312-50V11 · Question #1041
Which of the following Metasploit post-exploitation modules can be used to escalate privileges on Windows systems?
The correct answer is A. getsystem. The Metasploit getsystem command automates Windows privilege escalation techniques to obtain SYSTEM-level access from a lower-privileged session.
Question
Which of the following Metasploit post-exploitation modules can be used to escalate privileges on Windows systems?
Options
- Agetsystem
- Bgetuid
- Ckeylogrecorder
- Dautoroute
How the community answered
(16 responses)- A94% (15)
- B6% (1)
Why each option
The Metasploit getsystem command automates Windows privilege escalation techniques to obtain SYSTEM-level access from a lower-privileged session.
getsystem is a built-in Meterpreter post-exploitation command that attempts multiple privilege escalation techniques on Windows, including named pipe impersonation and token duplication, to elevate a session from a standard user or administrator account to the SYSTEM account. It is specifically designed for privilege escalation and automates several known Windows local privilege escalation methods. This makes it the correct answer for the scenario of escalating privileges on a compromised Windows system.
getuid simply returns the username of the current user running the Meterpreter session and performs no privilege escalation.
keylogrecorder captures keystrokes for credential harvesting and has no role in privilege escalation.
autoroute adds network routes through a compromised host to pivot to other network segments and is unrelated to privilege escalation.
Concept tested: Metasploit Meterpreter Windows privilege escalation
Source: https://docs.metasploit.com/docs/using-metasploit/advanced/meterpreter/meterpreter-basics.html
Topics
Community Discussion
No community discussion yet for this question.