Penetration Testing mailing list archives
Re: Auditing / Logging
From: Frank Knobbe <frank () knobbe us>
Date: Tue, 13 Jan 2004 11:16:30 -0600
On Mon, 2004-01-12 at 17:17, Don Parker wrote:
Well, you raise a valid point as to the commands not being logged. Again I would prefer simplicity, so just install a keylogger. There is no need to overcomplicate things. Though a keylogger will not work on most *nix systems to my knowledge.
Don't even have to do that. Have you never heard of a 'snoop' device? You can just snoop/watch the tty session you are using for your tests and redirect it to a file. On BSD systems you can use: watch -o ttyXX > logfile Cheers, Frank
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- Auditing / Logging n30 (Jan 12)
- Re: Auditing / Logging Peter Hsu (Jan 12)
- <Possible follow-ups>
- Re: Auditing / Logging Don Parker (Jan 12)
- Re: Auditing / Logging R. DuFresne (Jan 12)
- Re: Auditing / Logging Don Parker (Jan 12)
- Re: Auditing / Logging Frank Knobbe (Jan 13)
- RE: Auditing / Logging Rob Shein (Jan 18)
- RE: Auditing / Logging Steve Armstrong (Jan 20)
- RE: Auditing / Logging Rob Shein (Jan 20)
- Re: Auditing / Logging Travis Schack (Jan 12)
- Re: Auditing / Logging Steve Shah (Jan 13)
- Re: Auditing / Logging cdowns (Jan 13)
- Re: Auditing / Logging Steve Shah (Jan 13)
- Re: Auditing / Logging Don Parker (Jan 13)
- Re: Auditing / Logging Steve Shah (Jan 13)
- Re: Auditing / Logging Don Parker (Jan 13)
- Re: Auditing / Logging Steve Shah (Jan 14)