Skip to content

Escalate as Administrator bypassing the UAC affecting administrator accounts only.

Notifications You must be signed in to change notification settings

0xyg3n/UAC_Exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 

Repository files navigation

UAC Exploit Developed by 0xyg3n

Escalate as Administrator bypassing the UAC on admin account!

This Source code can be utilized in many ways... for example you can achieve anything, since you can disable the AV before you execute your payload LOL.

Release can be found here also NetFramework 3.5 is required. Enjoy :)


Proof Of Concept

PoC

Why this occurs?

ComputerDefaults.exe is a native Windows 10 Microsoft digitally signed executable that has the "autoElevate" attribute set to true on it's manifest and that interacts with the Windows registry.
Therefore discovering such files with this type of interaction is interesting. Simply we must detect binaries like ComputerDefaults.exe that do not find keys in the HKCU branch in order to achieve privilege escalation.
Finally, this can result in a process running in a high integrity context executing something that is found in an HKCU branch.

Defender ByPass Found 4/02/2021

Hardcoding the Software you want to execute as administrator does not get flagged by Microsoft :)

defenderby

Defender is Sleeping....

gifdef


Affected Windows Latest (4/02/2021)

windows


UAC Settings (Default)

UAC-Settings


Already reported to Microsoft and it's not elegible for bounty program, so have fun!

Report


I have no responsibility of your actions, this is an open source project do as you wish with it.