winPEAS

ShellWindowsPrivEsc

winpeas.exe is a script that will search for all possible paths to escalate privileges on Windows hosts. The below command will run all priv esc checks and store the output in a file.

Command Reference:

Run all checks: cmd

Output File: output.txt

Command

winpeas.exe cmd > output.txt

References