Tally Priv Esc

I’m looking for a little nudge on Tally for priv esc.

I’m looking at a file that executes a process on a different service/port and I would like to use that to execute my own payload and receive a reverse shell back and move on to the next piece. Trying not to give to many spoilers.

If you have done the priv esc using this am I on the right track?

PM me so we an discuss.

Thanks for the help!!