OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Christian Edward Gruber (cgruberisrafil.net)
Date: Thu May 02 2002 - 18:47:26 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Truly frightening. Any CSIS or CSE agents on this list?

    Just checking...

    cg.
    ----- Original Message -----
    From: "joe" <joesublimation.org>
    To: <miscopenbsd.org>
    Sent: Thursday, May 02, 2002 7:02 PM
    Subject: kspy v1.0

    > I'd like to announce kspy, an over-the-shoulder user monitoring and
    > logging application based on the linux "sniffer" sshsniff and OpenBSD's
    > kdump.
    >
    > http://www.sublimation.org/ssh/kspy-1.0.tgz
    >
    > In short, kspy reads ktrace output files, and displays the stdin, stdout,
    > and stderr of user processes as they were displayed to the user. (This is
    > like a .bash_history file, only all command input and output is also
    > preserved.) A more obvious example is tracing a shell, and then "tailing"
    > the output file with kspy for realtime monitoring. Familiarity with
    > ktrace and kdump is required for effective use of kspy.
    >
    > I've also thrown in a "backdoored" login.c that sets the trace property of
    > shells as they are spawned at user login time.
    >
    > More detail can be found in the README.
    >
    > joe