In this section, we'll look at how we can log any mouse or keyboard event that happens on the target computer. We will do that using a plugin that comes with Meterpreter. We have our Meterpreter, so we just have to run keyscan_start, as follows:
Suppose that we want to go to Facebook and log in to an account. If we look at the URL for the site, it includes HTTPS, and there is nothing wrong with it. Generally, we need a password to log in to an account. If we come back to our Terminal, we can see a log of everything that has been recorded by typing keyscan_dump. With that command, we can see that the target user typed in www.facebook.com, hit Enter, and put in their username, which was [email protected], and the password 123456:
This will record everything that happens on the computer. We can stop running keyscan_stop, and it will stop the sniffer.
Another cool...