A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

2
votes
2answers
135 views

Is my data secure in locked screen if I use bitlocker

My SSD is currently encrypted by bitlocker right now. So let say if I leave my laptop on locked state (Win+L). Is it possible for someone to get access to my data? Few thing I noted are: If someone ...
12
votes
9answers
4k views

Can an old operating system webserver be made secure?

I have an old laptop with far too little RAM to run Linux (including specialty distributions). It can however run Windows 98 just fine, and I'm looking into turning it into a tiny retro webserver. Is ...
1
vote
0answers
127 views

Migrate a x509 key using KSP (CNG) to CSP (CryptoAPI) in Windows

I have a code signing certificate issued to me by a commercial CA, and the key was generated on my local development machine using the new Cryptography Next Generation storage providers. ...
1
vote
1answer
46 views

Possible to change the CA that a keypair is using?

Pretend I take the same CSR and send it to two different CAs as described in the following scenario: I create a CSR on Windows I submit the CSR and edit my SAN names. Request is pending at the CA ...
0
votes
1answer
107 views

How to enforce TLS on Windows [duplicate]

In Windows 2008 R2 and 2012, how do you enforce TLS-only and how do you demonstrate that posture? I am in IP Compliance and have a strong background in practical system administration and support. I ...
2
votes
1answer
111 views

Resources to learn about Windows systems exploitation [closed]

I'm a beginner in penetration testing, and I'm struggling with finding decent material to learn. I used book about nmap, Metasploit, exploit writing etc..., but they contained too much information ...
0
votes
0answers
55 views

Does Miranda-IM/Miranda-NG encrypt all messages?

Since the demise of GTalk a few weeks ago, we've found that MIM seems to be the lightest instant messaging client out there. It connects to multiple chat services (MSN, Skype, Yahoo) Our main concern ...
0
votes
0answers
53 views

Translating BUILTIN\Users Privileges and Security Settings

I would like to rid my CustomUsers security group from it's dependency on the BUILTIN\Users security group. My goal is to achieve the following: Tightened security (the OS is also hardened) Easy ...
1
vote
1answer
72 views

Can I create an application that can decrypt data but the administrator of the application cannot?

I have a windows application with a configuration file that contains some database passwords. I'd like to encrypt this data in such a way that my application can decrypt the data, but that the ...
2
votes
3answers
137 views

Can a virus persist across Windows version upgrades?

It is possible for a trojan which allows a remote user to secretly control a computer, to re-install itself after upgrading to a newer version of Windows?
2
votes
1answer
411 views

Can someone explain, in simple terms, how the FREAK attack on browsers works?

Is there a reason it only affects browsers on Windows machines and not Mac's or UNIX/LINUX environments? A lot of the wording on this site is particularly complicated and I don't understand fully what ...
2
votes
0answers
146 views

Open source database of malware signatures [closed]

I'm looking for an open source database of malware signatures/hashes (if possible regularly updated and well documented) that I could use in one of my software for scanning a huge numbers of files ...
3
votes
1answer
68 views

Any reason for a user to use an email scanner if they don't use any offline mail clients?

I typically recommend that users enable a real-time email scanner (aka a mail shield) in order to detect a possible vector used by malware. Even if they don't use an email application, the rationale ...
0
votes
1answer
121 views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
1
vote
0answers
56 views

IIS | Block execution of files in directory

I am dealing with user uploads via a PHP application. I want to secure the server so no exploits are available to the user, such as uploading a php shell and executing it. I have set it so all ...
2
votes
1answer
94 views

Ease of Getting Data On Self-Encrypting Drive From Screen-Locked Windows 7/8 Computer

Hypothetical: a Windows 7 or 8 computer has a self-encrypting hard drive. It is stolen with the power on, but with the Windows lockscreen on. Are there easy off-the-shelf ways to access the data on ...
2
votes
2answers
161 views

Can changing a MAC address give an attacker more leverage in a network?

