Migrate Process

Description

Injects a specter into the specified process.

Overview

This script injects a specter into another running process for the purpose of defense evasion or privilege escalation. The target process can be specified by either PID or name. If migratng by name, the first matching process will be injected, and all remaining processes will be ignored. The architecture of the shellcode will be selected based on the bitness of the target process (i.e. if the target process is 32-bit, then the shellcode selected will be x86). After succesful injection, there will be two total sessions.

Arguments

Parameter Type Description
Process string The name or PID of the target process to inject Specter shellcode. If using a process name, the first matching instance will be injected with a Specter while any remaining matches will be ignored.

Dependencies

  • Lateral

Limitations

  • Cannot inject from a 32-bit process to a 64-bit process.

Example Text Output

Example of successful injection.

Success  PID Build
-------  --- -----
   True 6576 29e61f72f90841a9909fbeb18f915d6c
Scroll to Top