[rgogwnnn]

Hey everyone,
I'm very knew to all of this, but I've been exploring a lot lately with these tools. So anyways I've been trying to figure out how to have a keylogger 'binded' in a document or image so when someone presses on that link the keylogger would install on their computer. I've downloaded Syslogger, but haven't really started anything just yet. Has anyone done anything like this before? Or anyone can point me in the right direction.

[lsp]

There's a few things you can do.

Look at macros, they're quite popular for spreading right now. It's a VBA script you put in your .DOC, .XLS etc files that performs some actions on open. Most often the actions are "Download and execute" - if you search metasploit framework you'll find a lot of helpers for building macros. If your stub is small enough, you can use msfvenom to encode it into the macro script itself, so you don't have to download to execute, just extract.

As for images - look at SVG (scaleable vector graphics(or something)). This format has built in support for javascript. The worlds your oyster. Again, download and exec or possibly encoding. Facebook recently blocked svg files but for emails it would still work.

Alternatively like you say, bind to an existing exe, like a game, "key generator" program, something hackery for the skids maybe, something appropriate and expected for your context.

Once you've got your distribution files you need to work on your social engineering, you pretext to get them to open the file, double click, whatever.

Good luck, let us know how you get on!