I'd like to announce kspy, an over-the-shoulder user monitoring and
logging application based on the linux "sniffer" sshsniff and OpenBSD's
kdump.

http://www.sublimation.org/ssh/kspy-1.0.tgz

In short, kspy reads ktrace output files, and displays the stdin, stdout,
and stderr of user processes as they were displayed to the user. (This is
like a .bash_history file, only all command input and output is also
preserved.) A more obvious example is tracing a shell, and then "tailing"
the output file with kspy for realtime monitoring. Familiarity with
ktrace and kdump is required for effective use of kspy.

I've also thrown in a "backdoored" login.c that sets the trace property of
shells as they are spawned at user login time.

More detail can be found in the README.

joe

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]