[CryptoLayer]

Hello guys , I have managed to have a meterpreter session on windows server 2012 R2 box and tried multiple exploits from the local exploit suggester that is integrated in metasploit framework but still did not manage have a UAC bypass or privilege escalation .
Any one as some suggestions or exploits I could use to elevate privilege ?
Thanks in advance .

[CyberStrike]

The real secret is enumerate, enumerate and then enumerate a few more times, sometimes the exploit suggester is not exact, manually look at autorunsc find orphaned dlls/exes also check what patches are applied, read/write/append files/directories, scheduled tasks everything. There are a few tutorials here on this forum for privesc against WIndows just search.

[CryptoLayer]

The real secret is enumerate, enumerate and then enumerate a few more times, sometimes the exploit suggester is not exact, manually look at autorunsc find orphaned dlls/exes also check what patches are applied, read/write/append files/directories, scheduled tasks everything. There are a few tutorials here on this forum for privesc against WIndows just search.

Hi there , thanks for the reply .
I'm going to do some research .

[Brill]

there are so many priv esc guides out there...
https://www.fuzzysecurity.com/tutorials/16.html

[inf1nity]

Hello guys , I have managed to have a meterpreter session on windows server 2012 R2 box and tried multiple exploits from the local exploit suggester that is integrated in metasploit framework but still did not manage have a UAC bypass or privilege escalation .
Any one as some suggestions or exploits I could use to elevate privilege ?
Thanks in advance .

AV might be holding you back. Did you try veil evasion or similar?

[Bass_Reeves]

thank me later bobo 🤭
https://github.com/hfiref0x/UACME

This looks awesome! Thanks for sharing.

[CryptoLayer]

thank me later bobo 🤭
https://github.com/hfiref0x/UACME

Hey there , compiling this project , will tell you if it worked :)

[POLY MATH]

The real secret is enumerate, enumerate and then enumerate a few more times, sometimes the exploit suggester is not exact, manually look at autorunsc find orphaned dlls/exes also check what patches are applied, read/write/append files/directories, scheduled tasks everything. There are a few tutorials here on this forum for privesc against WIndows just search.

This guy is on the right track but before you do any of this. You’ll first need to enumerate and enumerate.

Seriously though. Automated tools catch low hanging fruit more often then not but manual enumeration is almost always beneficial.

It helps to understand the environment also.