melotic / ThreateningYeti

A Respondus LockDown Browser Bypass
GNU General Public License v3.0
67 stars 11 forks source link

Filter Keylogger and Screen Recording Input #9

Closed csirikak closed 4 years ago

csirikak commented 4 years ago

According to the Respondus website https://web.respondus.com/privacy/privacy-additional-monitor/, mouse, keyboard and screen activity is monitored by the LockDown Browser. Does ThreateningYeti currently filter user input such that keyboard inputs are only recorded while the browser is in view, and screen activity limited only to the browser window?

melotic commented 4 years ago

Yes. LDB installs hooks that monitor mouse and keyboard input, and ThreatneingYeti will disable those hooks. https://github.com/melotic/ThreateningYeti/blob/master/ThreateningYeti/hooks.cpp#L20-L51

csirikak commented 4 years ago

How about screen recording? Also since the hooks are disabled, do you know if the keylogger and mouse data is sent to Respondus servers?

melotic commented 4 years ago

Keyboard and mouse data are not sent to Respdonus servers, even if the hooks weren't disabled.