,"open_issues_count":0,"forks_count":8,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-04-04T20:51:12.323Z","etag":null,"topics":["windivert"],"latest_commit_sha":null,"homepage":null,"language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/basil00.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-08-28T01:50:01.000Z","updated_at":"2025-02-09T13:33:06.000Z","dependencies_parsed_at":null,"dependency_job_id":"95c53c35-4fc8-4fd3-b989-e20212484162","html_url":"https://github.com/basil00/WinDivertTool","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/basil00%2FWinDivertTool","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/basil00%2FWinDivertTool/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/basil00%2FWinDivertTool/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/basil00%2FWinDivertTool/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/basil00","download_url":"https://codeload.github.com/basil00/WinDivertTool/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247842842,"owners_count":21005355,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["windivert"],"created_at":"2024-08-01T16:00:37.647Z","updated_at":"2025-04-08T12:32:21.010Z","avatar_url":"https://github.com/basil00.png","language":"C","funding_links":[],"categories":["C"],"sub_categories":[],"readme":"WinDivertTool.exe\n=================\n\n`WinDivertTool.exe` is a simple program for:\n\n* Listing information about which (if any) programs are using WinDivert.\n* Terminating all programs that are using WinDivert.\n* Uninstalling WinDivert from your system.\n\n`WinDivertTool.exe` is designed to work for any version of WinDivert.\n\nWhat is WinDivert?\n------------------\n\nWinDivert is an open source (LGPL) software package for capturing and\nmodifying network packets for Windows.  WinDivert was originally developed as\npart of the [ReQrypt](https://github.com/basil00/reqrypt) project for\ntunneling HTTP(S) traffic.  Since then, WinDivert has used by many\napplications such as packet filtering, packet sniffing, firewalls, NATs,\nVPNs, tunneling applications, etc.  Some projects that use WinDivert include:\n\n* [CitadelCore](https://github.com/TechnikEmpire/CitadelCore.Windows)\n* [Clumsy](https://github.com/jagt/clumsy)\n* [GoodbyeDPI](https://github.com/ValdikSS/GoodbyeDPI/)\n* [mitmproxy](https://github.com/mitmproxy/mitmproxy/)\n* [Inssidious](https://github.com/dfct/Inssidious/)\n* [ReQrypt](https://github.com/basil00/reqrypt)\n* [SnoopSpy](https://github.com/gilgil1973/snoop90)\n* [Suricata](https://github.com/OISF/suricata)\n* [Tallow](https://github.com/basil00/TorWall)\n* [TcpCrypt](https://github.com/scslab/tcpcrypt)\n* ...and many more.\n\nWhy is WinDivert on my system?\n------------------------------\n\nIf you find any of the `WinDivert.dll`, `WinDivert32.sys` or\n`WinDivert64.sys` files on your system it probably means one (or more)\nprogram/application is using WinDivert.  You can run `WinDivertTool.exe` to\nget a list of all programs currently using WinDivert, for example:\n\n        C:\\\u003e WinDivertTool.exe\n        __      ___      ___  _             _  _____         _\n        \\ \\    / (_)_ _ |   \\(_)_ _____ _ _| ||_   _|__  ___| |\n         \\ \\/\\/ /| | ' \\| |) | \\ V / -_) '_|  _|| |/ _ \\/ _ \\ |\n          \\_/\\_/ |_|_||_|___/|_|\\_/\\___|_|  \\__||_|\\___/\\___/_| VERSION 2.2\n        \n        ...\n        \n        FOUND   C:\\Program Files (x86)\\Tallow\\tallow.exe\n                ProcessId=2216\n                Hash=2cafec8e56c0380a61d6e5eea1e5ad0b618bb2d1936b4fe6d9ce7c839f051bea (SHA256)\n                WinDivertVersion=2.2.X\n                WinDivertFilter=\"outbound and ip.DstAddr \u003e= 44.0.0.0 and ip.DstAddr \u003c= 44.255.255.255\"\n                WinDivertLayer=NETWORK\n                WinDivertPriority=-1755\n                WinDivertFlags=0\n        \n        ...\n\nIn this example, the `WinDivertTool.exe` output indicates that a program\ncalled `tallow.exe` (see the\n[Tallow project](https://github.com/basil00/TorWall)) is using WinDivert.  The\n`WinDivertTool.exe` also prints some additional technical information,\nincluding the process ID and hash, as well as the WinDivert version, filter\nstring, layer, priority and flags.\n\nHow do I uninstall WinDivert?\n-----------------------------\n\nThe recommended method for uninstalling WinDivert is to uninstall whatever\napplication is using it.  In the example above, this can be achieved by\nuninstalling [Tallow](https://github.com/basil00/TorWall).\n\n`WinDivertTool.exe` can also *forcibly* terminate all programs/applications\nusing WinDivert and uninstall the WinDivert driver(s) from your system.  This\napproach is not recommended and should only be used as a last resort.  To\nforcibly uninstall WinDivert, run `WinDivertTool.exe` with the `uninstall`\nargument:\n\n        C:\\\u003e WinDivertTool.exe uninstall\n\nNote that this will not prevent the program/application from reinstalling\nWinDivert after `WinDivertTool.exe` has completed.\n\nSecurity Considerations\n-----------------------\n\nFor security reasons, a program using WinDivert must have *Administrator*\naccess rights, else the WinDivert driver will refuse to load/work.  This\npolicy mirrors similar policies for related tools on other platforms, such as\n*divert sockets* for MacOSX and `netfilterqueue` for Linux.  Programs do not\nrun as *Administrator* by default, and a program requesting *Administrator*\nrights will trigger a comfirmation via the *UAC prompt*.\n\nThis means that **all programs listed by `WinDivertTool.exe` are running with\nAdministrator access rights**.\n\n`WinDivertTool.exe` also requires *Administrator* access to query the\nrelevant the system for WinDivert drivers and handles.  Furthermore, process\ntermination also requires *Administrator* access.  As a result, you may be\nprompted by Windows UAC when `WinDivertTool.exe` is run.  `WinDivertTool.exe`\ndoes not install the WinDivert driver, but it may query any existing\nWinDivert driver that is already installed on your system.\n\nLimitations\n-----------\n\nAfter WinDivert has been uninstalled, `WinDivertTool.exe` cannot prevent\nanother application reinstalling it.  If you do not want a program using\nWinDivert then you must uninstall the program.\n\n`WinDivertTool.exe` cannot detect modified versions of the WinDivert driver\nand service.\n\n`WinDivertTool.exe` cannot get detailed information from older versions\n(pre-2.0.0) of the WinDivert driver.  As a result, some information may be\nmissing and displayed as `???`.\n\n`WinDivertTool.exe` is beta quality software so there may be some bugs.\nPlease report any bug here: https://github.com/basil00/WinDivertTool/issues\n\nBuilding\n--------\n\n`WinDivertTool.exe` depends on the WinDivert runtime.  To build, unzip\nthe WinDivert source code into the current directory then run `make`.\nCurrently only Linux cross-compilation is supported.\n\nLicense\n-------\n\n`WinDivertTool.exe` is distributed under the GNU Public License (GPL) Version 3.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbasil00%2FWinDivertTool","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbasil00%2FWinDivertTool","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbasil00%2FWinDivertTool/lists"}