How to Fool a Keylogger

[gopi_vbboy]

These days Agents spy on u everywhere, in college, at work, maybe a trojan virus on your home PC which keylogs your paswords and mails it to someone else. If u think u r being logged, try this:

Whenever u have to type a password, never type the complete password in one go, ie, if your password is WINDOWS, u should type NDOW, then move cursor to start of the password field using the mouse ONLY, then type WI, then move cursor to end using the mouse and type S. This way the logger will record your keystrokes as ndowwis instead of WINDOWS.

Haha, keylogger fooled....

The Data recorded by Keylogger is now not WINDOWS BUT NDOWWIS

U can use several variations of this.......the idea is do enter data but with some mouse activities or cursor activities in between......i mean not to enter the data in one go.........even now Virtual Keyboards are available......this is little time consuming but all time safe method.

[iMav]

I don't know why but I am just chuckling at this one.

[victor_rambo]

But how shall you fool HTTP packet sniffers?

[gopi_vbboy]

I was talking abt the general keylogger program which record the keystrokes.....always don;t try to type ur Password in one go....

[shaunak]

Quite a nifty trick...

[the.kaushik]

i am not sure but for password we can use the MS virtual kb also also now a days banks are giving virtual KB on there site like citibank

[ThinkFree]

I already use that method while using shared computers.

[gopi_vbboy]

ya right...now virtual keyboards are present......but its clever always not to go the direct way.say for gmail when u login d....we don;t have any virtual keyboard......

the things is do somethin in between entering password...this mixes the data the keylogger records

[NucleusKore]

Nice trick, never thought about it

And Rohan, can http packet sniffers work if you use ssl for transmission?

[thewisecrab]

Now why didnt I think Of that?

[sreenidhi88]

nice .had not thought of it before.agents can still try variants of wiodnws and still get the password.
i had seen few tutorials from irongeek months before.i am not sure if it is packet sniffing or port sniffing .tht guy used nmap and i didnt follow the rest of the tutorial.
atlast the output was

www.gmail.com/jkhfashasasjlajs"VICTIM'S USERNAME"?!@##kdhfkdhf"VICTIM'S PASSWORD"

[╬Switch╬]

I do that and also mix it with the username as well.

[krates]

Originally Posted by gopi_vbboy

Whenever u have to type a password, never type the complete password in one go, ie, if your password is WINDOWS, u should type NDOW, then move cursor to start of the password field using the mouse ONLY, then type WI, then move cursor to end using the mouse and type S. This way the logger will record your keystrokes as ndowwis instead of WINDOWS.

if someone start using this trick he will waste so much time

[Cool Joe]

^^Hey, for your security, you need to sacrifice some things.

Nice trick bro. Good one.
BTW, what if all our chat messages are logged? It'll be damn stupid trying to type every chat message like that.

[Garbage]

wasting a minute is more worth than compromising your account... isn't it ??

@ NucleusKore,

If you use SSL, packet sniffer can still capture your data. Only difference is that, your data is encrypted, and it's "more" (it's a relative term I know.. ) difficult to recover password or other things from that dump.

[MetalheadGautham]

Originally Posted by iMav

I don't know why but I am just chuckling at this one.

+1

[R2K]

ya.. why r u taking so much pain for just typing a password..instead use
MS virtual kb....simple

[casanova]

That virtual keyboards are prone to back sniffing. Anybody can look above your shoulders.

[R2K]

^^
well.... in that case ...don't u think those back sniffers can record ur passwords even when u are typing it on a physical keyboard

[NucleusKore]

Originally Posted by Garbage

and it's "more" (it's a relative term I know.. ) difficult to recover password or other things from that dump.

In that case I think it would be advisable to login using the increased security feature provided in yahoo mail and hotmail. Gmail anyway uses ssl. Just mentioning it for th ebenefit of our readers.

[thewisecrab]

Originally Posted by MetalheadGautham

+1

+2
It's still good..nevertheless

[gopi_vbboy]

Hey

thanks u for all that pouring replies

See its all upto u....u want to be secure .......its better to be clever

i remember my fav quote abt security

The big lie of computer security is that security improves by imposing complex passwords on users. In real life, people write down anything they can't remember. Security is increased by designing for the way humans actually behave. (Jakob Nielsen)

[sreenidhi88]

Originally Posted by R2K

^^
well.... in that case ...don't u think those back sniffers can record ur passwords even when u are typing it on a physical keyboard

can anyone tell me what is back sniffing( someone sniffing behind u )???

[Charan]

Originally Posted by sreenidhi88

can anyone tell me what is back sniffing( someone sniffing behind u )???

ROFLMAO

[Ecko]

+1 to ur trick
Atleast its innovatiive like Google

[iinfi]

nice you posted this here.

i v been using this stuff for 4-5 years. it jus occurred to me once while logging into my bank site, i always use this for bank sites only.
there are several methods by which your a/c can be compromised and this trick is not a comprehensive security tool.
this trick will easily fool simple keyloggers whose sole aim is to keep a tab on ur key strokes.

[R2K]

Originally Posted by sreenidhi88

can anyone tell me what is back sniffing( someone sniffing behind u )???

back sniifers are those ppl like u who just pry on other peoples movements and keep watching them for some reason

[ax3]

@gopi-ji ....... nice 1 .......

[gopi_vbboy]

@all
thanks for u replies

[Krazzy Warrior]

nice