> For the complete documentation index, see [llms.txt](https://nickbhe.gitbook.io/shikata-ga-nai-1/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://nickbhe.gitbook.io/shikata-ga-nai-1/windows-foothold/privesc.md).

# Privesc

## Manual Privesc

### Identify myself

* **whoami**
* Windows, **net user \<Username>**: will provide additional info about the user

### Find info about other users

* Windows, **net user**: reveal other accounts

### Info about the host

* **hostname**
* Windows, **systeminfo** \[can be filtered with some useful flags]

### Running processes

* Window, **tasklist** \<Flag> \[for example /SVC]

### Networking Information

* Windows, **ipconfig /all**
* Windows, **route print**: routing commands
* Windows, **netstat-ano**: list connections

### Firewall status and rules

* Windows, **netsh**: firewall profile

...