diff options
author | Guillermo Ramos | 2014-06-29 23:26:12 +0200 |
---|---|---|
committer | Guillermo Ramos | 2014-06-29 23:26:21 +0200 |
commit | 993c3c4a8836b7adf94010fa4e60eb313e4cd074 (patch) | |
tree | 6099d94428c2461409d5bbc5a4bd49d1915faf2a /README | |
parent | 3b419d61d91adfecfc55d641a638276c651f97bb (diff) | |
download | evspy-993c3c4a8836b7adf94010fa4e60eb313e4cd074.tar.gz |
README -> README.md
Diffstat (limited to 'README')
-rw-r--r-- | README | 54 |
1 files changed, 0 insertions, 54 deletions
@@ -1,54 +0,0 @@ -Evspy is a general purpose kernel-mode keylogger in (early) development stage. - -The file from where you can read the registered keystrokes is /proc/driver/evspy -by default. Only root can read it. Beware users: evspy can troll you. - -Don't be evil. - - -** COMPILE ** - $ make - - -** LOAD ** - # insmod evspy.ko - - -** UNLOAD ** - # rmmod evspy - - -** IS IT ALREADY LOADED? ** - $ modinfo evspy - - -** PERSISTENCE ** - -* With dkms: - # make [install, uninstall] - -* Manually: - Copy it into your kernel module dir: - # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko - - and update module database: - # depmod -a - (in some distros you could also need to add it to some rc/config file) - - Once it has been installed, you can load it when you want with - # modprobe evspy - - -** OTHER ** - -A patch is supplied (evspy.patch) to be able to compile a kernel with evspy -included. If KERN is the directory where your kernel is located, just copy the -patch there (KERN/) and copy all the evspy files (*.c, *.h, maps, kmap) to -KERN/drivers/input/. Then, cd to KERN and apply the patch: - $ patch -p1 < evspy.patch - -Then you should be able to configure the kernel to include evspy just like -any other module: - $ make menuconfig - Device Drivers --> Input device support --> Event based keylogger - $ ... |