Privilege Escalation Via RpcSs svc
You can also use this via Metasploit Framework. rapid7/metasploit-framework#14030
-
Administrator to SYSTEM
-
Network Service Account to SYSTEM
https://www.tiraniddo.dev/2020/04/sharing-logon-session-little-too-much.html
https://windows-internals.com/faxing-your-way-to-system/