Technology Education Blog

keylogger is a software or hardware that captures every words typed and saves them for retrieval usually by the attacker. They have been used by hackers to capture logins,steal security details, numbers, etc. Here we will using it to capture the keyword/keystrokes of a Victim.

Start Metasploit and let's get started.


Before starting keylogger, You need to migrate the Meterpreter to the application or process we want the keystrokes source to be from. Let's see what processes are running on the victim system by typing:

meterpreter >ps

You will Notice in the screenshot below that we have the list of every process running on the victim system. Here is   1/3 way we can get down process listing with a Process ID (PID) of 912, Open your  Notepad application.




Let's proceed to capture any keystrokes entered.

Type:
meterpreter > migrate 912

 Start the keylogger

Now we have to divert from the Meterpreter to the Notepad, we can embed the keylogger.

Metasploit's  Meterpreter has inbuilt software keylogger called keyscan. To start/run it in the victim system, just type

meterpreter> keyscan_start

Meterpreter will now start logging every keystroke entered into the Notepad application.

Write a Short Note on the Victim System

Now go to your victim system and write a short note to make sure it works.

As you can see in screenshot above, Cheatah has written a note to Stud, asking him to come over while her boyfriend is not around.
\


Now, go back to your system with Meterpreter running on Metasploit. We can dump all of the keystrokes that were entered on victims computer. By simply type:

meterpreter> keyscan_dump

All the keystroke that has been captured including the tabs and end of line characters.