Xatrix Security

[heebyjeebys]

there must be an easier way of getting someone's password surly.

how's about a windows service, that records keystrokes, and sends you an email every time someone logs of with the attached log?
I can make a windows service that can send you email no problem, but I would have to look into capturing keystrokes..

If you somehow managed to get it installed on at least one or two machines then this would be perfect for capturing keys.
I suppose you could also make the service essentially invisible too.

what do you guys think?

[muto]

There are a lot of programs out there that do that (they're called keyloggers). The advantage of writing your own is that it won't be as detected, but heuristics tend to slam anything that hides itself, or captures keystrokes.

[heebyjeebys]

There are a lot of programs out there that do that (they're called keyloggers). The advantage of writing your own is that it won't be as detected, but heuristics tend to slam anything that hides itself, or captures keystrokes.

thats why its an advantage .... it could be called something that reflects a windows service as a disguise that would fool the average teacher. could be quite an interesting project

[muto]

Most teachers don't know how to see the services list :>

The mailing feature might be tricky, because, at least in my school, there are almost no outbound ports open, I'm pretty sure you can't just use SMTP. It might be best to do it through HTTP Post data, but then you'd have to write proxy support.

[heebyjeebys]

Most teachers don't know how to see the services list :>

The mailing feature might be tricky, because, at least in my school, there are almost no outbound ports open, I'm pretty sure you can't just use SMTP. It might be best to do it through HTTP Post data, but then you'd have to write proxy support.

you can set whatever port to use in the code. heck you could even use local host, or your schools own smtp server to send it to local mail. you could also just log it somewhere.
however, i know that my code works behind firewalls, if you have downloaded any of my software and encountered an error, it automatically sends me an email with the error in it. It uses my server as an SMTP server. You can do whatever you want with the code, and a little creativity

so now what do you think?