seb/keylogger-detector
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update dev_journal.md

Browse Source
This commit is contained in:
Sebastian Lenzlinger 2023-06-07 00:57:03 +02:00 committed by GitHub
parent e942206b12
commit cde1ccea8a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
doc/dev_journal.md
View File

@ -128,3 +128,38 @@ Configuration is now done with json to keep it all central.
Test with json configuration works.
Killing a process still doesn't work:
''' TypeError: 'str' object cannot be interpreted as integer '''
## Wednesday, 7. June 2023
### Sebastian
This is the latest output aftert a test run where actually 3 processes has keyloggers runnig.
'''
[kldetect@fedora src]$ sudo ./keylogger_detector.py
[sudo] password for kldetect:
/usr/sbin/fuser
/usr/bin/which
[+] No suspicious processes found
[kldetect@fedora src]$ sudo ./keylogger_detector.py
/usr/sbin/fuser
/usr/bin/which
[+] No suspicious processes found
[kldetect@fedora src]$ cat config.
cat: config.: No such file or directory
[kldetect@fedora src]$ cat config.json
{"white_listed_programs": ["systemd", "gnome-shell"], "auto_kill_programs": ["skeylogger", "skeylogger", "skeylogger", "skeylogger", "skeylogger"], "kbd_names": ["kbd"]}[kldetect@fedora src]$ sudo ./keylogger_detector.py -v
[Verbose] Input options set
[Verbose] Root access checked
/usr/sbin/fuser
/usr/bin/which
[Verbose] Packages checked
[Verbose] Config file loaded
[Verbose] Config file parsed
[Verbose] Keyboard device files found: []
[Verbose] Process IDs using keyboard device files: []
[Verbose] Process names using keyboard device files: []
[Verbose] Suspicious processes found: []
[Verbose] Suspicious processes not killed: []
[Verbose] Suspicious processes killed: []
[+] No suspicious processes found
'''
This is after extensivly refactoring because I was starting to loose oversight over the code. So I split it up into utils, config and keylogger_detector.
#### TODO:
1. Ivestigate and bug fix