Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Windows API Keyloggers
Overview
The following techniques are user-land Windows APIApplication Programming Interface methods of logging keystrokes:
GetRawInputData API
Regsiter a device to receive raw input including keyboard events. (not yet evaluated)
GetKeyboardState/GetAsyncKeyboardState API
Another user-space technique that does not involve using hooks is to continuously make calls to GetKeyboardState(). The problem with this approach is the high CPU utilization that will be incurred by spinning in this loop. It may be possible to use this method in a more targeted fashion, for example, only when a particular windows has the focus (e.g. password entry).