module
Windows Privilege Escalation via TokenMagic (UAC Bypass)
Disclosed | Created |
---|---|
05/25/2017 | 05/15/2021 |
Disclosed
05/25/2017
Created
05/15/2021
Description
This module leverages a UAC bypass (TokenMagic) in order to spawn a process/conduct a DLL
hijacking attack to gain SYSTEM-level privileges. Windows 7 through Windows 10 1803
are affected.
hijacking attack to gain SYSTEM-level privileges. Windows 7 through Windows 10 1803
are affected.
Authors
James ForshawRuben Boonen ( bwatters-r7jheysel-r7
Platform
Windows
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:
msf > use exploit/windows/local/tokenmagic msf /(c) > show actions ...actions... msf /(c) > set ACTION < action-name > msf /(c) > show options ...show and set options... msf /(c) > run

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.