how do i make my own keylogger that bypass av
by PwnSQL - Sunday July 14, 2024 at 08:37 AM
#1
from what i could gather keylogger get detected cause they use SetWindowsHookEx or GetAsyncKeyState functions. what do i do from here
Reply
#2
GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons.

The problem isn't with the API function itself. You are either facing issues with EDR/ELASTIC/Yara rule sets (at runtime) or your own process is bad against Anti-Virus static scanning.

There are techniques like unhooking, so that you can load yourself a fresh set of NT DLLs' that should bypass the Hooks set by the said software (usually anti-virus).
Crypt files/Crypt files .NET [x64/x86] Native x86 WinDef Bypass - 0/26:
https://breachforums.hn/Thread-MALWARE-C...26-Avcheck


Reply
#3
(07-14-2024, 08:58 AM)N1k7 Wrote: GetAsyncKeyState isn't used by malwares alone, its used by applications to get the typed keywords and is used by other applications too for legitimate reasons.

The problem isn't with the API function itself. You are either facing issues with EDR/ELASTIC/Yara rule sets (at runtime) or your own process is bad against Anti-Virus static scanning.

There are techniques like unhooking, so that you can load yourself a fresh set of NT DLLs' that should bypass the Hooks set by the said software (usually anti-virus).

thank you so much
Reply
#4
Здравствуйте, friend. You are correct; keyloggers often get detected because they use common APIs like SetWindowsHookEx or GetAsyncKeyState. To avoid detection, you need to use more sophisticated methods.
One approach is to use Direct Input to capture keystrokes, which is less likely to be flagged by antivirus software. Another method is to employ lower-level techniques such as hooking the SSDT (System Service Descriptor Table) or using a kernel-mode driver, though this requires more advanced knowledge and can be riskier.
Additionally, consider obfuscating your code and using encryption to make it harder for heuristic analysis to detect your keylogger. Remember, constant testing against various antivirus programs is crucial to ensure your tool remains undetected.
Be careful and always stay updated with the latest detection techniques. Удачи!
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  how to make money fast i need your help bros kingarp556 12 756 04-12-2025, 01:48 AM
Last Post: crispoinc12543
  Want to make money? MIkeMix 0 275 04-01-2025, 07:06 AM
Last Post: MIkeMix
  How to make money with $0, A iPhone? (Serious) joshuaa 3 444 03-17-2025, 10:00 PM
Last Post: OriginalCrazyOldFart
  Pls help iM new and need to make cash IamNoah23 0 307 03-08-2025, 12:11 PM
Last Post: IamNoah23
  How to Remove / Bypass Iphone activation lock. UiriLovesSpyware 0 328 03-07-2025, 03:54 AM
Last Post: UiriLovesSpyware

Forum Jump:


 Users browsing this thread: 1 Guest(s)