Access

I was able to own this box with the hinted command, getting right syntax took time though I had to test it on a windows cmd first. However I am curious to know how to get there, like how to enumerate the box so as to establish that using r**** is the right privesc vector. I would appreciate a pm for this, I am not really good at windows enumeration and privesc. Thank you!