rapid7/metasploit-framework — pull request #909 by scriptjunkie (2012-10-14 22:03:23+00:00)
Title: Add migrate stub option to Windows x86 payloads. Spawns payload in new process.

Based on http://dev.metasploit.com/redmine/issues/4943 by corelanc0d3r, with a number of notable changes:
* Spawns new process suspended, so any executable can be used without dying or displaying windows
* Does not delay, escaping unstable processes faster
* Using sf/metasploit block_api standard shellcode base for easier maintenance and to avoid crashes
* Integrated into Msf::Payload::Windows using advanced options so that it can be used with any payload (such as vba macros and exe injects)
* Uses same techniques as Linux shellcode prepends for easier maintenance

I just tested it out on a number of attacks and was very happy - got lots of stable meterpreter sessions that were previously dying or not even connecting.