Hi guys, I have a question regarding Metasploit.
I'm happy with the process for running Metasploit against a remote host and with using the msfpayload function of Metasploit but...
Is it possible to create an executable using Metasploit that will exploit a vulnerabilty on the local machine that is running in the context of a restricted user to raise the priviledges of the user or execute any other payload that is specified such as create an Administrative Account or install a VNC server and connect back to another host?
no, metasploit doesnt have local exploits
Maybe i have missed something, but to run a payload that was created with msfpayload it seems to asume that the user/victim already has administrative rights on the target PC.
you can send a reverse shell out running as a regular user but you'll only get a shell with that user's privs.