Skip to content

Driver and app for detecting if a SMM rootkit is listening to your keyboard.

License

Notifications You must be signed in to change notification settings

sith-ikjetil/IsKeyboardRootkitted

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

21 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Is Keyboard Rootkitted

License: GPL-3.0-or-later

This application, with its driver, detects SMM rootkit on keyboard by checking I/O APIC IRQ1 and IOTR0-IOTR4 for an SMI trapped keyboard handler. If it detects it, you have been SMM rootkitted.

You need a driver signing certificate to have this work. This is the Windows version.

About

Driver and app for detecting if a SMM rootkit is listening to your keyboard.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published