Which Meterpreter command runs a program with the privileges of the Meterpreter's process?

• A. Hashdump
• B. Ps
• C. Migrate
• D. Execute

Answer: (D)

Running a program on the target with the same privileges as your Meterpreter session is what this is about. The command that does this is Execute, because it starts a chosen executable on the remote system using the privileges of the Meterpreter process itself. In other words, whatever rights the Meterpreter session has—such as SYSTEM if you obtained it early on—get passed to the program you launch with this command.

Hashdump is used to dump password hashes from LSASS, not to run programs. Ps lists processes running on the target. Migrate changes which process the Meterpreter session itself is tied to, effectively shifting the privilege context, but it doesn’t directly launch a new program under the current session’s privileges. So Execute is the one that runs a program with the Meterpreter process’s privileges.