Abuse Elevation Control Mechanism

Adversaries may circumvent mechanisms designed to control privilege elevation to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk.¹² An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.³⁴

1. TechNet How UAC Works
2. sudo man page 2018
3. OSX Keydnap malware
4. Fortinet Fareit

使用该技术的组织

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。