A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

0
votes
3answers
21 views

Install software to a windows PC through a linux live instance (e.g. Kali)

A thought experiment. If I had physical access to a PC that was switched off, but I didn't know the password, could I boot into a live linux image and install software on the windows box? Software ...
2
votes
1answer
72 views

How can I hide a program from another program?

If program A scans RAM, running processes and whatever, can I hide program B from being detected by A? Basically, I don't want program A to detect program B, or at least, stop it from identifying ...
0
votes
0answers
52 views

Security Issue on windows 8 [on hold]

I am new to network security and similar technologies and I have encountered something very unusual with my machine. I've been learning some hacking and backdoor tricks to enhance my abilities as a ...
28
votes
4answers
9k views

Create a unterminable process in Windows

I am a student, and am genuinely curious about unterminable processes in Windows. For educational purposes, I would like to create an application (possibly in VB6?) which cannot be terminable by a ...
13
votes
1answer
709 views
+500

What are the privacy and security implications of Windows Telemetry

There have been quite a few news stories relating to the use of "Telemetry" in Windows 10 (and also now Windows 7/8) with suggestions that users would want to disable or remove these updates due to ...
2
votes
3answers
126 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
0
votes
0answers
16 views

How to establish previous modification dates of a file? [migrated]

I've got some files (.ini and .lnk) and would like to establish their previous modification dates. Unfortunately no shadow copies are present. Is there any way to do that? I run Windows Vista. Thanks ...
98
votes
8answers
14k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
3
votes
2answers
77 views

Does enabling EnableLinkedConnections pose a security risk?

As shown Microsoft's TechNet, network shares that are mapped by logon scripts are shared with the standard user access token instead of with the full administrator access token. Here's the gist of it: ...
148
votes
4answers
27k views

How does Windows 10 allow Microsoft to spy on you?

Windows 10 is perhaps the most Internet-connected and cloud-centric operating system released by Microsoft to date. This, of course, has caused many users to be concerned about how the OS respects ...
0
votes
0answers
30 views

How to change MAC address on Windows Phone 8.1? [on hold]

I did't find any method to change MAC address for Windows Phone devices, unlike the Android devices, so I want to know if there is a way to change my Lumia 525 MAC address.
1
vote
2answers
261 views

Windows netsh pivoting

I am pentesting a windows box to which I have gained system privileges. This box has two network interfaces. I have been able to reach machines on the second interface via the below netsh command. ...
1
vote
0answers
54 views

How to store a file securely on the windows file system?

Problem: I have a windows service running under local system account. I have a blob of data that I want to store securely and persistently between reboots. I have decided to store it as afile( as ...
1
vote
2answers
86 views

Performing a vulnerability assessment on Windows Tablets?

How does a security auditor perform a vulnerability assessment for Windows Tablets including Surface RT tablets deployed ones and any management application that comes pre-installed with it? Also, ...
1
vote
1answer
60 views

How to access SQL server inside a Powershell script

I'm coming from a Linux world so I'm a bit at a disadvantage here. Assuming a windows Task scheduler script that calls a stored procedure to return some rows, and transmit a file over email or SFTP ...
4
votes
7answers
735 views

Is it possible to protect my Windows XP users now that Microsoft is no longer releasing security updates?

My office has about 20 PCs running Windows XP. I got a message saying that Microsoft is no longer releasing any security patches for Windows XP. However, we find that XP is very convenient for our ...
0
votes
0answers
25 views

How do I identify sensitive information in a Minidump file? [closed]

I suspect Minidump files contain sensitive information, and I'd like to inspect a file for such information. What approach should I take? Assume that the minidump references either an internally ...
13
votes
1answer
2k views

Is my modem compromised?

My modem automatically changes its DNS server from Norton DNS server to AdClick server. How do I prevent this from happen again? Is it possible to have protection from these for modem? How do I check ...
0
votes
3answers
3k views

Should I restrict Core Networking firewall rules in Windows server?

I have a server that I want to restrict access to by allowing only one IP address to be able to connect to it through desktop and make http request through port 80. Now in my firewall I only have ...
1
vote
1answer
167 views

Can I trust the details given in Resource Monitor?

I'm looking at Resource Monitor in Windows 7 and wondered whether a process could be hiding in plain sight by mimicking another process. For example I've renamed an executable file as chrome.exe and ...
0
votes
0answers
5 views

Enabling MFA in Windows 7 [migrated]

How does one set on Windows 7 that you have to login with 2 methods? For example, first time with your password and then you are forced to use fingerprint or smart card ... and after that your PC will ...
0
votes
1answer
37 views

BitLocker : Update Volume Master Key and meaning of “keyed” vs “re-keyed”

Note: Below are some information from searching around the Internet. To skip to my main question, go to the last line of this post. I've been searching around on how to change the Volume Master Key ...
2
votes
1answer
95 views

Anti-live forensic programs

Against dead forensics acquisition we can use disk encryption (we can use TrueCrypt for example). I was wondering do software exists against live forensic ? Can you give me a list for windows and ...
3
votes
4answers
6k views

How to make / dump contents of memory for forensics analysis?

I work as a Information Security analyst and was recently tasked to look into Incident response + computer forensics related topics. For starters, I am experimenting on my PC which is running Windows ...
28
votes
6answers
5k views

What is the point of making a complicated PUBLIC password?

I have downloaded a couple of Virtual Machine images from http://modern.ie, in order to test different versions of Internet Explorer. When running these images, a complete Windows environment is ...
5
votes
2answers
2k views

How do I make or get computer certificates to use with IPSEC user authentication on Windows?

