News for hackers. Stuff that matters.

A comment on The Linux Security Circus: On GUI isolation. Parent comment

Re:The Linux Security Circus: On GUI isolation by ef47d35620c1 on Thursday April 17, 2014 @10:15PM (#7607649)
Yes. Here's a Windows keystroke logger (with source code) that uses GetAsyncKeyState. I wrote this years ago to show an IT auditor that a restricted user could run a keystroke logger (he was adamant that was not possible). It works on Windows XP to Windows 8.

http://16s.us/software/16k/

[ Parent | on HN ]
Re:The Linux Security Circus: On GUI isolation by CyberShadow on Friday April 18, 2014 @02:08AM (#7608132)
GetAsyncKeyState will not reflect input that is sent to an elevated window. So, it does not break UIPI.
[ Parent | on HN ]
Re:The Linux Security Circus: On GUI isolation by aktau on Friday April 18, 2014 @02:18PM (#7610484)
Oh man! I only wrote one program ever that could be used for malicious intent if so desired, and that was a GetAsyncKeyState()-based keylogger. Simple to write and so cool. The toughest part was figuring out how to register itself as a windows service and give it a good name so most people would ignore it. I ended up making a separate executable for that.

Anyway, I got curious to see how my coding style had evolved since I was a kid so I dug it up for all to see: https://gist.github.com/aktau/11057438 (I was young, be gentle).

[ Parent | on HN ]
Re:The Linux Security Circus: On GUI isolation by atesti on Saturday April 19, 2014 @02:15PM (#7614174)
The download of the exe file gives an error message, the cpp and txt files are fine though.
[ Parent | on HN ]