How I steal your Keystrokes without you even knowing it

I have been messin’ round with Keystroke loggers for quite sometime now. Brute forcing and luck of the draw password guessing cuts too much into my fishing time. Sure rainbow tables speed up the process, but I still need a username. That is were keystroke loggers come in handy. I have tried many types of software loggers and truthfully they all suck. It is just the level of suckiness you are willing to put up with. Plus the fact that nearly all of the ones I tested have backdoor relies funnelin’-tunnelin’ your info back to abyss of hackerland… I have coded up my own but truthfully, they are just not as flexible as I need them. NEXT! I have also used the Snoop Stick to monitor my kids Internet usage and it works OK. The problem with that product is it does not scale that well and it wraps itself so tight around the TCP/IP stack that any problems with a patch, update or just plain ole removal results in having to reformat the machine. NEXT! Now I am left with hardware keyloggers. Most of those are PS2 connectors so I have to use an adapter that makes it stick out like a turd in a punchbowl. (ah…college…) Anyway, I ordered a hardware logger from KeyGhost and I must admit, I am as impressed with it as I am to walk into a restaurant and they have Newcastle on tap. First off, the KeyGhost logger uses a USB connector like 98% of the keyboards out there today. It also works on both my mega awesome Mac and my average Windows based PC’s. Set up is like most other hardware loggers; just plug it inline. But that is really the only similarity. Three things that make the KeyGhost logger far superior to any other product I have tested: – Timestamping. Hardware loggers stand alone and can record thousands to millions of keystrokes. knowing how fresh the data is, is super important to avoid detection and provide useful analysis. – No software required/readability. This product requires no software. To view the captured strokes, plug the logger into your analysis system open up Wordpad. I called out Wordpad on Windows, because that seems to work the best, type in the password and the menu opens up. Hit “1” and there you go. The keystrokes are formatted nicely and make sense. plus the timestamping really comes into play here. The keystorkes are not jumbled together in a massive pile of hours of analysis to find something useful. – Detectability. The KeyGhost logger looks like it should be there! It is designed to look like a EMC balan. Folks can look right at it and not see it! I installed this on a machine at a security training and not a single person noticed it at all. Way cool factor: +15 I highly recommend this product. Works great and is easy to install. I would also recommend that if you use a public computer, make sure you look behind it if possible… By the way: ********* SHAMELESS PLUG ALERT**************** The folks at Cisco have really worked hard on getting our video podcast channel flowing. It looks great and Robb and I have a bunch more coming. Slide over and check it out at: http://www.cisco.com/en/US/netsol/ns752/index.html Jimmy Ray