anthrax3 / uac_exploit

Escalate as Administrator bypassing the UAC affecting administrator accounts only.

UAC Exploit Developed by 0xyg3n

Escalate as Administrator bypassing the UAC on admin account!

This Source code can be utilized in many ways... for example you can achieve anything, since you can disable the AV before you execute your payload LOL.

Release can be found here also NetFramework 3.5 is required. Enjoy :)

---

Proof Of Concept

Why this occurs?

ComputerDefaults.exe is a native Windows 10 Microsoft digitally signed executable that has the "autoElevate" attribute set to true on it's manifest and that interacts with the Windows registry.

Therefore discovering such files with this type of interaction is interesting. Simply we must detect binaries like ComputerDefaults.exe that do not find keys in the HKCU branch in order to achieve privilege escalation.

Finally, this can result in a process running in a high integrity context executing something that is found in an HKCU branch.

---

Defender ByPass Found 4/02/2021

Hardcoding the Software you want to execute as administrator does not get flagged by Microsoft :)

Defender is Sleeping....

---

Affected Windows Latest (4/02/2021)

---

UAC Settings (Default)

---

Already reported to Microsoft and it's not elegible for bounty program, so have fun!

---

I have no responsibility of your actions, this is an open source project do as you wish with it.