Re: keyscan session crash

[Carlos Perez <carlos_perez () darkoperator com>]

The script uses the same API calls only that it pulls the data from the buffer on a given interval to make sure that is 
the sessions ever dies you only lost the data after the last retrieve, 
On Nov 29, 2011, at 5:11 PM, Guglielmo Scaiola wrote:

> Mmmh ,thank you Carlos…
> I think is better to use the meterpreter script “keylog_recorder”, if I am not in error, with this script I don’t 
> loose my data if the session crash, the session is logged on a txt file….is correct?
>  
> Regards
>  
> Guglielmo Scaiola
> MCT-MCSE-CEH-CHFI-ECSA-L.A.Iso27001-Security+
> cell.:+39-347-2448286
> mail:gs () miproparma com
>  
> <image001.gif>
>  
>  
>  
> From: Carlos Perez [mailto:carlos_perez () darkoperator com] 
> Sent: martedì 29 novembre 2011 00:43
> To: Guglielmo Scaiola
> Cc: framework () spool metasploit com
> Subject: Re: [framework] keyscan session crash
>  
> Can you provide a bit more info like privilege level, OS, architecture of the meterpreter session, architecture for 
> OS and output from your framework.log in ~/.maf4/logs, when it crashed all keystrokes saved in the memory buffer of 
> the meterpreter session are lost. 
> On Nov 28, 2011, at 7:31 PM, Guglielmo Scaiola wrote:
>
>
> When I am using meterpreter keylogger “keyscan_start” and my session crash before reading the content of the buffer 
> with “keyscan_dump”, there are a log file where I can find the information or I have definitively lost my keylogging
>  
> Guglielmo
>  
>  
>  
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework