OpenSec Atlas

Name: JavascriptKeylogger
Author: vishal-naik-byte

JavascriptKeylogger: An Open Source Educational Resource for Endpoint Security | OpenSec Atlas

Back to Browse

Endpoint Security

Educational Resource

JavascriptKeylogger

An educational JavaScript keylogger demonstrating keystroke capture and server-side logging using Python Flask to raise security awareness.

View on GitHub

About This Tool

JavaScript Keylogger is an educational project demonstrating keylogging using JavaScript and a Python Flask backend. It aims to raise awareness of security risks from malicious scripts, help users understand how keyloggers work, and provide insight into detecting and mitigating such threats.

Primary Use Case

This tool is designed for security enthusiasts, educators, and students to understand how keyloggers operate through JavaScript and how captured data can be sent to a backend server. It is primarily used to demonstrate the risks of malicious scripts and to teach detection and prevention techniques in a controlled, ethical environment.

Key Features

Captures keystrokes using JavaScript in a web environment
Sends captured keystroke data to a Python Flask backend server
Demonstrates integration between client-side scripts and server-side applications
Educational focus on security risks posed by keyloggers
Includes instructions for local setup using WAMP or XAMPP
Provides insight into detection and mitigation of keylogging threats

Insights & Recommendations

This tool is strictly for educational purposes and should only be used in environments where explicit permission has been granted. Running the keylogger on unauthorized systems is illegal and unethical. Users should ensure they understand the legal implications and use this project to enhance security awareness and defensive skills.

Installation

git clone https://github.com/vishal-naik-byte/JavascriptKeylogger.git
cd JavascriptKeylogger
Ensure Python 3.12 is installed
Set up a Python virtual environment: python -m venv venv
Activate the virtual environment: source venv/bin/activate (Unix/MacOS) or venv\Scripts\activate (Windows)
Install Flask using pip: pip install Flask
Install and configure WAMP or XAMPP server locally
Run the Flask application: python app.py
Open a web browser and navigate to http://localhost:5000

Usage

git clone https://github.com/vishal-naik-byte/JavascriptKeylogger.git

Clones the repository to your local machine

python -m venv venv

Creates a Python virtual environment

source venv/bin/activate # Unix/MacOS venv\Scripts\activate # Windows

Activates the Python virtual environment

pip install Flask

Installs the Flask web framework required for the backend

python app.py

Starts the Flask backend server to receive keystroke data

Open http://localhost:5000 in a web browser

Accesses the keylogger frontend to see it in action

Smart Usage Notes

Ideal for purple team exercises to simulate client-side keylogging attacks and test detection capabilities.Can be integrated into security training modules to educate users on risks of malicious scripts and social engineering.Use as a baseline to develop detection rules for endpoint protection platforms focusing on script-based input capture.Combine with network monitoring tools to detect suspicious outbound traffic from keylogger data exfiltration.Extend the project by adding obfuscation techniques to simulate advanced evasion tactics for red team training.