module

Windows Silent Process Exit Persistence

Disclosed
2008-06-28
Created
2019-10-05

Description

Windows allows you to set up a debug process when a process exits.
This module uploads a payload and declares that it is the debug
process to launch when a specified process exits.

Authors

Mithun Shanbhag
bwatters-r7

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use exploit/windows/local/persistence_image_exec_options
msf exploit(persistence_image_exec_options) > show targets
...targets...
msf exploit(persistence_image_exec_options) > set TARGET < target-id >
msf exploit(persistence_image_exec_options) > show options
...show and set options...
msf exploit(persistence_image_exec_options) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.