Metasploit mailing list archives

Re: meterpreter newbie

From: HD Moore <hdm () metasploit com>
Date: Sun, 17 Jan 2010 08:20:57 -0600

On 1/15/2010 4:51 PM, arthur wrote:

2. from XP SP1 pc, my meterpreter payload connects to my multi/handler
as user, and ps shows a system32/dllhost process, then I migrate to that
 process, but getuid is still user, not admin/system. My guessing is
that dllhost should be system process. Am I right?


This should work - try migrating to lsass.exe

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread:

meterpreter newbie arthur (Jan 15)
- Re: meterpreter newbie MaXe (Jan 16)
  - Re: meterpreter newbie arthur zhang (Jan 16)
- Re: meterpreter newbie HD Moore (Jan 17)
  - Message not available
    - Re: meterpreter newbie HD Moore (Jan 18)
    - Re: meterpreter newbie Jeffs (Jan 18)
    - Re: meterpreter newbie arthur (Jan 18)
    - Re: meterpreter newbie arthur (Jan 18)