hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Catching A Dirty Deed
G-Mik
First, i'm not sure if this is the appropriate section so mod's feel free to move if you like.

I have a suspicion someone is up to no good at work, now i'm not certain so want to make sure but it's very difficult to check. What I need to do is be able to record what they are doing on screen, i've though of a keylogger but really they don't to press any keys to do what they are doing, they just need to click a few buttons and remove some entries. Is there any program that I can set to capture screens at regular intervals during a set period or do you have any other suggestions?
aapje
with active directory listing you can see what all your clients are doing cant you?

But i would watch out with it, as it is illegal to do and they could sue you if they find out....
tweakz20
httq://www.softwareworld.org/internet/tools_utilities/pal_pc_spy.asp

It does exactly as you want, but it is 25 dollars

QUOTE
  PAL PC Spy is a completely invisible Keyboard Recorder, Web Filter and Screen Capture utility that secretly captures anything the user sees or types on the keyboard!

PAL PC Spy operates in stealth mode so that users are unaware of its existence. If, for some reason, they discovered that it was running, they would be unable to terminate the programme!


Or here's something else i found...


QUOTE
Monitors all keystrokes made on the computer and sends them to a log (text) file. You define the location and name of the log file.
The program is hidden from the tray, so you don't know it's running.
The process is named sys007s, so it looks like a system program when it's running in the background/hidden.
You also have the option to capture the captions of all visible windows, so it's easy to monitor what programs are running. It includes an timestamp with the captions so you know when they were running, etc.
Includes a settings window so you can define the location and name of the log files, how often to capture window captions, etc.


httq://www.kellysoftware.com/software/ksLogger.asp
it says it captures window captions (don't know exactly what you're looking for).. kinda creative.... FREE this time

i'm sure there's alot out, but a good one is hard to find for free
FiNaLBeTa
Do note that you can be sewed for using a keylogger on a pc without there knowing.
What you can do if you are the network administrator, en sniff the network traffic from and to his pc. That can usually give you lots of info. and i think that that might be legal.
Search this board for more info on sniffers.
mrwhit3
There is a law suit going on right now first of its kind. A secratary is sueing the company because an employee put a key logger on her machine and she found out so yes be careful.
tweakz20
heh.. not very surprising... i saw something on the news about someone using an external (hooks up to PS/2) connection.. might be the same thing...
yeah, it's an invasion of privacy, but for some reason, this is VERY common...
if you do it, make sure you don't leave ANY PROOF (and be carefull) so it doesn't point back to you (and don't tell fellow employees).. and there ya go
gman24
If it involves data over the pipe sniff the info. I saw some vb source code that allowed screen captures at freevbcode.com. If you know vb a few modifications may be able to suit your needs.

If your in a managment postion, you may be able install a keylogger as long as you have it somewhere saying "you may be monitered, by using these computers you consent to the monitoring".
Stephen79
stick a webcam behind them lol tongue.gif

You could install something radmin (hidden in tray) and connect with view only.
BMCHaCkEr
Depends if the person agrees to some rules. I'm assuming that you are the boss or someone close to the boss. Also, Im assuming you dont like this person very much tongue.gif. With that said, what you need to do is set up a something REALLY sneaky on their computer. Not too many people know about it but there is a small hardware keylogger that plugs in between the cpu and the keyboard. Usually, the more expensive, the more keystrokes it can record. But, since you're not trying to record keystrokes mainly (hey, keyloggers might help you too), since using extra software may be illegal, split the monitor, run it into a splitter, and put an extra monitor somewhere else. The only legal way to add a screen capture utility is to warn them that their activities may be under surveillance.
Richie
He made no mention about it being legal or even ethical. What you want in this case is a good old fashioned trojan horse like Beast or optix (I like beast). Just install it on their machine, connect to them, and tell the screen capture part to save screenshots at 1 second intervals. That should catch whatever you're looking for.
Spookie
Unless your in a position that allows you the ability to "monitor" your users in that fashion, and you have the written approval (CYA)I would not pursue it any further.

Your company may have a policy in place that you agreed to before obtaining your network account. If your taking this action on your own initiative, just remember a rule of thumb thats quite simple.

Never let your personal emotions cloud your professional judgement.

You may, and can end up on the back end of this situation, and then your career could be placed on hold. Especially if your looking to get into the InfoSec side of the house in the Government sector, where most positions require a security clearance. blink.gif
Spookie
I believe this is the article that was being mentioned perviously.

Would-be whistleblower indicted for keyboard tap
u533m3n0t
Thanks for the read. And go figure...the government officials don't want to have their hands dirty with what it takes to get the information they wanted. LOL..Oh wait...dusting gray off of hat so it's a white one again. <Composing self> "That was improper use of available technologies for certain. " LOL
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.