Security lessons force us to use limited users (Standard User) on Windows networks. I found that an administrator account can change his MAC address from Control Panel\Network and Internet\Network ...
2
votes
0answers
48 views

How can I restore my Windows certificate cache so I only have those from trusted CAs? [duplicate]

All this talk about Superfish and other adware crap has made me healthily paranoid that a wrong certificate can enter my certificate cache at any time. I have no reason to assume that there is a ...
1
vote
2answers
549 views

How to change default cipher in GnuPG on both Linux and Windows?

How can I change the default symmetric cipher used by GnuPG from CAST5 to another? I'm using GPG4Win on Windows, but would also be interested in a solution for Linux.
0
votes
0answers
325 views

How to turn off need for bitlocker to go on Windows 7

I am the system administrator of my local computer (Windows 7) and I am unable to write to an external hard drive if it is not encrypted using Bitlocker to go. The local computer is not encrypted and ...
3
votes
1answer
145 views

Has the security of PuTTY been examined?

I am wondering how PuTTY stacks up against other SSH implementations with respect to scrutiny and security of its SSH2 protocol implementation. PuTTY is probably the most-used SSH client on the ...
4
votes
2answers
138 views

Is UAC actually worth it? [duplicate]

Windows UAC: It's annoying. It seems pointless. Should I just disable it? Or in other words - is there actually a real risk of something malicious happening if I do? Is there malware out there that ...
3
votes
1answer
829 views

Is RDP susceptible to the BEAST attack?

I have Windows 2008 R2 servers which are failing a PCI vulnerability scan because they have RDP enabled (needs to be disabled). I have applied the PCI settings of IISCrypto tool, but I have to leave ...
1
vote
1answer
97 views

multiple authenticode signatures

Is it possible to have multiple Authenticode signatures in an executable? The Digital Signatures tab suggests you can, so I was wondering if, for example, you can sign an executable with Verisign's ...
1
vote
2answers
223 views

Are there other roots of trust on my computer aside from these 46 root certificates?

I've heard many people imply that modern browsers and OSes trust a myriad of root certificates. The implication is that it is impossible to ensure the private keys of all of the root certificates ...
3
votes
2answers
107 views

Does a valid code signing certificate mean that an installer has not been tampered with in transit?

Several dominant software vendors distribute updates over HTTP or over HTTPS with bad certificates. In general, it doesn't seem like I can expect to rely on a secure channel to ensure that an ...
6
votes
1answer
2k views

ISP glitch or a malware? Has this ever happened to you?

Brief background: I consider myself a relatively paranoid power-user, if not an absolute pro. I regularly update my AV and keep up with all the latest updates on my Windows 7 machine. But what ...
5
votes
2answers
200 views

Which Windows Files Should be Monitored by HIDS?

I highlighted my question below. Here is some background. It's easy to find data showing the most commonly trojaned/modified Linux binaries and config files. ps, ls, find, kill, lsof, passwd, ...
1
vote
1answer
56 views

How do I get the thumbprint of an SSH2 public key on windows?

I have a SSH2 public key with a .PUB extension and when viewed in notepad it has this header: ---- BEGIN SSH2 PUBLIC KEY ---- How do I view the thumbprint of this key? I've attempted ssh-keygen ...
3
votes
1answer
214 views

Security of Windows Screen Saver Password

How secure is the Windows screensaver password? Seeing that screen saver passwords are used in the corporate world, is there any way of bypassing the screen saver after it is already running? Could a ...
-3
votes
2answers
215 views

i want to know the mac address of my stolen system having windows 10 installed in it? [closed]

My dell laptop has been stolen and i want to know the mac address of the device to track it. the system is sync with google and windows 10 OS is installed.
2
votes
3answers
379 views

On Windows, how to restrict access to a folder, sub folder and files to only some applications (not users)

We have an application which is not per user and can be used by multiple users simultaneously. Data is also shared by all users. The path to the data folders we use is ProgramData\OurAppName\Data ...
1
vote
1answer
36 views

How can user credetials be leveraged when doing a penetration test for a Windows network? [closed]

Assume the following scenario: NTLMv2 only Only Vista machines or higher Remote desktop disabled throughout network No open shares psexec needs administrative level access. Without any shares ...
5
votes
4answers
175 views

How can I determine the domain controller when it's not in DNS?

On a penetration test going in blind for an organization, meaning no knowledge of network topology of design, no idea what the domain(s) might be, and domain controller is not apparent in DNS...how ...
-1
votes
1answer
51 views

Undelete-secure AES software and software for carrying out “full undeletion” free-partition-space zeroing/reformatting on Windows?

It is fairly well known that on Windows, when you delete a file (or folder which may contain any number of files and subfolders possibly containing other files and subfolders and so on), Windows just ...
3
votes
2answers
86 views

Is it possible to “fingerprint” the “patches” applied to a Windows system?

Two situations with a similar goal: 1) You have access to a target network, and you a Windows host. Is it possible to remotely finger print which (operating system security) patches are applied to ...
0
votes
2answers
68 views

How does RealVNC Enterprise Know My System Credential?

After the installation of RealVNC on a Windows computer, the default login username and password via VNC is the same as the system username and password. Can anyone tell me how RealVNC can access such ...
1
vote
3answers
190 views

How to find what has been added to my hard drive [closed]

Why is my hard drive being filled up when I am not installing anything? How would I find out the cause, e.g. is it malware, a hacker, or potentially something else? Every few days I come home to ...
0
votes
1answer
438 views

How does LSARPC protocol work?

I'm trying to understand how does the LSARPC protocol work internally. In particular, I would like to know how secured is it. I couldn't find anything in the internet or in different books.
-1
votes
1answer
60 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
2
votes
3answers
63 views

Controlling variables used by an application

One thing that I have seen commonly used by game cheating engines it to control variables that the game is using. The idea is to edit the variables used by the game to say, give ones self unlimited ...
1
vote
0answers
79 views

Detecting reflective DLL injection any other ways?

any way to detect it? maybe using mcafee hips rules? Are there any known Techniques to detect it ? like walking the VAD tree or something?
2
votes
1answer
577 views

IIS 7 World Wide Web Publishing Service service account

We have a security requirement for IIS 7 (Windows 2008R2) that reads as follows: The service account ID used to run the web site must have its password changed at least annually. ...
0
votes
1answer
380 views

Can I create an SSL certificate on windows signed with the machine's certificate?

From MMC > Certificates I can see there's a certificate for the current machine under 'Trusted Root Certification Authorities > Certficates'. e.g. on my workstation called 'RoryWorkstation1' there's a ...
2
votes
0answers
274 views

Using “Security Compliance Manager” to audit a Windows system

I found a few posts which suggest using Microsoft SCM (Security Compliance Manager) to audit the security of Microsoft software solutions: Windows security policy analysis tool How do I apply a ...
1
vote
3answers
246 views

Why are keyloggers a problem for password managers?

Reading the API definition of SetWindowsHookEx, I see Calling the CallNextHookEx function to chain to the next hook procedure is optional, but it is highly recommended; otherwise, other ...
1
vote
2answers
159 views

Unregistering keyboard hooks by timeout expiration

I'm writing a password manager for Windows which I want to protect against keyloggers. There is a timeout of 5000 ms for keyboard hooks. The hook procedure should process a message in less time ...
3
votes
2answers
194 views

Microsoft recommended patching period - Security Patch release and updates

Ideally a security patch released by a vendor such as Microsoft for the Windows OS is required to be patched immediately. What would be the recommended patching period that Microsoft or best practices ...
1
vote
1answer
236 views

How can one restrict Windows shared folders access to specific applications?

There are few shared folders in my company that are accessed by applications from different branches across the country for different transactions. Hence they are kept "open". During a recent PT ...
2
votes
1answer
311 views

How is the file overlay read by an exe/virus?

According to what I know ,Overlay is the part of PE file that is not covered by the PE header and therefore isn't part of the virtual image in the Loaded PE. My question is if the overlay is not ...