126 Commits

Author SHA1 Message Date
SoulKindred
c0893c31e6
Add files via upload
Uploading funcall_trace scripts. Both scripts do essentially the same. Script 1 is simplified for the use with python. Script 2 gives more information, but is more difficult for use with python. The script 2 might be useful for further tracing.
2023-06-07 22:05:15 +02:00
Sebastian Lenzlinger
94cb159a49
Cleanup unused code.
Remove unused code from repo.
2023-06-07 21:00:09 +02:00
Sebastian Lenzlinger
2150441d48 Add Makefile entry that also gets rid of __pycache__ 2023-06-07 20:57:17 +02:00
SoulKindred
1d5fc7375c
Update dev_journal.md
added diary entry to stap-scripts
2023-06-07 20:40:13 +02:00
Sebastian Lenzlinger
63b92c967a Logic ajust 2023-06-07 20:33:15 +02:00
Sebastian Lenzlinger
7c9a6101a0 Condition logic ajustments 2023-06-07 20:27:06 +02:00
Sebastian Lenzlinger
6f56f0bd30 For VM, sorry 2023-06-07 20:24:33 +02:00
Sebastian Lenzlinger
0cdb0cd846 To get it in to VM. As are most commits. 2023-06-07 20:21:10 +02:00
Sebastian Lenzlinger
2b2546b70e Beauty fix 2023-06-07 20:19:12 +02:00
Sebastian Lenzlinger
2c9ba696c8 DEBUG 2023-06-07 20:15:31 +02:00
Sebastian Lenzlinger
9b3151452d DEBUG 2023-06-07 20:12:43 +02:00
Sebastian Lenzlinger
538c6368c5 FIX 2023-06-07 20:06:33 +02:00
Sebastian Lenzlinger
316ff1c90e Add new auto blacklist featue 2023-06-07 20:04:19 +02:00
Sebastian Lenzlinger
a4c5d94006
Update dev_journal.md
Fix ''' to ```
2023-06-07 19:45:43 +02:00
Sebastian Lenzlinger
d434029e56
Merge pull request #1 from sebaschi/userland
The userland programm core functionality is completed. 
keylogger-detector.py detects all processes reading from a keyboard file in /dev/input/eventX.
The keylogger asks the user if they would like to kill any process, and does so.
Many PIDs with the same programm are handled.
There is a whitelist and autokill list configurable(only partially from withing the running program) aswell as what names keyboards might have, like 'kbd'.
2023-06-07 19:44:33 +02:00
Sebastian Lenzlinger
a6099943a4
Update dev_journal.md 2023-06-07 19:39:43 +02:00
Sebastian Lenzlinger
c58196dad8 Accidentally converted to str. now convert to int. 2023-06-07 18:45:04 +02:00
Sebastian Lenzlinger
05d600da71 DEBUG pid in kill_process() arrive as string. so convert to int 2023-06-07 18:44:12 +02:00
Sebastian Lenzlinger
7af207253a DEBUG some variables where named id instead of pid 2023-06-07 18:39:15 +02:00
Sebastian Lenzlinger
f63c033c92 DEBUG 2023-06-07 18:36:40 +02:00
Sebastian Lenzlinger
5c55876878 DEBUG 2023-06-07 18:33:48 +02:00
Sebastian Lenzlinger
6e9f236c08 DEBUG 2023-06-07 18:28:23 +02:00
Sebastian Lenzlinger
cef0f5c7dc Add kill_process import statement to keylogger_detector.py 2023-06-07 18:25:59 +02:00
Sebastian Lenzlinger
1be0bf59e0 Some Fixes 2023-06-07 17:30:00 +02:00
Sebastian Lenzlinger
e475378dfa Fixes multiple Issues. 2023-06-07 16:57:07 +02:00
Sebastian Lenzlinger
b31e335dc5 Final commit before snoooooooooze 2023-06-07 02:00:47 +02:00
Sebastian Lenzlinger
befe4814cf DEBUG 2023-06-07 01:31:39 +02:00
Sebastian Lenzlinger
96ffca9097 Merge branch 'userland' of github.com:sebaschi/keylogger-detector into userland 2023-06-07 01:14:21 +02:00
Sebastian Lenzlinger
06787801a2 DEBUG 2023-06-07 01:14:10 +02:00
Sebastian Lenzlinger
cde1ccea8a
Update dev_journal.md 2023-06-07 00:57:03 +02:00
Sebastian Lenzlinger
e942206b12 Refactor userspace detector. 2023-06-07 00:51:07 +02:00
Sebastian Lenzlinger
dba2deb1e5 DEBUGing issue where only one pid per programm can be killed 2023-06-06 22:26:18 +02:00
Sebastian Lenzlinger
529f45dd82 DEBUG 2023-06-06 22:07:08 +02:00
Sebastian Lenzlinger
ebfeaf84ae Journal entry and trying to fix no-proc-kill-bug. 2023-06-06 22:03:58 +02:00
Sebastian Lenzlinger
96461ca78c Config now done via json. Too keep info centralized and avoid using countless .txt files. 2023-06-06 21:55:37 +02:00
Sebastian Lenzlinger
067a6312a8 Add journal entry after first testing. 2023-06-06 12:31:38 +02:00
Sebastian Lenzlinger
959f2acc56 Minor fixes. 2023-06-06 12:23:22 +02:00
Sebastian Lenzlinger
96ff341215 New journal entry SL. 2023-06-06 11:22:38 +02:00
Sebastian Lenzlinger
e5b73b3b49 Place old code in legacy folder for later reference. 2023-06-05 23:39:55 +02:00
Sebastian Lenzlinger
286d44ccf4 Merge branch 'main' of github.com:sebaschi/keylogger-detector 2023-06-05 23:37:49 +02:00
Sebastian Lenzlinger
bb8f81ee12 Whole new user level detector. Ported old bash script to python to more easily work with lists. Finnishes user level keylogger-detector. 2023-06-05 23:37:42 +02:00
SoulKindred
649c231a9d
Update dev_journal.md
small update for 05.06.2023
2023-06-05 14:14:49 +02:00
Sebastian Lenzlinger
5db2f3391b
Update dev_journal.md 2023-06-03 19:49:16 +02:00
Sebastian Lenzlinger
dc8e5ea198
Update dev_journal.md
Add missing name under Saturday, 3. June 2023
2023-06-03 19:47:45 +02:00
Sebastian Lenzlinger
1897b68536
Update dev_journal.md 2023-06-03 19:46:57 +02:00
Sebastian Lenzlinger
0c1d9c29b2
Update dev_journal.md 2023-06-03 19:46:21 +02:00
Sebastian Lenzlinger
10d7460409 Add short jounral entry abt user space bash script detector. 2023-06-03 19:44:34 +02:00
Sebastian Lenzlinger
fbf62f0a7c Move old code to legacy folder. Git now ignores .txt files 2023-06-03 19:38:14 +02:00
Sebastian Lenzlinger
51da6b9038 Merge branch 'main' of github.com:sebaschi/keylogger-detector 2023-05-28 19:42:06 +02:00
Sebastian Lenzlinger
b9d802f246 API Detector bash script. 2023-05-28 19:41:50 +02:00