LogKext is the only kernel-based freeware keylogger for Mac OS X. LogKext is a freeware opensource keylogger for OS X that hooks into the kernel to bypass userspace security measures.

Control and usage of logKext is through logKextClient. LogKextClient runs through the Mac OS X Terminal. Don't worry, it's not as bad as it sounds.

Simply install the package and logKext will begin running and logging all keystrokes.

A logKext help HTML file will be installed in your root directory and opened after installation.

To use LogKext type the following command in the Terminal and press return: sudo logKextClient

You will be prompted for your account password (you must be an dministrator). Enter it. Next, logKext will prompt you for your logKext password.

Type in your logKext password. The default password is "logKext". You will not see the password echoed to the screen as you type it.

LogKextClient is an interactive client that allows you to change preference values that will change the behavior of your keylogger. Type "help" to get the help screen.

Most likely, you will want to see the logfile! To do this, use the "open" command. It will save the decrypted logfile to your desktop, and open it in a text editor. If you haven't yet typed 100 characters, you will not yet have a logfile. Come back later and try again.

A standalone script has been installed in your computer's root directory that will uninstall logKext. It is called LogKextUninstall.command.

There are two versions available, depending on your version of Mac OS X.