Enumerating privileges

To perform the privilege enumeration process, you will need to ensure that you have access to your target system either through a command shell or a meterpreter session. We will be taking a look at how to use various techniques that will apply to both methods of access. To begin the privilege enumeration process, follow the outlined procedures:

1. The first step is to identify the user account you are currently utilizing. This can be done by running the following command in meterpreter:

   getuid

   If you do not have access to the target via a meterpreter session, you can run the following command in the command shell:

   whoami

   As highlighted in the following screenshot, this will output the current user you are logged in as; in this case, we are logged in as a regular user:

   Figure 6.1 – Enumerating current user

2. The next step involves enumerating the user privileges, this can be done by running the following command in meterpreter:

   getprivs

   Alternatively, if...