Skip to content

Keylogging simulation tool for authorized purple team testing. Captures keystrokes and streams them to a controlled server with timestamps for EDR evaluation and detection tuning.

License

Notifications You must be signed in to change notification settings

Cursed271/DeadKey

Repository files navigation

DeadKey

DeadKey simulates keylogging attacks to test EDR systems, enabling users to strengthen their defense strategies.

📖 Table of Contents

🚀 Introduction

DeadKey is a Python-based keylogging simulation designed for authorized purple team assessments and security testing. It captures all keystrokes on a target system, including letters, numbers, modifiers, function keys, and arrows, then transmits them to a controlled server, where they are timestamped and logged in a structured format for detailed analysis and evaluation of EDR detection capabilities.

DeadKey

DeadKey Server

✨ Features:

  • ⌨️ Keystroke Capture: Captures all keys including letters, numbers, modifiers, function keys, and arrows.

  • 🌐 Remote Logging: Sends captured keystrokes to a server for real-time analysis.

  • 🕒 Timestamped Logs: Each keystroke can be logged with timestamps for detailed assessment.

  • ⚙️ Procedural & Lightweight: Pure Python script, no GUI, minimal footprint.

  • 🛡️ Lab-Safe Testing: Designed only for authorized purple team and EDR testing scenarios.

⚙️ Installation and Usage:

  1. Pre-requisites: Ensure you have Python3 installed on your system.
  2. Clone the Repo: Use "git clone https://github.com/Cursed271/DeadKey"
  3. Traverse into the Directory: Use "cd DeadKey"
  4. Install Dependencies: Use "pip3 install -r requirements.txt"
  5. Execute the Server Script: Use "python3 DeadKeyServer.py"
  6. Execute the Keylogger Script on the Target Machine: Use "python3 DeadKey.py"

💬 Feedback

Have suggestions or feature requests? Feel free to reach out via:

Your feedback helps improve DeadKey! Contributions and PRs are always welcome. 🚀

🙌 Contributors

  • Steven Pereira (aka Cursed) - Creator & Maintainer

📜 License - CURSEDSEC OWNERSHIP EDICT

DeadKey is licensed under the COE or CursedSec Ownership Edict License.

This software is proprietary intellectual property owned exclusively by CursedSec.

Unauthorized redistribution, modification, and re-uploading to any other repository (public or private) are strictly forbidden and constitute a direct violation of the CursedSec Ownership Edict (COE).

Consider this a warning: I track every copy. Get your own ideas, you lazy little shits.

Violators will face immediate legal action and DMCA takedown requests. All development must be conducted via approved Pull Requests on this official repository.