A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

1
vote
1answer
82 views

Pgp Private key storage on windows server advice

Looking for a bit of advice really, here's the situation: I currently have a security minded client who will be sending PGP encrypted files. I have to decrypt the files on my server before ...
0
votes
1answer
75 views

In regards to GPG4Win, what does “use NAME as default secret key”?

1- what does "use NAME as default secret key" do in Kleopatra tool options? The reason why I ask this, is I have a looooong password for my certificate. And apparently this becomes a hassle when ...
2
votes
3answers
173 views

What does Windows's built-in encryption do, if I can seemingly always read my encrypted files?

I'm playing around with certificates and encryption on a Windows system, but either it isn't working or I don't know how it should works. When I encrypt a file its name changes to green. But then, I ...
1
vote
1answer
62 views

Malware threats from other mounted hard drives

I am going to install Linux on an external hard drive and my internal hard drive is currently running Windows. When I boot to my Linux and I still have my windows hard drive mounted is it possible for ...
1
vote
1answer
108 views

Windows XP expiry security vulnerability of POS

Now that Windows XP will stop being supported by Microsoft, it has become common knowledge that it should be abandoned for a modern operating system in most cases. However, I have the corner case ...
0
votes
2answers
115 views

Is anti virus software supposed to clean up registry entries made by malware?

I just cleaned up a virus infection on my computer (running windows) by running an Anti Virus Scan. The malicious executable files are now deleted. However, the registry entries made by it remain. ...
0
votes
1answer
88 views

I need two separate hidden volumes in disk encryption. What are my options?

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
0
votes
1answer
130 views

Unknown Website Linking to my Local Files?

I recently discovered a website that I am in no way affiliated with linking to the files of my local website stored on an external hard drive. This unknown website is actually executing the scripts, ...
14
votes
2answers
644 views

How does Windows 8's Microsoft Account authentication work?

One of the new features to Windows 8 is the ability to log in to your PC using your credentials from a Microsoft Account. How is this implemented, and what steps are taken to prevent hijacking of ...
2
votes
5answers
969 views

Hardware USB Key to Reset Any Windows Password

This tool requires physical access of course, and there are many things you can do once you have physical access, but this peaked my curiosity. The tool in question: ...
1
vote
2answers
226 views

Can I get a malware on Windows without administrative rights?

I'm a Linux user and I installed Windows recently, I need it for some software. I don't want to use any anti-malware programs, I don't plan on giving administrative rights to applications I don't ...
1
vote
2answers
211 views

Why are Windows computers open to network file access by default?

I'm on a work network, and I had some files I wanted to give to a collegue. I set up a shared folder and directed him to my computer name to open the shared folder. Then I remembered from a long time ...
4
votes
3answers
190 views

Are non-personal AD users a security risk?

After an IT audit of my company, the report said that our Active Directory contained too many non-personal user accounts. This caused a risk of misuse and unauthorized user access. I checked my ...
0
votes
1answer
116 views

Windows 7 password recovery [duplicate]

A few weeks ago I've changed the password on my old laptop, I forgot the password as I wasn't using it often. Now I need to recover the password because I used it to encrypt some important documents. ...
1
vote
1answer
225 views

Reverse TCP connection from exploited SearchIndexer.exe failing

I'm working on a tool that exploits SearchIndexer.exe on Windows 7 x86 and connects back to a metasploit multi/handler, using standard metasploit reverse TCP stagers. The exploit seems to function as ...
0
votes
1answer
166 views

How many security holes were discovered in the original version of Windows XP?

In order to steer our future, it is important to understand our past. Now as the end of Windows XP draws near it would be interesting to see how the worlds most popular operating system fared ...
0
votes
2answers
231 views

Can I exploit Windows kernel from user-mode application?

In this document is detailed technique of exploiting Windows kernel. But writer is talking about accessing kernel memory & doing exploit from user-mode application at the same time. Can I do this ...
0
votes
2answers
431 views

MS12-020: Remote Code Execution

I'm doing some exercises in the lab. My vuln. scanner detects MS12-020 on a few machines. The report indicates that this could be exploited to allow the execution of code remotely. To me this would ...
11
votes
7answers
1k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
0
votes
1answer
108 views

Java Drive By & Stub - Explanation [closed]

I have been trying to make some extensions for chrome lately to block some unwanted stuff. I have also been searching for quite some time to find what a JDB does.So , the applet downloads a file , ...
1
vote
0answers
97 views

Problem with qgankgyefx..vbe virus

I am not sure if I am in right forum. But i am having problem with this virus. On affected computer, If we use a USB drive, all the file become hidden. I am using HFV.exe for retrieve all data in ...
0
votes
2answers
164 views

PC showed evidence of a phone being attached for no obvious reason. Theories on why? [closed]

Connecting via remote desktop to a Windows 7 machine today showed the last couple of seconds of a windows device installing and the "Your device is ready" popup for a Sony Xperia T. Going to ...
1
vote
0answers
49 views

Windows EFS on Amazon - how secure?

We evaluate using Windows EFS on Amazon EBS. There is a report about Windows flaw that allows you to copy data from encrypted volume: ...
4
votes
1answer
159 views

Remove a privilege from a Windows admin account : good or useless idea?

In order to protect a Windows administrator account from attacks such a Pass-the-Hash and other Token Passing tehcniques (e.g. via Incognito tool), can you tell me if it is a good idea to remove the ...
1
vote
5answers
182 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
2
votes
1answer
407 views

Where does Active Directory store user hashes?

During a penetration test for a client, having an infrastructure with multiple (5) Active Directory Servers (Win Serv 2008 R2)... I found a nice exploit to drop a system shell in one of the servers, ...
2
votes
1answer
312 views

Windows privileges to escalate? [closed]

What are the windows privileges that deserve to pay attention to prevent a user (non-admin) to escalate his privileges to the local admin group ? I know SeDebugPrivilege, but what else ? Thanks. ...
1
vote
1answer
95 views

Can I trust the details given in Resource Monitor?

I'm looking at Resource Monitor in Windows 7 and wondered whether a process could be hiding in plain sight by mimicking another process. For example I've renamed an executable file as chrome.exe and ...
0
votes
1answer
69 views

Self-changing javascript characters in text editors

On Windows Server 2008-R2, certain javascript files are exhibiting the same behavior. Text can be copied from other files and pasted into new ones. In both NotePad++ and Windows' default notepad, ...
2
votes
0answers
308 views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
5
votes
2answers
532 views

How could disabling 'Hide File Extensions' in Windows make a system more secure?

I'm reading up on the Cryptolocker virus, and I came across this comment, it says: And one additional measure: disable the default "Hide extensions for known file types" check box in Explorer. I ...
0
votes
1answer
104 views

One or two machines in a network have been compromised. How to proceed [duplicate]

Edit This post has been marked as duplicate. While I have read the referenced thread I see some differences in the descibed situation. My scenario below is a non-server home network with both machines ...
1
vote
0answers
120 views

Bypass Nmap Scans Being Blocked [closed]

A friend has set up a VM for me to play with, I am currently stuck on a little problem: On this network he set up, there are 6 machines and a router, 5 servers (plus the router) show up on a typical ...
1
vote
1answer
821 views

Use Metasploit to exploit SMB through Conficker

I've got an SP0/unpatched Windows XP which is vulnerable to the Conficker worm. I'm using metasploit to use the Conficker exploit with the purpose of opening a remote shell/command line. My ...
1
vote
1answer
169 views

NTKRNLPA.EXE connected to strange IP

Some assistance/advice needed to research this. First: I am not sure if this is the right place to ask this. If it isn't please note and I'll close. Over the weekend my email accounts (yahoo & ...
2
votes
1answer
131 views

Is it possible for me to extract my own AES disk encryption key?

I use Check Point Full Disk Encryption, but hope that this question can be answered generally. Is it possible for me to get, or extract, my own 256-bit AES key? By the way, I don't use any special ...
3
votes
2answers
223 views

How To Recover EFS Cert From Backup?

I made a backup of the old Win 7 Pro then did a clean install. But I forgot to export my EFS encryption certificate, so when after I restored the encrypted files from backup I could no longer access ...
4
votes
2answers
310 views

Windows Authentication and Session Ids

After a penetration test made upon an intranet application I'm developing, in ASP.NET MVC, one of the concerns raised was that the application supports concurrent user sessions and it is recommended ...
0
votes
1answer
229 views

Secret Santa and Windows Security

When i turned on my pc at the office this morning i found a file (text document) on my desktop saying that my secret santa salutes me and gave me a clue for where to find my gift. The weird thing ...
0
votes
1answer
95 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
2
votes
2answers
284 views

Is my computer trying to download something malicious from Dropbox?

My wife's computer was recently compromised and I have tried to clean it. I installed Microsoft Network Monitor to see if there was any unexplained internet traffic and I noticed a connection to ...
3
votes
1answer
173 views

unexpected thumbprint when connecting via remote desktop - what now?

I have an Amazon EC2 instance in a VPC. I have not logged into it for some time, so I used the Amazon EC2 CLI with ec2-get-console-output to check what the thumbprint should be when I connect. To my ...
0
votes
1answer
99 views

What protection certificates would be required for an application that consists of setup, loading utility and main application?

Say we have an InnoSetup installer script, a native C++ QT files loading application and a .Net client application that we load/update each time and which is the main application. We load files via ...
3
votes
4answers
183 views

Shared hosting vs VPS

I have an Asp.net site. Which hosting system do I need to secure it adequately* against anyone reading private information that's on the server? This is assuming I'm not worried about the sysadmins ...
1
vote
1answer
123 views

Can a program change the shortcut location of a browser to itself without UAC (Admin) in Windows?

I was reading an article on .desktop files used to spread malware on Gnome and KDE. I just thought that the same could be applied to Windows. On Windows: Malware is disguised as a picture by ...
6
votes
1answer
349 views

Browsers silently adding trusted root certificates in Windows

When accessing https://internetbanking.caixa.gov.br (site of a well known bank in Brazil), the server returns a certificate signed by "Autoridade Certificadora Raiz Brasileira" (Brazilian Root ...
2
votes
1answer
1k views

Explanation of open ports

I've run metasploit against my web-server and it found several opened ports that I didn't know. Please note that I have a firewall and IPSec configured but they were disabled just for testing ...
1
vote
0answers
64 views

A crash/mini dump concern [closed]

I just experienced a crash on my laptop. I was surfing the internet and all of a sudden everything crashed and a small blue screen (centred on the screen) popped up and was counting down. I didn't ...
0
votes
2answers
62 views

Restricting locations for unzipping a zip file

I hope that I have found the correct place to ask my question regarding unzipping files. I would like to see if there is a way to restrict the locations available to the user to unzip a password ...
1
vote
1answer
96 views

Reliability of windows OS security for “program files” safe guard

I want to do inter process communication between Firefox (via extension) and my application. Both reside in "Program files" (of windows 7 OS). I also assume that malware is running in the system and ...