{"id":26129770,"url":"https://github.com/lamcw/keylog","last_synced_at":"2026-04-18T08:32:32.772Z","repository":{"id":83225087,"uuid":"197139649","full_name":"lamcw/keylog","owner":"lamcw","description":"Stealthy Linux keylogger","archived":false,"fork":false,"pushed_at":"2019-07-30T01:28:13.000Z","size":21,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-10-06T18:05:04.697Z","etag":null,"topics":["keylogger","loadable-kernel-modules","rootkit"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lamcw.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-07-16T07:05:52.000Z","updated_at":"2019-12-02T04:57:32.000Z","dependencies_parsed_at":"2023-06-29T00:16:23.588Z","dependency_job_id":null,"html_url":"https://github.com/lamcw/keylog","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/lamcw/keylog","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lamcw%2Fkeylog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lamcw%2Fkeylog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lamcw%2Fkeylog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lamcw%2Fkeylog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lamcw","download_url":"https://codeload.github.com/lamcw/keylog/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lamcw%2Fkeylog/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31962156,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-18T00:39:45.007Z","status":"online","status_checked_at":"2026-04-18T02:00:07.018Z","response_time":103,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["keylogger","loadable-kernel-modules","rootkit"],"created_at":"2025-03-10T19:58:57.060Z","updated_at":"2026-04-18T08:32:32.766Z","avatar_url":"https://github.com/lamcw.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Keylog\n\nA stealthy Linux kernel-based keylogger that hides itself from `lsmod` and\n`/proc/modules`.\n\n## Usage\nThis rootkit is in the form of a loadable kernel module. It receives keyboard\nevents from the kernel and outputs to a character device. Install using\n`insmod`:\n\n```console\n$ insmod keylog\n$ dmesg | tail -n1\n[  498.484687] keylog: Registered device major number 249\n$ mknod chrdev0 c 249 0  # create a character device, 249 is the major no.\n$ cat chrdev0\ndmesg | tail -n1\nmknod chrdev0 c 249 0\ncat chrdev0\n```\n\n## Build\nMake sure you have `linux-headers` installed.\n\n```console\n$ make\n```\n\nTo hide the module from kernel, compile with `-DHIDE_MODULE`. You can also\nchange the buffer size `BUFLEN` that is used to store key events. By default it\nis 1024 bytes.\n\n```console\n$ KCPPFLAGS=\"-DHIDE_MODULE -DBUFLEN=2048\" make\n```\n\n## Development\nA Vagrant box with essential tools/packages is provided. Simply run the\nfollowing commands to build the box:\n\n```console\n$ vagrant up\n$ vagrant ssh\nvagrant@stretch:~$ cd /vagrant\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flamcw%2Fkeylog","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flamcw%2Fkeylog","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flamcw%2Fkeylog/lists"}