TokenSmith

Once you have a foothold, don't just look for files — look at what commands you're permitted to run with elevated privileges. Some everyday utilities have built-in features, like executing other programs, that were never meant to be combined with elevated rights.