Keylogger win/linux

[administrator -]

Hi there,

I am new to the pentesting field and currently busy with OSCP. I have
read a great number of books and publications. From all of this I
compiled a handy toolset. However I am missing a good keylogger.

- What are you using for this?
- Do you prefer a "standalone" keylogger or incorporated into a
trojan/backdoor? Both seem to have pros and cons.

Most books talk just in general terms. I would like to hear some names
since a simple google query turns up too many results ;-) Looking for
both Windows and Linux systems.

Thanks for any thoughts and suggestions.

Herman

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[edjenguele christian eric]

Hi,
I really prefer a troyan/backdoor, but you can write your own using an echo server and client and keyboard event handling
---
 Christian Eric Eddjenguele
IT Security Software Developer & Researcher
--
Management, Developers, Security Professionals – can only result in one thing…… better security.
http://www.owasp.org/index.php/OWASP_NYC_AppSec_2008_Conference Sept 22nd-25th 2008



----- Messaggio originale -----
Da: administrator - <illegal.visitor@...>
A: pen-test@...
Inviato: Lunedì 18 agosto 2008, 10:18:55
Oggetto: Keylogger win/linux

Hi there,

I am new to the pentesting field and currently busy with OSCP. I have
read a great number of books and publications. From all of this I
compiled a handy toolset. However I am missing a good keylogger.

- What are you using for this?
- Do you prefer a "standalone" keylogger or incorporated into a
trojan/backdoor? Both seem to have pros and cons.

Most books talk just in general terms. I would like to hear some names
since a simple google query turns up too many results ;-) Looking for
both Windows and Linux systems.

Thanks for any thoughts and suggestions.

Herman

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


      Posta, news, sport, oroscopo: tutto in una sola pagina.
Crea l'home page che piace a te!
www.yahoo.it/latuapagina

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[Gichuki. John]

By the way, a Linux Keylogger, i have tried to use uberkey but doesnt
work with Latest Ubuntu. Does anyone know of a good one? Keyghost wont
work for a target like a laptop.



/Chuks

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[AndyPAZOS]

> You should try vlogger on Linux.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[Marco Ivaldi-2]

Herman,

On Mon, 18 Aug 2008, administrator - wrote:

> Hi there,
>
> I am new to the pentesting field and currently busy with OSCP. I have
> read a great number of books and publications. From all of this I
> compiled a handy toolset. However I am missing a good keylogger.

[snip]

Beside the already mentioned THC-vlogger [1], you may want to give the
following Linux keyloggers a try:

http://pykeylogger.wiki.sourceforge.net/ (works also on Windows)
http://www.honeynet.org/tools/sebek/ (works on a wide range of platforms)
http://kambing.ui.edu/gentoo-portage/app-shells/bash/files/bash-3.0-bash-logger.patch (old)
http://sourceforge.net/projects/lkl/ (old)
http://gnu.ethz.ch/linuks.mine.nu/uberkey/ (old)

There's plenty of keyloggers for the Windows platform -- just google a bit
and pick up the one that seems to better fit your needs.

Alternatively, how about an hardware keylogger [2]?

Cheers,

[1] http://freeworld.thc.org/releases.php?o=2&q=THC-vlogger
     http://freeworld.thc.org/papers/writing-linux-kernel-keylogger.txt
[2] such as this one: http://www.keyghost.com/

--
Marco Ivaldi, OPST
Red Team Coordinator      Data Security Division
@ Mediaservice.net Srl    http://mediaservice.net/


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[eldraco]

hi all

some time ago, the si6 lab coded a sebek variation including keystroke
timestamps (for keystroke dynamics analysis) called 'tcleo', only for linux.

http://www.citefa.gov.ar/SitioSI6_EN/tcleo.htm

cheers

eldraco

El Friday 22 August 2008 08:01:18 Marco Ivaldi escribió:

> Herman,
>
> On Mon, 18 Aug 2008, administrator - wrote:
> > Hi there,
> >
> > I am new to the pentesting field and currently busy with OSCP. I have
> > read a great number of books and publications. From all of this I
> > compiled a handy toolset. However I am missing a good keylogger.
>
> [snip]
>
> Beside the already mentioned THC-vlogger [1], you may want to give the
> following Linux keyloggers a try:
>
> http://pykeylogger.wiki.sourceforge.net/ (works also on Windows)
> http://www.honeynet.org/tools/sebek/ (works on a wide range of platforms)
> http://kambing.ui.edu/gentoo-portage/app-shells/bash/files/bash-3.0-bash-lo
>gger.patch (old) http://sourceforge.net/projects/lkl/ (old)
> http://gnu.ethz.ch/linuks.mine.nu/uberkey/ (old)
>
> There's plenty of keyloggers for the Windows platform -- just google a bit
> and pick up the one that seems to better fit your needs.
>
> Alternatively, how about an hardware keylogger [2]?
>
> Cheers,
>
> [1] http://freeworld.thc.org/releases.php?o=2&q=THC-vlogger
>      http://freeworld.thc.org/papers/writing-linux-kernel-keylogger.txt
> [2] such as this one: http://www.keyghost.com/

--
Ing. Sebastián García
http://minsky.surfnet.nl:11371/pks/lookup?op=get&search=0x3E42ED27F864EDE6

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------

[michele dallachiesa]

2008/8/18 administrator - <illegal.visitor@...>:

> Hi there,
>
> I am new to the pentesting field and currently busy with OSCP. I have
> read a great number of books and publications. From all of this I
> compiled a handy toolset. However I am missing a good keylogger.
>
> - What are you using for this?
> - Do you prefer a "standalone" keylogger or incorporated into a
> trojan/backdoor? Both seem to have pros and cons.
>
> Most books talk just in general terms. I would like to hear some names
> since a simple google query turns up too many results ;-) Looking for
> both Windows and Linux systems.

for linux, osf1, openbsd, freebsd and netbsd you can try iotrace:
http://xenion.antifork.org/?page_id=17

bye
--
Michele Dallachiesa
Web1: http://xenion.antifork.org
Web2: http://www.alpidia.com
Email: micheledotdallachiesaatpostedotit

NOTICE: This communication is meant only for the addressee(s) named
above and may contain information which is and/or legally privileged.
If you are not the named addressee(s), or the agent responsible for
receiving and delivering this communication to the named addressee(s),
this communication has been sent to you in error. If so, kindly
contact us immediately for retrieval purposes. Unauthorized
dissemination, distribution, copying or reliance on this communication

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------