Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

The description of WinObj says:

WinObj is a must-have tool if you are a system administrator concerned about security

What kind of security issues can it detect and what is the rough usage?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Actually this is a debugging tool so to find security flaws, you'll need to know reverse engineering, assembly, C, C++ really well. Just using the tool and not having required skills will not help you find security issues.

In other words, WinObj allows you to visualise the Windows Object namespace, which is otherwise hard to see. Therefore any security problems which create or alter objects in the namespace become easier to find.

share|improve this answer

The question is very general, but I will try to answer.

In fact it is not going to detect any issue itself. This can be use to display some particular set of info about NT object.

Therefore, first of all you have to know the security parameters of NT objects and their values, and then you will be able to use WinObj to quick access and review them.

Sorry for such general answer, but the question was not very precised also.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.