Using PEB Masquerading

Author: Cn33liz

CHANGELOG.md

@@ -0,0 +1,7 @@
+#### Version 1.1:
+
+* Replaced IFileOperation DLL injection for a PEB Masquerade method.
+
+#### Version 1.0:
+
+* First Public Release.

IFileOperation/IFileOperation.cpp

@@ -5,7 +5,7 @@
   / / / /_/ / / / / / // // / / / / /_
  /_/ / .___/_/ /_/ /_/___/_/ /_/_/\__/
     /_/
-                    UAC Suicide Squad
+               UAC Suicide Squad v1.1
                       By Cn33liz 2016
 ```
 

IFileOperation/IFileOperation.vcxproj

@@ -7,8 +7,6 @@ Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "wbemcomn", "wbemcomn\wbemco
 EndProject
 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "TpmInitUACBypass", "TpmInitUACBypass\TpmInitUACBypass.vcxproj", "{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}"
 EndProject
-Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "IFileOperation", "IFileOperation\IFileOperation.vcxproj", "{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}"
-EndProject
 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "MsfStager", "MsfStager\MsfStager.vcxproj", "{20244E23-742B-40B4-A203-D04032340F13}"
 EndProject
 Global
@@ -35,14 +33,6 @@ Global
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x64.Build.0 = Release|x64
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x86.ActiveCfg = Release|Win32
 		{107FE98F-9C9B-4B1B-BC29-CDFED2C01364}.Release|x86.Build.0 = Release|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x64.ActiveCfg = Debug|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x64.Build.0 = Debug|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x86.ActiveCfg = Debug|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Debug|x86.Build.0 = Debug|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x64.ActiveCfg = Release|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x64.Build.0 = Release|x64
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x86.ActiveCfg = Release|Win32
-		{C933A4B7-4650-4761-B50A-9EEEF15D2FF4}.Release|x86.Build.0 = Release|Win32
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x64.ActiveCfg = Debug|x64
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x64.Build.0 = Debug|x64
 		{20244E23-742B-40B4-A203-D04032340F13}.Debug|x86.ActiveCfg = Debug|Win32