DeadKey simulates keylogging attacks to test EDR systems, enabling users to strengthen their defense strategies.
DeadKey is a Python-based keylogging simulation designed for authorized purple team assessments and security testing. It captures all keystrokes on a target system, including letters, numbers, modifiers, function keys, and arrows, then transmits them to a controlled server, where they are timestamped and logged in a structured format for detailed analysis and evaluation of EDR detection capabilities.
-
⌨️ Keystroke Capture: Captures all keys including letters, numbers, modifiers, function keys, and arrows.
-
🌐 Remote Logging: Sends captured keystrokes to a server for real-time analysis.
-
🕒 Timestamped Logs: Each keystroke can be logged with timestamps for detailed assessment.
-
⚙️ Procedural & Lightweight: Pure Python script, no GUI, minimal footprint.
-
🛡️ Lab-Safe Testing: Designed only for authorized purple team and EDR testing scenarios.
- Pre-requisites: Ensure you have Python3 installed on your system.
- Clone the Repo: Use "git clone https://github.com/Cursed271/DeadKey"
- Traverse into the Directory: Use "cd DeadKey"
- Install Dependencies: Use "pip3 install -r requirements.txt"
- Execute the Server Script: Use "python3 DeadKeyServer.py"
- Execute the Keylogger Script on the Target Machine: Use "python3 DeadKey.py"
Have suggestions or feature requests? Feel free to reach out via:
- 🐦 Twitter: @Cursed271
- 🐙 GitHub: @Cursed271
- 🔗 LinkedIn: Steven Pereira
- 📧 Email: [email protected]
- 🐞 File an Issue: GitHub Issues
- 💡 Request a Feature: Feature Requests
Your feedback helps improve DeadKey! Contributions and PRs are always welcome. 🚀
- Steven Pereira (aka Cursed) - Creator & Maintainer
DeadKey is licensed under the COE or CursedSec Ownership Edict License.
This software is proprietary intellectual property owned exclusively by CursedSec.
Unauthorized redistribution, modification, and re-uploading to any other repository (public or private) are strictly forbidden and constitute a direct violation of the CursedSec Ownership Edict (COE).
Consider this a warning: I track every copy. Get your own ideas, you lazy little shits.
Violators will face immediate legal action and DMCA takedown requests. All development must be conducted via approved Pull Requests on this official repository.


