[reflex]

Hello, I need everyone's help on a matter. How can UAC be bypassed? I've designed a Trojan myself, and this Trojan cannot be detected by Defender, Avast, and Kaspersky, or any antivirus for that matter. However, the functions of this Trojan are limited; it can only execute CMD and PowerShell codes. I want more flexibility, and I'm trying to infect it with xworm rat, but Defender won't allow it because the xworm client, like my Trojan, is an unknown program. I'm trying to disable Defender and render it unable to function properly by attempting to delete important DLL files or EXE applications, but UAC is hindering me here. Do you have any ideas or information on how to bypass UAC? Any security loophole or any method will do, as long as it's effective. Thank you to everyone who helps.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Dishes out second hand retardation | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[0xL0STC0NTR0L]

by "UAC is hindering me" u mean the UAC authorization screen when you try launching a unknown app?
if that so, you can try signing in your bin with a leaked windows CA certificate or use any signing program, like screenconnect

if that dont work or you want to learn about more interesting techniques, take a look at these articles ;]
https://www.elastic.co/security-labs/exp...strategies
https://motasemhamdan.medium.com/bypassi...316e4cb485

[reflex]

[quote="0xL0STC0NTR0L" pid='501367' dateline='1710941607']
"UAC beni engelliyor" derken, bilinmeyen bir uygulamayı başlatmayı denediğinizde UAC yetkilendirme ekranını mı kastediyorsunuz?
, çöp kutunuzda sızdırılmış bir Windows CA sertifikasıyla oturum açmayı deneyebilir veya screenconnect gibi herhangi bir programı kullanabilirsiniz.

bu işe yaramazsa veya daha ilginç göz teknikler öğrenmek istiyorsanız bu makalelere atın ;]
https://www.elastic.co/security-labs/exp...strategies
https://motasemhamdan.medium.com/bypassi...316e4cb485
[/alıntı]
teşekkürler

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Dishes out second hand retardation | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.