evspy - 源码 - 源码 - 免费下载

evspy

文件大小： unknow

源码售价： 5 个金币积分规则积分充值

资源说明：Linux module - event based keylogger

# Evspy

Evspy is a general purpose kernel-mode keylogger in (early) development stage.

The file from where you can read the registered keystrokes is /proc/driver/evspy
by default. Only root can read it. Beware users: evspy can troll you.

Don't be evil.

## Compile
    $ make

## Load
    # insmod evspy.ko

## Unload
    # rmmod evspy

## Is it already loaded?
    $ modinfo evspy

## Persistence

* With dkms:

        # make [install, uninstall]

* Manually:
    Copy it into your kernel module dir:

        # cp evspy.ko /lib/modules/$(uname -r)/kernel/drivers/input/evspy.ko

    and update module database:

        # depmod -a
    (in some distros you could also need to add it to some rc/config file)

    Once it has been installed, you can load it when you want with

        # modprobe evspy

## OTHER

A patch is supplied (evspy.patch) to be able to compile a kernel with evspy
included. If KERN is the directory where your kernel is located, just copy the
patch there (KERN/) and copy all the evspy files (*.c, *.h, maps, kmap) to
KERN/drivers/input/. Then, cd to KERN and apply the patch:

    $ patch -p1 < evspy.patch

Then you should be able to configure the kernel to include evspy just like
any other module:

    $ make menuconfig
        Device Drivers --> Input device support --> Event based keylogger
    $ ...

部分文件列表（点击文件名可查看文件内容）

					
									本源码包内暂不包含可直接显示的源代码文件，请下载源码包。