Collaborate Disseminate
I’m connecting to a remote machine via Teamviewer, let’s assume it’s trusted. Is it possible for a MITM or virus on my local (client) machine to detect keys I enter using my remote machine’s on-screen keyboard? Or would tha… Continue reading Teamviewer logging remote keystroke events
I have QWERT keyboard, but I have set the keyboard settings in Windows to DVORAK. So if I type “test” it comes out as “y.oy”. Would the key logger log “test” or “y.oy” in its records?
Continue reading Would using a QWERTY keyboard with DVORAK output cause keylogger to log DVORAK?
I have QWERT keyboard, but I have set the keyboard settings in Windows to DVORAK. So if I type “test” it comes out as “y.oy”. Would the key logger log “test” or “y.oy” in its records?
Continue reading Would using a QWERTY keyboard with DVORAK output cause keylogger to log DVORAK?
Suppose we are on a compromised computer (for example infested with trojans logging key presses or taking screenshots) and for some reason we have to generate a number that’s supposed to be secret for the purpose of using in … Continue reading Generating a secret on a compromised computer
A password manager (like KeePass) offers you the option to copy and paste your password (the clipboard is cleared after pasting/timeout) or to emulate a keyboard and “type” the password for the user.
What are the cases where… Continue reading Keyboard vs clipboard password manager threat models
I’m working for a company that wants to allow anyone to embed an iframe in which users can buy products on potentially any site. So it would be a typical use case for users to enter in their credit card info into this iframe…. Continue reading iframe Checkout Procedure
I’m working for a company that wants to allow anyone to embed an iframe in which users can buy products on potentially any site. So it would be a typical use case for users to enter in their credit card info into this iframe…. Continue reading iframe Checkout Procedure
I know that keyloggers primarily work by logging key presses, either through software or hardware. And some will also check for clipboard contents.
But can a keylogger (or some other malware) intercept the data when a passwo… Continue reading Can keyloggers intercept passwords when a password manager autofills a field?
assuming the following:
publicly reachable webserver – administered via SSH
no X window system installed and no X11 forwarding through SSH
attacker has gained access and is able to run a shell as my regular non-root admin u… Continue reading Is it possible for an attacker to log my keystrokes on a linux server which has no X window system?
assuming the following:
publicly reachable webserver – administered via SSH
no X window system installed and no X11 forwarding through SSH
attacker has gained access and is able to run a shell as my regular non-root admin u… Continue reading Is it possible for an attacker to log my keystrokes on a linux server which has no X window system?