In this chapter, we have learned how to elevate privileges locally and remotely. We have shown how even exploits that have gone wrong can be a learning experience and can give us valuable information about our target and our target's network. We have learned several methods of maintaining persistence in our attacking system, and methods to hide these payloads from the user. We have learned how to disable UAC and bypass its security.
We have learned how to build a payload, bring it onto our compromised system, and use it to elevate our privileges from a normal user account to system-level access on a Windows system. We have also learned how to set this payload to run with persistence on our exploited machine, so that we can return later to the same compromised machine. We have also learned a valuable lesson on how to gain knowledge about a system from failed attempts...