UAC Exploit Save

Escalate as Administrator bypassing the UAC affecting administrator accounts only.

Project README

UAC Exploit Developed by 0xyg3n

Escalate as Administrator bypassing the UAC on admin account!

This Source code can be utilized in many ways... for example you can achieve anything, since you can disable the AV before you execute your payload LOL.

Release can be found here also NetFramework 3.5 is required. Enjoy :)


Proof Of Concept

PoC

Why this occurs?

ComputerDefaults.exe is a native Windows 10 Microsoft digitally signed executable that has the "autoElevate" attribute set to true on it's manifest and that interacts with the Windows registry.
Therefore discovering such files with this type of interaction is interesting. Simply we must detect binaries like ComputerDefaults.exe that do not find keys in the HKCU branch in order to achieve privilege escalation.
Finally, this can result in a process running in a high integrity context executing something that is found in an HKCU branch.

Defender ByPass Found 4/02/2021

Hardcoding the Software you want to execute as administrator does not get flagged by Microsoft :)

defenderby

Defender is Sleeping....

gifdef


Affected Windows Latest (4/02/2021)

windows


UAC Settings (Default)

UAC-Settings


Already reported to Microsoft and it's not elegible for bounty program, so have fun!

Report


I have no responsibility of your actions, this is an open source project do as you wish with it.
Open Source Agenda is not affiliated with "UAC Exploit" Project. README Source: 0xyg3n/UAC_Exploit
Stars
252
Open Issues
3
Last Commit
3 years ago
Repository

Open Source Agenda Badge

Open Source Agenda Rating