Trevent — Linux Keylogger & Exfiltration (for Red Team & Cybersecurity)

Trevent is a Python-based lightweight keylogger and exfiltration tool designed for cybersecurity research and educational purposes.

Demo

2026-04-13.00-01-57.mp4

Features

• System-wide Key Logging
  Captures keystrokes from your keyboard on a Linux system.

• In-Memory Log Storage
  Stores logs temporarily in memory (not on the hard drive) to avoid leaving traces.

• Stealthy Operation
  Runs quietly in the background, making it hard to notice.

• Telegram Exfiltration
  Sends the captured logs to a Telegram chat securely.

• Auto-Cleanup
  Deletes the log file after it's successfully sent, leaving no trace behind.

Example Usage:

Clone the Repository:

git clone https://github.com/5odead/Trevent.git
cd Trevent

💡 Note:

1. Set KEYBOARD_DEVICE to your actual keyboard event number, or the logger won't capture anything.

2. Update CHAT_ID and BOT_TOKEN in your exfiltration script, or the data won't get sent.

Run the Keylogger:

python3 Keylogger.py

Run the Exfiltration Script:

python3 Exfiltration.py

---

⚠️Disclaimer:
This tool is intended for educational purposes only. It should only be used in controlled environments with explicit permission. Unauthorized use is illegal and unethical.