# hfiref0x/UACME

Defeating Windows User Account Control

Repository: https://github.com/hfiref0x/UACME
Canonical: https://ross.abutalabs.com/products/uacme
Language: C
License: BSD-2-Clause
License Family: permissive
Topics: uac-bypass, uac, dll-hijack, bypass-uac, c
Last push: 2026-07-24T05:56:09+00:00

## Health v2 (maintenance only)
Score: 87/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 94, release rhythm 70, longevity 100
- inputs: {"age_days": 4176, "days_push": 40, "days_rel": 40, "gap_med": 92.0, "n_releases_24m": 5}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 7764, forks 1431 (observed 2026-08-28T04:10:04.846077+00:00)

## What it is
UACMe is a C-based command-line tool that demonstrates dozens of Windows User Account Control (UAC) bypass techniques abusing built-in AutoElevate mechanisms. It is intended as an educational resource for understanding Windows security, running elevated commands via numbered bypass methods.

## Use cases
- bypass Windows UAC prompt to run a program elevated
- test whether a UAC bypass method works on a given Windows build
- learn how UAC bypass techniques like DLL hijacking and IFileOperation abuse work
- run an elevated command prompt without user consent in a controlled lab
- audit Windows endpoints for vulnerable UAC configurations
- study AutoElevate backdoor abuse for security research

## When to choose
- you are a security researcher or red teamer studying UAC bypass techniques on Windows 7 through 11
- you need a reference implementation of many documented UAC bypass methods in one tool
- you want educational source code showing how AutoElevate abuse works

## When to avoid
- you need a defensive tool to block or detect UAC bypasses
- you want a general privilege escalation framework beyond UAC
- you need something for non-Windows platforms
- you cannot operate in a legal, controlled environment

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, cli
- domain: security, penetration-testing, windows, developer-tools
- platform: windows, cli
- tags: uac-bypass, privilege-escalation, red-team, windows-security, offensive-security, educational

## Member repositories
- hfiref0x/UACME (main) score 87

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:10:04.846077+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:35:08.042968+00:00, confidence not recorded.
  - readme: https://github.com/hfiref0x/UACME (fetched 2026-08-28T04:10:04.846077+00:00, sha e3d961f11487)
- Data as of 2026-08-30T08:39:29.467469+00:00.