Questions tagged [windows]

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

Filter by
Sorted by
Tagged with
1
vote
0answers
20 views

Does Stopping a Bitlocker Encryption Process Damage Harddrives or Data? [migrated]

I've started Bitlocker Encryption on a pretty large internal drive around 4TB, it's obviously a stupid mistake from my side. It's been running for a long time. What will happen if I cancel it which I'...
0
votes
0answers
54 views

Is it possible to achieve persistence in Windows through using WinLogon without touching userinit, notify, or shell keys?

I am interested in finding out if it is possible to achieve persistence through winlogon without using one of those 3 mentioned keys. I am trying to determine if it's safe to ignore registry key ...
-1
votes
0answers
44 views

Windows 10 version 1903 to 20H2 has eliminated all but these threats, should I be concerned JS/Blackhole? [closed]

containerfile: F:\kali-linux-2020.1-installer-amd64.iso file: F:\kali-linux-2020.1-installer-amd64.iso->pool\main\m\metasploit-framework\metasploit-framework_5.0.70-0kali1_amd64.deb->data.tar.xz-...
0
votes
0answers
18 views

How to connect Windows CNG with Nginx in order to protect server private keys?

As I read on this question, private keys are protected by CNG mechanisms in Windows. So using NGINX, I would like to know how to establish the communication between NGINX and this cryptographic API in ...
2
votes
1answer
82 views

Windows service with elevated privileges - Security concern

The company I work at uses a program on their Windows workstations that runs as the logged-in user but some tasks require elevated privileges. The user must be able to run these without having admin ...
0
votes
0answers
37 views

Is it possible for someone to “peel back” an image layer? [duplicate]

I am on a Windows 10 machine using Chrome (latest updates). I took a screenshot of Instagram, because I was having problems logging in, and then using Paint 3D applied a black rectangle to hide my ...
0
votes
0answers
26 views

Are my browser's stored passwords safe when my Windows 10 User Account has no password? [closed]

From what I've learnt, most browsers which allow you to save passwords for particular forms and websites (e. g. Google Chrome and Chromium-based web-browsers), encode password based on your Windows ...
-1
votes
0answers
27 views

Need a book or recourse for active directory pentesting [closed]

I'm trying to get into active directory pentesting but I can't find a good enough source . If someone could suggest a good book or videos or something that'd be great I'm also trying to familiarize ...
1
vote
0answers
12 views

Portable Windows / Running Windows from a USB [migrated]

I am a person that is constantly on the move. Therefore, I usually carry USB sticks with operating systems that I can easily run without leaving any trace on the host system. Usually, I just run Linux ...
1
vote
1answer
97 views

Why do administrators create passwords vulnerable to kerberoasting? [closed]

I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was ...
2
votes
1answer
82 views

How do I add 2FA to my personal computer?

I have a Windows 10 PC that I would like to protect a little better. I've looked for solutions online, but they're all business oriented. What I would like, in an ideal situation, is having to enter ...
4
votes
1answer
117 views

Windows group policies to protect against Rubber Ducky attack

I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
1
vote
0answers
49 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
1
vote
2answers
112 views

Can someone know who created a cpp file?

I know that one can see the modification, access, and creation date of a file on Windows. And that the creation date, as well as other dates, can be modified at will. I just wonder if it is possible ...
0
votes
1answer
63 views

Web scraping is safe for security?

I'm working on web scraping and data mining for Alexa top-ranked websites in the world. I was doing that with node.js, Axios (for HTTP request), on a Windows machine (especially on WSL bash). After I ...
1
vote
0answers
69 views

Why do Windows AV software detect strings with case-sensitivitely?

As Windows is case-insensitive, the string mimikatz can be evaluated the same as MIMIKATZ or MimIkaTZ. A naive method of AV evasion by switching cases of some characters in suspicious string has been ...
0
votes
0answers
21 views

Are there known escapes to get disc access when a Bitlocker-encrypted password is locked at the Windows login screen?

So on a bitlocker-encrypted single drive on a laptop, if the laptop is booted and waiting at the login screen, is there a way to escape from here to get disc access, possibly excluding that of ...
0
votes
1answer
88 views

Can I elicit responses from “any remote host” on “all protocols” if I want to?

An nmap scan of my test computer returns a result of “5357 / tcp open wsdapi”. After some research, this is something that can be exploited. It is explained here that: By default, WSDAPI will listen ...
0
votes
1answer
50 views

Windows Firewall allows the connection to more than one user who shares the same external IP address

I wrote a stand-alone anticheat. When the client anticheat connects to its server, the server creates a firewall rule allowing the game client to gain access to the server. The problem is the firewall ...
28
votes
5answers
6k views

Is a password-protected stolen laptop safe?

Let's assume I have a Windows 10 computer and my login password has an entropy of infinity. If I did not encrypt my entire hard-drive, does it matter how secure my password is? Is it possible for ...
0
votes
1answer
54 views

USN Journal leaks information on exFAT-hosted files (in VeraCrypt containers)

I'm using a secondary drive to store encrypted files, in VeraCrypt file containers. Unfortunately, even if the external drive is formatted as exFAT, Windows leaks information on files inside mounted ...
0
votes
0answers
43 views

making CORS request to 3rd party API

I am modifying a javascript application running on an apache web server. This runs on a windows server inside of our corporate network which I am referring to as "local server" in the ...
0
votes
1answer
56 views

Spoof publisher info on Windows applications

Let me start by acknowledging that I have absolutely no experience with Windows development and this is purely for academic purposes. I apologize for incorrect terminology and welcome corrections or ...
7
votes
2answers
203 views

Do people even exist who actually vet all the updates to their open source software?

A year or so ago, I set up this system which, whenever Composer (that's PHP's packet/library update manager) fetched new updates to my few (but critically required) third-party libraries, created a ...
0
votes
0answers
40 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
0
votes
1answer
43 views

How to generate a config file from a .csr using OpenSSL (or other)?

I want to export the configuration details from an existing CSR or Certificate to a config file which I can use with OpenSSL to generate a new CSR. Background Our CA has changed. For the old one, I ...
1
vote
0answers
84 views

What are the privacy implications of the “Your Phone” app on Windows?

I'm trying to decide whether or not to use the Your Phone app on Windows, and not finding much information on it. It requires a Microsoft account, but I don't really see why that should be necessary ...
1
vote
1answer
162 views

Is it safe to use an executable if only unknown antiviruses detected something?

Recently I downloaded Open Shell application and checked it via VirusTotal. Most famous antiviruses like Bitdefender, Nrothon, Kaspersky found nothing. But some of antiviruses thing there are some bad ...
7
votes
1answer
151 views

CertGetCertificateChain doesn't recognise revoked certificate if the reason is “unspecified”

In my program I use CertGetCertificateChain to investigate the validity of certificates. If in my test PKI I revoke a certificate and specify the reason "unspecified", the error code in the ...
0
votes
0answers
81 views

How to prevent my ISP from seeing what sites I visit without a VPN

I use opera browser, and while the built-in VPN has been working relatively well it's been preventing me from joining discord voice calls and using omegle. Is there a way to hide my activity from my ...
0
votes
1answer
49 views

Information disclosure via ktpass tool

The Microsoft ktpass tool can be used to generate a .keytab file that contains a secret key. I'd like to understand the output of the tool. An example output can be found here. I'm interested in the ...
2
votes
1answer
117 views

What are the security risks to have admin rights for a user account on Windows 10?

I am considering the security risks to have a standard user added to the Administrators group on an enterprise Windows 10 machine that is dedicated to that user. This is related to security only, so ...
1
vote
1answer
81 views

How are games and software executables injected with custom code & without breaking offset?

Introduction – Context Everyone has seen so called "Injectors" or "Cracks" for certain programs & games at some point in their life. These applications inject their own code ...
0
votes
1answer
327 views

How to dump the memory of a given process with Volatility 3?

It seems that the options of volatility have changed. How can I extract the memory of a process with volatility 3? The "old way" does not seem to work: If desired, the plugin can be used to ...
0
votes
1answer
73 views

Directory to place files on windows

on linux when we have a foothold and we want to transfer files to the victim we usually transfer it to /tmp beacuse it is writable and always there. what directory should we transfer our files if we ...
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
2
votes
1answer
100 views

Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?

I am doing some research for school about the Kerberos protocol and its vulnerabilities, especially the Pass the Ticket attack. Related articles are always talking about Active Directory so I was ...
0
votes
2answers
149 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
0
votes
1answer
45 views

Is persistence via scheduled tasks possible if the user is not elevated?

As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
0
votes
1answer
58 views

Trying to do an SQL injection into a login field [closed]

I have an assignment to make an SQL injection - I found a login field that spits out an error, but I can't seem to make queries work inside of it. For your information it's an Mysql server. What is ...
1
vote
1answer
83 views

Wiping a hard drive before reinstallation

A few years ago, I left a new laptop at a sketchy computer shop to downgrade the OS to Windows 7. The experience was a disaster. My goal now is to install Cinnamon Linux on the laptop and remove ...
2
votes
1answer
75 views

Check TRIM space on SSD

Is it possible to 'view' the space that TRIM would take care of to see if that space was really wiped? I am using both Windows and Linux.
0
votes
0answers
37 views

Does Microsoft implement “Windows Defender”-like security for WSL 2 instances?

I'm not certain whether WSL 2 instances, running in Hyper-V, are actually scanned by Windows Defender. I have found some articles on Google describing Window Defender's performance impact on WSL, but ...
0
votes
1answer
85 views

How to check which process is modifying my clipboard?

I'm on Windows 10 last build and for a few days it looks like I have a malware that modifies ethereum addresses in my clipboard. I sadly tried a lot of antivirus, antispyware and nothing is found. I ...
2
votes
2answers
157 views

Windows file to look for to test LFI

For Linux, if we want to test local file inclusion we always search for /etc/passwd For old versions of Windows, (e.g. Windows XP) we search for win.ini What file should I search for in later ...
0
votes
1answer
49 views

Can I recover files that I had on windows from a SSD that I converted to apfs (mac) and which method or tool to use?

I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
0
votes
1answer
80 views

Can my school monitor what I'm looking at at home? Sophos is installed [duplicate]

yesterday I accidentally searched up a website and misspelled a character and it took me to an obscene website that I was horrified by on my school laptop. I was also on my school account. Can my ...
0
votes
0answers
34 views

Error while doing DCOM lateral movement

Current user is in "Distributed COM Users" group. Anyone can help with using DCOM for lateral movement? Getting this error: PS C:\> $ComputerName = "TEST-BOX" # Remote computer ...
0
votes
1answer
37 views

ModSecurity Command Injection not working

I am testing web application firewall and I have installed ModSecurity 2.9 runs Core ModSecurity Rule Set ver.2.2.9 and to test on Web application I also install DVWA Platform: Windows and trying ...
0
votes
1answer
195 views

Brute-Forcing a Chrome Login Data file

Say I have a "Login Data" Chrome file that is encrypted with the user's Windows password. Is there a way I can brute-force the file and try to decrypt it using every password possible?

1
2 3 4 5
40