https://github.com/objective-see/sniffmk

sniff mouse and keyboard events
https://github.com/objective-see/sniffmk

Last synced: 3 months ago
JSON representation

sniff mouse and keyboard events

• Host: GitHub
• URL: https://github.com/objective-see/sniffmk
• Owner: objective-see
• License: gpl-3.0
• Created: 2017-08-18T21:40:19.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2021-02-01T06:53:55.000Z (almost 4 years ago)
• Last Synced: 2024-07-31T05:26:14.107Z (6 months ago)
• Language: Objective-C
• Size: 26.4 KB
• Stars: 213
• Watchers: 23
• Forks: 49
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: License.md

Awesome Lists containing this project

• awesome-network-stuff - **135**星

README

        
# sniffMK

`sniffMK` is a simple utility designed to sniff mouse and keyboard events on macOS. It is based on code from amit singh's website; (http://osxbook.com)

It was designed to facilitate malware analysis (specifically OSX/FruitFly which can simulate both mouse and keyboard events - see BlackHat/DefCon [slides](https://speakerdeck.com/patrickwardle/fruitfly-via-a-custom-c-and-c-server?slide=18) for details). 

Run `sniffMK`, as root, to start sniffing events:

```

# ./sniffMK

mouse/keyboard sniffer

based on code from amit singh (http://osxbook.com)

event: left mouse down

x: 821.285156

y: 727.726562

event: left mouse up

x: 821.285156

y: 727.726562

event: key down

key modifiers: shift 

keycode: 0x4/h

event: key up

keycode: 0x4/h

event: key down

keycode: 0x22/i

event: key up

keycode: 0x22/i

....

event: key down

key modifiers: control 

keycode: 0x8/c

```

To only capture mouse events, execute `sniffMK` with the `-mouse` commandline argument.


Similarly, execute it with the `-keyboard` commandline argument to only capture keyboard events.