β οΈ DISCLAIMER: This project is intended for educational and ethical purposes only. Unauthorized usage may violate privacy laws and local regulations. Always obtain explicit permission before using such tools on any system that is not your own.
This Python-based tool integrates multiple powerful data-capturing features into one script. It can:
- π§Ύ Log keystrokes (Keylogger)
- π· Capture an image from the webcam
- π₯οΈ Take a screenshot of the current screen
- π Extract saved passwords from Google Chrome
| Feature | Description |
|---|---|
| πΉ Keylogger | Logs all keystrokes for 10 seconds and saves to kl.txt. |
| πΈ Webcam Capture | Takes a single image from the default webcam and saves as spycam.png. |
| πΌοΈ Screenshot | Captures a full-screen screenshot and saves it as screenshot.png. |
| π Chrome Passwords | Extracts saved Chrome credentials and writes to ch_pass.txt. |
Install all dependencies with pip:
pip install pynput opencv-python pyautogui pycryptodomex pypiwin32- Keylogger
-
Captures keystrokes for 10 seconds.
-
Logs standard keys and maps special keys (Enter, Space, etc.).
-
Stores results in kl.txt.
- Webcam Capture
- Captures a single frame using OpenCV and saves it as spycam.png.
- Screenshot
- Takes a screenshot using pyautogui and saves it as screenshot.png.
- Chrome Password Extraction
-
Uses win32crypt and Cryptodome to decrypt the Chrome password database.
-
Saves readable credentials to ch_pass.txt.
kl.txt β Contains logged keystrokes.
spycam.png β Captured webcam image.
screenshot.png β Screenshot of the current screen.
ch_pass.txt β Extracted saved passwords from Chrome.
This tool demonstrates system vulnerabilities for educational cybersecurity research. Misusing it could:
-
Violate privacy laws (e.g., GDPR, HIPAA)
-
Breach ethical and professional codes
-
Lead to prosecution or academic sanctions
βοΈ Always test on systems you own or with explicit written consent.
-
Chrome password extraction only works on local accounts with unencrypted login storage.
-
Antivirus software may flag this script as malicious due to its behavior.
-
The script currently runs all modules sequentially. You can modularize them for specific use cases.
-
Add OS checks (Windows-only logic)
-
Add email sending for logs (optional & controlled)
-
Modularize features (toggle via CLI flags or UI)
Bardia Javadi
π§ [email protected]
π GitHub: @bardiw