312-50V13 · Question #479
Which of the following Metasploit post-exploitation modules can be used to escalate privileges on Windows systems?
The correct answer is A. getsystem. Explanation getsystem is a Meterpreter post-exploitation command/module in Metasploit that attempts to elevate privileges to SYSTEM level on a compromised Windows machine using techniques like named pipe impersonation and token duplication - making it the clear choice for…
Question
Options
- Agetsystem
- Bgetuid
- Ckeylogrecorder
- Dautoroute
How the community answered
(21 responses)- A86% (18)
- C10% (2)
- D5% (1)
Explanation
Explanation
getsystem is a Meterpreter post-exploitation command/module in Metasploit that attempts to elevate privileges to SYSTEM level on a compromised Windows machine using techniques like named pipe impersonation and token duplication - making it the clear choice for privilege escalation. getuid (B) simply displays the current user identity without changing or escalating any permissions, making it a reconnaissance command rather than an escalation one. keylogrecorder (C) is used for capturing keystrokes on the target system, which is a credential harvesting technique, not privilege escalation. autoroute (D) is a pivoting module used to route traffic through a compromised host to reach other network segments, unrelated to privilege levels.
Memory Tip: Think of the prefix "get" -
getsystemgets you to the highest privilege level (SYSTEM), whilegetuidjust gets you information. If the module changes your access level, it'sgetsystem; if it just shows your access level, it'sgetuid.
Topics
Community Discussion
No community discussion yet for this question.