UACMe: bypassing Windows UAC
Open-source collection of known UAC auto-elevate abuse techniques, covering Windows 7 through 10.
bash·1 min read··INE Certification
UACMe packages a long list of known techniques for abusing Windows’ built-in auto-elevate mechanism, letting a payload run with elevated privileges without triggering the UAC consent prompt.
Usage
Akagi64.exe <method_number> <command>
Akagi64.exe 23 backdoor.exe # method 23 for example runs a meterpreter payload elevatedThe method number matters and varies with Windows versions, so it’s important to check the project’s own method list for which numbers are confirmed working against the target’s build.
Related
- Windows UAC bypass — the workflow this tool is used in
- Windows access token impersonation — an alternative privesc path when UAC bypass isn’t viable
- msfvenom — generates the
backdoor.exepayload run elevated in the example above - Windows kernel privilege escalation — a different route to SYSTEM when the account isn’t already in the Administrators group