A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

22
votes
4answers
7k views

How secure is Windows 8's Picture Password login?

The final Windows 8 build has been released to manufacturing. One of the new features of Windows 8 is "Picture Password", where the end user logs on to Windows by clicking a specific pattern on the ...
1
vote
1answer
32 views

Can I create an application that can decrypt data but the administrator of the application cannot?

I have a windows application with a configuration file that contains some database passwords. I'd like to encrypt this data in such a way that my application can decrypt the data, but that the ...
0
votes
0answers
23 views

Use WebGoat on Windows 8 [migrated]

I need to use webgoat, but I can't install it on my Windows 8 computer. Do you know how to proceed ?
1
vote
1answer
70 views

Can someone explain, in simple terms, how the FREAK attack on browsers works?

Is there a reason it only affects browsers on Windows machines and not Mac's or UNIX/LINUX environments? A lot of the wording on this site is particularly complicated and I don't understand fully what ...
0
votes
0answers
31 views

Open source database of malware signatures

I'm looking for an open source database of malware signatures/hashes (if possible regularly updated and well documented) that I could use in one of my software for scanning a huge numbers of files ...
0
votes
0answers
17 views

How to See Who Remote Shutdown my Windows Machine [on hold]

How could I see the IP addresses of the machines that have connected to my Windows machine and remote shutdown it?
5
votes
1answer
125 views

Should I install my subordinate Certificate Authority on the domain controller? Why?

I must install a PKI in my organization. I work in a windows environment. I already set an offline CA. I must now install a subordinate CA. I have the choice between installing the subordinate CA on a ...
3
votes
1answer
58 views

Any reason for a user to use an email scanner if they don't use any offline mail clients?

I typically recommend that users enable a real-time email scanner (aka a mail shield) in order to detect a possible vector used by malware. Even if they don't use an email application, the rationale ...
0
votes
0answers
49 views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
16
votes
4answers
10k views

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite. Here is an image of the default cryptography settings ...
1
vote
0answers
66 views

What is the security of Powershell “TrustedHosts”? (is it just a name match)?

Powershell has a TrustedHost section that is configured like this: winrm s winrm/config/client '@{TrustedHosts="CorpServer56"}' What security is implied for CorpServer56? Is it just an ASCII name ...
0
votes
1answer
123 views

Windows netsh pivoting

I am pentesting a windows box to which I have gained system privileges. This box has two network interfaces. I have been able to reach machines on the second interface via the below netsh command. ...
-1
votes
1answer
97 views

Implement KHOBE attack in practice [closed]

How I could implement this attack (KHOBE) in practice against kernel hook described in this article : ...
-2
votes
0answers
16 views

Detecting kernel process? [on hold]

How to detect the process running in the kernel of windows ? is any API is there to see the process. i don't have any idea to check.this is to check weather any illegal process is running inside the ...
1
vote
0answers
32 views

IIS | Block execution of files in directory

I am dealing with user uploads via a PHP application. I want to secure the server so no exploits are available to the user, such as uploading a php shell and executing it. I have set it so all ...
0
votes
0answers
23 views

Windows 2000 System Profile [migrated]

I have found a computer (W2000 operating system) with a System Profile under Document and Settings Folder. As far I know this user doesn´t log in the computer. In a new W2000 PC this system profile ...
5
votes
3answers
285 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
2
votes
2answers
115 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
3
votes
0answers
21 views

How do I request a certificate from CEP / CES on a Microsoft CA on OSX or Linux? [migrated]

This article describes how to request a certificate from AD CS (Active Directory Certificate Services) from a non-domain joined windows computer. I would think the same principals apply to non ...
0
votes
0answers
28 views

antivirus/anti-malware vs rootkits on Windows [closed]

As I read about rootkits I wonder how well the current antivirus vendors are with detecting them. Does anyone know of a site with a current comparison test? For example, this ...
2
votes
1answer
69 views

Ease of Getting Data On Self-Encrypting Drive From Screen-Locked Windows 7/8 Computer

Hypothetical: a Windows 7 or 8 computer has a self-encrypting hard drive. It is stolen with the power on, but with the Windows lockscreen on. Are there easy off-the-shelf ways to access the data on ...
1
vote
2answers
49 views

How to change default cipher in GnuPG on both Linux and Windows?

How can I change the default symmetric cipher used by GnuPG from CAST5 to another? I'm using GPG4Win on Windows, but would also be interested in a solution for Linux.
1
vote
1answer
28 views

multiple authenticode signatures

Is it possible to have multiple Authenticode signatures in an executable? The Digital Signatures tab suggests you can, so I was wondering if, for example, you can sign an executable with Verisign's ...
2
votes
2answers
141 views

Can changing a MAC address give an attacker more leverage in a network?

