nerdexam
EC-Council

312-50V11 · Question #1041

Which of the following Metasploit post-exploitation modules can be used to escalate privileges on Windows systems?

The correct answer is A. getsystem. The Metasploit getsystem command automates Windows privilege escalation techniques to obtain SYSTEM-level access from a lower-privileged session.

System Hacking

Question

Which of the following Metasploit post-exploitation modules can be used to escalate privileges on Windows systems?

Options

  • Agetsystem
  • Bgetuid
  • Ckeylogrecorder
  • Dautoroute

How the community answered

(16 responses)
  • A
    94% (15)
  • B
    6% (1)

Why each option

The Metasploit getsystem command automates Windows privilege escalation techniques to obtain SYSTEM-level access from a lower-privileged session.

AgetsystemCorrect

getsystem is a built-in Meterpreter post-exploitation command that attempts multiple privilege escalation techniques on Windows, including named pipe impersonation and token duplication, to elevate a session from a standard user or administrator account to the SYSTEM account. It is specifically designed for privilege escalation and automates several known Windows local privilege escalation methods. This makes it the correct answer for the scenario of escalating privileges on a compromised Windows system.

Bgetuid

getuid simply returns the username of the current user running the Meterpreter session and performs no privilege escalation.

Ckeylogrecorder

keylogrecorder captures keystrokes for credential harvesting and has no role in privilege escalation.

Dautoroute

autoroute adds network routes through a compromised host to pivot to other network segments and is unrelated to privilege escalation.

Concept tested: Metasploit Meterpreter Windows privilege escalation

Source: https://docs.metasploit.com/docs/using-metasploit/advanced/meterpreter/meterpreter-basics.html

Topics

#privilege escalation#Metasploit#getsystem#post-exploitation

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice