Windows_Privilege_Escalation.md

Windows

• winPEAS
• connect to the target

  evil-winrm -i <rhost> -u <user> -p <password>
  evil-winrm -i <rhost> -u <user> -H <hash-pass> 
  

System Enumeration

net users
net users <username>
whoami /priv
net localgroup

Find all important files:

cd C:\Users
tree /F