# aydinnyunus/keylogger

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/aydinnyunus-keylogger).**

2,690 stars · 546 forks · Python · apache-2.0

## Links

- GitHub: https://github.com/aydinnyunus/Keylogger
- awesome-repositories: https://awesome-repositories.com/repository/aydinnyunus-keylogger.md

## Topics

`cyber-security` `cybersecurity` `hacking` `hacking-code` `hacking-tool` `hacking-tools` `hackingtools` `keylog` `keyloger` `keylogger` `keylogger-analysis` `keylogger-screenshot` `keylogging` `keylogs` `offensive-scripts` `offensive-security` `python` `python-hacking` `python-tools` `python3`

## Description

This project is a surveillance tool and malware payload designed for user activity monitoring. It functions as a keylogger and activity monitor that captures keyboard input, mouse movements, and microphone audio.

The software utilizes the SMTP protocol for data exfiltration and command-and-control, transmitting captured logs and media files to a remote email address. It includes anti-forensic capabilities, specifically a self-deletion mechanism that triggers when the software detects that its code is being inspected.

Broad capabilities include periodic screenshot capture and the recording of ambient sound. The system uses in-memory event buffering to batch process captured data and minimize disk write operations.

## Tags

### System Administration & Monitoring

- [User Activity Monitoring](https://awesome-repositories.com/f/system-administration-monitoring/activity-monitors/automated-activity-loggers/user-activity-monitoring.md) — Records keyboard input, mouse movements, and screen captures to monitor comprehensive user activity on a computer.
- [Mouse Activity Tracking](https://awesome-repositories.com/f/system-administration-monitoring/activity-monitors/user-input-monitors/mouse-activity-tracking.md) — Implements continuous recording of mouse movements and clicks to analyze user behavior. ([source](https://github.com/aydinnyunus/Keylogger#readme))
- [Endpoint Command and Control](https://awesome-repositories.com/f/system-administration-monitoring/telemetry-and-monitoring-agents/endpoint-command-and-control.md) — Uses SMTP as a command-and-control medium to manage the payload and exfiltrate captured data.

### Part of an Awesome List

- [Data Exfiltration](https://awesome-repositories.com/f/awesome-lists/security/data-exfiltration.md) — Exfiltrates collected keystrokes, audio, and screenshots to a remote email address using SMTP. ([source](https://github.com/aydinnyunus/Keylogger#readme))
- [Email-Based Exfiltrators](https://awesome-repositories.com/f/awesome-lists/security/data-exfiltration/email-based-exfiltrators.md) — Implements a system for transmitting captured logs and media files to an email server at scheduled intervals.

### Graphics & Multimedia

- [Audio Recording](https://awesome-repositories.com/f/graphics-multimedia/audio-music/audio-recording.md) — Captures ambient sound and spoken conversations by recording audio from the system microphone.
- [Camera and Microphone Recorders](https://awesome-repositories.com/f/graphics-multimedia/streaming-distribution/streaming-broadcasting/live-audio-recording-and-broadcasting/camera-and-microphone-recorders.md) — Invokes native system APIs to capture ambient audio from the microphone and visual snapshots of the display.

### Operating Systems & Systems Programming

- [OS-Level Input Hooks](https://awesome-repositories.com/f/operating-systems-systems-programming/os-level-input-hooks.md) — Uses low-level OS hooks to intercept keyboard, mouse, and microphone events without requiring elevated privileges.
- [Self-Deleting Executables](https://awesome-repositories.com/f/operating-systems-systems-programming/self-deleting-executables.md) — Provides a payload designed to automatically remove its executable from the disk when inspection is detected.
- [Inspection Detection Triggers](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/file-system-management/file-systems/file-change-detection/file-watch-resource-triggers/file-detection-triggers/inspection-detection-triggers.md) — Monitors file access events to trigger self-deletion when the software's code is being inspected.

### Security & Cryptography

- [Data Exfiltration Tools](https://awesome-repositories.com/f/security-cryptography/data-exfiltration-tools.md) — Transmits captured surveillance logs and media files to a remote server via the SMTP protocol.
- [Keystroke Loggers](https://awesome-repositories.com/f/security-cryptography/keystroke-loggers.md) — Records every key pressed on the target machine for the purpose of surveillance and data theft. ([source](https://github.com/aydinnyunus/Keylogger#readme))
- [SMTP Keyloggers](https://awesome-repositories.com/f/security-cryptography/smtp-keyloggers.md) — Captures keyboard input and exfiltrates the data to a remote address via the SMTP protocol.
- [Forensic Artifact Removal](https://awesome-repositories.com/f/security-cryptography/forensic-artifact-removal.md) — Implements logic to remove the executable from the system when code inspection is detected to avoid forensic analysis.

### User Interface & Experience

- [Spyware Screen Capturers](https://awesome-repositories.com/f/user-interface-experience/screen-capture-tools/spyware-screen-capturers.md) — Provides stealthy, periodic screen image capture to monitor user activity without authorization. ([source](https://github.com/aydinnyunus/Keylogger#readme))