A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

3
votes
0answers
23 views

how to create TPM_AUTHDATA as input in tpm commands ?

I'm writing my first program which use tpm (version 1.2) services in Windows 7 using TBS, in this program I'm trying to execute the TPM_CreateWrapKey command. I noticed that many commands like the ...
0
votes
1answer
61 views

EFS encryption in Windows

I'm trying to combine EFS encryption with VeryCrypt, system encryption. With EFS I can choose specific files/folders instead doing a whole drive encryption, so that is the reason I use it. I haven't ...
0
votes
0answers
63 views

Script to emulate dns for windows machine in honeyd

I want to simulate virtual Windows hosts using honeyd. To do so I have installed honeyd. I have configured honeyd as Windows XP SP1, and now I want to emulate DNS services on it. I used UDPot as a DNS ...
4
votes
2answers
134 views

What is the correct way to remove bitlocker secrets from a TPM when returning a device for warranty?

Note: This is not a question about how to preserve data on a device that is returned for warranty. Rather, this is a question about how to ensure that the encrypted remnant data on the device is not ...
-1
votes
2answers
74 views

Need tool to detect malware in several pdfs in Windows environment [closed]

I am looking for a Windows product that could detect malware in several pdfs in Windows environment. I don't want to use Python and I don't want to use Stream Dumpler. I am looking for something ...
3
votes
4answers
119 views

Simple tools for searching process memory for MSSQL connection strings

I'm working with a piece of software that handles all permissions in a Windows client binary on the user's computer. The software connects to a backend database using the sa account. The sa password ...
2
votes
2answers
141 views

How can an attacker tell when someone in a private network connects to the Internet? [closed]

I heard that your PC can get infected just by connecting to the Internet (even without the web). Assuming I'm connected to a private home network, how can an attacker tell that I just connected to the ...
0
votes
0answers
333 views

BRCM-LVG in home network

Shortly after the local cable provider upgraded our cable modem an item named BRCM-LVG appeared in the list of devices (two computers) connected to our Windows 7 homegroup. It contains a folder named ...
2
votes
2answers
118 views

I am not connecting to internet, do I still need the windows firewall on?

Forgive my ignorance but I am truly uncertain. Here is my situation: I have dual booted a Linux distro and Windows 7 on my machine. Windows 7 sole purpose is for gaming, that's all. I'm not planning ...
44
votes
3answers
4k views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Assuming that I'm using a trusted USB flash drive (meaning that it's not some device that looks like a USB drive and whose purpose is to damage my PC), is it possible for my PC to get infected from ...
8
votes
1answer
121 views

How can I protect myself against software installing insecure root certificates?

With the recent news that Dell installed a root certificate with a publicly accessible private key on their notebooks, I'm wondering how I can protect myself against this kind of incompetence. Of ...
5
votes
1answer
106 views

Resetting the Windows RNG

According to this research, Windows seems to produce the same sequence of random numbers indefinitely when a process is kicked off before a VM snapshot is taken. This is a huge issue obviously when ...
0
votes
1answer
77 views

SAM and SYSTEM file copying to another PC

Can I copy a SAM file and a SYSTEM file of a laptop and just change my SAM file and SYSTEM file on my own PC? Will my PC then have the password of the laptop? Or is there another way I can copy the ...
70
votes
2answers
9k views

Can a rogue .wmv file “hijack” Windows Media Player?

I've downloaded a .wmv file using P2P. Attempting to play it with Media Player Classic (K-Lite Codec Pack) only gave me a green square in the playback window: I noticed that the video came with a ...
1
vote
2answers
80 views

Is a Windows (fresh installation) 7 really this safe against NMAP or am I missing something?

I am playing with NMAP in my small private network performing port scanning. So far I went through scanning the following OSs (Unaltered new installations - Meaning no extra software installed!): ...
3
votes
1answer
83 views

Join a computer to the domain or not?

If we have a computer on the network that is only used by one person that logs on using a local account, no noe will log on using a domain account, what are the pros and cons of joining/not joining ...
1
vote
1answer
83 views

Can OnionDuke malware actually spread to new systems through an image?

I do realize that questions about malware in images has been asked before. It just does not look like they answer the questions in this particular situation. This is about the OnionDuke APT malware ...
1
vote
1answer
40 views

Find the Encryption Key (used for network encryption) assuming a Trust Chain is being used on Windows?

If I double click on a .crt file, in Windows, I'm presented with three tabs General, Details, and Certification Path. I'm aware that the Certification Path tells you the details of which root and ...
12
votes
4answers
1k views

When using multiple operating systems, can they affect each other?

Let's say I have two different OS on my PC, Windows 10 and Linux. It is well-known that Windows collects a significant amount of information and sends it to Microsoft's servers, but I wonder if it ...
1
vote
3answers
80 views

Root access and malware

Would it help to defend against malware if I use a less privileged Windows 7 account for my day-to-day work?
3
votes
1answer
66 views

How to recover/log attempted passwords from a failed login [closed]

I saw the following question before: Is it legal to log passwords from failed logins? I think it raises another question: How do I log failed attempted passwords? That seems very useful when I need ...
4
votes
1answer
112 views

Do applications installing into AppData folder make UAC useless?

When UAC was first introduced, most well-behaving applications were installed into Program Files folder, so any tampering with executable files without explicit user consent became impossible. So when ...
6
votes
1answer
351 views

How do I identify which PC made a suspicious DNS query?

Our IDS detected a suspicious DNS packet going to a Botnet (or similar). Since that DC is a recursive relay, how can we identify the client who made that request. (Windows DNS server)
1
vote
2answers
131 views

Security Benefits in Replacing Windows Desktop Programs with New Windows Store Apps for Higher-Risk Uses?

Question: I'll put this as concretely as I can: For a small business-owning user of a Windows 10 PC who's highest-security-risk activities involve opening plenty of email attachments of PDF and ...
1
vote
3answers
302 views

Windows 7 Exploits

I just found my old, Windows 7 Ultimate installer DVD, so I thought I would set it up in a pentest-lab type environment, see what's possible and have some fun with it. So are there any publicly ...
3
votes
1answer
38 views

Two-tier PKI without OCSP?

I am currently in the planning phase of a two tier Windows PKI using this deployment guide, and I am stuck concerning the use of OCSP and the online responder role of ADCS. The guide mandates that ...
5
votes
3answers
174 views

How do Windows services access folders encrypted with NTFS EFS

If I understood correctly, when I enable NTFS encryption (EFS) for a specific folder in Windows, it uses specific account's user name/password (salted) to create asymmetric keys for data encryption ...
2
votes
2answers
81 views

Admin privileges from Random regedit modification [closed]

So lets say you can edit/insert one random key inside regedit (can be in any position in the entire tree structure HKLM/HKCU) in order get admin privileges. Any ideas?
2
votes
1answer
49 views

Find out what process is trying to initiate a connection in Windows

I'm not trying to find established TCP connections. I have a Windows 2008 R2 server and my host-based L3 firewall is showing one TCP connection ATTEMPT to a remote address. The connection is not ...
5
votes
2answers
111 views

What is the purpose of Intermediate Certification Authorities store in Windows?

Suppose I have CA1 root certificate and two intermediate CA2 and CA3 certificates issued by CA1. Would it pose any security issue if all of the intermediate certificates were installed in the root ...
4
votes
2answers
202 views

Decrypting SSL using Wireshark Linux vs Windows

I'm working on decrypting my own traffic that gets sent through Wireshark and I've been following this guide for reference. I have been using the SSLKEYLOGFILE environment variable and I can get the ...
1
vote
1answer
32 views

AuthentiCode Launcher runs everything

Imagine a vendor uses AuthentiCode only to get rid of the yellow UAC warnings. To avoid buying new certificates each year, the vendor could create a Launcher EXE which is signed, requests UAC ...
4
votes
1answer
187 views

What is the best way to encrypt my Windows user folder?

I'm trying to encrypt my user folder on a Windows 10 shared machine. I don't have Windows Pro, so EFS or BitLocker are no option. I can't encrypt or change the whole system since I'm not the only ...
2
votes
1answer
78 views

Secure sharing between Windows computers

I'm working on a project to setup a secure system to share files between 5 Windows computers. The computers are part of a domain so could have multiple different users logging in (based on an AD ...
5
votes
2answers
93 views

What is the difference between the “sig” files and the checksum files, such as on the PuTTY download page?

This is about the functional differences between sig files and checksum files and how they can be used by a user downloading some software. For example, on the PuTTY download page both sig files and ...
4
votes
1answer
154 views

Why is Windows password security designed this way? [duplicate]

Let's start with the LM hash. The LanMan hash had MONUMENTAL security flaws, like the password being case insensitive (converted to upper), which reduced the keyspace for a brute force attack. On top ...
4
votes
3answers
197 views

How can one execute code upon entry of folder in Windows?

Theoretical question, I'm just interested in how could this be done. I remember I had a virus on Windows7/8 (can't quite remember which one tho) which made Windows BSOD upon entry of a folder which ...
17
votes
3answers
629 views

How Do Rootkits & Other Low-Level Malware Still Manage to Load on Systems Protected by Secure Boot (and TB/MB)?

Let me try asking my question this way... Let's say that I'm a offensive cyber Bad Guy working for a foreign state-sponsored Advanced Persistent Threat unit. My unit is charged with, say, stealing ...
-1
votes
1answer
85 views

Unable to open port on Windows 7 [closed]

The scenario is as follows: while a PC was connected to our company's network, a specific application was able to open another process on a predefined port. It worked as expected. But now, this PC ...
0
votes
0answers
46 views

Encrypt a file before being copied

I am working on a program that will prevent data theft. I want to encrypt every file that is being copied to an external drive before it is actually copied using a symmetric encryption. Is it ...
8
votes
4answers
282 views

School's computers auto-login and can run .exe's

Before this semester, to use any computer across campus, you had to log into Windows with a username and password. This semester, when the computers start up they auto-login to an account (with ...
10
votes
3answers
2k views

Offline Bruteforce attack against a Bitlockered Windows PC

I am currently assessing the security of Bitlocker from the perspective of an offline attack against a stored password (used to secure the Full Disk Encryption key). My assumption is that the password ...
0
votes
1answer
171 views

Was I hacked remotely, how could I find out? Windows 7

I was cleaning out my old windows 7 HP desktop computer approximately 5 months ago. There was only the expired Norton 360 as far as antivirus and no firewall. Up until this point I disabled the wifi ...
6
votes
1answer
139 views

What are the differences between “simple” UAC and two user accounts on Windows?

I'm currently thinking about increasing security on my Windows machine. As part of this harderning I considered the least-privilege principle and want to apply this on Windows using two different ...
2
votes
0answers
38 views

userWorkstations attribute in AD preventing users from logging into WebApp

For some of our users in AD, we have set userWorkstations attribute to restrict access to other machines. But this is preventing those users from logging into WebApplications (around 50+) protected ...
0
votes
2answers
102 views

Analyze Windows executable

How can I see which files, ports, URLs, etc that are used by a suspicious Windows executable.
4
votes
0answers
120 views

Windows Certificate Services: Is it possible to enroll a SmartCard certificate AND have key archival?

I'm using ACOS5-64 Client Kit, I want to enroll for a certificate with key archival. I tried to do so by duplicating the SmartCard template and checked Archive subject's encryption private key option ...
75
votes
2answers
8k views

Windows language pack update with a gibberish name

This morning, I noticed that a new Windows update was offered to me. It looks very suspicious to me: Here are the update details: ...
0
votes
1answer
404 views

Is it that easy to crack a Windows SAM file?

My friend told me that he can easily crack a Windows SAM file using Ophcrack. Assuming that I have access to the whole config folder (the one which contains the SAM file) of a Windows machine, is it ...
34
votes
6answers
4k views

How do I purge Windows of my private data when formatting the drive is not an option?

I'm changing my employer, and I'm about to leave my office computer. Due to internal regulations and my supervisor's orders, I'm unable to format the disk drive. I was hoping I would be able to do ...