Bypassing User Account Control (Defense Evasion)

[@anonymousgirl5150]

great stuff, cool channel. subscribed and amazed how this info is free and in such a clear ad free way. Andy, you're a king.

[@rot169]

And it's thoughtful comments like this that make me keep doing it - thank you! :-)

[@DeepakJain-zv9dr]

Nicely explained. A really good tutorial. Thanks for this work.

[@chaminda512]

Extremely helpful 💖 Thank you so much

[@rot169]

Thanks, I'm glad you found it useful! :)

[@shubham_srt]

keep creating more videos, absolutely love them

[@Salpawuni80]

Plz when I run the program it it shows missing vcruntime140.DLL and msvcp140.DLL . Please how can I compile it without these problems. Thanks

[@rot169]

Sounds like you're missing the visual c++ runtime. If you're trying to run uacme on a machine other than the one you compiled it on, you can either a) just copy over those two DLLs from the machine you compiled on, b) download the runtime installer from the MS website, or c) compile with static linking. Option (a) is the easiest!

[@socbrian]

Great video. Could a user without local admin be able to elevate by using this uac bypass? Or will they need to elevate to local admin and then bypass uac?

[@rot169]

Great question - it's very much the latter. A standard (non-admin) user could not use any of these techniques to elevate their access to admin. Instead they'd need to use another technique to escalate their privileges, but could find themselves in a UAC-protected session which limits the actions they can perform. Only then could these techniques be applied to break out of that UAC protection.

[@geotics4359]

how you got uacme.exe??? i am a begginer please explain me!!

[@rot169]

You can download the source from the link in the video description, and there's some brief instructions on the github page. You'll just need to download yourself a copy of visual studio from MS and make sure you tick the options for c++ development during installation.

[@valleyofcheckit8373]

imp kind of confused , I'm trying to download Minecraft but I don't have admin, so hw d i use it??

[@rot169]

UAC is a defensive restriction placed on the power of an administrator account, and the techniques in this video speak to bypassing UAC in order to regain those full powers. If you have a standard (non-admin) user account then this is not going to be able to escalate your access; for that you need a privilege escalation technique. I've described a few of these in other videos (e.g., Abusing Accessibility Features, Path Interception, Abusing Windows Services, etc). I certainly don't condone the use of these techniques against any system which you don't own or have been authorised to break into. And if your end goal is just installing Minecraft, then your easiest option is to just politely ask the owner/admin of the computer. :)