The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

2
votes
2answers
260 views

Security model for datacenters

I have several datacentres and now I want to plan security for it, so it's resilient to external attacks. I need to make a security model which will cover my web servers, auth servers, log servers, ...
2
votes
1answer
84 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
2
votes
2answers
2k views

Major differences between Kali and SecurityOnion

Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
2
votes
2answers
449 views

Apple Mac Security - What do I need to know?

As I've been working on Windows machines most of my life I know most of the best practices and apps to keep them secure. When it comes to security on Apple macs I'm clueless as to where to start.
2
votes
1answer
85 views

Resources to learn about Windows systems exploitation [closed]

I'm a beginner in penetration testing, and I'm struggling with finding decent material to learn. I used book about nmap, Metasploit, exploit writing etc..., but they contained too much information ...
2
votes
1answer
4k views

Where does Active Directory store user hashes?

During a penetration test for a client, having an infrastructure with multiple (5) Active Directory Servers (Win Serv 2008 R2)... I found a nice exploit to drop a system shell in one of the servers, ...
2
votes
1answer
476 views

Is 2008 Server Core installation the most secure deployment?

In a Windows environment where security is more important than flexibility is Windows 2008 R2 Core Server installation the best option? How much more difficult is it to setup an environment with ...
2
votes
0answers
67 views

What protections are put in place to prevent rootkits from getting ring 0 access?

I've been learning about What is a rootkit? As well as rootkit building and general system architecture. I have read that there are "User mode" rootkits that run in ring 3. But these aren't the ...
2
votes
1answer
254 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
2
votes
0answers
65 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
2
votes
1answer
161 views

Force all user processes to be ptraced

I'm implementing a ptrace based tool for logging system call use. It is much more simple than strace, but I'm doing this so I can learn how these tools work. I'd like to trace all user processes since ...
1
vote
3answers
1k views

How to find the OS of the target machine

I am new to this field. Currently I am using Linux OS and my question is how can I find the OS of another machine to which I do not have a direct access. I am interested in any possibilities which ...
1
vote
2answers
81 views

Trust a possibly compromised system for iso downloads

My only operational computer has shown some wierd signs like disapearing logs, rotated logs gone random files getting updated and so on. Tho this is my only operational computer and I have decided to ...
1
vote
1answer
528 views

Firefox Desktop Shortcut Being Renamed

On my Vista PC the Firefox shortcut icon is being randomly renamed. The name changes to some variation of a recently visited URL. This unwanted action has survived several version updates. Of course I ...
1
vote
2answers
148 views

Is it possible to defeat the OS detection capabilities of network scanning tools?

Network scanning tools such as nmap have the capability to infer operating system version based upon lower-level system details. EG: TCP/IP stack behavior, etc. Are there any known methods to trick ...
1
vote
1answer
389 views

If password is changed on Active Directory, can I ensure that PC must be restarted before logon with new password

Basically, if I have a Windows computer connected to a domain, how can I ensure that if the password is changed on Active Directory that the computer must be restarted before the new password takes ...
1
vote
2answers
65 views

Can a detached hard disk reveal the system information of machine from which the hard disk is detached?

Can an internal hard disk (on which Ubuntu or any other OS is installed) that I detached from the PC or laptop (Keeping the OS as it is) and connected to some other PC or machine reveal the info of ...
1
vote
2answers
139 views

the dangers of internet forums - what is FUD, what is not

I just visited a forum and a member knew what OS I was running without me saying anything (a not TOO common distro of linux). Now I'm not sure how he exactly he might have done it, or what information ...
1
vote
2answers
242 views

Preventing exploits like ROP and Return-to-libc in modern Operating systems

As I was reading about the advanced exploits such as Return Oriented Programming (ROP), Retun-to-libc, etc., I came across many defenses to these attacks including techniques like ASLR, kBouncer, ROP ...
1
vote
1answer
52 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
1
vote
1answer
384 views

OS fingerprinting protection - why not by default?

This article describes how to fool nmap in it's OS fingerprinting detection. In short, nmap sends malformed packets to open and closed ports and listens to the responses. Because every OS implements ...
1
vote
2answers
49 views

What negotiates SSL ciphers? [duplicate]

In light of the recent FREAK vulnerability I am trying to get a hold on what ciphers are being used by inbound connections. I have FTP tracing on which is giving me which ciphers are being negotiated ...
1
vote
3answers
326 views

Security in Windows 7 vs Ubuntu

I have two semi-related questions about the security-related reasons I hear for switching to Ubuntu over Windows 7 (or from other Windows OSs to other Linux distributions). Someone people say that ...
1
vote
2answers
215 views

