Hijacking Windows DLL's/Bypassing UAC

[kollegah]

Placing this here as this is an excellent read for pentesters. This is current information and not outdated.
Code:

This post lists nearly 300 executables vulnerable to relative path DLL Hijacking on Windows 10 (1909), and shows how with a few lines of VBScript some of the DLL hijacks can be executed with elevated privileges, bypassing UAC.

Loading…

www.wietzebeukema.nl

Also a PoC tool to help with such task:

[/code]