Page 1 of 1

Interact with UAC

Posted: Mon May 09, 2022 12:44 pm
by YiMeng
Description

UAC is a windows security feature specifically designed to prevent interactions by applications.
There are many workarounds for privilege escalations/elevation that would not require interaction with UACs.

Our goal here is to interact with UAC when it cannot be avoided.

For JRVSInputs to interact with UAC, following requirements must be met.
  • Secure Desktop must be disabled
  • Macros must be recorded under an escalated recording session
  • Macros/Scripts must be run with SYSTEM privilege
  • Example script (this will open cmd as admin):
    • win+r
      STRING cmd
      ctrl+shift+enter
      focusWin User Account Control
      alt+y
  • Also view RUNAS keyword for scripting
    • Additional note on using user Administrator