/x64-asm-keylogger

a keylogger all in x64 assembly

Primary LanguageAssemblyApache License 2.0Apache-2.0

fully x64 ASM keylogger

/!\ this is for educational purpose only, any others use is prohibited /!\

TABLE OF CONTENTS

Usage

Compilation

make

Run

sudo build/keylogger

Server

You can start a nc server with this command

nc -klnvp 1337

and the keylogger will automaticelly connect to it and send instantely the keys typed, I didn't implemented some args customisation for port/ip so for now it's only connect to localhost:1337

Kill the keylogger

you first have to find the PID of the process, for that the keylloger create a dir with pid like this: pid screenshot

then umount it and kill it

sudo umount /proc/<pid>
sudo killall -9 build/keylogger

Docs

man for all the syscalls

asm doc

calltable

linux source code (easier than github official repo)