kaneschutzman / keysniffer

A Linux kernel module to log pressed keys in debugfs

keysniffer

A Linux kernel module to grab keys pressed in the keyboard, or a keylogger. Works with the US keyboard (and conforming laptops).

The keypress logs are recorded in debugfs as long as the module is loaded. Only root or sudoers can read the log. The module name has been crafted to blend-in with other kernel modules.

keysniffer is intended to track your own devices and NOT to trespass on others. The author is not reponsible for any unethical usage.

If you find keysniffer useful, please consider donating via PayPal.

#License keysniffer is licensed under GPL v2.

#Compilation Clone the repository and run:

$ make

#Usage To insert the module into the kernel, run:

$ sudo insmod kisni.ko

To view the pressed keys, run:

$ sudo cat /sys/kernel/debug/kisni/keys

To unload the module (and clear the logs), run:

$ sudo rmmod kisni

#Links http://www.gadgetweb.de/programming/39-how-to-building-your-own-kernel-space-keylogger.html
https://wiki.archlinux.org/index.php/Xmodmap
http://www.osdever.net/bkerndev/Docs/keyboard.htm
http://arjunsreedharan.org/post/99370248137/kernel-201-lets-write-a-kernel-with-keyboard
http://www.linuxquestions.org/questions/slackware-14/how-to-match-x-keyboard-layout-with-the-the-kernel-keyboard-map-4175455061/
http://www.tldp.org/LDP/lkmpg/2.4/html/x1210.html