Penetration Testing mailing list archives

Re: Keystroke logging


From: Maximiliano Bertacchini <mbertacchini () citefa gov ar>
Date: Fri, 1 Jul 2005 13:21:28 -0300

Hi all. We're currently testing a new version of tcleo keylogger for linux 
2.4/2.6 kernel, which is capable of hiding itself. Keep an eye on our lab 
homepage (http://www.citefa.gov.ar/si6) as we're releasing it in the next few 
days.
Bye.

On Thursday 30 June 2005 23:47, fatb wrote:
hi all:
         I also pay close attetion to this stuff!!
tcleo would work in 2.6 linux kernel,it's a lkm but do not hide itself
and you would try the bash patch,but both of tcleo and bash patch
seems to be designed for honeynet project,so they send the keylog to the
logserver instead of encrypt it and store in the local computer.

also the vlogger for thc seems to be a nice keyloger,but I could not
compiler it in my rh9 box.

hope it will help you,any good suggestions?


----- Original Message -----
From: "JB" <pentest () jitonline net>
To: <pen-test () securityfocus com>
Sent: Friday, July 01, 2005 3:36 AM
Subject: Keystroke logging

I'm wondering if anyone has either a kernel level keystroke logger for
the Linux 2.6, or a userspace keystroke logger for Linux. As part of our
penetration testing, we are required to give the client a log of all
actions performed - so this would be a good way of logging all linux
commands. Also - if you know of the same sort of tool for windows - that
would also be appreciated.

-J

-- 
Ing. Maximiliano Bertacchini
SI6 - DINFO - CITEFA
San Juan B. de La Salle 4397
B1603ALO Villa Martelli - Pcia. Bs. As.
Tel: (54-11) 4709-8285
e-mail: mbertacchini () citefa gov ar - http://www.citefa.gov.ar/si6/
http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x24385370


Current thread: