ChromeLogger is a keylogger and form grabber that runs as a Google Chrome extension. Since it’s a Chrome addon, it’s compatible with the latest version of Chrome on all OS’s (Windows, Mac, Linux).

ChromeLogger will save all keystrokes typed into webpages that are opened by Chrome. There’s also an option to capture form submissions (ie, search boxes, login forms). After installing, ChromeLogger will be completely silent and will automatically start recording keylogs.

ChromeLogger works by injecting javascript into all loaded web pages. The payload records keypresses using event listeners and saves them to Chrome’s storage. Unlike other browser keyloggers, ChromeLogger runs natively in Chrome (on all OS’s) without the need to install additional software.  The form grabber works in a similar way. Javascript is injected and event listeners are added for all forms. When a form is submitted, its data is saved to ChromeLogger’s storage. This allows form data transferred over SSL to be saved in plaintext.

Here is the second release candidate. Along with a LOT of fixes, it improves the support for the Airodump-ng scan visualizer. Airmon-zc is mature and is now renamed to Airmon-ng. Also, Airtun-ng is now able to encrypt and decrypt WPA on top of WEP. Another big change is recent version of GPSd now work very well with Airodump-ng. Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks.

Aircrack-ng Changelog

DDOS aka Distributed Denial of Service (DDoS) attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources. Attacker target a wide variety of important resources and present a major challenge to making sure people can publish and access important information.

Add headers to all Burp requests to bypass some WAF products. This extension will automatically add the following headers to all requests.

  X-Originating-IP: 127.0.0.1
  X-Forwarded-For: 127.0.0.1
  X-Remote-IP: 127.0.0.1
  X-Remote-Addr: 127.0.0.1

This is the official repository of The Exploit Database, a project sponsored by Offensive Security.

Proxenet is a hacker friendly proxy for web application penetration tests.