Create your own virtual machine on Linode with a 60-day $100 credit: davidbombal.wiki/linode If that link doesn't work for you, try this link: www.linode.com/lp/youtube-viewers/?ifso=davidbombal Please note: Credits expire in 60 days. Big thanks to Linode for sponsoring this video! I wrote a Python program that saves keystrokes to a cloud server. I compiled the script to run on a Windows 11 computer with anti-virus enabled. May this be a warning to both you and your family. Don't download software that you don't trust. Only download software from reputable software developers and those you trust. Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place. // MENU // 00:00 - Be careful what you download 00:07 - Intro 00:16 - How to capture keystrokes with Python 00:41 - Keylogger demo 03:30 - How to setup the keylogger 10:34 - Conclusion // Code // Keylogger: github.com/davidbombal/python-keylogger Server: github.com/davidbombal/express-server-basic // Video mentioned // Python keylogger bypasses Windows 11 Defender: ruclips.net/video/qaZ-IbssPDI/видео.html // SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal RUclips: ruclips.net/user/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Always great content! I've done something similar using SMTP to shoot over emails of the logged keystrokes on a timed interval. Love the use of a js server approach! About to jump into the code and have a look around. Keep up the amazing work and for making people aware of the real dangers that hide in plain site.
@@wingit7335 how can it be like the deployment on windows, so that it is not easily detect as malicious software or how can it be deploy as an apk file?
Things that can be improved, make the script work like a blind shell, like not including the ip address in the program itself, instead we will initiate a call to the program via some authentication, also encrypted data transfer is necessary to avoid AV detection.
Rather than outputting to a text file, you could use a nosql db and output the processes running at the time of the key logging to have a better picture of what the target is using at the time they are typing.
We decided against doing that here to keep things simple. This is a proof of concept and can be improved in many ways. We can code in many other options, but this is for educational purposes only and not to build malware.
@@davidbombal agreed. I actually like the simple poc. It leaves alot of potential open that could be touched on or brainstormed or discussed in general. Especially if talking about major nation state adversaries and their toolsets to gain access to sensitive western critical infrastructure systems. Or general minor ransomware criminal groups with their initial access brokers.
@@davidbombalWhere can I learn and see everything, I am into python development. How do people like you learn? Everything nowadays is hidden either for going into courses and spending money or just people not to see and analise.
one of the few channels that show content of relevance!!!!!! I wish you were my mentor... I managed to reproduce another keylogger on the desktop! it also prints every click along with a notepad with text captures and creates folders separated by date!!! finally I managed to reproduce your code and forward the log file to a server... thank you very much for sharing your knowledge!!!!!! I am a Programming and Information Security enthusiast🇧🇷
I've once used python on my PC to give a demo to my friends that how getting passwords is easy and asked them to avoid using internet cafes, as getting the key strokes is pretty easy. That was way back in 2015.
Amazing content David I like that you bring us the best reputable personalities in their speciality field so we can learn from the best no need for fancy botcamps😄 ✅🖥️🙏
@@tehczavier It's good so far I scored 100% on module 1, but to be fair I already have a network background:). It's great for people who are starting out
I started to smile after I saw the first thumbnail of this video. It was like Saurons Eye from the Lord of the Rings is watching you. And now it's like a Ringwraith.
Awesome video, thank you David 😊! Those PoCs are really good for us to build countermeasures to that kind of stuff. I got curious about python compilation actually, I've did some Python install before but never compiled it as a binary, will give it a try later.
Hey David, thanks for sharing this! I don’t suppose you could maybe consider a pivot into voice ? Enough material with that to keep you occupied. Could maybe lead back into security related items (wire shark and RTP streams). I know network engineers tend to grimace at voice, but steel yourself and think about it ;)
Ive tried to do it. Only one issue: when I run the compiled keylogger.exe it opens an empty command prompt, when I close it, it will close the keylogger as well. Idk how to make it so it opens stealthy as yours.
You need to set compiler flag "-mwindows" to remove the UI element of your application. Other ways include setting the main window handle hidden on init.
I am ok with python code but I have no idea about C code. When you say you used a C compiler to compile it does that mean you can compile python code in C compilers or did you have to use C code to make it work? Thanks for the video.
