https://github.com/g3rzi/manifesto
Search for information from manifests
https://github.com/g3rzi/manifesto
manifest uac-bypass
Last synced: 5 months ago
JSON representation
Search for information from manifests
- Host: GitHub
- URL: https://github.com/g3rzi/manifesto
- Owner: g3rzi
- Created: 2018-06-18T19:57:06.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2019-02-08T23:17:43.000Z (almost 7 years ago)
- Last Synced: 2023-03-06T16:21:04.897Z (over 2 years ago)
- Topics: manifest, uac-bypass
- Language: C#
- Size: 1.82 MB
- Stars: 35
- Watchers: 3
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Manifesto
A tool for searching information about multiple files' manifests.
The tool can assist especially by searching for files with `autoElevate` field enabled.
# Overview
Some processes contain manifest [file](https://docs.microsoft.com/en-us/windows/desktop/sbscs/application-manifests) that affects the application at start time. Interesting fileds in the manifest file are `autoElevate` and `Level` which determine how the application will work with UAC. Number of [UAC bypasses](https://medium.com/tenable-techblog/uac-bypass-by-mocking-trusted-directories-24a96675f6e) were searching for files with `autoElevate` field enabled in order to bypass UAC.
This tool provides simple GUI that provide better visuality when searching for multiple files and it also have PowerShell version.
# Usage
## GUI
Run the executable and you will get GUI with all the options.
## PowerShell
Import the module
```powershell
Import-Module Invoke-Manifesto
```
Run it like that for all the options:
```powershell
Invoke-Manifesto -FolderPath "C:\Windows\system32"
```
For all the other switches, check the PowerShell code.
