hfiref0x / UACME

Defeating Windows User Account Control
BSD 2-Clause "Simplified" License
6.09k stars 1.3k forks source link

[NOTE] schtasks.exe restriction on `%AppData%` and `%LocalAppdata%`. #116

Closed byehack closed 2 years ago

byehack commented 2 years ago

image

Just for Note: That methods using schtasks to bypass uac no longer have access to %AppData% and %LocalAppdata% and all of sobfolders of them. I did noticed this patch. so don't run payloads from these paths because you will get Access Denied error from schtasks.