Bypassing UAC

Introduction

User Account Controls (UAC)

UAC: GUI based bypasses

UAC: Auto-Elevating Processes

UAC: Improving the Fodhelper Exploit to Bypass Windows Defender

UAC: Environment Variable Expansion

Automated Explotation

Conclusion

• UACME github repository

• Bypassing UAC with mock folders and DLL hijacking

• UAC bypass techniques detection strategies

• Reading your way around UAC