Let's open an elevated command prompt.
UACMe will try to defeat this consent box right here,
and this basically works when you have an admin account and the Windows
User Account Control is not set to always notify.
Going to the GitHub repo, you can see the usage documentation.
The invocation is pretty easy.
This tool takes two arguments, the key and the parameter.
The key is the number of the method to use to bypass UAC and
the parameter is the full path to an EXE, or a whole separate
command line with its parameters.
When this parameter is left empty, an elevated command prompt will be launched.
The Keys section here contains the list of fixed and removed methods,
along with a list of effective bypass methods that you can use in this process.
Here we chose the type, method,
target, and other information this particular bypass method
implements. I chose method number 33 since I know it will work
against all my targets I have here. You can use an experiment
with any method of your choosing.
Moving to the privilege escalation section.
When starting the command line prompt and the list of privileges it carries,
you'll notice here that it shows Medium Mandatory Level.
That means when an admin triggers an action that impacts the system,
it will prompt the user with a consent box to approve it, comparing
that with starting a command prompt using UACMe Akagi.
Listing the privileges, here the story is different.
It has changed to High Mandatory Level, which indicates executing any
command without prompting the user and a consent box. Going back to an
unprivileged command prompt, it will prevent the user from changing the
password, whereas when using Akagi to do so,
the task will be done right away.