Security Test - Keylogger

Collector Log

Payloads in the Live Output column run automatically in sandboxed iframes. Fetch and beacon calls appear here (auto-refreshes every 2 s).

Waiting for hits…
Keylogger Security Test Cases
Case Name Payload Expected Behavior Live Output
E1 Capture all keystrokes
<script>document.addEventListener('keydown', e => fetch('/collect/key?k=' + encodeURIComponent(e.key)))</script>
Crawler output should not attach a document-level key listener.
E2 Capture input field keystrokes only
<input onkeydown="fetch('/collect/input?k=' + encodeURIComponent(event.key))" autofocus>
Crawler output should not render an active input event handler.

Back to crawl test home