-=[ Offline Keylogger Help]=-
Ok, there are a few things about the offline keylogger that you should know:
1. It's not actually "offline" keylogger. I called it that because it's very difficult to make a real-time keylogger when you have only a terminal as a client. So this logger logs everything, whether the victim is online or not.<BS> = backspace key
<ENTER> = enter key
<ESC> = escape key
<TAB> = tab key
3. When configuring the
logger, you should specify a weird name for the log file; for example "win32acfg.dll"
or something like that (you can leave it without extension if you want), just don't use "keylogger.log",
use "cyberspy-keylog.txt" instead ;)
4. The windows' title appear in the log in a new line and between "<<[" and " ]>>" strings, like <<[ fearless - Microsoft Internet Explorer ]>>.
If you're using puTTY and enabled the "Use cyan as the windows' caption color" option in the Edit Server, the windows' title appear in cyan, like <<[fearless - Microsoft Internet Explorer]>>. This is very useful if you plan to retrieve the log file with puTTY, or a terminal that accepts colors.
If you look into the log file with a text editor like notepad and enabled the "Use cyan as the windows' caption color" option, the caption will contain some chars at the beginning and end like [36m<<[fearless - Microsoft Internet Explorer]>> [37m. These funny chars are ANSI color codes for cyan ([36m), and white ([37m).
It's no mistake to leave this option always on, because you'll probably use the a terminal to get the log, so there's going to be no problem. Note that in all (?) terminals, even if you left this option on, and the terminal doesn't recognize colors, the captions will not contain those chars. So this little inconvenient only appears when using a text editor to read the log.
5. The logger uses very little resources, because it uses a C keyboard hook dll (included in the server).<EOF>