Prevent Keylogging
Posted: 20 Oct 2016 20:44
Hello, I have a simple login application that uses MD5 hash to hash user logins, then compare them.
After they login they get to go do stuff.
What I'm worried about is the user running a malicious batch file.
If you spam input in CMD and type a history of what you typed will be outputted to the screen.
This could go into a file and then so much for the MD5 hash, you have their password.
My question is, how can you make doskey clear the history?
After they login they get to go do stuff.
What I'm worried about is the user running a malicious batch file.
If you spam input in CMD and type
Code: Select all
doskey /historyThis could go into a file and then so much for the MD5 hash, you have their password.
My question is, how can you make doskey clear the history?