Jump to content

Windows 10 UAC bypass with ALT-TAB?


rootwrld
 Share

Recommended Posts

So what exactly doesn't work anymore? The behaviour of UAC hasn't changed in Windows. Alt-y just basically selects the field which starts with a "y", in the UAC case it is "yes". But this only works if the fields says "yes", in other languages, for example german, it would be Alt-j (because of "ja").

You can do a rightarrow followed by enter, which is cross-language.

Link to comment
Share on other sites

On 1/11/2022 at 5:59 AM, kuyaya said:

So what exactly doesn't work anymore? The behaviour of UAC hasn't changed in Windows. Alt-y just basically selects the field which starts with a "y", in the UAC case it is "yes". But this only works if the fields says "yes", in other languages, for example german, it would be Alt-j (because of "ja").

You can do a rightarrow followed by enter, which is cross-language.

UAC seems to no longer be selected when an elevated powershell windows is launched. If you're on 21H1 give it a try. 

Link to comment
Share on other sites

On 1/13/2022 at 2:17 PM, rootwrld said:

UAC seems to no longer be selected when an elevated powershell windows is launched. If you're on 21H1 give it a try. 

Hm, I'm on 20H2, sorry.

Can you make a recording or something like that?

Link to comment
Share on other sites

  • 2 weeks later...

It's a windows feature, the UAC prompt no longer appears within the same context as the other windows. So until you click on it with the mouse it's not within the keyboards context. You can change this with a registry key however.

I can't remember the reg key but if you can find the windows ADMX template for this group policy it'll be in there:

Security Settings > Local Policies > Security Options > User Account Control: Switch to the secure desktop when prompting for elevation to Disabled

Edit:

The registry key is called EnableUIADesktopToggle

More info on that here: https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings

Also just for anybody who's wondering this is NOT a UAC bypass issue, this is handling the UAC prompt when the local user is an administrator.

UAC bypassing is completely different to the OPs issue.

Edited by PanicAcid
Adding more info
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...