[Master]

================================
************************************
#INTRODUCTION
---------------------------------------------------------
When you do something online, say online banking, between your typing the login credentials on your keyboard and the time you log in to your bank's website, your keystrokes will travel along a path in the operating system to reach the destination app, so your bank can verify your identity and grant you access.

Many points along this path, cyber thieves can physically or remotely install malicious malware, or keyloggers, on your computer to intercept your keystrokes so they can steal your private information for criminal purposes. A keylogger, by Wikipedia's definition, is a software program "designed to work on the target computer's operating system." In recent years, keylogging malware has become a top security threat and a major cause for data loss and identity theft, both to individuals and businesses.

================================
************************************
#HOW KEYSCRAMBLER WORKS?
---------------------------------------------------------

1. The moment you begin to type, KeyScrambler begins encrypting your keystrokes in real time at the keyboard driver level. Because KeyScrambler is located in the kernel, deep in the operating system, bypassing KeyScrambler's encryption is difficult.


2. Your keystrokes remain encrypted as they travel through the vulnerable path. If a keylogger happened to be attacking your computer, and if it had escaped your anti-virus program's detection, the keystrokes it captured would be indecipherable and the thieves would get nothing from you.


3. Your keystrokes reach the destination app, the decryption module of KeyScrambler goes to work, and you see exactly the keys you've typed. Here the journey ends with your info intact.

================================
************************************
#SCREENSHOTS AND QUICK GUIDE
---------------------------------------------------------




================================
************************************
#LINKS AND DOWNLOAD PAGE
----------------------------------------------------------
1# Offical Free Version
2# Offical Premium Version (with key but torrent)

VIRUS SCAN RESULTS FOR 1#

[Brawler]

Cool.... However, it I don't think it would stop MITM style physical key-logging devices.

I wonder if you could setup the encryption to come directly from the keyboard itself.

[Oni]

Interesting. Wouldn't stop MITM as @Brawler said.

[roger_smith]

Interesting. Wouldn't stop MITM as @Brawler said.

Honestly, if there's a MITM hardware device, you have bigger issues than just a keylogger.

[Brawler]

Honestly, if there's a MITM hardware device, you have bigger issues than just a keylogger.

I agree.


-=-=-=-=-=-=-=-=-=-=-=-

However, wouldn't the information have to be transmitted to the application in plaintext at some point....?

In which case you would just setup your keylogger to scrape this information on transmission.

[Dong]

I agree.


-=-=-=-=-=-=-=-=-=-=-=-

However, wouldn't the information have to be transmitted to the application in plaintext at some point....?

In which case you would just setup your keylogger to scrape this information on transmission.

I don't know much about this KeyScrambler application, but I would assume that it encrypts all of the keystrokes at a pretty low level in the system. It probably catches and encrypts them somewhere at the driver-level therefore forcing a keylogging application to intercept the ciphertext. I'm guessing that before the keystroke data is passed to the application, KeyScrambler has a system in place to intercept the ciphertext and decrypt it.

Since, like you said, the information MUST be passed to the application as plaintext at some point, it's most definitely possible to capture the data. Instead of implementing a system-wide hook and intercepting keyboard events, you probably want to setup the hook, filter input events based on which application the event pertains to and intercept those events in order to log the data. I don't know all that much about OS programming, but it sounds like a pretty feasible way to get around KeyScrambler.

--Edit--

Haven't tested this, but it seems to make sense: https://hackyard.net/keyscrambler-is-ineffective

[Master]

[Ryuk]

Pretty nice , thanks for the share mate .
I've already tested KeyScreambler and it's works pretty good to be honest , not sure why you made this thread on Hacking tools tho :o

[Master]

Pretty nice , thanks for the share mate .
I've already tested KeyScreambler and it's works pretty good to be honest , not sure why you made this thread on Hacking tools tho :o

Well it should be in anti-hacking tools if we had that section.

[riyo]

i agree its a must.
and consider that bank logins and other sites that deals with money use TLS for passwords, so with keyscrambler its quit hard to fetch pass... unless you fall for fishing..