Windows UAC Bypass

December 3, 2018 ยท View on GitHub

Slui File Handler Hijack LPE - Windows 8-10

SluiHijackBypass.ps1

UAC Bypass via FodHelper - Windows 10

FodhelperBypass.ps1

UAC Bypass via Event Viewer - Windows 7

EventVwrBypass.ps1

Metasploit-Framework Module

bypassuac_sluihijack.rb

copy to ~/.msf4/modules/exploits/windows/local/
Merged to official repository

Shell upgrade

To upgrade x86 meterpreter shell to x64 meterpreter shell, use module run post/windows/manage/priv_migrate

Contents

  1. 1Slui File Handler Hijack LPE - Windows 8-10
  2. 2UAC Bypass via FodHelper - Windows 10
  3. 3UAC Bypass via Event Viewer - Windows 7
  4. 4Metasploit-Framework Module
  5. 5Shell upgrade