2KKUU7ita

110
Part II: Putting Ethical Hacking in Motion
Keystroke logging
One of the best techniques for capturing passwords is remote keystroke
logging — the use of software or hardware to record keystrokes as they’re
typed into the computer.
Be careful with keystroke logging. Even with good intentions, monitoring
employees raises various legal issues if it’s not done correctly. Discuss
with your legal counsel what you’ll be doing, ask for their guidance, and get
approval from upper management.
Logging tools
With keystroke-logging tools, you can assess the log files of your application
to see what passwords people are using:
✓ Keystroke-logging applications can be installed on the monitored computer.
I recommend that you check out eBlaster and Spector Pro by
SpectorSoft (www.spectorsoft.com). Another popular tool is Invisible
KeyLogger Stealth, available at www.amecisco.com/iks.htm. Dozens
of other such tools are available on the Internet.
✓ Hardware-based tools, such as KeyGhost (www.keyghost.com), fit
between the keyboard and the computer or replace the keyboard
altogether.
A keystroke-logging tool installed on a shared computer can capture the passwords
of every user who logs in.
Countermeasures
The best defense against the installation of keystroke-logging software on
your systems is to use an anti-malware program or similar endpoint protection
software that monitors the local host. It’s not foolproof but can help. As
for physical keyloggers, you’ll need to visually inspect each system.
The potential for hackers to install keystroke-logging software is another
reason to ensure that your users aren’t downloading and installing random
shareware or opening attachments in unsolicited e-mails. Consider locking
down your desktops by setting the appropriate user rights through local or
group security policy in Windows. Alternatively, you could use a commercial
lockdown program, such as Fortres 101 (www.fortresgrand.com) for
Windows or Deep Freeze Enterprise (www.faronics.com/products/deepfreeze/enterprise)
for Windows, Linux, and Mac OS X.
Weak password storage
Many legacy and standalone applications, such as e-mail, dial-up network
connections, and accounting software, store passwords locally, making them
vulnerable to password hacking. By performing a basic text search, I’ve found
passwords stored in cleartext on the local hard drives of machines. You can
automate the process even further by using a program called Identity Finder