Skip to content

Commit 2f5dd38

Browse files
committed
Update Admin target list and module description
1 parent 3333019 commit 2f5dd38

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

modules/post/windows/manage/priv_migrate.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ class MetasploitModule < Msf::Post
1010

1111
include Msf::Post::Windows::Priv
1212

13-
DEFAULT_ADMIN_TARGETS = [ 'services.exe', 'winlogon.exe', 'wininit.exe', 'lsm.exe', 'lsass.exe' ]
13+
DEFAULT_ADMIN_TARGETS = [ 'services.exe', 'wininit.exe', 'svchost.exe', 'lsm.exe', 'lsass.exe', 'winlogon.exe' ]
1414
DEFAULT_USER_TARGETS = [ 'explorer.exe', 'notepad.exe' ]
1515

1616
def initialize(info={})
@@ -19,8 +19,8 @@ def initialize(info={})
1919
'Description' => %q{ This module will migrate a Meterpreter session based on session privileges.
2020
It will do everything it can to migrate, including spawing a new User level process.
2121
For sessions with Admin rights: It will try to migrate into a System level process in the following
22-
order: ANAME (if specified), services.exe, winlogon.exe, wininit.exe, lsm.exe, and lsass.exe.
23-
If all these fail, it will fall back to User level migration. For sessions with User level rights:
22+
order: ANAME (if specified), services.exe, wininit.exe, svchost.exe, lsm.exe, lsass.exe, and winlogon.exe.
23+
If all these fail and NOFAIL is set to true, it will fall back to User level migration. For sessions with User level rights:
2424
It will try to migrate to a user level process, if that fails it will attempt to spawn the process
2525
then migrate to it. It will attempt the User level processes in the following order:
2626
NAME (if specified), explorer.exe, then notepad.exe.},
@@ -39,7 +39,7 @@ def initialize(info={})
3939
OptString.new('ANAME', [false, 'System process to migrate to. For sessions with Admin rights. (See Module Description.)']),
4040
OptString.new('NAME', [false, 'Process to migrate to. For sessions with User rights. (See Module Description.)']),
4141
OptBool.new( 'KILL', [true, 'Kill original session process.', false]),
42-
OptBool.new( 'NOFAIL', [true, 'Migrate to user level process if Admin migration fails. May downgrade privileged shells.', false])
42+
OptBool.new( 'NOFAIL', [true, 'Migrate to user level process if Admin migration fails. May downgrade privileged shells.', true])
4343
], self.class)
4444
end
4545

0 commit comments

Comments
 (0)