From f1675f9ae4687d7909330aa2298a52c8762690e4 Mon Sep 17 00:00:00 2001 From: sammbertram Date: Thu, 19 Nov 2015 13:30:12 +0000 Subject: [PATCH] Minor enhancement to smart_migrate Adding a check to see if the user is currently already migrated to the "explorer.exe" and "winlogon.exe" processes prior to attempting migration. --- modules/post/windows/manage/smart_migrate.rb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/post/windows/manage/smart_migrate.rb b/modules/post/windows/manage/smart_migrate.rb index 9937e09f99..720aabbb10 100644 --- a/modules/post/windows/manage/smart_migrate.rb +++ b/modules/post/windows/manage/smart_migrate.rb @@ -27,6 +27,11 @@ class Metasploit3 < Msf::Post server = client.sys.process.open original_pid = server.pid print_status("Current server process: #{server.name} (#{server.pid})") + if server.name.casecmp("winlogon.exe") == 0 or server.name.casecmp("explorer.exe") == 0 + print_good("Current process is already in #{server.name} process, exiting.") + return + end + uid = client.sys.config.getuid