Sponsored Content
Full Discussion: terminal capture
Special Forums Cybersecurity terminal capture Post 7559 by loadc on Thursday 27th of September 2001 06:24:44 PM
Old 09-27-2001
More and more....

I got yer sreen capture right here.....


It's late, I'm tired, anyway, you need to check out ttywatcher, this is a nice little screen watcher util for unix, I forget exactly how it works, but it is cool. You'll have to compile it,a nd it may need some libs, I've put it on Solaris and IRIX, it worked great, it was just a littel unstable at first, had to tweak it some...

The next thing is, a favorite of many sneaky people, "xwd", this nice little thing comes with most all unix systems and also works with "xwud". What it is: X-windows Dump, it basically takes an Xwindows session and dumps it (or a particular window) to a file, you can then read that file with "xwud", or X-windows UnDump.

2600 did an article on this sometime back as an eavesdropping method, it's been around for quite a while, and it does work, but you need to be on the same host to dump the user's session. And it is a kind of snapshot, not real-time.

I suppose, if one wanted to go to the trouble of seeing what a user is seeing without having a loging to the box they are on, you could hook up a sniffer to the network, I'm implying here that YOU are an admin and have this sort of authority at your site, other wise, DON'T EVEN THINK OF DOING THIS, and inline it to a reconstruction prog of some sort, take a look at the bpf stuff, I think I read of something similar to this already being out.


In all seriousness, these are ideas really for eavesdropping on your users, many a more seasoned SA/NA than I have stated that you should be paranoid about your security, but not to the point of being a hinderance to the usage of the system as it was intended. I can't come up with a good reason to implement these things where I work, I do this at home for kicks and to see how it works, but I really don't need to look over my users shoulders, they're already convinced I'm omniscient anyway....


Hope this helps, I apolagize for the soapboxin',


loadc
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

terminal capture

I have to capture a remote terminal from the Unix machine I tried with cat /dev/pts/0 (remote terminal) > /dev/tty1 (Unix terminal) but its is blocking the remote terminal. (2 Replies)
Discussion started by: krishonv_2
2 Replies

2. UNIX for Advanced & Expert Users

connecting to unix through hyper terminal - as a dumb terminal

I just changed from windows NT to XP and I am no longer able to connect to my unix system. I used to use hyper terminal -- which acts as dumb terminal to my main frame unix system. I think one of the options used to be "direct to comX". This option isn't listed now. I use a serial port and the... (2 Replies)
Discussion started by: michelle
2 Replies

3. AIX

Capture IP Adress

hello I need for a script to capture the ip address from the connected user. I have 5 logical partitions. With "who", i have the ip adress, but only for 2 servers. Do you know another command to know the ip address of connected clients ? thank you (14 Replies)
Discussion started by: pascalbout
14 Replies

4. UNIX for Advanced & Expert Users

Pseudo-terminal will not be allocated because stdin is not a terminal.

I am trying to automate a SSH login using Keys using the following command ssh -i id_rsa usernamw@ipaddr. I am successful in doing this and i am getting the Warning Screen and I logon successfully. but when I am executing the command tail -1cf put.dat | ssh -i id_rsa username@ipaddr > get.dat ... (1 Reply)
Discussion started by: Shivdatta
1 Replies

5. UNIX for Dummies Questions & Answers

Gnuplot wxt terminal vs x11 terminal

Hi, I installed ubuntu recently on my pc. And I installed gnuplot as well. When I first started working with gnuplot it was working . I did a plot and when I wanted to fit my data something happened and not the default terminal of gnuplot is xwt! I changed it to: set terminal x11, but it... (0 Replies)
Discussion started by: cosmologist
0 Replies

6. UNIX for Dummies Questions & Answers

Does DOS has a terminal or pseudo terminal?

I am wondering if the DOS console works like the unix terminal? (1 Reply)
Discussion started by: vistastar
1 Replies

7. Shell Programming and Scripting

How to Capture a Unix Terminal Session?

Hi All, I want to capture all the operations performed in the terminal. So to achieve this I used “script” command. This works as I expected. But this command captures all the standard output which is redirected to terminal. For example if i “tail” a file, even the tail output is getting... (2 Replies)
Discussion started by: kalpeer
2 Replies

8. UNIX for Dummies Questions & Answers

A terminal controlling a terminal...

Hi all... Consider me a dummy here... I do not want any code or for anyone to show me how to do it at this time, but here is the question:- I have had this brainstorm to be able to control the AudioScope.sh program in the "Shell Scripting And Programming" forum... Is it possible, by... (4 Replies)
Discussion started by: wisecracker
4 Replies

9. Shell Programming and Scripting

Cannot get terminal application to launch with a graphical launcher when successful in terminal

I have been having an extremely annoying problem. For the record, I am relatively new at this. I've only been working with unix-based OS's for roughly two years, mostly Xubuntu and some Kali. I am pretty familiar with the BASH language, as that's the default shell for debian. Now, I've made this... (16 Replies)
Discussion started by: Huitzilopochtli
16 Replies

10. Shell Programming and Scripting

Print Terminal Output Exactly how it Appears in the Terminal to a New Text File

Hello All, I have a text file containing output from a command that contains lots of escape/control characters that when viewed using vi or view, looks like jibberish. But when viewed using the cat command the output is formatted properly. Is there any way to take the output from the cat... (7 Replies)
Discussion started by: mrm5102
7 Replies
VCS(4)							     Linux Programmer's Manual							    VCS(4)

NAME
vcs, vcsa - virtual console memory DESCRIPTION
/dev/vcs0 is a character device with major number 7 and minor number 0, usually of mode 0644 and owner root.tty. It refers to the memory of the currently displayed virtual console terminal. /dev/vcs[1-63] are character devices for virtual console terminals, they have major number 7 and minor number 1 to 63, usually mode 0644 and owner root.tty. /dev/vcsa[0-63] are the same, but including attributes, and prefixed with four bytes giving the screen dimensions and cursor position: lines, columns, x, y. (x = y = 0 at the top left corner of the screen.) These replace the screendump ioctls of console(4), so the system administrator can control access using file system permissions. The devices for the first eight virtual consoles may be created by: for x in 0 1 2 3 4 5 6 7 8; do mknod -m 644 /dev/vcs$x c 7 $x; mknod -m 644 /dev/vcsa$x c 7 $[$x+128]; done chown root:tty /dev/vcs* No ioctl() requests are supported. EXAMPLES
You may do a screendump on vt3 by switching to vt1 and typing cat /dev/vcs3 >foo. Note that the output does not contain newline characters, so some processing may be required, like in fold -w 81 /dev/vcs3 | lpr or (horrors) setterm -dump 3 -file /proc/self/fd/1. The /dev/vcsa0 device is used for Braille support. This program displays the character and screen attributes under the cursor of the second virtual console, then changes the background color there: #include <unistd.h> #include <stdio.h> #include <fcntl.h> int main() { int fd; struct {char lines, cols, x, y;} scrn; char ch, attrib; fd = open("/dev/vcsa2", O_RDWR); (void)read(fd, &scrn, 4); (void)lseek(fd, 4 + 2*(scrn.y*scrn.cols + scrn.x), 0); (void)read(fd, &ch, 1); (void)read(fd, &attrib, 1); printf("ch='%c' attrib=0x%02x ", ch, attrib); attrib ^= 0x10; (void)lseek(fd, -1, 1); (void)write(fd, &attrib, 1); return 0; } FILES
/dev/vcs[0-63] /dev/vcsa[0-63] AUTHOR
Andries Brouwer <aeb@cwi.nl> HISTORY
Introduced with version 1.1.92 of the Linux kernel. SEE ALSO
console(4), tty(4), ttys(4), selection(1) Linux 1995-02-19 VCS(4)
All times are GMT -4. The time now is 12:49 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy