Re: Token stealing broken?

[HD Moore <hdm () metasploit com>]

On 7/9/2010 8:34 AM, Rob Fuller wrote:
> I'm working on a psexec type addition to meterpreter, but the token
> stuff not working is really hindering what I can do.

The trick with this is how meterpreter dispatches requests - each
request is in its own thread now, which automatically uses the last
saved impersonation token (via steal_token), which isn't the same thing
as the process primary token. Try using steal_token with the pid of the
new process.
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework