Skip to content

Instantly share code, notes, and snippets.

View unprovable's full-sized avatar
💭
Rubber ducked...

Mark C. unprovable

💭
Rubber ducked...
View GitHub Profile
function Invoke-UACBypass {
<#
.SYNOPSIS
Bypasses UAC on Windows 10 by abusing the SilentCleanup task to win a race condition, allowing for a DLL hijack without a privileged file copy.
Author: Matthew Graeber (@mattifestation), Matt Nelson (@enigma0x3)
License: BSD 3-Clause
Required Dependencies: None
Optional Dependencies: None

Keybase proof

I hereby claim:

  • I am unprovable on github.
  • I am largecardinal (https://keybase.io/largecardinal) on keybase.
  • I have a public key whose fingerprint is E19C CB0A E523 2B95 8CC2 8342 0318 8088 56BE 9950

To claim this, I am signing this object: