Easy Software Keylogger Using Shadow Keylogger

 by jf78
flashdrive.jpg
If you have been on the internet and not living under a rock the last decade you should know what a keylogger is. It is a small application that runs in the background of a computer invisibly and records all keystrokes made on a computer. Some are as advanced enough to capture screenshots, IM logs, video, audio, webcam, etc. but these usually cost alot of money upwards of $100! In this instructable i will explain how to put a freeware keylogger on a flash drive and easily record the keystrokes of the victims computer.

NOTE: I am not responsible for what you do with this information. This is intended for learning purposes and use on YOUR OWN computer.
 
Remove these adsRemove these ads by Signing Up

Step 1: You will need...

hand-tools-list-important.jpg
This instructable is simple and very straight forward, and assuming you already have a flash drive, free as well.

What you will need...

1.) A flash drive. I would recommend at least a one gigabyte.

2.) Shadow Keylogger (freeware) available for download from cnet.com  here

3.) A victim's computer
leonelcd says: Apr 8, 2013. 10:00 PM
Hi guys,

If you could help with my problem, I really appreciated it!

My name is Leonel and I am a master finance student at USP, in Brazil. Everyday I must go to the university just for use thomson one database. I tried use Shadow Keylogger software and its great, but I have problem with the password. What appears is:


Program Manager (5/4/2013 18:49:21):
e

Thomson One - Windows Internet Explorer (5/4/2013 18:51:13):
biblioteca.ref.sp2fgv.bt[Left Arrow][delete]r

(user *biblioteca.ref.sp@fgv.br* is correct!)

bkabto[delete][delete][delete][delete][Right Arrow][Right Arrow].refbkabto[Left Arrow][delete]

(password isn't refbkabto - that's my problem!)


Other day appears eebbkabto. In other words, kabto always appears. This is what turns on a lamp in my head! Is clear to me that the password is, somehow, encrypted. But how? The weblink is:

https://www.thomsonone.com/DirectoryServices/2006-04-01/Web.Public/Login.aspx?brandname=www.thomsonone.com&version=3.6.6.18338&protocol=0


If yes, what type of encrypted is used? I have a source of the page, after loging (attached). I don't know how it works, but it look like a Javascript. Is the correct? In this case, what can I do?



Please, help me!!!



Very thanks!

Leonel Carlos
tigr87 says: Feb 5, 2012. 4:05 PM
o and when i get the download from cnet i get the file (sk) it looks like a pile of books.do i just put the shadow keylogger folder into the systemfiles folder of the flash drive?
jf78 (author) in reply to tigr87Feb 5, 2012. 5:19 PM
You need to unpack it from the archive
tigr87 in reply to jf78Feb 5, 2012. 6:23 PM
i got it working. but its goind to be a pain to put on someones computer
jf78 (author) in reply to tigr87Feb 5, 2012. 7:18 PM
That's not my problem. As stated this isn't meant for use on anyone's computer but your own.
tigr87 in reply to jf78Feb 5, 2012. 8:27 PM
I didnt say it was " your problem". .......i was makeing a statement.and what are you talking about the third thing on the list is"a victims computer"
jf78 (author) in reply to tigr87Feb 6, 2012. 5:25 AM
A victims computer can insinuate any computer this is used on. Ie, your own.
tigr87 says: Feb 5, 2012. 6:21 PM
got it.but it doesnt autorun.plus its always asks for the password 3 times
jf78 (author) says: Feb 5, 2012. 7:08 AM
That's because a keylogger is a virus... Even if its you using it AntiVirus will pick it up like it would anyother keylogger.
tigr87 in reply to jf78Feb 5, 2012. 3:56 PM
k thanks.will it do that when i put it in someone else's computer.......not that i would ever do that haha
jf78 (author) in reply to tigr87Feb 5, 2012. 4:19 PM
More than likely. Every AntiVirus detects them differently. The only way that a AntiVirus wouldn't detect it is if you were to crypt and bind it with a FUD program
tigr87 says: Feb 4, 2012. 10:13 PM
avg says this is a virus
lostinadream says: Oct 9, 2011. 9:10 AM
I don't get the password part. How is the password set up in the first place?
MANinYOURhouse says: Jul 17, 2011. 10:36 PM
how do I turn it off?
jf78 (author) in reply to MANinYOURhouseJul 18, 2011. 8:07 AM
After pressing your secret key combo to access the keylogger screen there should be an option similar to close or stop. If not simply restart the computer, as it does not attach to the registry it will not boot with the computer and all will be fine. sorry i can not be of more help nbut i do not currently have the keylogger on a flashdrive.
Taha Shaheen says: Dec 14, 2010. 9:37 AM
It didn't work
ap0logna says: Aug 26, 2010. 9:57 AM
can someone give me info, i think my laptop has keylogger installed, what must i do?
jf78 (author) in reply to ap0lognaAug 28, 2010. 11:56 AM
The easiest thing to do is run antivirus scans and make sure your antivirus definitions are up-to-date. If those come out clean then check your process list using the task manager (ctrl+alt+del) and look for any suspicious processes. This is not a sure fire way of finding one but it helps. If you see a process you are unfamiliar with just google the process name and usually you will find numerous pages explaining what the process is and if it is harmful and if so how to disable or remove it.
35Timmy says: Jul 25, 2010. 9:20 AM
i like it & i love it
NicOmbra says: Jul 10, 2010. 5:46 PM
Cool!
xturnlgod says: Jun 30, 2010. 10:53 AM
software keylogger, not hardware. hardware key loggers are physical USB and PS2 dongles that log keys into an internal memory storage (windows, linux, mac: no matter. it works on the signals sent from the keyboard). then, you can recover the stored keystrokes from the dongle with a trigger password. No antivirus can see or detect these. nice job on the tutorial though :)
jf78 (author) in reply to xturnlgodJun 30, 2010. 11:04 AM
I understand what you are saying but i tried to combine a powerful software logger in a portable easy to activate hardware setting and i thought it fit best in the hardware category.
Cracknel in reply to jf78Jun 30, 2010. 12:57 PM
yeah, sorry to say this but your instructable is about a software keylogger :)
jf78 (author) in reply to CracknelJun 30, 2010. 1:42 PM
Okay okay calm down people I will change the name I just thought hardware was closer than software
smalltinyperson says: Jun 30, 2010. 9:41 AM
Thanks
Archive555 says: Jun 30, 2010. 1:09 AM
Aside from the fact that almost any computer these days has anti-virus that, if "Shadow Keylogger" is not directly in their databases, will pick up on the keyloggers heuristics and delete/quarantine the drive immediately, this could probably be useful.
jf78 (author) in reply to Archive555Jun 30, 2010. 8:12 AM
That's why I specifically said to shut off the antivirus temporarly or add an exception. If your actually using it on your own computer like I intended with This instructable then you should have no problem disabling it. Any problems you have putting it on someone roses computer is your own problem, and if I may add, illegal.
bowmaster says: Jun 29, 2010. 9:10 PM
Nice.
jf78 (author) in reply to bowmasterJun 29, 2010. 11:23 PM
Thank you.
Pro

Get More Out of Instructables

Already have an Account?

close

PDF Downloads
As a Pro member, you will gain access to download any Instructable in the PDF format. You also have the ability to customize your PDF download.

Upgrade to Pro today!