@@ -10,7 +10,7 @@ class MetasploitModule < Msf::Post
10
10
11
11
include Msf ::Post ::Windows ::Priv
12
12
13
- DEFAULT_ADMIN_TARGETS = [ 'services.exe' , 'winlogon .exe' , 'wininit .exe' , 'lsm.exe' , 'lsass.exe' ]
13
+ DEFAULT_ADMIN_TARGETS = [ 'services.exe' , 'wininit .exe' , 'svchost .exe' , 'lsm.exe' , 'lsass.exe' , 'winlogon .exe' ]
14
14
DEFAULT_USER_TARGETS = [ 'explorer.exe' , 'notepad.exe' ]
15
15
16
16
def initialize ( info = { } )
@@ -19,8 +19,8 @@ def initialize(info={})
19
19
'Description' => %q{ This module will migrate a Meterpreter session based on session privileges.
20
20
It will do everything it can to migrate, including spawing a new User level process.
21
21
For sessions with Admin rights: It will try to migrate into a System level process in the following
22
- order: ANAME (if specified), services.exe, winlogon .exe, wininit .exe, lsm.exe, and lsass .exe.
23
- If all these fail, it will fall back to User level migration. For sessions with User level rights:
22
+ order: ANAME (if specified), services.exe, wininit .exe, svchost .exe, lsm.exe, lsass.exe, and winlogon .exe.
23
+ If all these fail and NOFAIL is set to true , it will fall back to User level migration. For sessions with User level rights:
24
24
It will try to migrate to a user level process, if that fails it will attempt to spawn the process
25
25
then migrate to it. It will attempt the User level processes in the following order:
26
26
NAME (if specified), explorer.exe, then notepad.exe.} ,
@@ -39,7 +39,7 @@ def initialize(info={})
39
39
OptString . new ( 'ANAME' , [ false , 'System process to migrate to. For sessions with Admin rights. (See Module Description.)' ] ) ,
40
40
OptString . new ( 'NAME' , [ false , 'Process to migrate to. For sessions with User rights. (See Module Description.)' ] ) ,
41
41
OptBool . new ( 'KILL' , [ true , 'Kill original session process.' , false ] ) ,
42
- OptBool . new ( 'NOFAIL' , [ true , 'Migrate to user level process if Admin migration fails. May downgrade privileged shells.' , false ] )
42
+ OptBool . new ( 'NOFAIL' , [ true , 'Migrate to user level process if Admin migration fails. May downgrade privileged shells.' , true ] )
43
43
] , self . class )
44
44
end
45
45
0 commit comments