What is the technology of bypassing UAC?
This article introduces you how to bypass UAC technology, the content is very detailed, interested friends can refer to, hope to be helpful to you.
Recently, I found a very interesting way to bypass UAC and start processes with High Mandatory Level. Next, let me recreate the process.
1. Start cmd.exe as a regular user.
two。 Confirm the integrity level:
C:\ test > WHOAMI / Groups | FIND "Smur1-16" Mandatory Label\ Medium Mandatory Level Label Smur1-16-8192
3. Start:
Sdclt / configure
4. The sdclt.exe program automatically raises the weight.
5. Backup files; here I created a virtual folder c:\ test with a small number of files and backed it up.
6. Waiting to be finished.
7. After the backup is complete, we go to the backup list to restore these backup files.
8. Select backup, search for c:\ test, check the box and perform the restore operation (since the file is not large, it will be completed quickly).
9. When the file recovery is complete, there will be a prompt panel. From the prompts on the panel, you can see that some programs or system files were skipped and failed to recover. It is very important here that at least some files have been successfully restored, otherwise you will not see the logs file in the panel.
10. Click View Log file.
11. This will open Notepad.exe for us as a privilege.
twelve。 In Notepad, we click menu File-> Open-> c:\ windows\ system32.
13. Type cmd*.* in the list to find the cmd.exe program.
14. Start cmd.exe.
15. As you can see, the cmd.exe at this time has a high integrity level of Smurl 1-16-12288/High Mandatory Level/.
C:\ Windows\ System32 > WHOAMI / Groups | FIND "Smur1-16" Mandatory Label\ High Mandatory Level Label Smur1-16-12288
16. Now you can start any program, and they will all run in High Mandatory integrity level.
On how to bypass UAC technology is shared here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.