I have a Question! Why RUclips doesn't remove your hacking videos. Like your title is so catchy like wifi hacking etc. When i upload something, RUclips instant remove my content.
@@hartatociptajaya Thank you, I know some of the Free courses require a text book. Have to look into this one, because a couple people recommend this course.
You’re probably putting the horse before the cart if you do that… if you want a bit of an overview on some computer science, there’s a vid called ‘the art of code’ on RUclips. Learning a simple language like python is much easier than learning computer science. Walk before you run!
@@catatafish22 Wouldn't it be the other way around? I want to learn the basics of computer science in order to have the fundamentals and when I go to learn a language I'll know how the computer functions, instead of just following examples that I have no idea why I'm doing what I'm doing.
Yeah, sure, you can do that, Windows doesn't block it but what it does block is my compiled production-ready program without any single malware in it for absolutely no reason...
So recompiling PyInstaller bypasses Defender, but wouldn't SmartScreen block the EXE as it is unknown (if it was real malware and actually was downloaded from the Internet by "your victim")?
Nice video, if i was do it this i would use sockets for real time communication and a common port such as 443 + inject a binary blob into memory for a listener to setup a shell, that the program can load using a pointer. easy web c&c.
you cant. android dosnt surport monator mode also you need to send a deauth packet to the target to catch the handshake. and the handshake uses encryption. use a laptop and a 64bit version of kali
With a security key for sign in the keylogger won't be able to fetch anything. The threat would be a cookie session stealer malware, but that would have to bypass the virus detection which is not likely.
Genuinely interested in what this community has to say, now that everyone has seen the source code and how it functions, what are some methods anyone here would use, to defend against it?
@@catatafish22 that is the best way lmao, the best way not too get hacked is dont click on anything that can be seen as sketchy. or if you truly want safety, dont be on the internet like ever
Hi David, just wondering if there's a way to encrypt the keylogged traffic / passwords as I'm sending them to my linode. Maybe I want to test this with my own passwords but I don't want the connection to be readable by eavesdroppers.
8:45 that makes no sense, unless msft compiler adds something to the code... but i highly doubt that. I see no reason why you would have to re-compile py-installer....
@@cezartorescu But does it mean msft signs somehow binaries with their compiler? --- edit well it might also use different sys calls in the generated bin thus it's doing 'unexpected' by defender stuf and does not match any patters?
Hey, I'm new here and building this project for my own working but I need help the files that he mentioned and the steps are updated and now I'm stuck can anyone here help me out?
this script is getting detected in my computer(windows 11) and automatically being deleted in vs code after saving showing the warning that this file contains virus
LOL. Never mind. I answered my own question after pasting the text ie " Using the PyPI installation is recommended on Windows..." instead. Looking forward to testing this on my unused laptop on a separate router and separate subnet in my home. ---[ignore below - dufus me :) ]--- Bummer. Johnny-Come-Lately here... nuitka says: "The MSI installers are discontinued as Python has deprecated their support for them, as well as Windows 10 making it harder to users to install them. Using the PyPI installation is recommended on Windows." Any other options/suggestions?? Thx for this proof of concept.
CORS is Cross-Origin Resource Sharing. It is meant to restrict/control the access of resources. It is not to load/copy any data/content. CORS is not Python specific.
Great Content! I am a big fan. I did all of this and windows defender did not detected it but when i sent it to my friend to check it out by uploading it to google drive. When he downloaded it windows defender picked it up. Is there something i can do to avoid this?
How can i send the keylogging data to my own server. Do i just open a port on my server like 8080 shown in the scipt and add my server ip in the scipt too?
Yes that would be the ideal. Instead of writing to a text file also writing to a database. It’s a simple program just too show people it can be done. Definitely could be improved in a lot of ways.
wouldn't microsoft smartscreen automatically block this program since it's an extremely rare binary file that nobody has used before, you'd have bypass the block to get this running
Obviously not. :D ...So this OS is around since the late 80s and despite all their affords and software that shall save its users from harm they still can't detect a simple stupid keylogger. That is all one needs to know as far as the quality of MS products goes. Kind of amazing! :D
Heya David. Nice video, as usual :) I have a small question though. Why is windows Defender not picking up the exe file ? It usually picks up python scripts quite easily and the library you did use, is using winapi and that is not even trying to evade detection. Could you explain, please ? :)
He couldn’t explain the specifics due to legal reasons (cos then he’d literally be telling us how to install malicious scripts on someone’s computer in a yt vid)… but from what I gathered, he was able to bypass windows defender because the program was made using a C+ compiler. C+ is native to windows, so windows defender does not recognise it as being malicious… a python installer is embedded in the program, along with a keylogger written in python. A sneaky and very simple way of beating the firewall. You’ll be able to see how it’s done if you look at the code in the program he built.
@@catatafish22 I did look at the code :) That's why I came to ask the question here. I was wondering if it was the kinda double compiling he was talking about but, really, I don't get why WD wouldn't catch that exe :) Did you try it ? Because my script did sometimes get caught by Defender... Not everytime though. So I don't get it, to be honest.
@@NoobosaurusR3x I haven't tried it... From reading the comments there's a lot of ways the code could be improved on cos David's program was just a simple one for proof of concept... a more foolproof program would require some obfuscation
@@catatafish22 Thanks for your input. I hope David could just jump in 2 minutes and give his opinion about Defender and the fact it's not picking up the exe (maybe the double compile ?)
As I mentioned in the video we compiled pyinstaller with the Microsoft c/c+ compiler and then compiled the python code with the new pyinstaller compiler. Hope that helps. This is a proof of concept and may not work every time.
That Windows is still this.... bad in this regard. On macOS you cannot intercept non-modified keys without being granted the permission to be an accessibility application.
Hi David, just some feedback - I've tried replicating everything you did and ran into some problems. When I compile the python script into an executable file using PyInstaller, Windows Virus & Threat protection catches it immediately.
Is it possible to hide this python file into another file like we do it with steganography ? Like if I run a python script that has in it another python file, both of them will run ? How is it possible for us to keep this invisible to the victim during the delivery ? 🤔 i don’t see a real technique for the transmission of the keylogger
Hey, I'm new here and building this project for my own working but I need help the files that he mentioned and the steps are updated and now I'm stuck can anyone here help me out?
Hi, David. What would you recommend for scanning pdf's and images for rats and loggers? These day's many of us download quite a number of pdf's for education and images for our own curating.
Hi, imagine someone hacked the laptop earlier, then can I know whether the laptop is hacked or not, by using task manager, later ? And are Apple laptops safer than windows laptops? Thanks
Reminds me of some of my earliest experiments in writing my own penetration tools. The logger I wrote worked poorly and only locally on my own computer. Hilariously bad but still somewhat functional. The more fun experiments were controlling pointers remotely. Good times.
Create your own virtual machine on Linode with a 60-day $100 credit: davidbombal.wiki/linode
If that link doesn't work for you, try this link: www.linode.com/lp/youtube-viewers/?ifso=davidbombal
Please note: Credits expire in 60 days. Big thanks to Linode for sponsoring this video!
I wrote a Python program that saves keystrokes to a cloud server. I compiled the script to run on a Windows 11 computer with anti-virus enabled. May this be a warning to both you and your family. Don't download software that you don't trust. Only download software from reputable software developers and those you trust.
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place.
// MENU //
00:00 - Be careful what you download
00:07 - Intro
00:16 - How to capture keystrokes with Python
00:41 - Keylogger demo
03:30 - How to setup the keylogger
10:34 - Conclusion
// Code //
Keylogger: github.com/davidbombal/python-keylogger
Server: github.com/davidbombal/express-server-basic
// Video mentioned //
Python keylogger bypasses Windows 11 Defender: ruclips.net/video/qaZ-IbssPDI/видео.html
// SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
RUclips: ruclips.net/user/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Dear David, I'm telling your her 🖐🏻😡.
i think you forgot to pin this
But what if I don't have a python download??
This keylogger scripting technique through other scripting mediums has been around for years. Dave, you just made it worldwide for Python. Well done.
FFI and ctypes, it has been available for ages :)
@@dmail00it dosent work for me 😕
Always great content! I've done something similar using SMTP to shoot over emails of the logged keystrokes on a timed interval. Love the use of a js server approach! About to jump into the code and have a look around. Keep up the amazing work and for making people aware of the real dangers that hide in plain site.
Thank you Dustin!
