Capture Login Creds

[bobtheman]

whats a better way to capture login credentials other than using a keylogger? I have a local machine im wanting to do some test's with and a lot of the key-loggers im finding make themselves "known" to the user.

[bobbyb1980]

Read some tutorials on "the wifi pineapple."

You can also take meterpreter scripts, and alter them so they look like something they're not. There are several modules for keylogging within the meterpreter dir of msf3. For the most part they're simple scripts that can be easily modified.

Your question is pretty general, so a little difficult to specifically answer.

[Radau]

Meterpreter or a Remote Administration Tool with a built in keylogger/screencapper would be a good place to start, I think there's a section on Hackforums, I don't know if its still there though, haven't been on that website in a long time

[bobtheman]

thanks for the replys.

im basically wanting to use a local machine, a computer i have physical access to, to record all login credentials .

[Raziel]

Hmm. Maybe build a phishing splash page asking them to log in again, and then set it up in startup folder.

But I think the msf will be your best bet.

[Infiltrator]

Meterpreter or a Remote Administration Tool with a built in keylogger/screencapper would be a good place to start, I think there's a section on Hackforums, I don't know if its still there though, haven't been on that website in a long time

As a matter of fact, there are a lot of talks on RATs in the Hackforums even tutorials. I just became a member and its amazing to see how many threads are created on the topic. Not to mention, that in every question or answer, there will always be the abbreviation RAT, or people suggesting the use of RAT.