(s)AINT keylogger [COMPLETE] How to use ?

SAINT KEYLOGGER

Hello flocks , welcome back to the blog. We are going to take a sniff on the new tool called (s)AINT Keylogger.This tool is build on java and one of the important thing about the tool is, Target machine where the keylogger which is running must have the latest Java Run Time Environment (JRE). This tool works like the keylogger called "Beelogger" which accepts only the gmail account for sending the keylogger.

Key - Features of the keylogger is

• Keylogger.
• Take Screenshot.
• Webcam Capture.
• Persistence.

Lets make a keylogger and deploy it on the target machine (Windows 7) and I am using kali 2017.3 .

Let 's install the dependencies

Step 1:  

• apt install maven default-jdk default-jre openjdk-8-jdk openjdk-8-jre -y

Step 2:

• apt install zlib1g-dev libncurses5-dev lib32z1 lib32ncurses5 -y

Step 3:

•  git clone https://github.com/tiagorlampert/sAINT.git

After Downloading the file navigate to the folder 

Step 4: Give Execute permission to the file name called configure.sh

• chmod +x configure.sh 

• ./configure.sh 

 Installation process is completed .

Step 5: Lets open the tool using the below command .

•        java -jar sAINT.jar

 Step 6 : It works only on gmail so please create a new mail-id from google.

[Recommended] Use a separate dedicated mail id for this keylogger.

Enter the gmail ID and password.

Then it asks for Enable screenshot (y/n),Enable the option that you need and disable which you dont need. And the most important feature is "Enter the number of character to send E-mail " Give the number of character to send log after the number of keylogging event happens. Confirm the details and it will start compiling.

 

Step 7: After the comping progress is complete go the Downloaded folder and navigate to target folder where you can see the 

• Saint..... .exe
• Saint..... .jar 

 

These are the keylogger executable.

Copy the .exe and rename the file into a legitimate name so the the victim doesn't have any doubt.

Step 8: Go to you dedicated gmail account for keylogger then go to the following link

 and Enable the Option "ALLOW LESS SECURE APPS".If you wont get the keylogging response from the target.

• https://myaccount.google.com/lesssecureapps?pli=1

Step 9: Use social Engineering techniques to get access to the target machine,and paste the keylogger file in any location in the target machine.

[Note : Make sure your target has the latest JRE else this attack won't work] .

Step 10: Execute the exe and check you gmail id ,the keystrokes , screenshot ,webcam shot would be send after the specified number of keystrokes .

 

All credits goes for the creator of this tool.

git-hub link https://github.com/tiagorlampert/sAINT

 

 [This is for your educational purpose only i am not responsible if you use this for malicious purpose]

Happpy hacking flocks .