Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How this tool is use?? #53

Closed
secfb opened this issue Jun 23, 2019 · 4 comments
Closed

How this tool is use?? #53

secfb opened this issue Jun 23, 2019 · 4 comments
Labels
question Further information is requested

Comments

@secfb
Copy link

secfb commented Jun 23, 2019

I set it up.How this tool is used. There are no documents. Can you write a few examples?
image

@rootm0s
Copy link
Owner

rootm0s commented Jun 23, 2019

Sure can do! 👍

If you want to scan the system for possible UAC bypasses, you pass these args:
winpwnage.py --scan uac

For example if you want to use "Fodhelper UAC bypass" you pass these arguments:
winpwnage.py --use uac --id 2 --payload c:\\Windows\\system32\\cmd.exe

@rootm0s rootm0s added the question Further information is requested label Jun 23, 2019
@secfb
Copy link
Author

secfb commented Jun 23, 2019

thank you 👍🏻

@secfb
Copy link
Author

secfb commented Jun 23, 2019

I did not know that the tool should be installed on the target computer. This tool is useless if there is no internet on the target computer. I thought it could be used to upgrade the authorization after receiving the shell.

@rootm0s
Copy link
Owner

rootm0s commented Jun 23, 2019

Well it depends on what you're going to use it for. The repo is to study the techniques so...

But for example, it could be used to elevate malware without UAC showing up, or elevate from Administrator to System. You're right, you need to have access on the computer already, from a shell or other type of access.

@rootm0s rootm0s closed this as completed Aug 14, 2019
@psyraed psyraed mentioned this issue Apr 9, 2020
14 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants