README.md
February 5, 2021 ยท View on GitHub
UAC Exploit Developed by 0xyg3n
Escalate as Administrator bypassing the UAC on admin account!
This Source code can be utilized in many ways... for example you can achieve anything, since you can disable the AV before you execute your payload LOL.
Release can be found here also NetFramework 3.5 is required. Enjoy :)
Proof Of Concept
Why this occurs?
ComputerDefaults.exe is a native Windows 10 Microsoft digitally signed executable that has the "autoElevate" attribute set to true on it's manifest and that interacts with the Windows registry.
Therefore discovering such files with this type of interaction is interesting. Simply we must detect binaries like ComputerDefaults.exe that do not find keys in the HKCU branch in order to achieve privilege escalation.
Finally, this can result in a process running in a high integrity context executing something that is found in an HKCU branch.
Defender ByPass Found 4/02/2021
Hardcoding the Software you want to execute as administrator does not get flagged by Microsoft :)
Defender is Sleeping....
Affected Windows Latest (4/02/2021)
UAC Settings (Default)
Already reported to Microsoft and it's not elegible for bounty program, so have fun!
