Jul 14, 2024, 08:37 AM
from what i could gather keylogger get detected cause they use SetWindowsHookEx or GetAsyncKeyState functions. what do i do from here
|
how do i make my own keylogger that bypass av
by PwnSQL - Sunday July 14, 2024 at 08:37 AM
|
|
Jul 14, 2024, 08:37 AM
from what i could gather keylogger get detected cause they use SetWindowsHookEx or GetAsyncKeyState functions. what do i do from here
Jul 14, 2024, 08:58 AM
GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons.
The problem isn't with the API function itself. You are either facing issues with EDR/ELASTIC/Yara rule sets (at runtime) or your own process is bad against Anti-Virus static scanning. There are techniques like unhooking, so that you can load yourself a fresh set of NT DLLs' that should bypass the Hooks set by the said software (usually anti-virus).
Crypt files/Crypt files .NET [x64/x86] Native x86 WinDef Bypass - 0/26:
https://breachforums.st/Thread-MALWARE-C...26-Avcheck
Jul 14, 2024, 09:01 AM
(Jul 14, 2024, 08:58 AM)N1k7 Wrote: GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons. thank you so much
Jul 18, 2024, 01:03 AM
Здравствуйте, friend. You are correct; keyloggers often get detected because they use common APIs like SetWindowsHookEx or GetAsyncKeyState. To avoid detection, you need to use more sophisticated methods.
One approach is to use Direct Input to capture keystrokes, which is less likely to be flagged by antivirus software. Another method is to employ lower-level techniques such as hooking the SSDT (System Service Descriptor Table) or using a kernel-mode driver, though this requires more advanced knowledge and can be riskier. Additionally, consider obfuscating your code and using encryption to make it harder for heuristic analysis to detect your keylogger. Remember, constant testing against various antivirus programs is crucial to ensure your tool remains undetected. Be careful and always stay updated with the latest detection techniques. Удачи! |
|
« Next Oldest | Next Newest »
|
| Possibly Related Threads… | |||||
| Thread | Author | Replies | Views | Last Post | |
| Looking for Best Current Free Cookies Stealer/grabber | 2 | 190 |
May 01, 2026, 10:52 PM Last Post: Misanotnessa |
||
| How to ear credits? | 2 | 209 |
Apr 25, 2026, 07:35 PM Last Post: NOTFORSALE1932 |
||
| Proxy Provider | 0 | 82 |
Feb 10, 2026, 05:18 PM Last Post: spanko73 |
||
| SEARCHING SPANISH CALLERS | 26 | 809 |
Feb 10, 2026, 05:16 PM Last Post: spanko73 |
||
| SPAIN DATABASE 23M CITIZEN, IS THIS DB GENERATED? | 22 | 1,710 |
Feb 10, 2026, 07:44 AM Last Post: llardo |
||