[Artista]

Hey guys,

Decided to do my first hacking software. And I decide it will be a Keylogger.

But to create one, I need some answers.

1. Keylogger functionality.

I understand how Keylogger works in following way. Keylogger is a .dll file that executes itself when someone opens a file where keylogger is inside. In code itself, it is written that it should watch the users key entrances and store them in a text file (log file) and then it would be the best to send that log file back to you.

2. Questions

• How do you store a Keylogger inside a file? Wont the user notice a strange .dll file, while you are simply sending him a picture for example?
  
• How to tell your Keylogger WHERE to hide and stay hidden ?
  

These are my main 2 questions, others I have to try and solve by myself. If someone can help me out here, to repond whether my point #1 is correct and answer my question in point #2.

When I get answer to these, I'll ask more.

A

[h3r0]

I believe a keylogger itself has nothing to do with why type of file it is in (That's just the packing). A keylogger can be a passive script, a piece of hardware, or even a big software suite. What you're describing is more of the virus side of the keylogger.

What I would suggest is write an executable that functions as a keylogger, but it must be ran manually. Once you know how to get your keylogger actually logging and then you have a method of dropping off a payload (Connecting to a server, sending to pastebin, etc), try hiding it. First hide the CLI window, then disguise the process as best as you can, and finally figure out how to bind it to another piece of software (and then maybe learn to replicate it to keep it on the system)

[Artista]

@h3r0: Thanks for the tips, will do some more research. If I encounter difficulties, I'll return here.

A

[lady_godiva]

@Artista

I believe there is a similar post in the C++ section of the forum. If you don't know where to start try to take a look at it. Anyway i agree with @Hero

[Deque]

There are some things to get sorted out.
A keylogger is just a program that logs your keyboard input. Nothing more or less. The way it is deployed doesn't matter for a program to be called a keylogger.

As keyloggers are often used with malicious intent, they are often combined with trojan (disguise as useful program), virus (replication by infecting host files), or worm (spread via network) features. These are general malware concepts and I suggest you read "The Art of Computer Virus Research and Defense" by Szor (it is freely available on the net).
More resources are here: http://vxheavens.com/lib/pdf/

.dll file that executes itself when someone opens a file where keylogger is inside.

This is one kind of a virus file infection strategy. A DLL is a dynamic link library, which means it carries functions and resources that other programs may use.
What you describe can be a companion infection (placing as .dll with a commonly used dll-name in the same folder as the application will cause this .dll to be prefered when the application imports functions)
or an infected DLL (by injecting the virus' code in a DLL file)
or a DLL injection (forcing a running process to load the virus DLL)
or modifying the import table of an application to call the virus DLL.

Wont the user notice a strange .dll file, while you are simply sending him a picture for example?

How to spread the keylogger is another question. E.g. simple trojans are created using binders/joiners. You bind the keylogger with a harmless, but useful application and then somehow get users to download it (by saying you have this useful application for them). The binded file will execute both, the keylogger and the useful application. The victim won't notice anything as everything works as expected.
Sending a picture will usually not work. A picture is not run as executable unless you find an exploit for the image viewing program that the victim uses.

But take one step at a time as @h3r0 told you. These are just examples and you will find plenty by reading some books.

Stay clean and white.

Regards
Deque

[Artista]

How can you scan your computer to find Keylogger? Is there a way?

For example, us here (some of us are pretty new to hacking) are more alerted for viruses / keyloggers / malware .. yet as beginners we might still have opened some corrupt file. How can I now scan for keylogger ? Because AVs dont detect them ussualy.


A

[chmod]

How can you scan your computer to find Keylogger? Is there a way?

For example, us here (some of us are pretty new to hacking) are more alerted for viruses / keyloggers / malware .. yet as beginners we might still have opened some corrupt file. How can I now scan for keylogger ? Because AVs dont detect them ussualy.


A

Search the forum we have some pretty detailed methods to manually find and remove malware