Reply to thread

Message

<blockquote data-quote="Deleted member 178" data-source="post: 560312">yep i think it was the wrong one <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" />to have&nbsp; a serious UAC bypass, we must have:1- a remote script, or executable that pass Smartscreen check without raising any suspicion&nbsp; (if Smartscreen pop but can&#039;t tell if the file is legit, the attempt failed, because no one should allow a &quot;suspicious&quot; file )2- a FUD malware (encrypted or wrapped into an app) , that seems legit to the user.3- the said malware must bypass Windows Defender (shouldn&#039;t be hard , i admit ^^ )4- malware must ask for higher privileges, if not, this is not a bypass because UAC isn&#039;t supposed to react.5- once the malware is executed, UAC must not react.If those 5 points are made, then it is a bypass.</blockquote>

[QUOTE="Deleted member 178, post: 560312"] yep i think it was the wrong one :D to have a serious UAC bypass, we must have: 1- a remote script, or executable that pass Smartscreen check without raising any suspicion (if Smartscreen pop but can't tell if the file is legit, the attempt failed, because no one should allow a "suspicious" file ) 2- a FUD malware (encrypted or wrapped into an app) , that seems legit to the user. 3- the said malware must bypass Windows Defender (shouldn't be hard , i admit ^^ ) 4- malware must ask for higher privileges, if not, this is not a bypass because UAC isn't supposed to react. 5- once the malware is executed, UAC must not react. If those 5 points are made, then it is a bypass. [/QUOTE]

Verification