Skip to content

Commit 670216c

Browse files
Update README.md
1 parent 13fdd5e commit 670216c

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

  • 13 - Meterpreter Post Exploitation/03 - Migrate
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,17 @@
1+
# Migrate
12

3+
- Migrating to another process will help Meterpreter interact with it.
4+
5+
- For example, if you see a word processor running on the target (e.g. word.exe, notepad.exe, etc.), you can migrate to it and start capturing keystrokes sent by the user to this process.
6+
7+
- Some Meterpreter versions will offer you the `keyscan_start`, `keyscan_stop`, and `keyscan_dump` command options to make Meterpreter act like a ***keylogger***.
8+
9+
- Migrating to another process may also help you to have a more stable Meterpreter session.
10+
11+
- To migrate to any process, you need to type the `migrate` command followed by the `PID` of the desired target process. The example below shows Meterpreter migrating to process `ID 716`.
12+
13+
![image](https://user-images.githubusercontent.com/63872951/187254373-196b5169-2aaa-433a-86b3-42973c05c2c5.png)
14+
15+
- **<ins>Be careful</ins>**; you may lose your user privileges if you migrate from a higher privileged (e.g. SYSTEM) user to a process started by a lower privileged user (e.g. webserver). You may **<ins>not be able</ins>** to gain them back.
16+
17+

0 commit comments

Comments
 (0)