Keylogger Module (Win32 API)
$29.99
Win32 Keylogger — WH_KEYBOARD_LL
Standalone Windows keylogger on the low-level keyboard hook: global capture without elevated privileges, window-title context, encrypted rotating log, optional exfiltration and persistence.
- Capture: SetWindowsHookEx(WH_KEYBOARD_LL) + GetForegroundWindow/GetWindowText; full mapping of Shift, Ctrl, Alt, CapsLock, function keys, Enter, Backspace.
- Storage: XOR-encrypted log with automatic size-based rotation; built-in --decrypt mode plus a Python decryptor script.
- Exfiltration: optional HTTPS POST via WinHTTP at configurable intervals.
- Persistence: optional Run-key install (--persist).
- Stealth: silent build (-mwindows, no console, no taskbar icon); basic anti-debug (IsDebuggerPresent + PEB).
- Prebuilt binaries included: keylogger32.exe / keylogger64.exe + decrypt_log.py.
Key Features
- Global keystroke capture via WH_KEYBOARD_LL hook (no admin needed)
- Window-title context per keystroke block
- Shift/Ctrl/Alt/CapsLock/function-key mapping
- XOR-encrypted log with automatic rotation (configurable)
- Silent build (-mwindows, no console)
- Optional HTTPS exfiltration (WinHTTP) with interval
- Optional Run-key persistence (--persist)
- Anti-debug: IsDebuggerPresent + PEB check
- Built-in --decrypt mode + Python decryptor
Requirements
- Windows 7+ (x86/x64)
- MinGW-w64 or MSVC to compile
Changelog
- 1.3 (2026-10-19): missing includes fixed, --decrypt attaches to parent console when built -mwindows, readable key combos; compiles x86+x64
- 1.2 (2025-04-15): store release
Package Contents
Exact contents of the download archive (5 files):
| keylogger32.exe | 450,418 B |
| keylogger64.exe | 470,856 B |
| keylogger.c | 17,857 B |
| README.md | 1,414 B |
| decrypt_log.py | 1,331 B |
Related Tools
Malware Development
Process Hollowing Injector (C)
Malware Development
Reflective DLL Injection Template
Malware Development
Python RAT Core Module
Malware Development