A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.
3
votes
1answer
57 views
What about AD2P vulnerability?
My goal is to create a simple one-way intercom using B Speech TX2 and B Speech RX2, an Audio2Bluetooth and Bluetooth2Audio converter.
My question is, how secure is the audio(in my case voice) being ...
-3
votes
0answers
29 views
How much can I recover memory data from memory dump created when BSOD occurred? [closed]
Let's say in Windows 7 every Windows setting is set to default. Computer suddenly goes onto BSOD, and creates memory dump automatically. In this case, how much would one be able to read into memory ...
2
votes
1answer
62 views
Can Windows 7 hibernation files be recovered?
As curiosity, according to my knowledge, hibernation basically moves memory data from memory to hard disk. First of all, is this true? And if so, is it possible to recover the deleted hibernation data ...
-1
votes
0answers
35 views
Win7 Delete Files Record? [migrated]
I use TrueCrypt to encrypt sensitive data. And then SugarSync to sync them to the cloud. Today I noticed that
- my trucrypt file was gone from my computer
- The TrueCrypt option to show my history ...
1
vote
2answers
60 views
Application to monitor software activities
I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
3
votes
3answers
201 views
Designing a Sandbox for Windows
I am thinking about the design for a sandbox, which is able to execute arbitrary unmodified, untrusted binaries. The goal is to implement an application
Unlike something like e.g. Google Chrome's ...
2
votes
5answers
196 views
How secure are iPhone/Android/Windows 8 “PIN”/Pattern Lock features?
Most modern (and tablet-oriented) operating systems now offer alternative ways of logging on other than a strong password. For example, iPhones offer a 4-digit PIN, Android devices offer this and a ...
5
votes
3answers
150 views
Virus with PGP Encryption Preventing Virus Scan
A user reported having a virus that was causing pop up windows asking for money. When he turned on his laptop and logged into PGP encryption (whole disk) the desktop quickly showed but then a white ...
-1
votes
0answers
25 views
Local System Restricted via GPO in Microsoft OS [migrated]
If there is a way, to deny local-system on a client machine to stop services with GPO?.
The client is in a domain.
Example, making a anti-virus service that can't be disabled by local-system.
I ...
5
votes
1answer
47 views
User Account Control and outside processes
I was using TeamViewer (a remote desktop client) to log in to a remote computer running Windows 7.
While logged in, the Java updater prompted me for administrator access to run an update check. Out ...
-3
votes
1answer
196 views
Activation Protection Technologies in Windows 8
Microsoft has implemented a new activation protection with SLIC 3.0, how does this technology work - specifically as compared to the SLIC used in Windows 7?
0
votes
1answer
50 views
Who to assign read/write access rights for a single-user application to run correctly?
My application installs for a single user on a Windows machine. Any user may install the application for himself, but the application will save some information common to all users in a separate ...
3
votes
0answers
110 views
MPPE-Send and Receive key derivation from MS-CHAPv2
I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
-1
votes
0answers
35 views
How to block WCF services using Firewall or any other security setting
For an application testing purpose I want to know how to block applications that are trying host http WCF host services. Could someone please point me the right place to block? I've been guessing and ...
2
votes
4answers
121 views
Does Disabling Right Click In Windows Explorer Do Anything?
I am at a student at a school which blocks the right click in Windows Explorer and the desktop, as well as on the taskbar. I don't exactly understand why they do this, since most of the commands on ...
4
votes
2answers
106 views
Are there any Windows permissions management applications?
I am currently dealing with permission issues with an IIS app pool. I am tired of clicking through window after window to set permissions on folders for domain and local users.
Also, I would like ...
3
votes
1answer
56 views
Is access to the caller API in mobile phones a real security threat?
From time-to-time I receive "Unknown" caller on my mobile phone. I do not want to answer those calls as I do not trust the identity of a caller. I feel safer if I can see caller name or at least ...
1
vote
2answers
225 views
How to figure out if someone has been using TeamViewer 8 to access my computer when I was not here?
I came to my computer today and have not been here since monday afternoon. I am using windows 7. There were some error messages showing even on the log in screen about memory violations done by ...
6
votes
1answer
121 views
Reconstructing bittorrent data from PCAP
I am doing a CTF flag for my school project with a PCAP flag based on this CTF write-up: eindbazen.net - Plaid CTF 2012 - Torrent
I setup a local torrent file containing an .mp3 (the audio is my ...
3
votes
1answer
82 views
Windows Phone and Hardcoding Values
Let us say that I have a Windows Phone application. If I hardcode a private key in the Windows Phone application, can people extract it once the application is released to the public on the Windows ...
114
votes
7answers
18k views
CTRL+ALT+DEL Login - Rationale behind it?
Maybe a rather noobish question: Why is CTRL+ALT+DEL required at login on Windows systems (I have not seen it elsewhere, but contradict me if I'm wrong) before the password can be typed in? From a ...
-2
votes
1answer
109 views
Spoofed DDoS mitigation / DNS amplification mitigation [duplicate]
Recently my server has been attacked multiple times, after looking at my firewall I've come to the conclusion that the IP's are spoofed. (10,000+ IP's connect at once)
I'm running Win server 2012 x64 ...
3
votes
2answers
99 views
Security Scanning for Desktop Applications
Our company develops Windows desktop applications. We offer off the shelf solutions - not custom development. A potential new customer wants to add a section to our standard contract that requires ...
1
vote
0answers
35 views
Problem: Restrictions in effect on computer. Asking me to contact my system administrator [migrated]
This started happening when I had to restart my computer for an exam so I can get it working faster. When I rebooted it, it stopped giving me the option to do alt-F4 to be able to shut down, ...