Intrusion Detected - OS Attack

I have recently gotten a prompt from my anti virus stating that there was an intrusion with an OS attack as describe in the link below: ...
1
vote
2answers
688 views

Basic Security Knowledge [closed]

Perhaps I am being both naive and overly ambitious in my first post but I have a huge interest in learning about network and system security and am at a loss as to where to begin. I realize that stack ...
1
vote
3answers
678 views

Debugging and DLL-Injection

Hi, I am currently reading Gray Hat Python to learn about Debugging and various interesting techniques for binary analysis. So far I have learned an amazing amount of stuff (just read about ...
1
vote
1answer
755 views

Different Security Issues Depending on OS? [closed]

I'm interested in learning more about OS specific security issues if there are any. I'm very new to this topic but I want to learn more about if there are specific security vulnerabilities associated ...
1
vote
2answers
547 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
1answer
60 views

Minimize risk with Windows 2003 end of life

The company I’m at currently has over 500 Windows 2003 servers remaining globally in production and even though they have a refresh plan they are working through, they are not going to be done anytime ...
1
vote
2answers
46 views

exploiting setuid and setgid bit

I was reading material on secure coding and at many places it is mentioned not to use setuid and setgid bits for privilege escalation. These a vulnerable and can lead to security issues. Instead we ...
1
vote
1answer
60 views

What's the difference between Systems security and Information Security? [closed]

I'm trying to differentiate between the the three. What is Systems Security? What is Information Security? What's the difference between Systems Security and Information Security? I'm trying to ...
1
vote
2answers
91 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
1
vote
2answers
177 views

How to hide or obfuscate the type of OS?

I get the OS type of a remote host by: connecting to an open port (telnet <host> 22); using Nmap (nmap -A <host>). What are techniques and how to hide or change the information about ...
1
vote
2answers
79 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
1
vote
2answers
75 views

Automatic vs Manual

When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
1
vote
1answer
572 views

Spoofing OS during browsing

I am using http://www.mybrowserinfo.com/ to gather some info about me while browsing. I want to change my OS to appear that its a Windows Xp machine.(No VM solutions please:D) If you have any ...
1
vote
1answer
95 views

ARM TrustZone with Normal and Secure World

I am new to Security testing and I am working on a 64-bit ARM server. We are using ARM TrustZone technology. Is it possible for me to check if I am in the Secure world or the Normal world? How do I ...
1
vote
0answers
65 views

Multiple Independent level of security vs Multi-level security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different network (public and private). I am looking for a way to connect to these two network via single ...
1
vote
0answers
66 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
0
votes
3answers
3k views

Are file permissions set in Unix/Linux effective in Windows or Any other OS?

Consider some files and folder in Unix/Linux OS which are configured for only read access by root, if the hard drive stolen, and used in Windows Environment, are these permissions are still effective? ...
0
votes
1answer
71 views

Operating system scanner

I am confused about Operating Systems scanner vs Network Scanner. Usually a network scanner such as Nessus can already check for operating systems vulnerability. So what does an operating system ...
0
votes
4answers
84 views

Isolate dual system

Say I have a computer with 2 operating systems: one secure, one... not so much. Now say I want to use the insecure system to do some work I can't do on the secure one. What is the best way to isolate ...
0
votes
1answer
256 views

Have there been any instances of malware in custom ROMs for Android?

Have there been any instances of malware or spyware packaged in custom ROMs, for example a malicious email app pre-installed that records your server IMAP username and password and forwards it to a ...
0
votes
2answers
121 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
0
votes
3answers
79 views

Is there a way to make changes to a virtual machine, test it out, and automatically make same changes to normal machine?

Is there a way to install programs and make changes to a virtual machine and if they work ok have them applied to the "actual" machine? For example in this question when fiasco_averted says "...only ...
0
votes
1answer
118 views

What registry windows keys malwares target often?

I wonder what are the main registry windows keys malware target often ? I would love to code a program that will check the state of those windows registry keys for eventual modifications by malware.
0
votes
2answers
323 views

How to identify a specific operating system with port scans?

According to the implementation of the TCP/IP stack an attacker is able to identify which operating system is running on a network device. Is there any paper or the like according on this topic?
0
votes
1answer
54 views

Loading of fake Library attack

Let's supose i have an executable file a.exe and it uses stdlib for some operations. Let's suppose an attacker changes the system stdlib to a "malicious" stdlib. The implications of this might be ...
0
votes
1answer
38 views

Is there a solution for runing processes in encrypted mode on runtime?

Is there any solution for securely running encrypted processes on an untrusted machine over the WAN? In public clouding, you can split your processes and send process request over the WAN, but you ...
0
votes
1answer
113 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...