Windows Manage Process Migration
This module will migrate a Meterpreter session from one process to another. A given process PID to migrate to or the module can spawn one and migrate to that newly spawned process.
Rank
- Normal
Authors
- Carlos Perez < carlos_perez [at] darkoperator.com >
Development
Similar Modules
- post/windows/manage/add_user_domain
- post/windows/manage/autoroute
- post/windows/manage/delete_user
- post/windows/manage/download_exec
- post/windows/manage/enable_rdp
- post/windows/manage/inject_ca
- post/windows/manage/inject_host
- post/windows/manage/multi_meterpreter_inject
- post/windows/manage/nbd_server
- post/windows/manage/payload_inject
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/migrate
msf post(migrate) > set SESSION [INTEGER]
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/migrate
msf post(migrate) > set SESSION [INTEGER]
Module Options
| KILL | Kill original process for the session. |
| NAME | Name of process to migrate to. |
| PID | PID of process to migrate to. |
| SESSION | The session to run this module on. |
| SPAWN | Spawn process to migrate to. If name for process not given notepad.exe is used. (default: true) |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |