Try these links:

http://travisaltman.com/windows-privilege-escalation-via-weak-service-permissions/

http://obscuresecurity.blogspot.ca/2011/11/old-privilege-escalation-techniques.html

http://www.room362.com/blog/2012/8/25/post-exploitation-command-lists-request-to-edit.html

Thanks guys, I just read two articles of the links and I got a bunch of ideas, good, this is what I was looking for.

I agree, this is the part I am working right now, look for weak services and their applications installed.

I know I could find a remote exploit or use meterpreter, but not, I want to do it manually, I got shell with netcat using a asp shell. I need to master it, I think is more difficult to escalate that to get shell.

Also something that mess up a lot is that sometimes when I type the wrong command or wrong way I loose connection, lol..... TRY HARDER and write down how you got shell ASAP

I got some kind of interactive shell but sometimes with some errors stop, anyway I come in
 10 second later, lol