#UACME - Twitter Hashtag

sicehice @sicehice

over 3 years ago

#opendir hosting #ulise #uacme #teramind #netfilter 54.177.246[.]246

0

3

2

0

958

Ludovico Loreti @LudovicoLoreti

over 4 years ago

Auto-Elevate - Escalate From A Low-Integrity Administrator Account To NT AUTHORITY\SYSTEM Without An LPE Exploit By Combining A COM UAC Bypass And Token Impersonation https://t.co/HUcjPxgixF #AutoElevate #UAC #UACBypass #UACME #Windows #Windows10

0

1

0

EdiAcoo @AcooEdi

over 4 years ago

Auto-Elevate - Escalate From A Low-Integrity Administrator Account To NT AUTHORITY\SYSTEM Without An LPE Exploit By Combining A COM UAC Bypass And Token Impersonation https://t.co/uwCJue0mTx #AutoElevate #UAC #UACBypass #UACME #Windows via KitPloit

$AcooEdi's tweet photo. Auto-Elevate - Escalate From A Low-Integrity Administrator Account To NT AUTHORITY\SYSTEM Without An LPE Exploit By Combining A COM UAC Bypass And Token Impersonation https://t.co/uwCJue0mTx #AutoElevate #UAC #UACBypass #UACME #Windows via KitPloit https://t.co/XlpG4zs15x$

0

4

2

0

Fabio Gondorf @FGondorf

almost 7 years ago

- nice PoC - techniques work in #Windows10 x64 1909 - essentially the same as #UACme (?) - easy fix - #UAC to highest or separate user and admin account

sailay(valen) @404death

almost 7 years ago

you can UAC bypass all executable files which are autoelevate true base on my first article. UAC Bypass All the things POCs: https://t.co/ZMjLCbI08h sample: Bluetooth uninstall device task (UAC Bypass to administrator)

404death's tweet photo. you can UAC bypass all executable files which are autoelevate true base on my first article.

UAC Bypass All the things POCs:
https://t.co/ZMjLCbI08h

sample:
Bluetooth uninstall device task (UAC Bypass to administrator) https://t.co/TawDPFRvLc

3

727

375

108

0

1

5

1

0

Abubakar Shehu Idris @theshehv

about 7 years ago

For defeating windows user account by abusing built-in Windows AutoElevate backdoor. The following must be considered: System Requirements x86-32/x64 Windows 7/8/8.1/10 (client, some methods, however, works on server version too). #Backdoor #UACMe https://t.co/4IWe3Yk4SC

theshehv's tweet photo. For defeating windows user account by abusing built-in Windows AutoElevate backdoor. The following must be considered:

System Requirements

x86-32/x64 Windows 7/8/8.1/10 (client, some methods, however, works on server version too). #Backdoor #UACMe https://t.co/4IWe3Yk4SC https://t.co/LrSdItOzCN

0

2

1

0

James @James_inthe_box

over 7 years ago

#avamaria via #malspam, drops a curious helper at: warzonedns[.]com/dll/upnp.exe to enable 3389 in the firewall via netsh uses #uacme and #rdpwrap https://t.co/juT85usEGS https://t.co/TzILFrSFp1 https://t.co/pOqCmnoQcL c2's: 195.140.213[.]91 warzonedns[.]com

James_inthe_box's tweet photo. #avamaria via #malspam, drops a curious helper at:

warzonedns[.]com/dll/upnp.exe

to enable 3389 in the firewall via netsh

uses #uacme and #rdpwrap

https://t.co/juT85usEGS
https://t.co/TzILFrSFp1
https://t.co/pOqCmnoQcL

c2's: 195.140.213[.]91
warzonedns[.]com https://t.co/4NqAfq9HFy

2

12

8

1

0

NoVirusThanks @novirusthanks

over 8 years ago

Testing OSArmor with UACME on Windows 10 SCU 1803 64-bit #CyberSecurity #InfoSec #Malware #UACME #UACBypass https://t.co/h1pXZsrvie

0

3

0

NoVirusThanks @novirusthanks

over 8 years ago

Testing OSArmor v1.4 b60 with UACME on Windows 7 64-bit #CyberSecurity #InfoSec #Malware #UACME #UACBypass https://t.co/hLiefQFLmf

0

1

0

sysopfb @sysopfb

over 8 years ago

TrickBot and loader additions: https://t.co/y6Z21LJbLs + UAC bypass from #UACME first noticed by @FSecure + Loader Functions XOR encoded + Loader now runs as a self-modifying bytecode blob + Load now has sub loader for WOW64 with #heavensgate

1

70

34

1

0

Odisseus @_odisseus

almost 9 years ago

"Defeating Windows User Account Control (UAC) by abusing built-in Windows AutoElevate backdoor" with #UACMe. Some malware are using it, "but we don't any responsability". 🤔 https://t.co/jQq9NTvim1