2
votes
0answers
76 views
How do I make or get computer certificates to use with IPSEC user authentication?
I am having trouble and need some direction using computer certificates with windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work ...
1
vote
1answer
142 views
Using a Web Server to steal NTLM credentials
I am trying to design an attack vector against an organization in which the pen tester (myself), steals NTLM credentials through HTTP. I am thinking of these scenarios:
1- I set up a web server on my ...
4
votes
2answers
83 views
With full access to the disk of an IIS web server, could you access the database server?
Here is a theoretical setup:
You have a web server running Windows Server with IIS
You have a website running here which connects to a database
This website can start automatically when the server ...
2
votes
1answer
66 views
Offline registry analysis - Hardware info?
Is it possible to get information about the hardware from an offline version of HKLM/SOFTWARE hive? There is OEMInformation in there, which gives things like machine manufacturer, but does the machine ...
-2
votes
1answer
79 views
Why should I use the VPN? [closed]
Does a Virtual Private Network (VPN) provide an encrypted connection from outside networks or from ISPs to the internal network?
3
votes
2answers
81 views
How can I identify / discover files hidden with ADS?
ADS, or alternate data streams, were added in to Windows in 1993 (First Windows NT version) as a feature of the new NTFS file system to help support some features of the Mac OS at the time. I like to ...
4
votes
2answers
126 views
Microsoft Office 2013 File Encryption
To what extent can the native file encryption provided by Microsoft Office 2013 (Word, Powerpoint, Excel, etc.) be relied upon to maintain the confidentiality of documents, especially within the ...
0
votes
3answers
204 views
How to hide local network traffic on my computer?
I want to hide any traffic an application makes on the local network, make it look like the network is completely quiet to the system and other monitoring software.
Is this doable? How would I ...
6
votes
3answers
272 views
Man-in-the-middle Blue coat proxy ssl or what?
I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
5
votes
2answers
139 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
-3
votes
1answer
245 views
Windows 7 How To Get Around Iboss Webfilter [closed]
So i have a computer with windows 7 and i have basically full admin control. However i need to turn off iboss web filter. What is an easy work around to this filter? I do not want to use a proxy ...
4
votes
1answer
148 views
How to whitelist an Amazon ELB in a(ny) firewall?
We have a customer with a very locked-down network. Any outbound connections require whitelisting of the port and IP address.
However, we are running our system behind an Amazon Elastic Load Balancer ...
1
vote
1answer
159 views
How Do I find Out the Username And Password Of Wifi Windows 7?
Basically i have a computer that is dual booted with Windows 7 and Ubuntu. On the windows 7 side I do not have admin control. However on the Ubuntu side I have full control. So I want to know how can ...
5
votes
2answers
98 views
NTLMv2 resistance to bruteforcing
I have a question regarding NTLMv2 resistance to password bruteforcing.
I know that some modern graphic processors (like Radeon 6990) are able to calculate billions hashes per second and crack NTLM ...
10
votes
1answer
95 views
How does LSA authentication on Windows work?
I'm trying to understand the security protocols on Windows from a high level as part of legal research into cybercrime, and I'm having difficulty figuring out where to focus my research.
I've already ...
1
vote
3answers
171 views
Task Manager and Keyloggers
I know that some of the best keyloggers can't be viewed from the Task Manager.
Where can one see if such keyloggers are running on the system? Will they be in the Windows Services or are they hidden ...
-1
votes
1answer
58 views
Giving privilege with validity in Windows 7
In parental control I can restrict the games, applications, and also set time for usage. But how can I grant some privilege (like using some application or playing games) with a validity? To be more ...
0
votes
0answers
75 views
404s with /like and /undefined
We recently got hacked and after cleaning the virus from our machine we pushed out site to go through cloudflare. Although I've noticed scanning attempts on the site have dropped we do for some reason ...
4
votes
1answer
188 views
Setting up Windows laptops to require a smartcard for unlocking
I am looking for details on how to secure a windows laptop using smart cards.
The scenario is that we have laptops in vehicles, which remotely connect (via https) to an application server over the ...
5
votes
6answers
577 views
Using linux to combat windows flash drive malware?
I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
0
votes
2answers
125 views
How can i get a different IP address for wireless connection [closed]
I always get same IP address for my wireless adapter.
so far i have tried
ipconfig /dnsflush followed by ipconfig /renew
net stop dnscache
but it still keeps getting me the same ip address.
...
5
votes
1answer
115 views
When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
When you take ownership of a TPM in Windows 7 you encounter a screen like this:
Based on this document, it is my understanding that completing this dialog box somehow results in the generation of ...
0
votes
1answer
157 views
csrss.exe process
I've experienced some odd behavior lately (cookies being cleared in Firefox, forcing me to log in again). Antivirus scans (MS Security Essentials, MalwareBytes) aren't showing anything, but Process ...
0
votes
2answers
186 views
Where do I securely store application-specific symmetric key?
I am writing an application App1. This application uses SQLite database and I plan to encrypt it using AES256. For symmetric encryption I need a key, which I need to store somewhere.
From a similar ...
-1
votes
1answer
125 views
Can File Sharing being Controlled by Mac Address? [closed]
I am currently setting up secure environment between 2 pc in isolated network.
Just wondering can we do file sharing based on that pc mac address instead of username?
The environment is OEM Windows ...
2
votes
3answers
275 views
Is the aggregate severity rating of “Important” for MS13-027 too low?
The Security Bulletin states that the "Maximum Security Impact" is "Elevation of Privilege"; however, the SRD blog post says code execution is possible. Additionally, SRD says "Other software that ...
