Keystroke loggers

[rbcp]

What's a good keystroke logger to use?  I forgot my email password so I'm going to install it on my computer so that I can get it back the next time I type it in.  I'm sneaky like that.  Actually, it's for a friend who wants to collect some email passwords from a computer.  Anyone here ever used one?

[Godot]

You can try Home Keylogger. It is an easy-to-use freeware keylogger that you can hide on a computer. If the target is running virus protection software, you may need to disable it or make an exception for the keylogger, though.

http://www.kmint21.com/keylogger/

[mr_doc]

What's a good keystroke logger to use?  I forgot my email password so I'm going to install it on my computer so that I can get it back the next time I type it in.  I'm sneaky like that.  Actually, it's for a friend who wants to collect some email passwords from a computer.  Anyone here ever used one?

Ardamax is good

http://isohunt.com/download/49511529/keylogger.torrent

[trevelyn]

i made an ssh keylogger out of Perl, (calling it USH_Keylogg3r (unsecure)Shell)

http://weaknetlabs.com/code/ush_keylogg3r/

You can modify it to email you the file easily too, if the computer is running smtp.

[bestialbub]

i know its dated, but additional fun (while going thru the effort of installing and using a keylogger) is to install a hidden vnc app for remote desktop access (you can hide the program and configure the remote to blank the desktop while logging in to alleviate some suspicions as your activities won't be seen) or configure the remote for viewing purposes exclusively so you can monitor their activities realtime without accididently causing the remote users mouse to move or become suspicious.  (i prefer ultravnc at uvnc.com)

while you're sitting in front of the persons computer, you don't have to wait for a keylogger to capture a persons passwords, they're likely already stored on the computer.  you can retrieve them with the help of many fine utilities at www.nirsoft.net or retrieve them here: http://www.snapfiles.com/publishers/nir-sofer/index.html

i recommend astlog for retrieving passwords hidden behind asterisks, passwordfox for retrieving stored passwords in firefox and iepassview for retrieving passwords from ie.  theres a slew of other specific utilities in the list above from nirsoft for retrieving stored passwords from most apps (instant messengers, internet apps, finance and database apps, etc) you may have forgotten the password to.

[bestialbub]

i enjoy the look of concern on my customers faces when i show them the list of stored passwords i provide for them on a data transfer (after I've already imported their profile data for their apps or web browsers so this isn't even necessary, but fun anyway).

[trevelyn]

wow, i simply backup the \Users folder on vista or the C:\Doc..\<username> folder on XP  and re-image the system.  i dont import shit.  fuck those people.

[bestialbub]

oh gawd.  depends on who you're doin' business for.  most my customers are small business owners as well as some of the cities credit unions, various city depts. and employees (not a bulk of 'em, but enough to keep up a good rep).  theres nothin' shiattier than a disappointed customer thats missing data.  even if its something stupid like they stored their data on the desktop in the "all users" folder, or they're too stupid to remember their password to their bank and they think its your fault you lost it, or they're too stupid to use bookmarks because they relied on their ie history you wiped.. 

IF ITS XP YOU HAVE TO REMEMBER TO BACK UP THE "ALL USERS" FOLDER.  not everything hits the users profile folder.  and they won't always tell you about the special business software they use that stores all its data in its own folder.  you gotta scan the root, eyeball the program files folder by date as well as review the start menu for anything they won't tell you about.

working on a computer for someone is like an episode of "house".   people lie.  and they're stupid.

the thing i wonder about is whether my customers give a second thought to the porn i transfer for 'em (of the prostitute in their home), or the old user profile folders i dig out that they don't know they have thats got porn or other unwanted stuff they wouldn't have wanted the computer guy (or the rest of their family) to see.

i remember every customer complaint and the person that complained.  that and i charge 95 an hour.

[bestialbub]

oh, yeah, back on topic, in my experience with keyloggers (been a while) i liked tiny keylogger.  its completely configurable to the best of my recollection, from the executables name to the file it stores in.  keyloggers are good for personal use if you're paranoid about someone else accessing your computer.  i used one in my last it job to cover my ass for computer usage.  i probably spent the most time surfing the net in the office troubleshooting network and software problems (legitimate ones on software packages I hadn't specifically used and phoney troubleshooting requests from folks trying to keep me busy on non technical issues relating to other peoples job functions). 

keyloggers; they have their legitimate uses.

* bestialbub wanders off to see if the noises are inside or outside his head

oh: as godot said, i would configure a given folder to be excluded from virus scans, but I would recommend it be in the form of a labeled utility folder for your legitimate tools that av's don't like (a vague tools folder may be less likely to be noticed if not easier explained if called on it due to its vagueness).

[bestialbub]

..and i would recommend if using the keylogger for personal logging of your own usage to email it outside your network so the logs can't be with held or altered.

sorry for all the posts; i'm paranoid, i like detail, and i'm really bored wishing their was more current technical support threads to participate in

* bestialbub ponders visiting the pcpitstop forum for fun

//woulda edited my original post instead of multiple posted, but the edit button isn't jumping out at me like it use to on cal's forum.
///figures it would have to be the one message function button that doesn't have a readable label next to it.
////maybe someone could throw it down next to the reply button?