Prevent Keylogging

Discussion forum for all Windows batch related topics.

Moderator: DosItHelp

Post Reply
Message
Author
SirJosh3917
Posts: 36
Joined: 02 May 2016 18:59

Prevent Keylogging

#1 Post by SirJosh3917 » 20 Oct 2016 20:44

Hello, I have a simple login application that uses MD5 hash to hash user logins, then compare them.
After they login they get to go do stuff.
What I'm worried about is the user running a malicious batch file.
If you spam input in CMD and type

Code: Select all

doskey /history
a history of what you typed will be outputted to the screen.
This could go into a file and then so much for the MD5 hash, you have their password.

My question is, how can you make doskey clear the history?

Squashman
Expert
Posts: 4486
Joined: 23 Dec 2011 13:59

Re: Prevent Keylogging

#2 Post by Squashman » 20 Oct 2016 21:10

Can't test this from my phone but the help file says

Code: Select all

/REINSTALL         Install a new copy of Doskey (clears the buffer).


Figured we had discussed this in the past.
viewtopic.php?t=5982

Post Reply