UAC Mode can be bypassed!

[(BlackBox) Hacker]

I'll give Voodooshield a test!

@(BlackBox) Hacker Could you give VoodooShield a try? The concept behind it is good. http://www.voodooshield.com/
New Beta version: http://malwaretips.com/threads/voodooshield-2-beta.26912/

Let us know what you make of it. Cheers.

 

[nissimezra]

Well I have had loads of Computer from PC World, all of them are only restricted because of the UAC Mode is enable in Windows 8 Pro and 7, this will make it a basic account for sure! For full rights you usually type a command to enable admin or find the main mmc in System32 folder. Also you could use the existing restricted default admin account and disable UAC on Windows 8 and get the full admin account, but Microsoft have also made it so you can use the Metro Screen to run each application as Administrator!

no gpedit in home addition.
net user administrator /active:yes
to disable
net user administrator /active:no

http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

 

[(BlackBox) Hacker]

Very good you have found the right command, I recommend using Windows 7 Ultimate or Windows 8 Pro versions!

no gpedit in home addition.
net user administrator /active:yes
to disable
net user administrator /active:no
http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

 

[(BlackBox) Hacker]

I can't test the Software yet sorry! If you do use this program? The Vendor will not allow you to test it before purchase!

@(BlackBox) Hacker Could you give VoodooShield a try? The concept behind it is good. http://www.voodooshield.com/
New Beta version: http://malwaretips.com/threads/voodooshield-2-beta.26912/

Let us know what you make of it. Cheers.

 

[ismethere]

@Huracan
My dear Admin, to be honest i never had tried VoodooShield, i have connotation
it's real voodoo, but this time I should believe with your suggest..i wil tried..Thanks for
the link..btw can i try as evaluation or trial version.

 

[(BlackBox) Hacker]

Here are the screenshots of my UAC test!

Start the Ncat Hacking Tool!

Then run a fake 1980's Pacman game!

This fake error message before Spyware!

Connection back to the attackers PC!

Whats this a porn picture?

Nope just a fake picture as a key log file!

Clear the log file!

I can even infect startup without the Registry wow!

Verdict!
I have also made this Pacman game into a Trojan Dropper as well, so it's just like a ninja in your startup folder without any errors showing up in example. As shown you can bypass the UAC totally, because you still have limited write access to your hard disk. The most of basic protection can stop this write access say a simple HIPS! But if I have found security flaws in Spy Shelter what about VoodooShield 1.30? Applocker should protect you even better for 100% free and Spy Shelter works great only, If you terminate all of the Spyware processes? because of the Reverse Shell connection still lives on your computer after being blacklisted with Spy Shelter. Because the reason why Spy Shelter got bypassed is because it's more than one exploit in one binary file!

 

[(BlackBox) Hacker]

A cracked version of Spy Shellter is still very good, If you only still have Windows 7 home versions? Else I would use Applocker instead of Windows UAC crap!

------------- Spy Shelter -------------

1. Detect Spyware Process
2. Kill Spyware Process
3. Delete Trojan files from process path

Note: All of the Spyware will be blocked including connection also remote Shell!!!

@Huracan
My dear Admin, to be honest i never had tried VoodooShield, i have connotation
it's real voodoo, but this time I should believe with your suggest..i wil tried..Thanks for
the link..btw can i try as evaluation or trial version.

 

[Deleted member 178]

@Huracan
My dear Admin, to be honest i never had tried VoodooShield, i have connotation
it's real voodoo, but this time I should believe with your suggest..i wil tried..Thanks for
the link..btw can i try as evaluation or trial version.

i will not recommend to use VoodooShield v2 beta now for malware testing, some major bugs in the blocking feature are not ironed yet; we beta-testers and the devs, are working on it.

thanks

 

[(BlackBox) Hacker]

If I would of tested it would of failed my security tests as well lol? This is why the free trials have expired in VoodooShield!!! And I must add that Zemana AntiLogger is crap when compared with Spy Shelter!

i will not recommend to use VoodooShield v2 beta now for malware testing, some major bugs in the blocking feature are not ironed yet; we beta-testers and the devs, are working on it.

thanks

 

[Deleted member 178]

If I would of tested it would of failed my security tests as well lol? This is why the free trials have expired!!!

i don't see the relation there, your trial is expired so ? what it has to do with failure or success to block your test.

 

[(BlackBox) Hacker]

Because I couldn't test the Software for any security flaws what so ever, does this sound strange to you? It's like the vender wanted your money for no protection ever!

i don't see the relation there, your trial is expired so ? what it has to do with failure or success to block your test.

 

[Deleted member 178]

i don't see the relation there, your trial is expired so ? what it has to do with failure or success to block your test.

BTW , voodooshield can block Cmd

 

[(BlackBox) Hacker]

Yet to be tested by me and I hate the name VoodooShield! If you have a spare copy somewhere with key? Then you could send me it to be tested? If the blacklist can fail on Spy Shelter then what secrets will VoodooShield hold? These days I don't use any form of P2P Software!

BTW , voodooshield can block Cmd

 

[Deleted member 178]

Because I couldn't test the Software for any security flaws what so ever, does this sound strange to you? It's like the vender wanted your money for no protection ever!

what you think we do on Wilders forum, i suggest you to pass by there. if you ask politely , and seriously participate to its development you may get a license for testing.

Yet to be tested by me!

it was already tested by me and many other beta testers. i had to disable the protection to run cmd. it was even a bug , since cmd was launched on "training mode" so should be allowed to run.

 

[(BlackBox) Hacker]

I only test using my stuff, I don't use tools like Metasploits only stuff I compile as a exploit!

what you think we do on Wilders forum, i suggest you to pass by there. if you ask politely , and participate you may get a license for testing.



it was already tested by me and many other beta testers. i had to disable the protection to run cmd. it was even a bug , since cmd was launched on "training mode" so should be allowed to run.

 

[Deleted member 178]

I only test using my stuff, I don't use tools like Metasploits only stuff I compile as a exploit!

you used Ncat (ex-netcat written by nmap team) on the test above no? and i am sure you are not its creator

 

[(BlackBox) Hacker]

What are you recommending people to use instead of VoodooShield?

what you think we do on Wilders forum, i suggest you to pass by there. if you ask politely , and seriously participate to its development you may get a license for testing.



it was already tested by me and many other beta testers. i had to disable the protection to run cmd. it was even a bug , since cmd was launched on "training mode" so should be allowed to run.

 

[(BlackBox) Hacker]

The client is made by me I can trigger stuff such as buffer overflow and Keylogger always runs lol! Stick to downloading hacking tools you know best!!!

you used Ncat (ex-netcat written by nmap team) on the test above no? and i am sure you are not its creator

 

[Deleted member 178]

What are you recommending people to use instead of VoodooShield?

if they really want full control of their system against any attack vectors:

any HIPS/BB-based softs (Comodo, Online Armor, Defensewall) or anti-executable (NVT ExeradarPro or Appguard)

i personally use Comodo IS + Appguard on my main machine.

 

[Deleted member 178]

The client is made by me I can trigger stuff such as buffer overflow and Keylogger always runs lol! Stick to downloading hacking tools you know best!!!

Ncat is indeed quite efficient.