I know the use of keyloggers. What I wish to know is how can a hacker install the keylogger into the victims system? If it can be done by XSS then to where this keylogger is actually installed (I mean to the client system or browser or somewhere else)? And also how the response of keyboard press reaches the attacker?