From cfaf177434cf38a59f893eda69c64ff458405230 Mon Sep 17 00:00:00 2001 From: Guillermo Ramos Date: Fri, 9 Sep 2011 16:10:56 +0200 Subject: AƱadidos README y TODO, comentarios varios --- evspy/README | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 evspy/README (limited to 'evspy/README') diff --git a/evspy/README b/evspy/README new file mode 100644 index 0000000..cbc8d2f --- /dev/null +++ b/evspy/README @@ -0,0 +1,47 @@ +** INTRO ** + +Evspy is a general purpose kernel-mode keylogger in (early) development stage. + +The file from where you can read the registered keystrokes is /proc/driver/evspy +by default. Only root can read it. Beware users: evspy can troll you. + +Don't be evil. + + +** COMPILE ** + + $ make + + +** LOAD ** + + # insmod evspy.ko + + +** UNLOAD ** + + # rmmod evspy + + +** IS IT ALREADY LOADED? ** + + $ lsmod | grep evspy + + +** PERSISTENCE ** + +If you want evspy to be loaded every time system boots, copy it into your +kernel module dir: + + # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko + +and update module database: + + # depmod -a + +(In some distros it could also be necessary to add it to some rc/config file) + +Once it has been installed, you can load it when you want with + + # modprobe evspy + -- cgit v1.2.3