Results 1 to 2 of 2

Thread: Session migrated to explorer.exe query

  1. #1
    Just burned his ISO
    Join Date
    Sep 2009
    Posts
    1

    Default Session migrated to explorer.exe query

    In my lab at the moment I am concentrating on post-exploitation activities.

    So having exploited the box I have a session in on my attack box in meterpreter. I connect to the session and run keylogrecorder script which migrates itself to the explorer process and starts capturing the keystrokes I enter onto tmy victim.

    However I have noticed when the screen saver comes on (password protected) the explorer session respawns and the migrated session is now useless ?

    [-]Error running command ps: undfined method 'process' for nil:NilClass...

    Is there any way to re-establish the session other than re-exploiting the box, I realise I could use the scheduler or AT to run a script to respawn the session but I am trying to keep things simple - probably unreasonably so.

    My primary skill set is *nix - so I am guessing this is a windows "feature"

  2. #2
    Good friend of the forums
    Join Date
    Jun 2008
    Posts
    425

    Default

    This is more of a question. Can you migrates to two process, like explorer and unserinit/winlogon

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •