Keelog.com has a really concise description of how to build a PS/2 based keylogger. The main components are an AT89C2051 microcontroller and a 24C512 serial EEPROM. Once it is plugged in, the device begins recording all of the codes generated by the keyboard. The data can then be dumped using their keygrab software.
[thanks Boss]
Hardware keylogger
Recent Posts
- Adeona: An open source laptop tracking system (7/26/2008)
- Five plugins and tips to secure your Wordpress blog (7/26/2008)
- Honeybike: bicycle thief honeypot (7/26/2008)
- Surveillance as art (7/25/2008)
- Wiremap, a volumetric display (7/25/2008)
Reader Comments
(Page 1)2. @joelanders Ok i've been checking out other EEPROMs and If you go parralell instead of serial then you can get up to about 512kb I think at least. But I dont know how this would effect the circuit im going to look into it more and revise. I'm still kinda getting my feet wet with the hole electronics thing but im wading through it ok. Oh and its 21000 approx keystrokes.
Posted at 3:09PM on Sep 3rd 2006 by abseeley
3. @ abseeley: "Although the keyboard logger has 64kbytes of memory, this doesn't mean 64 thousand keystrokes can be memorized. One key-press-release sequence requires 3 bytes for a standard key and 5 bytes for an extended key." 65536 / 3 = whatever. ditto on increasing capacity. How?
Posted at 3:09PM on Sep 3rd 2006 by joelanders
4. looks like hackaday has already started to suffocate keelog.com; or maybe their server was already mollasas. :)
Posted at 3:09PM on Sep 3rd 2006 by Mr. Bill
5. Whoo Im so doing this tomorow or sometime this weekend. But how many keystrokes is 65536 bytes? And is there anyway that there diagram could be altered to increase capacity?
Posted at 3:09PM on Sep 3rd 2006 by abseeley
6. Here is a wireless keystroke data tap that transmits the data to a remote location: http://gbppr.trighost.org/mil/keystroke/index.html
Posted at 3:09PM on Sep 3rd 2006 by rc:line
7. There's a commercial aspect to this. http://www.keyghost.com/ordering.htm Nice to know i can finally make my own now.
Posted at 3:09PM on Sep 3rd 2006 by winphreak
8. i saw this project here some minutes ago ... good one .... i'll do it tomorrow ... this is very usefull :D
Posted at 3:09PM on Sep 3rd 2006 by lahuel "wyr3x" román
9. My bad, actually it's http://www.keelog.com/
Posted at 3:09PM on Sep 3rd 2006 by Bob Dole
10. Actually the web address is http://www.keylog.com....
Posted at 3:09PM on Sep 3rd 2006 by Bob Dole
11. Sorry for the double post... I figured it out. Keelog site reversed the pin numbers for male and female connectors in their DIY schematic. As labeled and shown in their schematic...if you just swap only the numbering (computer connector numbering to keyboard connector numbering and vice versa) then it correctly corresponds to PS/2 pinouts as: 1 = data 2 = N/C 3 = Gnd 4 = +5 (Vcc) 5 = CLK 6 = N/C Hope this helps! Jdog
Posted at 3:09PM on Sep 3rd 2006 by Jerry Schrader
12. The connector pinout shown in their schematic is wrong. I have all theparts and the chip is programmed and now I am getting ready to build one...was double checking pinouts on web to verify everything so I don't screw anything up... I'll double check by this weekend once I build and test but all indications are that Keelog's schematic is wrong. I'll let everyone know. Jdog
Posted at 3:09PM on Sep 3rd 2006 by Jdog
13. holas
Posted at 3:09PM on Sep 3rd 2006 by wilfredo
14. The connector pinout shown in their schematic is wrong. I have all theparts and the chip is programmed and now I am getting ready to build one...was double checking pinouts on web to verify everything so I don't screw anything up... I'll double check by this weekend once I build and test but all indications are that Keelog's schematic is wrong. I'll let everyone know. Jdog
Posted at 3:09PM on Sep 3rd 2006 by Jdog
15. can't you use a radio transmitter with it instead (or with) memory. something like this: http://sci-toys.com/scitoys/scitoys/computers/radio/computer_controlled_transmitter.html this could be done with pics (with different source code), right?
Posted at 3:09PM on Sep 3rd 2006 by hike
16. if i had to buy a hardware keylogger, which would you recommend? is the one in keelog good enough? i like the fact it's cheaper than http://www.thinkgeek.com/gadgets/security/5a05/
Posted at 3:09PM on Sep 3rd 2006 by geffchang
18. As I know www.keelog.com will release outstading USB version of their logger soon...
Posted at 3:09PM on Sep 3rd 2006 by Zy
Add your comments
Please keep your comments relevant to this blog entry: inappropriate or purely promotional comments may be removed. Email addresses are never displayed, but they are required to confirm your comments. To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br> tags.


1. Don't go parallel! Since the 24C512 memory they are using is I2C, there are two ways you can go. The quickest way might be just to replace the chip with a 24xx1025, which Microchip sells and is twice as large. The more extensible option is to add more 24xx512 chips. Because they are I2C devices, up to *EIGHT* can be connected using the same two data lines. Each eeprom needs to have a unique id, which is set by connecting each of A0, A1 and A2 on the eeprom to either it's ground or Vcc pin (the Keelog logger has them floating, which is probably a bad idea.) Then the microcontroller can select which chip to use by sending the corresponding ID. Both of these require the microcontroller code to be altered, good thing they supplied source code :)
Posted at 3:09PM on Sep 3rd 2006 by pelrun