Public PowerShell PoC Shows Windows UAC Bypass via CMSTP

A public GitHub repository exposes a PowerShell proof-of-concept for bypassing Windows User Account Control (UAC) by abusing the Microsoft Connection Manager Profile Installer, cmstp.exe. The script generates an .inf file, launches cmstp.exe with the /au option, waits for the installer window to become active, and then uses simulated keystrokes to confirm execution, allowing a payload to run in an elevated context without a standard UAC prompt workflow.

The repository attributes the technique to Oddvar Moe and indicates the code was forked by Tyler Applebaum, with comments describing possible stealth refinements and customizable command execution. A second referenced page appears unrelated to the UAC bypass activity and does not add material technical detail to the event, leaving the GitHub proof-of-concept as the primary source describing the exposed bypass method.