how do i make my own keylogger that bypass av
by PwnSQL - Sunday July 14, 2024 at 08:37 AM
#1
from what i could gather keylogger get detected cause they use SetWindowsHookEx or GetAsyncKeyState functions. what do i do from here
Reply
#2
GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons.

The problem isn't with the API function itself. You are either facing issues with EDR/ELASTIC/Yara rule sets (at runtime) or your own process is bad against Anti-Virus static scanning.

There are techniques like unhooking, so that you can load yourself a fresh set of NT DLLs' that should bypass the Hooks set by the said software (usually anti-virus).
Crypt files/Crypt files .NET [x64/x86] Native x86 WinDef Bypass - 0/26:
https://breachforums.st/Thread-MALWARE-C...26-Avcheck


Reply
#3
(Jul 14, 2024, 08:58 AM)N1k7 Wrote: GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons.

The problem isn't with the API function itself. You are either facing issues with EDR/ELASTIC/Yara rule sets (at runtime) or your own process is bad against Anti-Virus static scanning.

There are techniques like unhooking, so that you can load yourself a fresh set of NT DLLs' that should bypass the Hooks set by the said software (usually anti-virus).

thank you so much
Reply
#4
Здравствуйте, friend. You are correct; keyloggers often get detected because they use common APIs like SetWindowsHookEx or GetAsyncKeyState. To avoid detection, you need to use more sophisticated methods.
One approach is to use Direct Input to capture keystrokes, which is less likely to be flagged by antivirus software. Another method is to employ lower-level techniques such as hooking the SSDT (System Service Descriptor Table) or using a kernel-mode driver, though this requires more advanced knowledge and can be riskier.
Additionally, consider obfuscating your code and using encryption to make it harder for heuristic analysis to detect your keylogger. Remember, constant testing against various antivirus programs is crucial to ensure your tool remains undetected.
Be careful and always stay updated with the latest detection techniques. Удачи!
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Looking for Best Current Free Cookies Stealer/grabber Misanotnessa 2 190 May 01, 2026, 10:52 PM
Last Post: Misanotnessa
  How to ear credits? dai5 2 209 Apr 25, 2026, 07:35 PM
Last Post: NOTFORSALE1932
  Proxy Provider spanko73 0 82 Feb 10, 2026, 05:18 PM
Last Post: spanko73
  SEARCHING SPANISH CALLERS troll 26 809 Feb 10, 2026, 05:16 PM
Last Post: spanko73
  SPAIN DATABASE 23M CITIZEN, IS THIS DB GENERATED? xdynamic 22 1,710 Feb 10, 2026, 07:44 AM
Last Post: llardo

Forum Jump:


 Users browsing this forum: 1 Guest(s)