uacbypasser

package
v1.0.6 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 25, 2023 License: MIT Imports: 6 Imported by: 0

Documentation

Overview

Copyright (c) 2019-2022 0x9ef. All rights reserved. Use of this source code is governed by an MIT license that can be found in the LICENSE file.

Copyright (c) 2019-2022 0x9ef. All rights reserved. Use of this source code is governed by an MIT license that can be found in the LICENSE file.

Copyright (c) 2019-2022 0x9ef. All rights reserved. Use of this source code is governed by an MIT license that can be found in the LICENSE file.

Copyright (c) 2019-2022 0x9ef. All rights reserved. Use of this source code is governed by an MIT license that can be found in the LICENSE file.

Index

Constants

This section is empty.

Variables

View Source
var InfoOnceCmstp = Info{
	Id:          1,
	Type:        "once",
	Name:        "cmstp",
	Description: "Using cmstp.exe and .ini file manipulations",
}
View Source
var InfoOnceComputerdefaults = Info{
	Id:          2,
	Type:        "once",
	Name:        "computerdefaults",
	Description: "Using computerdefaults.exe and registry keys manipulations",
}
View Source
var InfoOnceEventvwr = Info{
	Id:          3,
	Type:        "once",
	Name:        "eventvwr",
	Description: "Using eventvwr.exe and registry keys manipulations",
}
View Source
var InfoOnceFodhelper = Info{
	Id:          4,
	Type:        "once",
	Name:        "fodhelper",
	Description: "Using fodhelper.exe and registry keys manipulations",
}
View Source
var InfoOnceSdcltcontrol = Info{
	Id:          5,
	Type:        "once",
	Name:        "sdcltcontrol",
	Description: "Using sdclt.exe folder and registry keys manipulations",
}
View Source
var InfoOnceSilentcleanup = Info{
	Id:          6,
	Type:        "once",
	Name:        "silentcleanup",
	Description: "Using silentcleanup.exe and registry keys manipulations",
}
View Source
var InfoOnceSlui = Info{
	Id:          7,
	Name:        "slui",
	Type:        "once",
	Description: "Using slui.exe and registry keys manipulations",
}
View Source
var InfoOnceWsreset = Info{
	Id:          8,
	Type:        "once",
	Name:        "wsreset",
	Description: "Using wsreset.exe and registry keys manipulations",
}
View Source
var InfoPersistCortana = Info{
	Id:          9,
	Type:        "persist",
	Name:        "cortana",
	Description: "Using registry key class manipulation",
}
View Source
var InfoPersistHkcu = Info{
	Id:          10,
	Type:        "persist",
	Name:        "hkcu",
	Description: "Using registry key (HKEY_CURRENT_USER) manipulation",
}
View Source
var InfoPersistHklm = Info{
	Id:          11,
	Type:        "persist",
	Name:        "hklm",
	Description: "Using registry key (HKEY_LOCAL_MACHINE) manipulation",
}
View Source
var InfoPersistMagnifier = Info{
	Id:          12,
	Type:        "persist",
	Name:        "magnifier",
	Description: "Using magnifier.exe, Image File Execution Options debugger and accessibility application",
}
View Source
var InfoPersistPeople = Info{
	Id:          13,
	Type:        "persist",
	Name:        "people",
	Description: "Using registry key class manipulation",
}
View Source
var InfoPersistStartup = Info{
	Id:          14,
	Type:        "persist",
	Name:        "startup",
	Description: "Using malicious lnk file in startup directory",
}
View Source
var InfoPersistUserinit = Info{
	Id:          15,
	Type:        "persist",
	Name:        "userinit",
	Description: "Using userinit registry key manipulations",
}

Functions

func GetBuildNumber

func GetBuildNumber() int

func GetUACLevel

func GetUACLevel() int

func KeybdEvent

func KeybdEvent(v0, v1, v2, v3 int32) error

func ShellExecute

func ShellExecute(lpFile, lpOperation, lpParameters string, lpFlags int32) error

func WithFsr

func WithFsr(f func()) error

Types

type Info

type Info struct {
	Id          uint8
	Type        string
	Name        string
	Description string
	Subinfo     struct {
		Fixed       bool
		FixedIn     string
		OnlyAdmin   bool
		OnlyPayload bool
	}
}

type OnceExecutor

type OnceExecutor func(path string) error

OnceExecutor is suitable for all single-use options that clean up data immediately after their work

type PersistExecutor

type PersistExecutor interface {
	Exec(path string) error
	Revert() error
}

PersistExecutor same as OnceExecutor, but has Revert function that can be called manually and revert all changes which were applied.

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL