Exam 312-50v11 topic 1 question 341 discussion

Meterpreter getsystem When using exploits, you might gain access as only a local user. This limits what you can do on the target machine. You can use Meterpreters 'getsystem` command (https://github.com/rapid7/metasploit-payloads/blob/master/c/meterpreter/source/extensions/priv/elevate.c#L70) to elevate your permissions from a local administrator to SYSTEM. This works by using three elevation techniques.

getsystem Attackers use tools such as Metasploit to perform named pipe impersonation on a target host. Attackers exploit vulnerabilities that exist in the target remote host to obtain an active session and use Metasploit commands such as getsystem to gain administrative-level privileges and extract password hashes of the admin/user accounts.

both are used in post-exploit, if we want to pivoting ( dual-homed ), the difference is that autoroute=pivoting (1st step ) and getsystem=Privilege Escalation (2nd setp). the questions says "post-exploit"+"Privilege Escalation" = getsystem.

A both are used in post-exploit, if we want to pivoting ( dual-homed ), the difference is that autoroute=pivoting (1st step ) and getsystem=Privilege Escalation (2nd setp). the questions says "post-exploit"+"Privilege Escalation" = getsystem.

answer is D. Metasploit has an autoroute meterpreter script that will allow us to attack this second network through our first compromised machine. in question its says post exploit so its autoroute.

getsystem https://www.offensive-security.com/metasploit-unleashed/privilege-escalation/

Privilege Escalation using Named Pipe Impersonation Attackers use tools such as Metasploit to perform named pipe impersonation on a target host. Attackers use Metasploit commands such as getsystem to gain administrative-level privileges and extract password hashes of the admin/user accounts. (P.677/661)

Privilege Escalation using Named Pipe Impersonation Attackers use tools such as Metasploit to perform named pipe impersonation on a target host. Attackers use Metasploit commands such as getsystem to gain administrative-level privileges and extract password hashes of the admin/user accounts. (P.677/661)

getsystem

Getsystem autoroute - give routes between windows and another attacking network to pivot or scan into other networks

GETSYSTEM

CEH Lab manual: Getsystem for privilege escalation.

Getsystem is the correct answer

Meterpreter getsystem

Correct A GETSYSTEM