文件名称:
Anti-Keylogger Tester (AKLT) v3.0
开发工具:
文件大小: 169kb
下载次数: 0
上传时间: 2011-09-02
详细说明： Use this small utility to detect any malware keyloggers found on your computer Some trojans include keylogging functionalities, that will steal confidential information you are typing on your computer. To fight this threat, many HIPS applications, and also dedicated anti-keyloggers programs, now provide anti-keylogger features. However, there are many ways to monitor the keyboard, and just a few HIPS utilities are able to cover them all. Anti-KeyLogger Tester is a software using 7 different methods to monitor your keyboard, and also enables you to check your defences. AKLT provides hook based, and hookless/cyclical polling tests. The seven keylogging methods used are : · GetKeyState : This API returns the current key state for a given key. This API must be called for every keys, constantly (e.g every 10ms) in order to not miss any key the user may press. This method is less reliable than a global hook, but is more stealthy, and does not require administrator privileges. · GetAsyncKeyState : This API is similar to GetKeyState, except that it can receive keys that has been pressed, and not only the one pressed at the moment the function is called. As the previous method, it does not require administrator privileges. · DirectX : This method is using APIs from DirectInput functions family (from DINPUT.DLL). It requires that DirectX 7.0 or higher is installed, which is not a problem as DirectX is bundled with Microsoft Windows Operating Systems. It is more stealth as being less known (I've never heard of it before). Of course video games use DirectX to monitor your keyboard, but I'm not aware of any malware using DirectX for malicious purposes. As the previous method, it does not require administrator privileges. · GetKeyboardState : This test uses the GetKeyboardState() and AttachThreadInput() Windows APIs to monitor your keyboard. This function is polled every 10ms and returns back the pushed keystroke of the current window which has the focus. Like the first method, no hooks are created and it works under a restricted user account or a guest account (no administrator privileges required). · LowLevel Keyboard Hook (SetWindowsHookEx) : This test uses the well known SetWindowsHookEx() API with the WH_KEYBOARD_LL parameter to create a Low Level Keyboard Hook. This hook does not require any DLL, therefore no DLL is injected into other processes. As usual, this test works under a restricted user account. This is not a "new" test in the way of "unknown until now", instead this kind of test has been know for years, it was just added for the sake of completeness. · JournalRecord Hook (SetWindowsHookEx) : This test uses the well known SetWindowsHookEx() API with the WH_JOURNALRECORD parameter to create a Journal Record Hook. This hook does not require any DLL, therefore no DLL is injected into other processes. As usual, this test works under a restricted user account. This is not a "new" test in the way of "unknown until now", instead this kind of test has been know for years, it was just added for the sake of completeness · GetRawInputData : This test uses the GetRawInputData() API to redirect raw keyboard inputs to it. This method works without polling, and is more similar to a global hook. The API used is available only since Windows XP and above (e.g. Vista), and does not require Microsoft .NET as people could suppose (as other testing tools are using .NET). "Thanks" to Windows, it works once again on a restricted user account. What's New in This Release: [ read full changelog ] · ADDED new keylogging method : GetRawInputData · ADDED OS checking at program start to warn the user if AKLT is being ran on an untested OS ...展开收缩
(系统自动生成,下载前可以参看下载内容)
下载文件列表
相关说明
- 本站资源为会员上传分享交流与学习,如有侵犯您的权益,请联系我们删除.
- 本站是交换下载平台，提供交流渠道，下载内容来自于网络，除下载问题外，其它问题请自行百度。
- 本站已设置防盗链，请勿用迅雷、QQ旋风等多线程下载软件下载资源，下载后用WinRAR最新版进行解压.
- 如果您发现内容无法下载，请稍后再次尝试；或者到消费记录里找到下载记录反馈给我们.
- 下载后发现下载的内容跟说明不相乎，请到消费记录里找到下载记录反馈给我们，经确认后退回积分.
- 如下载前有疑问，可以通过点击"提供者"的名字，查看对方的联系方式，联系对方咨询.
