UAC-Elevation-CVE

CVE-2021-31956: Windows UAC Elevation of Privilege Exploit Overview CVE-2021-31956 is a UAC User Account Control bypass vulnerability in Windows that allows an attacker to elevate privileges to SYSTEM without triggering a UAC prompt. This CVE exploits a flaw in the way Windows handles registry ke...

Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

The financially motivated threat actors behind the Casbaneiro banking malware family have been observed making use of a User Account Control UAC bypass technique to gain full administrative privileges on a machine, a sign that the threat actor is evolving their tactics to avoid detection and...

Windows UAC Protection Bypass (Via FodHelper Registry Key)

This module will bypass Windows 10 UAC by hijacking a special key in the Registry under the current user hive, and inserting a custom command that will get invoked when the Windows fodhelper.exe application is launched. It will spawn a second shell that has the UAC flag turned off. This module...