Practical Web Penetration Testing

Administrator or root

Typing all these commands is time consuming. The best way to go through this process faster is to upload a scripted file to your victim's machine using the methods described in the previous section, File transfers. The best script out there on the web can be downloaded from the following GitHub repositories:

• For Windows: https://github.com/pentestmonkey/windows-privesc-check
• For Linux: https://github.com/pentestmonkey/unix-privesc-check

If you're using Metasploit and you have a Meterpreter session, then use the following command to elevate your privileges:

meterpreter > getsystem

Refer to Appendix B for a complete guide to Metasploit/Meterpreter privilege escalation.

Windows privilege escalation exploits are often ...