Jump to content

How to download the keystroke stream


Recommended Posts

For my purpose we need to capture of keystrokes over a couple weeks with accurate timestamps (to within a few seconds). The "Keystroke stream history" is exactly what I need. But I can't find anyway to download it? 

Is there a way to extract/download the keystroke stream?

How long is it kept for? Does it get rotated / truncated?

I am assuming the stream is stored in the c2.db file but I don't know what format that is in. I made a guess at sqlite but that doesn't seem to be correct.

Link to comment
Share on other sites

  • 2 weeks later...

For anyone striking the same issue I hacked around it by grabbing the authorization header from my browser once logged into my c2 web interface, and then passing that hit http://<c2-host>/api/sites/1/devices/2/keystrokes/history. That gives you a JSON dump of the history.

I'm not sure when (if?) it rolls over but it's currently up to 6000 entries in there and hasn't purged any of the earlier ones yet. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...