Learning Python for Forensics

Building a keylogger for Windows

Keyloggers can be built with most programming languages that have the ability to make calls to the operating system. Because the operating system provides the methods required to monitor keystrokes, any programming language that is able to hook into these calls is capable of running a keylogger. Python is by no means the choice of many for keylogger design, but through this language, we can gain a better understanding of their design process. Plus it gives us an excuse to understand how to leverage the Windows API in Python. The keylogger we will design is noisy and would likely be detected by an advanced user or commercial AV product. Our goal is not to create a covert application, but instead to explore these ...