hxxps://medium[.]com/tenable-techblog/uac-bypass-by-mocking-trusted-directories-24a96675f6eURL
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Exploring Windows UAC Bypasses: Techniques and Detection Strategies“hxxps://medium[.]com/tenable-techblog/uac-bypass-by-mocking-trusted-directories-24a96675f6e”
Indicators reported together
named in the same reports- process[.]pein 1 report
- hxxps://github[.]com/hfiref0x/UACMEin 1 report
- hxxps://swapcontext.blogspot[.]com/2020/10/uacme-35-wd-and-ways-of-mitigation.htmlin 1 report
- swapcontext.blogspot[.]comin 1 report
- hxxps://tyranidslair.blogspot[.]no/2017/05/reading-your-way-around-uac-part-1.htmlin 1 report
- tyranidslair.blogspot[.]noin 1 report
- hxxps://tyranidslair.blogspot[.]no/2017/05/reading-your-way-around-uac-part-2.htmlin 1 report
- hxxps://tyranidslair.blogspot[.]no/2017/05/reading-your-way-around-uac-part-3.htmlin 1 report
- hxxps://www.tiraniddo[.]dev/2017/05/exploiting-environment-variables-in.htmlin 1 report
- www.tiraniddo[.]devin 1 report
- hxxps://github[.]com/AzAgarampur/byeintegrity5-uacin 1 report
- hxxps://github[.]com/AzAgarampur/byeintegrity8-uacin 1 report
- hxxps://enigma0x3[.]net/2016/07/22/bypassing-uac-on-windows-10-using-disk-cleanup/in 1 report
- hxxps://googleprojectzero.blogspot[.]com/2019/12/calling-local-windows-rpc-servers-from.htmlin 1 report
- googleprojectzero.blogspot[.]comin 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.