Questions tagged [windows-10]

An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.

Filter by
Sorted by
Tagged with
1 vote
1 answer
75 views

Windows 10 Update - Man In The Middle Attack - Tamper Update [duplicate]

I am connecting to a wi-fi network and blocked all IP addresses in this network with a regular Windows 10 firewall. The only available IP addresses are: 192.168.1.1 = gateway 192.168.1.102 = my own ...
5 votes
3 answers
2k views

Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?

Microsoft has published information about a recent security problem classified as "BitLocker Security Feature Bypass" identified as CVE-2022-41099 which points out that Windows Recovery ...
0 votes
0 answers
190 views

ERROR kuhl_sekurlsa_acquireLSA from customized mimikatz

Tried to call sekurlsa::logonpasswords function from mimikatz main source, but I get ERROR hl_aaaurlsa_acquireLSA ; Logon list The program is executed with Administrator cred and I'm sure there's no ...
0 votes
0 answers
19 views

Windows CSP for remote signing

I have a system (lets call it signer) that has private keys for doing Authenticode code signing. I have bunch of build systems that want to sign generated build artifacts. Obviously I can't use ...
  • 101
0 votes
0 answers
54 views

Can a Remote Desktop software prevent windows 10 keylogger from accessing what is typed on client computer during a session to a remote computer?

The “improve inking and typing” setting in Windows 10 allows Microsoft to send themselves processed samples of what is typed on a machine (not sure if it is processed to remove details as it’s typed ...
1 vote
0 answers
70 views

Blank decrypted Windows 10 passwords [duplicate]

I'm getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the --format=NT and --show arguments, and get: username::1001:aad3b435b51404eeaad3b435b51404ee:...
0 votes
1 answer
95 views

Storing a key in a reasonably safe way

I’m developing an application that will run on a private, on premises network. The application will be accepting requests through an API, read some encrypted data from the disk, decrypt them, do some ...
1 vote
1 answer
74 views

Secondary disk safe to use after potential virus?

I've recently bought a new disk and made a fresh install on a home PC after having potential malware (or a very corrupted registry, whatever your take is on having numerous Blue Screens of Death, one ...
user avatar
0 votes
0 answers
224 views

Searching in Chrome redirects to "find.fnavigate-now.com"

It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives? https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
0 votes
0 answers
10 views

How to decrypt windows password with SAM and SYSTEM files? [duplicate]

Suppose we have access to SAM and SYSTEM file, I want to decrypt the password. I'd like not to use any third-party software and write my own algorithm. Is there a way to do so?
0 votes
0 answers
84 views

What are the security benefits or concerns about upgrading to Windows 11?

My Windows 10 machine is saying that I should upgrade to Windows 11. It even says that it brings "enhanced security". Upgrading always brings a measure of uncertainty and while upgrading ...
  • 126k
0 votes
0 answers
137 views

Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?

I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
  • 105
2 votes
1 answer
409 views

Can an ISO file be harmful if opened as an archive?

I was trying to download something off a sketchy website, and ISO was a reasonable extension for what I was trying to get, but I was still pretty sure it was malicious. I didn't put much thought into ...
0 votes
0 answers
107 views

Netcat reverse shell, can't execute commands

I have used a stageless payload to gain a reverse shell using netcat. I get connection but the commands return nothing. I was wondering, why this happens? And how to fix this? The victim machine is a ...
0 votes
0 answers
171 views

Bluetooth USB device shows up as HID Keyboard. Is it safe?

I bought a USB Bluetooth adapter and my PC now has Bluetooth available, but while it's connected it is makes a "HID Keyboard" show up in my "Mouse, keyboard & pen" setting in ...
  • 663
1 vote
0 answers
147 views

Is it safe to disable certificate checking?

I am developing a web API, which runs only on my local computer, and using PowerShell to test it. Here is an example test: $baseUri = 'https://localhost:5001' $body = '{ "title": "...
3 votes
0 answers
118 views

Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?

Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.) Let's say ...
2 votes
0 answers
257 views

Use platform TPM as U2F for web applications

The Problem: Use the platform TMP of my Windows Laptop/PC (no external device or USB token) as U2F in a web application to check if it is a known device. My intended solution: I need to store/create ...
2 votes
1 answer
396 views

Why does this Windows process run with High integrity?

Background I'm trying to understand more about the Mandatory Integrity Control system in Windows, and have been looking through the background processes that are running at High integrity on my laptop....
1 vote
1 answer
127 views

How risky is it to let someone know the name of your Windows PC?

I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
  • 25
2 votes
1 answer
142 views

Does only having Microsoft Office installed make you vulnerable to the CVE-2022-30190 RCE or having Windows as your OS is enough?

I was wondering whether you need to have Microsoft Office installed to be vulnerable to CVE-2022-30190 RCE. As far as I understand, MSDT is the issue here (the attack vector so to say) and as shown ...
0 votes
2 answers
247 views

Unintended file downloaded. Am I likely to have gotten a virus?

I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
0 votes
1 answer
145 views

Non executable virus?

Bitdefender detected .class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135 .tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
0 votes
0 answers
40 views

Windows 10 Cybersecurity on Stand-Alone Computer

I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
  • 255
0 votes
2 answers
99 views

Is this weird folder "Up8d76c_31187" a windows thing?

I noticed it becaue one of these exe's started running after a BSOD. Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further? Edit: Other exe's are worse: VirusTotal ...
  • 103
2 votes
0 answers
281 views

Can a virus infect windows 10 bootable media?

I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
1 vote
2 answers
350 views

Is Windows 10 Home more secure than Windows 10 Pro in some way?

I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language. ...
  • 758
0 votes
0 answers
176 views

How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine. I am ...
0 votes
2 answers
242 views

Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]

I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
0 votes
1 answer
277 views

Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]

Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
0 votes
0 answers
38 views

No UAC appearing for newly installed applications

Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
  • 1
1 vote
2 answers
243 views

Bought a new Laptop. Can't reset. Is it Safe?

I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
  • 13
0 votes
1 answer
1k views

pwdump8-8.2 correct hash for Microsoft Account Win10

I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account. I used - PwDump8.2 I have an admin account unlocked on the system and can access most files. I know ...
  • 5
1 vote
0 answers
119 views

Does Windows 10 log network activity?

I've been thinking a lot about private browsing recently. Here's a scenario I've been thinking about: Let's say I have a browser installed on my Windows 10 PC called "ChromeFox" (made up, it'...
0 votes
0 answers
139 views

Windows 10 user autologin password lost

A while ago I have set up the autologin for my Windows 10 user. I do not know the password anymore. I can login to the system (as has autologin now). But I cannot change the password. Is it possible ...
0 votes
2 answers
230 views

How to securely encrypt my computer and protect it from thieves and others

I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
0 votes
2 answers
227 views

Setting Up MFA and/or best security for personal computer for RDS

I am in the process of converting an older computer into a dedicated machine learning server. I want to be able to RDS into it from my current computer and ideally from anywhere. However, I do want to ...
  • 53
-3 votes
1 answer
93 views

Is Windows 10 Insider Build usable within SOC 2 compliance? [closed]

Or Windows 11 pre-release, just cause I'm curious? (By employees if that wasn't implicit.)
0 votes
1 answer
238 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
1 vote
0 answers
19 views

Suspicious HEAD http requests [duplicate]

On my Windows 10 machine, I run mitmproxy on localhost:8080. I've changed the system proxy setting to point to my local proxy server. Apart from what I expect to see, I can also see the following HEAD ...
0 votes
1 answer
1k views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
  • 1
0 votes
1 answer
521 views

How to prevent DNS leaks without using a VPN

I use Windows 10, and I've configured my network to use Quad9 in Windows settings. I've also enabled DoH. Now, when I go to ExpressVPN DNS Leak Test webpage to know whether I have DNS leaks or not, it ...
  • 1
0 votes
1 answer
251 views

How do I stop local users from bypassing the UAC on Windows 10?

I'm the admin for a Windows 10 machine with a few local users. While I understand there are other ways to bypass security with access to the physical machine, I'd like to protect against hacks that ...
  • 305
5 votes
1 answer
512 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
  • 51
0 votes
1 answer
115 views

Does data recovery of file depends on its extension?

Most free to use data recovery tools (Recuva, Easus, MiniTools) offers good recovery with known file extensions for picutres, videos and documents (.png, .xlsx etc). But lesser known file extensions, ...
  • 103
1 vote
1 answer
770 views

Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]

Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how? Note: I'm not trying to do anything malicious. All of this is ...
0 votes
1 answer
283 views

How to check TCP sequence number to detect mitm?

I suspect that my router (I'm using an iPhone as router) has been owned and the attacker is making some kind of mitm attack. I suspect also that some html and js code has not been sent to my laptop ...
0 votes
0 answers
353 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
  • 1
0 votes
0 answers
121 views

Securely deleting Volume Shadow Service (VSS) in Windows 10

Suppose that VSS is enabled and snapshots exist. If I run a program to wipe the free disk space on my drive, would this delete the VSS snapshots? It might do since the program works by filling up the ...
0 votes
2 answers
221 views

Haven't updated my Windows 10 for more than a year

Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS. I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down. Now, ...

1
2 3 4 5
8