OK so now that we got this to work out we still haven't tested it out but the program does build and
compile and it does run.
We need a keylogging so I don't really have it here on this computer.
So I actually downloaded it and compile it myself but not really a big deal.
Let's just go to my get help repository it's code for download I just say download Zipp save file
and then I need to go into downloads and
this one.
No that's from a test run.
I didn't download anything actually followed step and then save file then it click OK and then click
here and then go in and just go back one step and you have done with it twice because I did a test front
so just extract all
short just extracted there.
Doesn't matter.
Yes.
And we need to actually import these into need to actually import all of them into code blocks so let's
just go like DERSE and
like this like this like this do control-C.
And I'm I'm really lazy like I can do this I'm just going to paste them on desktop all of them and then
I'm going to open up code blocks and I'm going to say file new project.
I mean you obviously don't need to do that.
But I'm just going to do it anyway to show you how you can actually download it and compile it from
get hub anyway.
And I'm going to name this just how key logger
next week.
Back up.
It's on desktop so next and finish.
OK.
So then I'm going to go into this and I'm going to click on Add files
desktop so I need this one this one this one this one this one this one this one right.
So just click on Open K sources like this and this should be like this except I don't really.
I'm just going to go out like I mean so I don't really require this move files.
Oh hey Yes.
OK.
So I got to keylogging here and I'm just going to go to keep the hook.
Zoom in.
Go down a little bit.
And I'm going to say and I'm going to reduce the timer to maybe 10 seconds or something like that.
I don't know.
So you can just change these values as a before and that should be fine.
So 2000 sixty two dozen times 60.
So let's say that we're going to write this.
I don't know.
Let's say 1000 times 60.
That should be.
That's like a minute.
Let's go ahead and say 100 is too little.
Let's say that this is going to be like 250 times 60.
So thousand times 60 that's a minute.
And this is a quarter of a minute.
So that should that should that should be fine.
Quit it for a minute.
Sixty.
Divided by four.
That's going to be like
and that should be 15 up 14 15.
That's 40 and witness that should be.
That should be like every 15 seconds.
The logfile will be generated and that's going to change the e-mail address.
So this is not actually going to be sent anywhere.
I'm just changing the timer here so dead in the demo I can basically
get the file to be generated immediately and not have to wait for like for two minutes or something
like that obviously wouldn't do this in production but I'm just producing the timer so that I may actually
do this sort of we don't need to wait for two or three minutes or for an hour or something like that.
So this is obviously not something you would do in a production environment you wouldn't create a log
file every 15 seconds.
That would be stupid in my opinion anyway so.
Settings under decompiler as before.
As explained in the previous tutorials you need to C++ 11 flag and you need to create a dash and Windows
flag as well how that is done.
Go back a few tutorials.
I have shown this with that explanation.
I'm just checking it here.
OK so just click on the key logger now and build and run
OK there you go it runs.
So I have not modify it in any way I'm just downloaded from get help and I've compiled it and ran it
and it does work.
No problems.
So I did close it here.
I'm just going Task Manager
Yes it is actually running.
Got it wait.
I'm going to catch it for it.
Kilger OK so end task is this minimize code blocks.
And the key logger is here.
We're just going to place it right next to decrypt going to open it can go Under been debug.
And I'm just going to go ahead and double click on the key logger X a file and that's going to run it.
No Windows will pop windows on the pop when you actually vary from code blocks because that's a code
blocks thing.
But when you actually run the exit there are no windows that pop will just confirm that this is running
dusk manager and yep there you go.
So the key logger is running indeed.
OK so let's open up the note and we will also need to go to the file where this is actually stored where
the word log files are generated so notepad.
And we're going to go ahead and write something so low my user name.
Is that all A la la la la.
My password is blah blah blah blah.
Ok so I'm just capias the I'm just creating some example text that doesn't really matter.
And now I am GPS.
Now I'm going to go ahead and go I'm just going to open up a file manager.
I'm going to go into a local disk see and I'm going to go to users and I'm going to go into my user
which is destined and I'm going to go into app data
right view hidden items apps app data roaming Microsoft and then to see a large right here.
So there you go.
These files are indeed being created.
So let's go ahead and open one of them.
Oh we got something very strange here.
OK.
So let's go ahead and open up another one.
Oh again something strange.
Excellent.
So let's just leave them there.
And there you go new ones are being created as we actually speak.
I'm just going to go ahead and prevent the creation of any others because this is happening like every
15 seconds or so.