I am having trouble and need some direction using computer certificates with Windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work ...
6
votes
1answer
210 views

Is ECDH for SEC P-384 and P-521 broken in Windows 10 / Windows Server 2016 TP3?

UPDATE: Proof of concept code here, console output shown below and all involved certificates are here. Just noticed that ECDiffieHellmanCng.DeriveKeyMaterial(...) behaves differently on Windows 8.1 ...
2
votes
2answers
252 views

Windows Firewall Connection Security with Certificate

I've been fiddling with the Windows firewall configuration of some computers within a VMWare based LAN (no domain). To aid in my testing and debugging, I created a small, self-hosted console ...
11
votes
1answer
972 views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
4
votes
4answers
180 views

Can a virus persist across Windows version upgrades?

It is possible for a trojan which allows a remote user to secretly control a computer, to re-install itself after upgrading to a newer version of Windows?
1
vote
0answers
83 views

Windows 10 privacy concerns for other accounts on same computer [closed]

What are the privacy concerns for a local account on a Windows 10 computer, which has all settings set to "private", if an additional "Microsoft" account is being used on the same computer with ...
6
votes
2answers
1k views

Can a piece of malware/virus inject itself into an ISO

Let's say that I have an infected PC. I download a copy of the Windows ISO(obviously clean) and burn it to an USB. Is it possible that the malware on my computer can inject itself in this process/ISO ...
0
votes
0answers
33 views

What artifacts to acquire when looking for IoC?

I want to hunt for the Indicators of Compromise (IoC) in a potentially infected Windows PC. I am writing a batch script that would record the information needed for analysis. It includes the ...
30
votes
5answers
5k views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
1
vote
0answers
15 views

Testing my TLS1.1 connection code [migrated]

I have a desktop client application (Windows) developed using C++. It connects to the web services hosted on the IIS on the server. Currently I am in the process of porting this application to use ...
1
vote
1answer
79 views

How to encrypt or store data so that only a pool of processes can share it on Windows?

I am writing an application T1 which is using SQLite database to store some sensitive data and i am trying to encrypt it securely. The issue i am facing is that i don't want my symmetric key to be ...
1
vote
1answer
129 views

Windows Passwords

What are the security concerns of the following user account setups on a normal Windows 7/8/10 desktop machine compared to: Using a non-privileged account with a password and having an admin account ...
5
votes
2answers
196 views

How secure is PIN login to Windows?

I've just noticed that Windows 10 allow me to change my login method to PIN which is obviously much more convenient than entering my long and secure password after every startup / wake. I am just ...
2
votes
2answers
101 views

enumeration and MS DCERPC

Enumeration, enumeration, and even more enumeration is the generic pentesting mantra, but enumeration is worthless if you can't read the results. I came across the Windows RPC service, where ...
11
votes
3answers
3k views

Can you extract memory contents from a hibernated Windows machine?

In a recent discussion about hardware hacks, attacks surrounding Windows hibernate popped up. I am not entirely convinced that it would be viable to get stuff out of the memory saved to disk. When ...
5
votes
6answers
844 views

How can a novice find proof of a system compromise?

I am almost certain a colleague has installed a keylogger on my system. I am totally new to IT security, but have substantial linux / windows / programming experience. The system I believe is ...
0
votes
0answers
4 views

Help Needed To Create Custom .onion address - Please explain it like I'm 5? [migrated]

I've opened 'scallion.sln' in Visual Studio, tried to run it and have this error. I know I'm a complete noob, can someone please explain how I can do this? I've installed OpenCL and .NET 3.5. I'm ...
4
votes
4answers
269 views

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?

I have seen other TrueCrypt questions as well "Windows encryption with BitLocker" and "Mac OSX encryption with FileVault". Does the FBI/NSA or other government agencies have access to my data or can ...
-3
votes
0answers
72 views

SYN Flood attack on private user - steps for post-analysis?

The firewall in question, used in a secured home office, reported a series of SYN Flood matches on various requests coming in over a ten-second period. The IP and country of origin changed with every ...
-3
votes
1answer
75 views

How to tell if my Windows 7 copy is not modified?

I lost my windows cd I downloaded a copy from the internet. The guy who shared it said it's original without any modifications. However I get weird actions like I can't use mouse clicks or I can't ...
6
votes
0answers
191 views

Windows 10 installaton USBs sold by Microsoft [closed]

With the recent release of Microsoft's Windows 10, I dropped by a local Microsoft store to purchase a windows 10 installation media. To my surprise (somewhat) the employees said that they do not ...
1
vote
2answers
58 views

If there is a malicious attack on one partition, is the other one safe?

I recently have used Bootcamp to set up a new partition and run Windows 7. About half of my HDD is designated to my OS X partition and the other half is allocated to the new Windows 7 partition. If ...
4
votes
9answers
923 views

I only use windows for games. Do I need anti virus protection?

I use Linux, and even though I'm not pretending my system is virus-free, it's generally accepted that even an aggressive firewall is not a requirement. I want to install Windows 7 on a machine which ...
3
votes
1answer
91 views

Is it dangerous to have the built-in Administrator account enabled?

I've seen it said that when using the built-in Windows Administrator account, the best practice is to enable it (net user administrator /active:yes), use it, and then disable it. I do realize it's a ...
0
votes
0answers
4 views

Connecting Android to Windows VPN [migrated]

I have set up a VPN on my Windows 10 computer by going into Control Panel\Network and Internet\Network Connections and hitting Alt and then going to File > New Incoming Connection... and setting up ...