5. Meterpreter Post-Exploitation

User activity on target:

idletime

Getsystem:

getsystem

Process Tampering:

Process Injection

• Can only migrate to same or lower privs
• New shell will inherit that process' privileges and user

#Enumerate processes:
ps

#Inject process:
migrate <pid>

Create new process:

• -H for hidden
• -F to specify program to run

execute -H -f notepad