So they can just go ahead and kill the keylogging here so End Task excellent.
So that is done.
So now we have these files and I'm just going to go ahead and grab them like this and copy them.
It could actually specify the paths but it doesn't really matter.
Just go ahead and do this and close this don't save it.
Going to view.
No.
Any new folder
dust run for test run for decryption now I'm going to open up this and I'll paste these files here in
addition to that I will also go into the decrypt again and they're been de-bug I shall copy DSO and
cut copy and I will also paste it here.
Kate so it's all there.
It's all fine and dandy.
Now what I'm about to do is I'm going to go ahead and open a partial.
You can do this with ACMD as well.
I just prefer the partial.
It's more Unix like well.
It's nowhere near the unix terminal at LAX terminal but oh well it's a good enough imitation I guess
or something like that.
OK so now going to go ahead and type in CD.
The desktop that's run for decryption.
Enter Alice.
OK.
So we will now call daat backslash decrypt Audix the.
And we're going to supply one of these files so I don't know going to do the first one and I'm going
to
be correct.
This will be the second argument
decrypt dog log whatever the names are arbitrary and Precentor.
OK.
So do us a.
Sorry not tell us doesn't exist so do.
And there we go decrypt not.
Let's go ahead and do cat
decreed dot log.
And there you go.
It actually decrypts it.
So one of the first things that I typed in was task and then I pressed enter when I selected a task
manager.
Well let's go ahead and find the log file with our with the with the example text that I wrote in Notepad.
Not sure what it is though.
I can judge by length.
So length is ten thousand eighty four.
OK so bits I think.
And don't hang me if I'm mistaken so 29.
Nine 2016 15 56 48.
So it's 15 or fifty six underscore forty eight.
My typing is right lock and close.
I typed it in.
Right.
Hopefully.
So let's just go ahead and put it into decrypt and I don't know I can change it to something not what
I would say that you include dates and time stamps into your file names.
Press enter and then do us and and you can just to see what's in the file.
So the decrypt a log and there you go or not wait.
This is like a task and then space for typed in started typing in Tass Raich of enter.
OK so there we go.
My M-y.
And then actually let me go ahead and zoom in for you.
I got the right file this time.
But let me just change this font to 36 maybe this is going to be enormous.
OK.
I mean that could have opened all of this up in Notepad but I don't know I'm just I'm just I'm just
the guy that's used to working Linux and I like working in the terminal.
I think it's far more efficient and quicker for any sort of development or programming tasks especially
for the sort of things that we are doing now to help with it.
I'll just go ahead and increase the size to 4.
And it says M Y.
So my.
And then I press space and it says user name and then I press space again and it says
I.
I s as in is and they pressed space again and it says they're all from LA LA LA LA LA LA LA LA LA LA
LA whatever.
And my password is like my username is and then it says My password is.
And then space is blah blah blah blah blah blah blah.
So there you go.
This is how you can decrypt those files.
Let me just go ahead and shoot the contents.
56.
OK so let's go ahead and cat out.
29 56 15.
So this is this is this.
This is the contents of the file.
So this is completely incomprehensible.
What you are seeing here as opposed to what you are seeing here.
So this is the decrypted format and this is the encrypted format so this is the encrypted file contents.
And this is the decrypted file contents.
So obviously you can use any sort of a word processor like Word or notepad or whatever else and open
this file up and this will be much better to look at.
This is convenient for me because I'm used to working in the terminal but for apps for you it doesn't
so feel free to open it up with notepad after you have decrypted or whichever other program you choose
or wish.
Anyway that would be it.
So that's how you decrypt the files and I hope that this was helpful and insightful that you can all
successfully decrypt the files and that I have been of use to you.
So thank you for the time that you have devoted to discourse and thank you for your interest in it.
If you have any questions requests or whatever you can always contact me and I will I always strive
to answer everybody if I haven't answered one of your messages.
It's probably because I've lost that somewhere because I get a lot of them.
So please don't hesitate just send another one.
Just send another message if I haven't answered your first message it's not because I don't want to
or because I don't care or whatever.
It's just that I get a lot of them and some of them get lost in the truck in transit.
So if I don't answer you immediately if I don't answer one of your inquiries within a day or two.
Just go ahead and send me another one if you need tech support then please write in the discussion section
where obviously I will get an answer much quicker anyway.
I'm going to bid you farewell here and wish you a lot of luck with this.