@@davidbombal of course! Keep up the amazing work and keep inspiring people to learn!
Thanks Sir David for the knowledge on how we can secure our devices. Can this also be done on mobile devices?
@@wingit7335 how can it be like the deployment on windows, so that it is not easily detect as malicious software or how can it be deploy as an apk file?
@@davidbombal David great content thanks what about the update for the Kali Linux on Android
I created a python key-logger like this couple years ago sending it to my free web hosting server. Awesome video.
Thank you! So many ways to do this.... it should really not be possible today, but is unfortunately.
can you teach me how to do it?
Great tutorial David! Please keep them coming!
Things that can be improved, make the script work like a blind shell, like not including the ip address in the program itself, instead we will initiate a call to the program via some authentication, also encrypted data transfer is necessary to avoid AV detection.
Probably just meant to be an example of something super simple.
Rather than outputting to a text file, you could use a nosql db and output the processes running at the time of the key logging to have a better picture of what the target is using at the time they are typing.
We decided against doing that here to keep things simple. This is a proof of concept and can be improved in many ways. We can code in many other options, but this is for educational purposes only and not to build malware.
@@davidbombal agreed. I actually like the simple poc. It leaves alot of potential open that could be touched on or brainstormed or discussed in general. Especially if talking about major nation state adversaries and their toolsets to gain access to sensitive western critical infrastructure systems. Or general minor ransomware criminal groups with their initial access brokers.
This is awesome, it's more effective If the keylogger run as a daemon in the background and it is start running on system boot up
This is only a proof of concept and can improved in many ways. We didn't show everything here because of RUclips rule.
@@davidbombal Now I’m curious: what didn’t you show (besides compile steps)?
@@davidbombalWhere can I learn and see everything, I am into python development. How do people like you learn? Everything nowadays is hidden either for going into courses and spending money or just people not to see and analise.
one of the few channels that show content of relevance!!!!!! I wish you were my mentor... I managed to reproduce another keylogger on the desktop! it also prints every click along with a notepad with text captures and creates folders separated by date!!! finally I managed to reproduce your code and forward the log file to a server... thank you very much for sharing your knowledge!!!!!! I am a Programming and Information Security enthusiast🇧🇷
I've once used python on my PC to give a demo to my friends that how getting passwords is easy and asked them to avoid using internet cafes, as getting the key strokes is pretty easy. That was way back in 2015.
This seems complicated it’s not working for me
Hey
This is one of the most complex python keyloger ever. I can do the same with aprox 20 lines of code without any extra software or anything.
So how’s it complex lmao
hey can u share it with me ??
post it?
Amazing content David I like that you bring us the best reputable personalities in their speciality field so we can learn from the best no need for fancy botcamps😄 ✅🖥️🙏
Haha I love this content David! I am doing the 30 day challenge of networkchuck right now the juniper ccna
Nice. How is the Juniper cert program?
@@tehczavier It's good so far I scored 100% on module 1, but to be fair I already have a network background:). It's great for people who are starting out
I started to smile after I saw the first thumbnail of this video. It was like Saurons Eye from the Lord of the Rings is watching you. And now it's like a Ringwraith.
Awesome video, thank you David 😊! Those PoCs are really good for us to build countermeasures to that kind of stuff. I got curious about python compilation actually, I've did some Python install before but never compiled it as a binary, will give it a try later.
what about how to stop remote keyloggers? what antivirus or app can detect them?
Hello Mr Bombal it seems that python is great langage to learn thx for u re constant effort God bless u
You're welcome Majid!
Hey David, thanks for sharing this! I don’t suppose you could maybe consider a pivot into voice ? Enough material with that to keep you occupied. Could maybe lead back into security related items (wire shark and RTP streams).
I know network engineers tend to grimace at voice, but steel yourself and think about it ;)
thank you very much for this content, i love how you explain so good and simple to knowledge!
Great content again. Reading the comments and your responses is very helpful in educating us, thanks!
You're welcome!
Ive tried to do it. Only one issue: when I run the compiled keylogger.exe it opens an empty command prompt, when I close it, it will close the keylogger as well. Idk how to make it so it opens stealthy as yours.
You need to set compiler flag "-mwindows" to remove the UI element of your application. Other ways include setting the main window handle hidden on init.
The problem with spying on your partner is sometimes you find out something you wish you didn't
yeah, that's a risk... But imao it worth it
0:00 so running it on my desktop would be fine?
Just the title!! Hahaa this is why I joined your army
What would happen if the target is typing in another layout or language
I am ok with python code but I have no idea about C code. When you say you used a C compiler to compile it does that mean you can compile python code in C compilers or did you have to use C code to make it work? Thanks for the video.
I have a Question! Why RUclips doesn't remove your hacking videos. Like your title is so catchy like wifi hacking etc. When i upload something, RUclips instant remove my content.
Do you have any recommendations on books in Computer Science? I want to learn Computer Science before JavaScript and Python.
it is not books but you can easily find resources on harvard CS50 and Freedcodecamp channel.
@@hartatociptajaya Thank you, I know some of the Free courses require a text book. Have to look into this one, because a couple people recommend this course.
You’re probably putting the horse before the cart if you do that… if you want a bit of an overview on some computer science, there’s a vid called ‘the art of code’ on RUclips.
Learning a simple language like python is much easier than learning computer science. Walk before you run!
@@catatafish22 Wouldn't it be the other way around? I want to learn the basics of computer science in order to have the fundamentals and when I go to learn a language I'll know how the computer functions, instead of just following examples that I have no idea why I'm doing what I'm doing.
Hello, what program do you use to record the windows desktop?
What bugs me is that the program doesn't even need administrator permission like those KMS Trojans.
Yeah, sure, you can do that, Windows doesn't block it but what it does block is my compiled production-ready program without any single malware in it for absolutely no reason...
I wrote keylogger to spy on my wife also. Found out she was communicating with my best friend. Now he lives in my house.
Great video man. Love the server
I'm new. What does he mean when he says we? Is there a team who worked on this?
Are the sample softs there when you open the software or do you have to download them from sowhere
Bad Mr Bombal Bad, keep the videos coming thank you learned alot!!
Glad you learned something David
The question is: how is this prevented?
I like to see the responses for both; Enterprise level and single host.
With custom (targeted) stuff like this, honestly you don’t. Only chance is before it’s executed.
Don’t open applications from untrusted sources
HIPS , Allow list with hashes comes to mind. Would these be good options?
Windows would block the execution and you'd have to allow it first. It's not that easy anymore since Win10.
So recompiling PyInstaller bypasses Defender, but wouldn't SmartScreen block the EXE as it is unknown (if it was real malware and actually was downloaded from the Internet by "your victim")?
Nice video, if i was do it this i would use sockets for real time communication and a common port such as 443 + inject a binary blob into memory for a listener to setup a shell, that the program can load using a pointer. easy web c&c.
What do you recommend for someone who has remote keylogger (victim) on their computer and wants to remove it? Many thanks
Thanks for the nice scripting..
but i am curious.. Did you find some concerned keystrokes on you'r wife's computer???
David, you said you were going to show us how to capture a handshake with Kali Linux installed on our android phones.
you cant. android dosnt surport monator mode also you need to send a deauth packet to the target to catch the handshake. and the handshake uses encryption. use a laptop and a 64bit version of kali
Amazing as always ❤
Thank you for this informative and educational video!
Awesome video David !
Thank you Jonny!
Awesome video David, but, how can we prevent our machines from these tools?
Spyware are shown in procexplorer? like sketchy process running. Or they are just not visible?
With a security key for sign in the keylogger won't be able to fetch anything. The threat would be a cookie session stealer malware, but that would have to bypass the virus detection which is not likely.
Make a video to show us how to create own server to save the data without Linode, please??
Thank you David for the fantastic videos!!
just run the javascript code on your machine and forward the ports from your router
set up a raspberry pi running ubuntu or whatever locally.
@@lewisheath364 okay, thanks
@@Foiliagegaming okay, thanks
thanks for the awesome content David
I need an example file of someone who wrote a longer text (a story or a masters thesis) - is there any such public repository?
We dont deserve you David. Thank you so much!
Thank you Richie!
Genuinely interested in what this community has to say, now that everyone has seen the source code and how it functions, what are some methods anyone here would use, to defend against it?
Probably only way would be not to open applications from untrusted sources.
@@wingit7335 what’s the best way??
@@catatafish22 Problem is there are no trusted sources.
@@catatafish22 that is the best way lmao, the best way not too get hacked is dont click on anything that can be seen as sketchy. or if you truly want safety, dont be on the internet like ever
@@verbon47 lol i know
Hi David, just wondering if there's a way to encrypt the keylogged traffic / passwords as I'm sending them to my linode. Maybe I want to test this with my own passwords but I don't want the connection to be readable by eavesdroppers.
8:45 that makes no sense, unless msft compiler adds something to the code... but i highly doubt that. I see no reason why you would have to re-compile py-installer....
It is useless but it seems it helps tricking windows crappy defender :))
@@cezartorescu But does it mean msft signs somehow binaries with their compiler?
--- edit
well it might also use different sys calls in the generated bin thus it's doing 'unexpected' by defender stuf and does not match any patters?
@@MrSandshadow has to be something like that. People should never rely on ms Defender which is an absolute nuissance :))
Try it without doing this. And try it when doing this and see the difference. We would not have done the extra step unless it was necessary.
Windows Defender can detect it now,
You can still bypass the waf of your PC. Try other things, change ports, make some changes to the script, it will work.
Can this be done within windows and to keylog another windows machine? I don't really want to spin up a entire Linux vm just for logging.
Will EDR not detect this kind of activity? since EDR is based on anamolies I'm pretty sure it will catch as suspicious no?
Hey, I'm new here and building this project for my own working but I need help the files that he mentioned and the steps are updated and now I'm stuck can anyone here help me out?
keep getting "This process is not trusted! Input event monitoring will not be possible until it is added to accessibility clients." any ideas?
Thanks for this. Ill fire up a demo for our monthly meeting.
Hopefully they learn from this video 😀
this script is getting detected in my computer(windows 11) and automatically being deleted in vs code after saving showing the warning that this file contains virus
LOL. Never mind. I answered my own question after pasting the text ie " Using the PyPI installation is recommended on Windows..." instead. Looking forward to testing this on my unused laptop on a separate router and separate subnet in my home.
---[ignore below - dufus me :) ]---
Bummer. Johnny-Come-Lately here... nuitka says: "The MSI installers are discontinued as Python has deprecated their support for them, as well as Windows 10 making it harder to users to install them. Using the PyPI installation is recommended on Windows." Any other options/suggestions?? Thx for this proof of concept.
Thank you for your continued commitment to education.
Thank you Desmond. You're welcome!
sir why dont you create a structured course on various language which is in demad in copporate sector....beleive me your channel will boom
Will this program run on nay windows version or it is specified only for windows 11 ?
I did the same thing and uploaded it to my github page
It send keystrokes to my email using SMTP library
Very cool
Someone said this virus is undetectable ! So funny maybe they are recently using windows 7 !
Can we mirroring site using cors method with python? In php we can use php get_content. How about python ?
CORS is Cross-Origin Resource Sharing. It is meant to restrict/control the access of resources. It is not to load/copy any data/content. CORS is not Python specific.
Thank you for demonstrating this.
Hello 👋
Thank for this video
Is it possible to do it in local network with private adress ?
As long as its routable
Ok thank
what if we run this file as a script on the AD .... and it will automatically run right? fun but scarry ...
How to prevent Android mobile getting attacked by spy ware.
How to know if the mobile is comprised by spyware
Great Content! I am a big fan. I did all of this and windows defender did not detected it but when i sent it to my friend to check it out by uploading it to google drive. When he downloaded it windows defender picked it up. Is there something i can do to avoid this?
Can this keylogger program be put in non executable files like PDF files, pictures, videos etc?
How can i send the keylogging data to my own server. Do i just open a port on my server like 8080 shown in the scipt and add my server ip in the scipt too?
Great video...thanks David.
Thank you Lance!
Should we not clear the global variable text after a successful send? Otherwise with time its size will be huge.
Yes that would be the ideal. Instead of writing to a text file also writing to a database. It’s a simple program just too show people it can be done. Definitely could be improved in a lot of ways.
wouldn't microsoft smartscreen automatically block this program since it's an extremely rare binary file that nobody has used before, you'd have bypass the block to get this running
Obviously not. :D ...So this OS is around since the late 80s and despite all their affords and software that shall save its users from harm they still can't detect a simple stupid keylogger. That is all one needs to know as far as the quality of MS products goes. Kind of amazing! :D
Yes it would block it and you'd have to manually allow it if you use Win10 or 11.
whoop!
