Powershell Extension Execution Does Not Reflect Privilege Changes

[smcintyre-r7]

When running a Windows Meterpreter, the privilege changes applied by getsystem are not reflected in the execution of powershell code through the powershell extension.

I am guessing that this could be due to the thread token not being applied to whatever is running the powershell code. When getsystem is executed and works, there's a core API that's called to set the thread token that should then be used for subsequent meterpreter commands. I'm thinking this is not making it's way to powershell.

metasploit-payloads/c/meterpreter/source/extensions/priv/namedpipe.c

Line 34 in 9047f4e

met_api->thread.update_token(remote, hToken);