Run PowerUp and PrivescCheck
windowschecklist
Walkthrough
Run these PowerShell scripts to scan for common local privesc misconfigurations. A hit is a flagged vulnerable service, weak permission, or autorun you can abuse.
Commands
powershell
..\PrivescCheck.ps1; Invoke-PrivescCheck
powershell
. .\PowerUp.ps1; Invoke-AllChecks