All right, so how's everybody doing?
I'm thinking that it's time that I tell you about key logging in this particular section because it's
part of the maintaining access process.
So.
What I mean is that this is going to help you to be permanent on the system.
So here's my take on using key logging is about ethics.
So if it's clearly not described in this scope that you've already established with your client, then
I would recommend you hesitate logging your target's keyboard.
So it's very common to see employers personal information, such as chat messages when you perform key
logging, because almost every company, because humans are humans, employers will hold their personal
data on work computers and use these computers to look at their personal email, social media accounts
and whatever else.
In fact, I I've seen some penetration testers doing key logging as soon as they gain access to a system.
I don't consider that purely ethical, in fact, I don't like it at all.
It's really not good unless you are doing a social engineering or a phishing attack for the purpose
of gaining awareness and again, make sure that it's part of the scope you've already established with
your client.
So MSF allows you to capture all keyboard input from the system without writing anything to disk, leaving
a minimal forensic footprint for investigators to follow up on later.
So was perfect for getting passwords and user accounts and, well, all sorts of other valuable information.
MSF offers several ways for cataloging, such as interpreters scripts and post modules.
So let's have a look and see how it works.
So here I have a system level session on the target.
And I'm going to conduct everything forward from that session.
So normally having a session with privileged user rights is good.
But when you try to record Ki's.
You will need to downgrade and then migrate the exact process so that you can read the key logs of a
specific user.
So it's always good to migrate, explore XY to record what the user types, however, to record the
windows long information, you will have to migrate when log on dot XY.
Yes.
S Explorer got EXI.
To see the pide value of exploratory, actually.
And in this case, it is 41, 88.
So that's my great 41 Eighty-eight.
And the migration completed successfully.
So get UID.
And yes, so now you downgrade our user.
I'll first start with Stapper extension's command guys can start H.
Guys can start command will start Keylong.
Now it has a few parameters, so type can start the.
And now the keystrokes are the current user will be saved.
And then the parameter will also record the active window for us.
So open Métis boy three now and let's write something.
So I have a password file here.
And I'm going to add some passwords here.
And we'll do a search in the Explorer.
And over the command line list users.
Let's display a user.
And let's make a remote connection to tend tend to dot 12.
And I'll do many things here.
So.
Turn back to Kelly and just type Kesk and dump.
Yes, see, that's very good, so everything I type within the active windows are here.
And now I'm going to stop recording.
My typing key can stop.
OK, so these SDD API commands are good to use, but you will be responsible for what you do.
And now for the next flavor, it's a post module.
So here is the information of this module.
Actually, there is also interpretor script for this module, but unfortunately, it doesn't work properly.
So all you have to do is type run and then the name of the post module.
And and we'll start.
So now it's open metastable three and type something again.
I'm going to add new passwords.
And display users from Power Show.
Run an application.
OK, and then go back to Colly type control and see to stop recording.
And it's got.
So copy this file pad.
Open a new tab.
Them and then pace the path.
And then this is what I typed on matters voidable three.
So key logging may provide you access to spread throughout the network whenever you compromise and administrator
computer, however, it can also bring some serious privacy problems.
So I would advise you again to if you use it, to use it, please, respectfully.