Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
0
votes
0answers
25 views
Create VPN External IP [on hold]
I would like to create an VPN using my dedicated external IP. Can someone help to say how I can do? My skills in infra is not very well. This idea it would be to access my network. The idea is to ...
0
votes
0answers
4 views
Know security mode of a Bluetooth Device [migrated]
I want to allow only "secure" Bluetooth devices to be used on Windows 10.
Everyone talks about the Security Mode of Bluetooth but I did not find how we can check the Bluetooth Mode of a device or ...
0
votes
0answers
22 views
Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank
I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
0
votes
0answers
30 views
How to install a periststent EXE-File on a Windows 10 system without admin rights? [closed]
is it possible to install a persistent EXE-File (Backdoor) on a Windows 10 system without having admin rights on a non-admin account, so that the EXE-File will be executed/started every time the ...
2
votes
1answer
55 views
Is RDRAND reliable in terms of security under Windows 10?
This question was already answered by Linus Torvalds for Linux, and is also cited in this Q/A on this stack:
We use rdrand as _one_ of many inputs into the random pool, and we use it as a way to ...
0
votes
0answers
124 views
Something is visiting every URL after I do. What is it?
For each time I visit a unique URL on my web server, a mostly random Amazon owned IP address visits that URL fairly soon after.
If I have a query string, and I use the same one that it's already ...
0
votes
0answers
8 views
Use local administrator and Domain Cached Credentials to obtain access to AD domain?
I have obtained local administrator privilege on a Windows machine connected to AD domain.
Using Mimikatz I see the Domain Cached Credentials of a few Domain Admins.
I know that, it is possible to ...
0
votes
0answers
15 views
Methods for obtaining a Windows domain account, when having no domain account already?
I know of sniffing NTLM authentication, using a tool like Responder, and then brute-force these packets to obtain AD credentials.
But what if the domain has disabled LLMNR and NetBIOS? Then Responder ...
0
votes
0answers
53 views
How to stop windows defender in windows 10 [migrated]
I have windows 10 installed on my machine, but I didn't have gpedit.msc. So i installed it using the batch file. Now I am going to local group policy editor:
Administrative Templates->Windows ...
0
votes
0answers
31 views
Which shims are used to patch memory?
Reading about Shims, I came across many suggestions that shims could be used to patch memory (for instance to inject a DLL). Unfortunately, I could not find the exact shims used to perform those ...
2
votes
1answer
95 views
Is there evidence to proof that Windows is spying us ? Are the anti-spy programs works and are they trustable?
Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university ...
1
vote
1answer
86 views
Being connected to a trusted VPN, do I still need personal firewall, and if so, why?
Background
Hardware: Dell Inspiron 15 Gaming 7577-92774 with recent BIOS (16-Aug-2018)
Operating System: Windows 10 Pro, version 1803 (Build 17134.285)
Antivirus / Firewall: ESET Smart Security ...
1
vote
1answer
50 views
Obtain NetNTLM/NTLM hash or login
In one CTF, I encountered a task that is solved by getting NetNTLM \ NTLM or just getting username.
Tell me, please, is there any protocol that automatically sends NetNTLM / NTLM or username, when ...
3
votes
1answer
68 views
How does Windows knows a particular software is an AV?
First, I did some GoogleFu and came up with nothing.
My question is: How does Windows 10 know things like McAfee, Symantec, AVG, etc are antivirus solutions?
My assumption is that they set a ...
7
votes
2answers
223 views
Win10: Access other logged on users' memory
How easily can admin users access the data of other users' running processes on Windows 10?
Especially webpages loaded by Chrome.
Example
Context
Bob and Alice share a single Windows 10 ...
1
vote
1answer
63 views
How to determine if Windows 10 executable can connect to my network
I'm considering use of a scanner driver I see on a website. I don't know the site or the owner so I'll be paranoid and assume that this Windows 10 exe is malicious. I can run the code in a throwaway ...
0
votes
2answers
91 views
Should I change my built-in Administrator password?
I had never thought much about this until the only account on my home PC somehow lost admin
privileges (changing to guest - I suspect this is a Microsoft bug but will probably never know).
So, ...
-1
votes
1answer
65 views
Auto-Fill Windows Security Credentials
I am having a network issue that every time in a while it requires me to enter my windows credentials (it is company security thing)
If I don't do that I will have no internet connection on my laptop
...
0
votes
1answer
84 views
Does this evidence seem consistent with an intrusion via the VNC server?
I am new to this forum, so apologies in advance if this question does not seem to fall within its scope, or if it seems too long:
On two occasions over the past ~3 weeks, a hacker gained remote ...
1
vote
2answers
180 views
Combining a fingerprint scan and password for 2-factor-authentication [closed]
UPDATE:
I found the answer to the "How To?" part of my question on superuser:
Require Fingerprint AND Password/Pin for Windows Logon
Is it possible to require a TOTP on Windows Login using existing ...
