From 993c3c4a8836b7adf94010fa4e60eb313e4cd074 Mon Sep 17 00:00:00 2001 From: Guillermo Ramos Date: Sun, 29 Jun 2014 23:26:12 +0200 Subject: README -> README.md --- README | 54 ------------------------------------------------------ 1 file changed, 54 deletions(-) delete mode 100644 README (limited to 'README') diff --git a/README b/README deleted file mode 100644 index 6211448..0000000 --- a/README +++ /dev/null @@ -1,54 +0,0 @@ -Evspy is a general purpose kernel-mode keylogger in (early) development stage. - -The file from where you can read the registered keystrokes is /proc/driver/evspy -by default. Only root can read it. Beware users: evspy can troll you. - -Don't be evil. - - -** COMPILE ** - $ make - - -** LOAD ** - # insmod evspy.ko - - -** UNLOAD ** - # rmmod evspy - - -** IS IT ALREADY LOADED? ** - $ modinfo evspy - - -** PERSISTENCE ** - -* With dkms: - # make [install, uninstall] - -* Manually: - Copy it into your kernel module dir: - # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko - - and update module database: - # depmod -a - (in some distros you could also need to add it to some rc/config file) - - Once it has been installed, you can load it when you want with - # modprobe evspy - - -** OTHER ** - -A patch is supplied (evspy.patch) to be able to compile a kernel with evspy -included. If KERN is the directory where your kernel is located, just copy the -patch there (KERN/) and copy all the evspy files (*.c, *.h, maps, kmap) to -KERN/drivers/input/. Then, cd to KERN and apply the patch: - $ patch -p1 < evspy.patch - -Then you should be able to configure the kernel to include evspy just like -any other module: - $ make menuconfig - Device Drivers --> Input device support --> Event based keylogger - $ ... -- cgit v1.2.3