UAC Bypass 之 AutoElevate

 

ComputerDefaults.exe

fodhelper.exe

sdclt.exe

COM组件的加载过程

  • 1.HKCU\Software\Classes\CLSID
  • 2.HKCR\CLSID
  • 3.HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\