UACMe is a Windows security research tool that demonstrates User Account Control bypass techniques by exploiting built-in AutoElevate mechanisms.
The tool addresses the problem of understanding how Windows UAC protections can be circumvented through various privilege escalation methods. It works by implementing multiple distinct bypass techniques that abuse legitimate Windows components and features, allowing code execution with elevated privileges. Each method is numbered and can be invoked through command-line parameters, optionally executing a specified program with elevated rights or launching an elevated command prompt by default.
This tool is intended for security researchers, penetration testers, and system administrators studying Windows security vulnerabilities in controlled environments. It suits educational purposes and authorized security assessments where understanding UAC bypass mechanisms is necessary. The project explicitly warns that the techniques demonstrated could be exploited maliciously and should only be used responsibly in controlled settings. The tool requires Windows 7 through 11 on both x86 and x64 architectures, with administrator privileges and default UAC settings.
The project maintains historical documentation of bypass methods by preserving older code branches when techniques are patched by Windows updates. Methods that have been fixed are removed from the active methods table in newer versions, but previous branches retain the implementations for reference purposes. The tool regularly updates to remove obsolete methods as Windows security patches address the underlying vulnerabilities, reflecting an ongoing cycle of technique discovery, documentation, and eventual mitigation.
