[arbster90]

Hi, I'm using a very simple batch script at the moment which adds exclusions to Windows Defender (so requires admin privileges) and a UAC prompt usually pops up e.g. below:

powershell.exe -Command Add-MpPreference -ExclusionPath "C:\"




Is there anyway to re-run the script instantly until the user clicks yes? E.g. the UAC will keep popping up over and over again if the user clicks no on the UAC until the user clicks Yes and then it goes away?

[arbster90]

No, but you can incorporate a UAC bypass so that prompt doesn't show up.

I've been looking into a UAC bypass but don't know of any that I can send as a batch file (without first triggering the UAC)

[arbster90]

man that's really unfortunate im sorry your brain isn't firing synapses correctly

Lol. Basically I'm using a loader, so I don't have physical access to the PC's, the only access I have is to send over a file to download & execute, whether that be a .exe, .dll or .bat in this case. However, from what I can tell from having a look on github, the only current UAC bypasses require additional access to the terminal/files on the computer which I don't have (https://github.com/hfiref0x/UACME).

Do you know of any current UAC bypass which would work with this? Without setting off windows defender?

[arbster90]

plenty uac bypasses

without setting off windows defender would be something you have to work with

idk how your loader works saying you have a loader is like saying i have a computer

Where's the best place to find up-to-date UAC bypasses? I can only see them on github so if there are any other good sites then let me know :) or any links to a good one that would work with my situation?

the loader i'm using is Amadey Loader, it allows me to send various files to the user to download and execute but I don't have access to the remote user's hard drive or any of their files remotely

[C0der]

Set it manually to: Never notify
Start C:\WINDOWS\System32\UserAccountControlSettings.exe

Followed by:
powershell -Command Add-MpPreference -ExclusionPath "C:\app-name.exe"

[Sajuuk]

Feel free to browse these references:

https://forum.tuts4you.com/files/categories/