How Hackers Become Admin (they just ask)

How Hackers Become Admin (they just ask)

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 John Hammond 👥 2.2M 📅 October 31, 2025 ⏱ 25 min 👁 38K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

UAC prompt bombingPowerShellprivilege escalationmalwareWindows security

Summary

The video discusses a new botnet called Nightshade C2, as reported by eSentire. The initial infection vector includes ClickFix and trojanized software. The key technique highlighted is UAC prompt bombing, where malware repeatedly prompts the user to allow admin privileges until they click ‘Yes’. The author demonstrates how to recreate this technique in PowerShell, starting with a simple loop that checks the exit code of a process. He explores various methods to intentionally cause errors to keep the loop running, eventually using a try-catch block with a while loop. He shows how to obfuscate the payload using base64 encoding and how to use LOLBAS binaries like PCA Lua and WLRMDR to make the UAC prompt look more legitimate. The video also covers how this technique can evade sandbox analysis. The author concludes by emphasizing the importance of understanding such techniques for defensive purposes.

143 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into a real-world attack technique, explaining the logic and implementation in detail. The argumentation is solid, as the author builds the proof of concept step by step, addressing common pitfalls and showing practical solutions. The demonstration is clear and reproducible, making it a useful educational resource for cybersecurity professionals.

Scientific Rigor, Source Quality, Title Accuracy

The video is based on a threat report from eSentire, which is a reputable cybersecurity firm. The author provides a link to the article in the description. The title accurately reflects the content, focusing on the social engineering aspect of privilege escalation. The technical explanations are accurate and well-referenced, and the author also mentions LOLBAS project, which is a known resource for living-off-the-land binaries.

133 words

Title / Content Match

The title accurately reflects the content, which demonstrates how attackers can escalate privileges by repeatedly prompting UAC until the user clicks 'Yes'.

Quality & Reliability

8/10

The video is a practical tutorial based on a real threat report from eSentire, demonstrating a UAC prompt bombing technique in PowerShell. The author provides clear explanations and references the source article. The technique is reproducible and aligns with known attack patterns.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • eSentire Threat Report — Referenced as the source of the Nightshade C2 and UAC prompt bombing technique
  • LOLBAS Project — Mentioned as a resource for living-off-the-land binaries
  • Panther — Sponsor of the video, mentioned in the context of security operations

Concurring Sources

  • eSentire Threat Report — The video is based on this report, which describes the Nightshade C2 botnet and UAC prompt bombing.

External References

Contribution & Novelties

The video provides a practical, step-by-step guide to recreating a UAC prompt bombing technique in PowerShell, which is a novel and useful demonstration for cybersecurity education. It also highlights the use of LOLBAS binaries to make the attack more convincing.

Pour aller plus loin :

87 words

Radar Profile

The radar profile shows high scores in information quantity, quality, and reliability, with a slightly lower technical level, indicating a well-balanced educational video that is both informative and accessible.

Reliability 8/10

💬 The comments are overwhelmingly positive, with viewers expressing appreciation for the educational value and humor. Many engage with the technical details, offering alternative code suggestions and discussing the implications. The overall sentiment is enthusiastic and supportive.