Windows Escalate UAC Protection Bypass (ScriptHost Vulnerability)

This module attempts to bypass the UAC on Windows, using the VB scripting language, by exploiting the cscript/wscript.exe executable:

    msf > info exploit/windows/local/bypassuac_vbs 
    
    Name: Windows Escalate UAC Protection Bypass (ScriptHost Vulnerability)
    Module: exploit/windows/local/bypassuac_vbs
    Platform: Windows
    Privileged: No
    License: Metasploit Framework License (BSD)
    Rank: Excellent
    Disclosed: 2015-08-22
    
    Provided by:
    Vozzie
    Ben Campbell <eat_meatballs@hotmail.co.uk>
    
    Available targets:
    Id Name
    -- ----
    0 Automatic
    
    Basic options:
    Name  Current Setting Required Description
    ----  --------------- -------- -----------
    SESSION     yes  The session to run this module on.
    
    Payload information: ...

Get Kali Linux 2018: Windows Penetration Testing - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.