MsSettingsDelegateExecute

MsSettingsDelegateExecute Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key. This visual studio project will compile a static x64 binary to test this issue. License These files are available under the 3-clause BSD license...

Windows UAC Bypass — FodHelper

HKCU ms-settings Shell Open command hijack + fodhelper.exe DelegateExecute, then registry cleanup. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.uacbypass import REGMSSETTINGS, UACAGENT, UacBypassMixin class ModulePost, UacBypassMixin: info = "name":...

Windows UAC Bypass — sdclt

HKCU Folder shell open command hijack + sdclt.exe /KickOffElev DelegateExecute. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.uacbypass import REGFOLDER, UACAGENT, UacBypassMixin class ModulePost, UacBypassMixin: info = "name": "Windows UAC Bypass — sdclt...

Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06626)

Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of the broker EditWith feature in Internet Explorer versions 8-11. A remote attacker, initiated via arbitrary application DelegateExecute, can exploit this vulnerability to bypass the...

CVE-2015-6047

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka...

CVE-2015-6047: Undefined Security Weakness

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka...

PT-2015-2340

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8 through 11 Description The issue is related to the EditWith feature in Microsoft Internet Explorer, which allows remote attackers to bypass the AppContainer protection mechanism and gain privileges. This...

Microsoft Internet Explorer EditWith Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the Application Container and execute code in the context of the logged-in user on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...