You are here

Home » Forums » General Forums » Request Apps

Portable On Screen Keyboard to thwart keystroke logging

10 posts / 0 new
Topic locked
Last post
May 11, 2006 - 4:02pm
#1
nicholschris
Offline
Last seen: 17 years 1 month ago
Joined: 2006-05-11 15:45
Portable On Screen Keyboard to thwart keystroke logging

I would really like to see the following portable app. I think it would be a good defense against keystroke loggers and especially useful for username and password entry on a public computer.

The app would consist of an on screen keyboard in a standard layout. Below the letters/numbers there would be a different letter or number. For example the letter A might have the number 3 under it. The user could either click on the A, or they could use the number 3 on the keyboard to get an A. Each launch would render a different secondary layout.

Maybe this keyboard trapping and translation would be too difficult for a portable app running as non-admin, but at the very least an onscreen keyboard would thwart most logging attempts.

A sophisticated logger might notice the file in memory and decipher what clicks translate into. A way to get around this would be for an initial .exe file to create and launch a secondary exe file. This file could be of a random size, process name, process footprint and MD5 hash.

Another possible feature could allow you to browse and load a text file as part of the string to be inserted. A partially typed and partially loaded password or username would be more difficult to decipher.

I still probably wouldn't login to my bank account with this app, but it would make it appealing to login to my Hotmail account.

Top
May 12, 2006 - 2:41am
Rob Loach
Rob Loach's picture
Offline
Last seen: 14 years 9 months ago
Developer
Joined: 2005-12-09 17:29
On-Screen Keyboard

Start -> Run -> "%SystemRoot%\system32\osk.exe" .

If you're really that worried about a key logger being present, you could also go through the running system processes with ProcessExplorer.

Rob Loach [Website] [Projects] [Blog]

Top
May 12, 2006 - 2:30pm
(Reply to #2)
nicholschris
Offline
Last seen: 17 years 1 month ago
Joined: 2006-05-11 15:45
On-Screen Keyboard

Thanks for pointing that out. I'm well aware that an onscreen keyboard exists, but...

1. It has no security features like I've described.
2. The program and it's settings are not portable. We are talking about portable apps here.
3. There is no guarantee this is installed on every system or that you'll be able to get to it. Granted there is no guarantee of anything here, but having it in your pocket increases the likelihood that you'll be able to use it.

Good idea to use process explorer, but you'd really need to use rookit revealer as well. There's a good possibility that these processes would be masked.

Top
May 13, 2006 - 1:34am
(Reply to #3)
Ryan McCue
Ryan McCue's picture
Offline
Last seen: 13 years 8 months ago
Joined: 2006-01-06 21:27
Plus

some of us don't have access to either 'Start->All Programs->Accessories->Accessability Tools->On Screen Keyboard' or 'Start->Run'
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

Top
May 13, 2006 - 1:58pm
(Reply to #4)
asmith3006
Offline
Last seen: 16 years 3 months ago
Joined: 2006-04-04 03:09
Just copy the exe and dll

Just copy the exe and dll files onto your thumb drive and run them from there. That's what I do for remote desktop at uni (where it's not on start menus or the hdd).

Top
May 13, 2006 - 4:42pm
stacoma
Offline
Last seen: 16 years 8 months ago
Joined: 2006-01-12 00:40
Which DLL?

I see "osk.exe" in the System32 Windows folder, but what DLL is needed?

Top
May 17, 2006 - 1:14am
cmmehl
Offline
Last seen: 12 years 3 months ago
Joined: 2006-01-27 09:55
Mouse Only Keyboard

Try this one - looks promising and is portable: http://myplanetsoft.com/free/mokhelp.php

From the website:
Mouse-Only Keyboard (MOK) is a simple tool that enables entering small pieces of secret text safely, using only the mouse so no hidden keylogger can find your text. You can use it to enter very secret passwords safely in non-trusted machines.

Since I found it difficult to get to the download, here's a links to a German PC magazine offering a download as well: http://www.pcwelt.de/downloads/datenschutz/datensicherheit/123036/index....

Cheers
Chris

Always on the move - love all portable apps!

Top
May 17, 2006 - 11:17am
(Reply to #7)
Lurking_Biohazard
Lurking_Biohazard's picture
Offline
Last seen: 4 years 9 months ago
Joined: 2006-02-18 18:06
Um...

I didn't have any problem getting it, but it was a sxf in german. I wanted to post a link to it without the sfx, but here is the readme:

"MOK - Mouse Only Keyboard & Anti Clipboard-Logger

(c) 2001-2005 MyPlanet Software. All rights reserved.

http://www.myplanetsoft.com

This software comes without any warranty. Use it upon your own risk.
MyPlanet Software will not be held responsible for the way you use or misuse this software.

You are not allowed to distribute this software by any means.
You can however distribute the link of MOK - Mouse Only Keyboard & Anti Clipboard-Logger Homepage or link to it.

To find more information visit:

http://www.myplanetsoft.com/free/antikeylog.php "

The homepage wants an email address to download.

________
[ ~Lurk~ ]
¯¯¯¯¯¯¯¯
All about Instant Messaging -->BigBlueBall

~Lurk~

Top
August 22, 2006 - 9:33pm
cavedeamon
Offline
Last seen: 15 years 3 weeks ago
Joined: 2006-05-20 21:58
keystroke changer

how about a program that would show a keyboard with mixed up letters and numbers and change your key stroke with one shown on the screen. It would fool a keystroke logger but you would have to learn how to type with a basicly different keyboard.

Top
August 23, 2006 - 12:00pm
(Reply to #9)
miglaugh
Offline
Last seen: 16 years 9 months ago
Joined: 2006-08-22 21:53
So keyloggers only look at

So keyloggers only look at the input derived specifically from the keyboard? I would think to truly be effective they would just grab from stdin or some buffer in memory.

Back on the "alternate keyboard" theory, what if you learned Dvorak as well as qwerty, then you could flip back and forth between the two on the on-screen keyboard and really freak a keylogger out.

In assembler class in college I had to write a rotating cipher program (think enigma) that translated all keyboard input into what looked like garbage (it just swapped out the keyboard map). I had always wanted to turn that idea into a plugin for gaim or something, think that'd be worth while?

Top
Topic locked