<i> Assuming you've done the prep-work to ensure you get placed on a well-populated user desktop network</i>

This is a write up of attacking LANs from the inside, privilege elevation stuff. Only relevant for large networks obviously.