maxchehab/CSS-Keylogging

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

3240 stars · 424 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept Chrome extension and Express server demonstrating a CSS-based keylogging attack using attribute selectors and background-image requests. It captures keystrokes typed into password fields on sites using controlled component frameworks like React.

Use cases

• demonstrate css attribute selector keylogging attack
• test whether a website is vulnerable to css keylogging
• learn about css-based exfiltration techniques
• security research on browser side-channel attacks
• educate developers about password field vulnerabilities

When to choose

• you need a working demo of CSS-based keystroke exfiltration for security education
• you are researching browser-side data exfiltration attacks
• you want to test defensive measures against CSS attribute selector attacks

When to avoid

• you need a production-ready or maintained tool - the project is from 2018 with no license
• you want a general-purpose keylogger rather than a security demonstration
• your target site does not use controlled component frameworks like React

Facets

plugin · maturity abandoned

security browser-extension http-server security browser-extensions web-development browser keylogger css-attack proof-of-concept attribute-selectors express nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="maxchehab/CSS-Keylogging")