> For the complete documentation index, see [llms.txt](https://infra.newerasec.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://infra.newerasec.com/infrastructure-testing/privilege-esclation/windows/uac-bypass.md).

# UAC Bypass

## Checking permissons

First need to check if you are in a Medium Integrity process is to run the command `whoami /priv` and see if all privileges are available. 

![User with Medium integrity](/files/-M6JwD3K9V6gsqal9-Iv)

The image above depicts a medium integrity process, as you can see, it does not have all privileges. 

When you start something “As Administrator”, and run whoami /priv, you will find out that there is a lot more. 

![](/files/-M6JwO4GwnbGPvqRWKYg)

## Exploitation

Consider using [UACME](/infrastructure-testing/tools/uacme.md), [Metasploit Modules](/infrastructure-testing/privilege-esclation/metasploit-modules.md#bypassuac) or [Bypass-UAC](/infrastructure-testing/tools/bypass-uac.md)