x64 ASM keylogger

/!\ this is for educational purpose only, any others use is prohibited /!\

TABLE OF CONTENTS

• Usage
  • Compilation
  • Run
  • Server
  • Kill the keylogger
• Docs

Usage

Compilation

make

Run

sudo build/keylogger

Server

You can start a nc server with this command

nc -klnvp 1337

the keylogger will connect and send the keys typed. I didn't bothered to add args customisation for port/ip so for now it only connects to localhost:1337

Kill the keylogger

you first have to find the PID of the process, for that the keylloger create a dir with pid like this:

then umount it and kill it

sudo umount /proc/<pid>
sudo killall -9 build/keylogger

Docs

man for all the syscalls

asm doc

calltable

linux source code (easier than github official repo)