GitHub - phikshun/ruby_uac_bypass: Windows 7 (32-bit and 64-bit) UAC Bypass, in pure Ruby.

phikshun / ruby_uac_bypass Public

Notifications You must be signed in to change notification settings
Fork 0
Star 5

Windows 7 (32-bit and 64-bit) UAC Bypass, in pure Ruby.

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
source		source
.gitignore		.gitignore
README		README
payloads.rb		payloads.rb
priv.rb		priv.rb
process.rb		process.rb
uac_bypass.rb		uac_bypass.rb
win_ffi.rb		win_ffi.rb

Repository files navigation

Instructions

This app runs on Windows 7 only.  You'll need to download the Ruby installer (tested on 1.9.2) for Windows, and 'gem install ffi'.  To test, simply enter the command:

ruby uac_bypass.rb

A new shell will spawn in high integrity.  Check out the source directory to see all the super fun assembly code that pulls this off.  Credit to Leo Davidson for the original exploit, and to the good folks at Metasploit for the API shellcode (Stephen Fewer) and C DLL injection examples.