Bypassing UAC

Microsoft User Account Control (UAC) is a component that uses Mandatory Integrity Control (MIC) to isolate running processes with different privileges, aiming to improve the security of Windows. It tries to achieve this by limiting application software to standard user privileges and prompts the administrator to increase or elevate those privileges. Although still used, UAC is inherently broken and can be trivially defeated.

For more information on how to defeat UAC, please refer to the UACMe project available at https://github.com/hfiref0x/UACME.

Get Metasploit Penetration Testing Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.