When we return to the previous administrative log on and reopen actual spy, it has recorded not only all of the keystrokes from the other log in but also applications that were run and system processes such as logging in and out as well.

Not so sneaky for anyone that is clued in. I don’t know if this application has been intentionally configured to do that but it would be considered bad design. Yes the background process called System (32-bit) has an icon that looks like a sleuth which actually gives it away immediately. When we sign into another user on the same system the application is still running as a background process.Ĭan you see any suspicious processes in Task Manager? After running the program and setting it up we begin monitoring and then hide the application. Windows Defender actually detected this as malware right away so I had to create an exception for the program and needed to restore the application from quarantine. This exercise will be about using key loggers which record key strokes input by the user to capture user credentials as they are typed in.įirst of all we will install actualspy which is a key logger which will enable to begin on system startup. This will be done through 2 different methods, the use of key loggers and the use of Cain and Abel to sniff passwords, redirect the appropriate network traffic and crack the sniffed out passwords. This lab will be about using various methods to obtain passwords that have been used on the classroom domain.

Cain and abel 0.0.0.0 fix