Thanks David
Heya David. Nice video, as usual :)
I have a small question though. Why is windows Defender not picking up the exe file ?
It usually picks up python scripts quite easily and the library you did use, is using winapi and that is not even trying to evade detection.
Could you explain, please ? :)
He couldn’t explain the specifics due to legal reasons (cos then he’d literally be telling us how to install malicious scripts on someone’s computer in a yt vid)… but from what I gathered, he was able to bypass windows defender because the program was made using a C+ compiler. C+ is native to windows, so windows defender does not recognise it as being malicious… a python installer is embedded in the program, along with a keylogger written in python. A sneaky and very simple way of beating the firewall. You’ll be able to see how it’s done if you look at the code in the program he built.
@@catatafish22 I did look at the code :)
That's why I came to ask the question here. I was wondering if it was the kinda double compiling he was talking about but, really, I don't get why WD wouldn't catch that exe :)
Did you try it ? Because my script did sometimes get caught by Defender... Not everytime though. So I don't get it, to be honest.
@@NoobosaurusR3x I haven't tried it... From reading the comments there's a lot of ways the code could be improved on cos David's program was just a simple one for proof of concept... a more foolproof program would require some obfuscation
@@catatafish22 Thanks for your input. I hope David could just jump in 2 minutes and give his opinion about Defender and the fact it's not picking up the exe (maybe the double compile ?)
As I mentioned in the video we compiled pyinstaller with the Microsoft c/c+ compiler and then compiled the python code with the new pyinstaller compiler. Hope that helps. This is a proof of concept and may not work every time.
Lol I ruined my dads $2000 computer when I was 12 by downloading a virus on purpose and executing it.
Same with me but I deleted sys32 on our family pc for shits and giggles 😂
I started making soft recently, I was wondering if you wanna do any features.
That Windows is still this.... bad in this regard. On macOS you cannot intercept non-modified keys without being granted the permission to be an accessibility application.
Hi David, just some feedback - I've tried replicating everything you did and ran into some problems. When I compile the python script into an executable file using PyInstaller, Windows Virus & Threat protection catches it immediately.
I suppose it's because the video is 1 year old
turn off real time protection
Is it possible to hide this python file into another file like we do it with steganography ? Like if I run a python script that has in it another python file, both of them will run ? How is it possible for us to keep this invisible to the victim during the delivery ? 🤔 i don’t see a real technique for the transmission of the keylogger
Hey, I'm new here and building this project for my own working but I need help the files that he mentioned and the steps are updated and now I'm stuck can anyone here help me out?
if you want you can also create a python scripting course on youtube
set up a small local server that is running on cellular network and have it set up on the local network then forward the traffic from there.
Hi, David. What would you recommend for scanning pdf's and images for rats and loggers? These day's many of us download quite a number of pdf's for education and images for our own curating.
Comments like this from , text me "@ the official blah blah blah" seem like a game best played later. ; - )
Hi, imagine someone hacked the laptop earlier, then can I know whether the laptop is hacked or not, by using task manager, later ? And are Apple laptops safer than windows laptops? Thanks
Great video sir :)
Thank you Aniket!
why don't do it with a native language like C or C++ ? it would have a much smaller fingerprint .... and a single installable executable .
It's OK; my family runs any software we download from the internet from our PC, but never our laptops, haha.
in other words this can also bypass a separate firewall? wow this is crazy stuff.
may add -y to the install script in the install lines (and merge the lines)
Reminds me of some of my earliest experiments in writing my own penetration tools. The logger I wrote worked poorly and only locally on my own computer. Hilariously bad but still somewhat functional. The more fun experiments were controlling pointers remotely. Good times.
How can i reach you ?
@@tijad1 hands
22.08.2022: Windows 10 already prevents the download because the keylogger is detected.
But if they Didn’t have Python installed on their Computer, is this still working? I don’t think so..
convert the python script to a executable file
More videos like this but easy one's please for beginners.
UAC doesn't popup at all when you execute?
Dave could you create a GNS3 topology for key logging?