Windows PowerUp Local Privilege Escalation

Use PowerUp on a real Windows Server target to find and abuse a weak service DACL.

You start as a low-privilege local user on a disposable Windows VM with PowerSploit staged. Import PowerUp, enumerate modifiable services, identify the seeded PwnKata service, and abuse it to execute a command as SYSTEM.

The flag is protected from the learner account until the service-permission path is used, so the rep trains the actual Windows API and service-control workflow rather than a simulated transcript.

What you'll practice