PHP Keylogger ? 06-23-2011, 03:24 AM
#1
I want to know if it's possible to create a site with a iframe for, like facebook and to catch every key press and where ?
tips ?
tips ?
| PHP Keylogger ? filter_list | |
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
RE: PHP Keylogger ? 06-26-2011, 07:56 PM
#2
I saw a project like this... but it was extremely un-effective...
Staff will never ever ask you for your personal information.
We know everything about you anyway.
We know everything about you anyway.
RE: PHP Keylogger ? 06-29-2011, 09:36 AM
#3
You can't load Facebook in an iframe. You might be able to pull it off with a few tricks and setting up a Facebook app.
PHP itself does not execute code on the end user's computer, therefore it cannot detect keystrokes. You would be left with a javascript alternative which by design does not allow cross site execution.
Short answer: Don't waste your time.
Long answer: You might be able to achieve some success if you approached the problem a similar route to what a web proxy would do. Instead of doing a call directly to the site you are trying to log you would load a helper page in an iframe (in this case you can't load the page in an iframe because document loses focus when the iframe gains focus which effectively will break your event handler). This helper page would take parameters sent to it either via session or request and pull it with curl. Once you retrieve the contents of the page you will need to change all links, forms, js src etc... And you might as well do images as well to prevent any breakage involving hotlink protection or mixing ssl. Next step is to build your keylogger functionality which will most likely need to be done with ajax calls. Once you have this set up you can then create a global document event handler for keypress and write your logging functionality.
This can become rather tricky once you try to accomplish this with any page that has heavily usage of ajax.
PHP itself does not execute code on the end user's computer, therefore it cannot detect keystrokes. You would be left with a javascript alternative which by design does not allow cross site execution.
Short answer: Don't waste your time.
Long answer: You might be able to achieve some success if you approached the problem a similar route to what a web proxy would do. Instead of doing a call directly to the site you are trying to log you would load a helper page in an iframe (in this case you can't load the page in an iframe because document loses focus when the iframe gains focus which effectively will break your event handler). This helper page would take parameters sent to it either via session or request and pull it with curl. Once you retrieve the contents of the page you will need to change all links, forms, js src etc... And you might as well do images as well to prevent any breakage involving hotlink protection or mixing ssl. Next step is to build your keylogger functionality which will most likely need to be done with ajax calls. Once you have this set up you can then create a global document event handler for keypress and write your logging functionality.
This can become rather tricky once you try to accomplish this with any page that has heavily usage of ajax.
Users browsing this thread: 1 Guest(s)
