ultral / linux-keylogger

System call interception in linux-kernel module (kernel 2.6.34.7-61.fc13.x86_64)

Home Page:http://www.goncharov.xyz/it/system-call-interception-in-linux-kernel-module.html

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

syscall-interception-x86_64

The module was created as a part of my master thesis in the 2010 year. The master thesis theme is Keylogging in Linux kernel. The main idea was to find out a way to intercept system calls for x64 arch Linux kernel, especially, for kernel 2.6.34.7-61.fc13.x86_64. You can read the article (EN) or Russian version about it.

On one hand, it should be enough to deal with the system call interception, but on the other hand, I don't sure that nothing has been changed since 2010. So use it as is. Also I created the demo video.

Credits

I used code from vlogger 1.0 in this work:

About

System call interception in linux-kernel module (kernel 2.6.34.7-61.fc13.x86_64)

http://www.goncharov.xyz/it/system-call-interception-in-linux-kernel-module.html

License:MIT License


Languages

Language:C 98.3%Language:Makefile 1.7%