It is a simple and easy to use keylogger for macOS. It is not meant to be malicious. There are only few keyloggers available for Mac and none of them are in Swift.
Another problem is with Apple high-level APIs. I don't know the reason but Apple suddenly deprecates and removes the documentation of APIs from its website.
So, I don't want to keep checking about the availability of their APIs and changing my code frequently. That is the reason I went for low-level API which is using HID API.
Most of the keyloggers available only log keystrokes into a file without much information about on which app the keystrokes are generated.
Clone the repository and open the project in Xcode and build the project and run the executable.
To be able to close the Terminal when Keylogger is running, use this command while running the executable.
$ nohup ./Keylogger &
And you can quit the Terminal.
To quit the Keylogger, first, find its PID using ps
and use kill
to stop the keylogger.
$ ps -e | grep "Keylogger"
$ kill -9 pid_of_keylogger_from_above_command
When it's run, it creates folder Data
|--Keylogger
|--Data
|--App
|--Devices
|--Key
Key folder stores all the keystrokes according to application. App folder stores all the timestamps of applications being active. Devices folder stores the information about the connected keyboards.
By default, it creates a folder where the executable is present.
To change the path edit bundlePathURL
in Keylogger.swift
There are 2 ways:
- Using the executable(By using
Process
to call the external binaries from Cocoa App). - Using source code in your App without the need for external binary
NOTE: The documentation of Apple has been constantly changing since the release of Swift. So, I just wanted to give the basic idea of this method without providing the code to avoid updating this part of the code frequently.
- Clone it and build the project by yourself or download the already built binary from the releases page.
- Use
Process
to run the external binary from your app. - NOTE: Don't use
waitUntilExit()
or similar methods which can block the execution of the main UI to run the keylogger!
1. Add Keylogger.swift
and CallBackFunctions.swift
files to your project.
2. Initialize the Keylogger as a static variable and use start()
and stop()
to start and stop the keylogger.
import Cocoa
class ViewController: NSViewController {
// Initialize the Keylogger
static var k = Keylogger()
override func viewDidLoad() {
super.viewDidLoad()
// Do any additional setup after loading the view.
}
override var representedObject: Any? {
didSet {
// Update the view, if already loaded.
}
}
// A button to start the keylogger
@IBAction func start(_ sender: Any) {
ViewController.k.start()
}
// A button to stop the keylogger
@IBAction func stop(_ sender: Any) {
ViewController.k.stop()
}
}
3. Now, to run it without any problems, turn off the APP SANDBOX. If you want to use APP SANDBOX, then add the following to your entitlements:
com.apple.security.device.usb = YES
If the use of this product causes the death of your firstborn or anyone, I'm not responsible ( no warranty, no liability, etc.)
For technical people: It is only for educational purpose.
Note: This keylogger doesn't capture secure input fields like passwords due to
EnableSecureEventInput
Feel free to fork the project and submit a pull request with your changes!
MIT
Free Software, Hell Yeah!
This project exists thanks to all the people who contribute.
Thank you to all our backers! 🙏 [Become a backer]
Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]