I spent 3 hours absolutely hating this privesc portion, until I finally figured it out. I feel so accomplished, and I learned a ton about privesc on windows! Something I’ve been fairly weak in. This might even be my favorite challenge now.
If anyone is still struggling, the hints above are all you need. really read the man pages! ALL OF IT!