Metasploit Revealed: Secrets of the Expert Pentester

Privilege escalation

We can exploit a vulnerability and get remote meterpreter access, but it's quite possible that we have limited privileges on the compromised system. In order to ensure we have full access and control over our compromised system, we need to elevate privileges to that of an administrator. The meterpreter offers functionality to escalate privileges as shown in the following screenshot. First, we load an extension called priv, and then use the getsystem command to escalate the privileges.

We can then verify our privilege level using the getuid command: