password
fields in HTML applications and effectively implementing a simple keylogger.input
fields with attribute type
set to password
as shown below:onFocus
(when an element gets focus), onBlur
(when an element loses focus) and many other events amongst which are various keyboard events onKeyPress
, onKeyDown
, and onKeyUp
. password
fields:password
inside the HTML page of the target web applicationonKeyPress
event handler with a function that processes captured keys a user types into the password
field when logging in to the target applicationlocalStorage
key pw
pw
keylocalStorage
information is also stored on the disk. For Chrome, the files of are located here C:\Users\spotless\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb and is stored in a file XXXXXX.log. In my case, it was the file 009691.log
password
(lime) for github.com (blue) stored in localStorage
key pw
(orange):password
field selector and keywords onkeypress
, onkeyup
, onkeydown
.