|
.TH TIKKER-DECODER 1 "2024-11-28" "Tikker 2.0" "User Commands"
|
|
.SH NAME
|
|
tikker-decoder \- decode keylogged data from token format to readable text
|
|
.SH SYNOPSIS
|
|
.B tikker-decoder
|
|
[\fIOPTIONS\fR] \fI<input_file>\fR \fI<output_file>\fR
|
|
.SH DESCRIPTION
|
|
Converts keystroke token data into readable text format. Handles special keys
|
|
like BACKSPACE, TAB, ENTER, and shift-modified characters.
|
|
.SH OPTIONS
|
|
.TP
|
|
.B --verbose
|
|
Show processing progress
|
|
.TP
|
|
.B --stats
|
|
Print decoding statistics
|
|
.TP
|
|
.B --help
|
|
Display help message
|
|
.SH EXAMPLES
|
|
Decode a single keylog file:
|
|
.IP
|
|
.B tikker-decoder logs_plain/2024-11-28.txt decoded.txt
|
|
.PP
|
|
With verbose output:
|
|
.IP
|
|
.B tikker-decoder --verbose logs_plain/2024-11-28.txt decoded.txt
|
|
.SH INPUT FORMAT
|
|
Input files should contain keystroke tokens in bracket notation:
|
|
.IP
|
|
[a][b][c] outputs "abc"
|
|
.IP
|
|
[LEFT_SHIFT][a] outputs "A"
|
|
.IP
|
|
[BACKSPACE] removes last character
|
|
.IP
|
|
[ENTER] outputs newline
|
|
.IP
|
|
[TAB] outputs tab character
|
|
.SH OUTPUT
|
|
Plain text file with decoded keystroke data
|
|
.SH EXIT STATUS
|
|
.TP
|
|
.B 0
|
|
Success
|
|
.TP
|
|
.B 1
|
|
Input/output error or file not found
|
|
.SH SEE ALSO
|
|
tikker-indexer(1), tikker-aggregator(1), tikker-report(1)
|
|
.SH AUTHOR
|
|
Retoor <retoor@molodetz.nl>
|