Access

Stuck at privesc from user can anyone help me out? cant seem to get the idea behind r****