UAC Bypass
Windows User Account Control (UAC) allows a program to elevate its privileges to perform a task under administrator-level permissions by prompting the user for confirmation.
Checking permissons
First need to check if you are in a Medium Integrity process is to run the command whoami /priv and see if all privileges are available.
The image above depicts a medium integrity process, as you can see, it does not have all privileges.
When you start something “As Administrator”, and run whoami /priv, you will find out that there is a lot more.
Exploitation
Consider using UACME, Metasploit Modules or Bypass-UAC
Last updated
