12-06-26, 01:49 AM
Hello DarkForums community!
I found something that could be a problem, with the User Account Control it has to do with `mmc.exe`. If you do the steps it will run with special permissions. Now we have to do some of it by hand but it could be automatic if we work on it some more.When I tried it Microsoft Defender did not send any warnings. But this only happened in my test setup so we should not think it will work everywhere without being detected. There are a lot of security settings and products so it might not always sneak by.
I am not going to say how it works or how to try it. Just pretend that we have a working example and think about how bad it could be, how serious it is whether we should tell people about it and what we can do to protect ourselves from the User Account Control bypass involving `mmc.exe`. We need to consider the security impact of the `mmc.exe` issue and how to defend against it.
the process does load without uac so IT DOES WORK its just not fully automatic like other exploits but i will be giving you the code to the said POC showing you how it works and explaining what all you can do with it
IMPORTANT NOTICE: ONLY WORKS IF USER ACCOUNT CONTROL IS NOT AT MAXI am asking for 2.5 to 5k i am down for negotiation
you will receive: a brief explanation from me and the POC code + documents regarding the exploit