Security lessons force us to use limited users (Standard User) on Windows networks. I found that an administrator account can change his MAC address from Control Panel\Network and Internet\Network ...
0
votes
0answers
22 views

How to monitor upload/download on multiple machines [migrated]

There are 3 windows machines on my home network. I'm hard wired to the router whilst my parents and younger sister are on wifi. I've noticed the occasional drop in connection speed recently and I ...
2
votes
0answers
47 views

How can I restore my Windows certificate cache so I only have those from trusted CAs? [duplicate]

All this talk about Superfish and other adware crap has made me healthily paranoid that a wrong certificate can enter my certificate cache at any time. I have no reason to assume that there is a ...
3
votes
1answer
1k views

“Extended Protection” primer and implementation guide to prevent MITM

Extended Protection (link) (link) is a feature in Windows 7 and Windows 2008 R2 that prevents certain MITM attacks. Does anyone have a primer (or explanation in plain English) what this feature is, ...
1
vote
1answer
145 views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
1
vote
2answers
93 views

Windows Firewall Connection Security with Certificate

I've been fiddling with the Windows firewall configuration of some computers within a VMWare based LAN (no domain). To aid in my testing and debugging, I created a small, self-hosted console ...
15
votes
3answers
892 views

Starting with sandbox development

I am looking for some security related project in which I can contribute and also learn something. Since I am new with this stuff It will be better if that project is less complex and digestible for a ...
0
votes
0answers
38 views

How to turn off need for bitlocker to go on Windows 7

I am the system administrator of my local computer (Windows 7) and I am unable to write to an external hard drive if it is not encrypted using Bitlocker to go. The local computer is not encrypted and ...
3
votes
1answer
121 views

Has the security of PuTTY been examined?

I am wondering how PuTTY stacks up against other SSH implementations with respect to scrutiny and security of its SSH2 protocol implementation. PuTTY is probably the most-used SSH client on the ...
5
votes
3answers
527 views

When do Ps Tools send cleartext passwords, and how can I demonstrate this?

The Ps Tools from Mark Russinovich are very handy remote administration utilities. However, they all come with one big caveat. Note that the password is transmitted in clear text to the remote ...
-1
votes
0answers
41 views

Getting System Account Locally and Remotely By exploiting an executable in windows 8.1

I am trying hard to locate weakness in recent windows os and report it to Microsoft,I don't research for buffer overflows and other bruteforce method but what I look for most is design flaw in ...
10
votes
2answers
3k views

Detecting reflective DLL injection

In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...
4
votes
2answers
94 views

Is UAC actually worth it? [duplicate]

Windows UAC: It's annoying. It seems pointless. Should I just disable it? Or in other words - is there actually a real risk of something malicious happening if I do? Is there malware out there that ...
3
votes
1answer
141 views

Is RDP susceptible to the BEAST attack?

I have Windows 2008 R2 servers which are failing a PCI vulnerability scan because they have RDP enabled (needs to be disabled). I have applied the PCI settings of IISCrypto tool, but I have to leave ...
4
votes
3answers
8k views

How do you properly setup Tor on Windows 7?

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?
1
vote
2answers
124 views

Are there other roots of trust on my computer aside from these 46 root certificates?

I've heard many people imply that modern browsers and OSes trust a myriad of root certificates. The implication is that it is impossible to ensure the private keys of all of the root certificates ...
3
votes
2answers
80 views

Does a valid code signing certificate mean that an installer has not been tampered with in transit?

Several dominant software vendors distribute updates over HTTP or over HTTPS with bad certificates. In general, it doesn't seem like I can expect to rely on a secure channel to ensure that an ...
2
votes
1answer
183 views

ISP glitch or a malware? Has this ever happened to you?

Brief background: I consider myself a relatively paranoid power-user, if not an absolute pro. I regularly update my AV and keep up with all the latest updates on my Windows7 machine. But what happened ...
0
votes
0answers
18 views

Share Intranet through VPNs [migrated]

Site (#S1) has a internal computer quiz system of the PCs in the subnet of 192.168.8.0/24, the web server is located on 192.168.8.2. Those PCs do not connect to Internet. There is a PC (#A) joined to ...
3
votes
0answers
76 views

How to secure a compromised computer while getting proof against the attacker [migrated]

I have evidence (non-technical) that my company is spying on me, not on my company PC but my private PC at home. These evidences won’t hold in court, so I am in need of technical proof. I suspect that ...
2
votes
1answer
556 views

Examples for practicing reverse engineering/disassembly of win32 .executables

I remember back in the day, there used to be a website where users would post hackits in the form of win32 exes for users to crack. Usually the goal was to defeat some sort of DRM, such as a nag ...
0
votes
0answers
10 views

what is MAX_ALLOWED in security event [migrated]

I was wondering to understand that what is "max_allowed" and "ACCESS_SYS_SEC" in security event logs in windows. I can reckon that max allowed : pointing at connection limit has exceed. but I'm not ...
1
vote
0answers
22 views

How do I get the thumbprint of an SSH2 public key on windows?

I have a SSH2 public key with a .PUB extension and when viewed in notepad it has this header: ---- BEGIN SSH2 PUBLIC KEY ---- How do I view the thumbprint of this key? I've attempted ssh-keygen ...
4
votes
0answers
128 views

Which Windows Files Should be Monitored by HIDS?

I highlighted my question below. Here is some background. It's easy to find data showing the most commonly trojaned/modified Linux binaries and config files. ps, ls, find, kill, lsof, passwd, ...
0
votes
0answers
9 views

I cannot get TinyWall to add Skype to my exceptions [migrated]

I've installed a personal firewall called Tinywall. 2.1.6 and I can't seem to add skype to the exceptions in such a way that it will go through the firewall. It's application executable has been ...
2
votes
2answers
58 views

How can I determine the domain controller when it's not in DNS?

On a penetration test going in blind for an organization, meaning no knowledge of network topology of design, no idea what the domain(s) might be, and domain controller is not apparent in DNS...how ...
2
votes
1answer
120 views

Security of Windows Screen Saver Password

How secure is the Windows screensaver password? Seeing that screen saver passwords are used in the corporate world, is there any way of bypassing the screen saver after it is already running? Could a ...