Summary

Upon Iitial enumeraiton of the SMB share, I found some credentials that allowed me to get access to the word press site admin panel and then we were able to get a shell out of it. We used the AlwaysInstallElevated function to privileges.