hfiref0x/UACME
UACME
UACME is a set of specialized tools designed to audit security configurations, escalate user privileges, and circumvent access control restrictions on Windows systems. It functions as a utility for executing commands with elevated privileges by bypassing User Account Control restrictions.
The project includes a configuration auditor used to extract and analyze system settings to identify security misconfigurations and vulnerabilities. It provides a collection of techniques for gaining administrative rights on a host.
The toolset covers a wide range of privilege escalation and security auditing methodologies. This includes the use of registry modification, token manipulation, and the exploitation of trusted system binaries via DLL hijacking and COM interface manipulation to achieve high-integrity process execution.
Features
- UAC Bypasses - Circumvents User Account Control to execute programs with administrative privileges.
- Privilege Escalation Tools - Elevates standard user sessions to administrator level on Windows hosts.
- Registry-Based Escalations - Modifies system registry keys to launch elevated processes without user prompts.
- Configuration Auditors - Provides a specialized tool for extracting and analyzing User Account Control settings.
- UAC Security Analysis - Scans registry paths and environment variables to identify active User Account Control security levels.
- Security Testing and Auditing - Extracts and analyzes User Account Control configurations to identify security weaknesses.
- DLL Loading - Utilizes DLL loading from non-standard paths to intercept trusted binaries with administrative rights.
- Bypass Techniques - Implements COM interface manipulation to trigger high-integrity processes via trusted system objects.
- Configuration Exporters - Extracts detailed User Account Control settings to analyze current security levels.
- Process Token Manipulators - Adjusts process security tokens to assume high-privileged identities and bypass security checks.
- Binary Injection Techniques - Injects shellcode or binaries into legitimate system processes to evade security monitoring.
- Exploit Development - Comprehensive collection of UAC bypass techniques for Windows.
- Offensive Security Frameworks - Automates the process of bypassing Windows User Account Control.
- Penetration Testing Toolkits - A tool for testing and bypassing Windows UAC.
- Privilege Escalation - Exploits UAC bypass vulnerabilities.
