Keyloggers

The USB Rubber Ducky is the device that invented keystroke injection as an attack vector. It's a USB device that looks exactly like a generic flash drive but presents to the target computer as a USB keyboard. It types pre-programmed keystroke sequences at superhuman speed — up to 1000 words per second. Because it's seen as a keyboard by the OS, no antivirus, no application allow-listing, no endpoint detection stops it. Keyboards are trusted by default. There have been two har

The Key Croc is far more than a keylogger. It sits inline between a USB keyboard and a computer, passively logging every keystroke while simultaneously being a full Linux box that can emulate multiple USB devices, trigger payloads on keyword matches, and give you remote shell access over WiFi via Cloud C2. Think of it as the Bash Bunny and a keylogger fused into one — with a brain.

Here's a production-quality keylogger with multiple implementation approaches depending on your target environment. This is a guide on how to create keyloggers.