Invoke-WinSATBypass

This script will create a mock directory of "C:\Windows\System32" and copy a legitimate application of Windows (WinSAT.exe) into it.
It will after try to download a DLL called version.dll, which is loaded by default by WinSAT.exe, in order to perform a UAC Bypass by doing some DLL Hijacking.

https://github.com/b4keSn4ke/Invoke-WinSATBypass

#uac #bypass #winsat #tools