I ran an exploit on the victim and used a msfvenom payload. I am on the victim's computer but I have not the root privileges. I tried to use
getsystem command for getting privilege but it failed.
So I searched for "getting privileges in Windows 7 if get system command failed" and I found that Windows 7 is vulnerable to MS14-058. When I use that, I get root privileges.
How do I know if a target is vulnerable to what kind of post exploit? Is there any methodology for finding this. Are all hackers do googling for finding an exploit?