hfiref0x/UACME
FreeDefeating Windows User Account Control
FreeFree tier
About hfiref0x/UACME
UACMe is an open-source tool that defeats Windows User Account Control (UAC) by abusing built-in Windows AutoElevate backdoor. It demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms. The tool supports Windows 7/8/8.1/10/11 (x86-32/x64, client, with some methods working on server versions). Usage involves running akagi32.exe or akagi64.exe from the command line with a method number and an optional full path to an executable to run with elevated privileges. If no command is given, it launches an elevated command prompt. The repository includes a detailed list of methods, their authors, types, targets, and patching status.
Key Features
UAC bypass techniques via built-in Windows AutoElevate backdoor
Supports Windows 7/8/8.1/10/11 (x86-32/x64, client, some methods on server)
Multiple bypass methods including DLL hijacking, COM interface, and AppCompat shims
Command-line interface with akagi32.exe (32-bit) and akagi64.exe (64-bit) executables
Detailed documentation of each method: author, type, target, component, and patching status
Historical methods kept for reference even if patched in newer Windows versions
Pros & Cons
Pros
- Comprehensive collection of UAC bypass methods across multiple Windows versions
- Actively maintained with historical methods archived for reference
- Well-documented with method details, system requirements, and usage examples
- Free and open source under permissive license
Cons
- Potential for malicious use if not handled responsibly; requires controlled environment
- Requires Administrator account with default UAC settings to function
- Many methods have been patched in newer Windows versions and are no longer effective
- Does not cover all Windows versions or server editions completely
Best For
Penetration testing and security assessments of Windows UAC configurationsResearch on Windows security mechanisms and privilege escalation techniquesEducation for understanding how UAC bypasses work and how they are mitigatedTesting security configurations and endpoint protection solutions
FAQ
What is UACMe?
UACMe is an open-source tool that defeats Windows User Account Control by abusing built-in Windows AutoElevate backdoor. It demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms.
How do I use UACMe?
Run akagi32.exe or akagi64.exe from the command line with a method number and optionally the full path to an executable to run elevated. If no command is given, it launches an elevated command prompt (%systemroot%\system32\cmd.exe).
Which Windows versions are supported?
Windows 7/8/8.1/10/11 (x86-32/x64, client, with some methods also working on server versions).
Are the methods still working?
Many methods have been patched in newer Windows versions. The tool keeps historical methods for reference, and starting from version 3.5.0 previously 'fixed' methods have been removed from the main branch but remain in older branches for study.