2
votes
2answers
89 views
Is there a way to prove that a program was executed on my Windows PC?
Can I prove that someone used an executable that connected to the Internet (not necessary a harmful one) on my Windows 10 PC? Especially when the program was installed on a removable device such as a ...
0
votes
0answers
15 views
Hyper-V keep enhanced session while blocking redirected drives
I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
39 views
Why 6.7 version of image magick can be exploitable even it is Vulnerable version?
I have installed a vulnerable version of the image magick i.e. 6.7 and according to this CVE-2016–3714 it is a vulnerable version. Now why I downloaded it because to get a clear picture of this ...
0
votes
0answers
56 views
Wireshark showing all ports being probed from my tablet
The first two pictures: Wireshark shows a tablet device as the source and my computer as the destination and vice versa. This tablet has never been connected via USB, FTP, BT, nothing to the computer. ...
3
votes
1answer
87 views
VeraCrypt mounted container safety
If I mount encrypted container, it stays in encrypted state until file is opened. At this moment, file is fetched in memory and decrypted - VeraCrypt - Beginner's Guide.
Can malicious program open a ...
1
vote
0answers
86 views
How do I examine a fresh Windows 10 installation
I suspect an unauthorized modification has been applied to a fresh new installation of Win 10 x64 and/or a PC running it by a person who knows me personally with the purpose of tracking my activity ...
0
votes
2answers
154 views
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
This might be my only option to try before contacting my ISP which could be quite annoying to do.
0
votes
1answer
235 views
Can Microsoft collect data from inside a virtual machine?
If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not.
Just FYI: no, I'm not a nutter that's ...
1
vote
0answers
77 views
How to block all aplications from internet connection?
I would like to block all windows10 applications from internet access
So I found a settings screen on the windows firewall (Windows Firewall\Allowed apps) I would like to uncheck everything from this ...
1
vote
0answers
60 views
Why is there no SEH handler found in Windows 10?
I use immunity debugger and mona.py to find SEH pointer in Windows 10. Command is !mona seh.
But it says no pointer is found.
I want to know what has changed in Windows 10 to protect against this ...
1
vote
1answer
100 views
Would it be a security risk if I moved PsTools to the windows system32 folder?
Microsfot Sysinternals has a helper program called PsTools inside this PsTools suite are a bunch of .exe tools that I use regularly from a command line.
I was thinking about moving all these files to ...
2
votes
0answers
26 views
Is it possible to prevent rogue/unauthorised computers booting from your PXE server?
In the below scenario, is it possible to prevent a rogue/unauthorised laptop plugging into the network and installing our Windows image?
What risks are we exposed to should a malicious 3rd party boot ...
1
vote
1answer
85 views
Can a Windows program compromise the desktop hardware without giving administrator rights?
If I run a program on a Windows 10 machine, can the program install a virus on an attached USB drive, and can it install a virus into the firmware of the computer to be loaded before the OS/bootloader?...
1
vote
0answers
85 views
Decrypt to memory for editing
I am looking for a secure way to edit sensitive text data, using Git and Vim in the process.
An ideal solution would be:
clone the encrypted git repository into memory;
decrypt into memory;
do the ...
4
votes
2answers
99 views
What do the Disabled and NotBefore properties do for root certificates on Windows 10?
On this Microsoft page, they mention that a new feature in Windows 10 is that it can stop trusting root certificates using the Disabled and NotBefore properties. What is the exact meaning of these ...
0
votes
0answers
24 views
OS - Security Issues - Text Appearing - Performance Downgrade [duplicate]
First, I noticed PC performance downgrade, then random text started appearing in the different text fields (e.g. in Word when I was typing my text, half of page of some random text could appear or in ...
6
votes
1answer
436 views
Replacing cached domain credentials in SECURITY hive
Windows stores the (NTLM) hashes of local users' passwords in the SAM hive. By booting from a live system (for example), one can not only extract those hashes for offline cracking, but also simply ...
4
votes
1answer
2k views
BitLocker on Windows 10 Home
If I encrypt a flash drive using BitLocker on a Windows 10 Pro (With BitLocker supported and installed) device and put it in compatible mode, can I enter the key and read/write to and to/from it from ...
0
votes
0answers
69 views
Install dualboot Windows to avoid viruses
I need to work with some suspicious files or rather files without verified source. It is known that anti viruses(I use kaspersky and malwarebytes combined) fail to notice some hidden trojans. So I ...
0
votes
0answers
105 views
“MKS Top Level” prevents from shutting down Windows 10 laptop
I've just rebooted my Windows 10 machine and noticed that it had a delay before rebooting because application "MKS Top Level" have prevented it from doing so.
I don't think I've seen it before, so, I ...
6
votes
2answers
206 views
Is it safe to use a Windows executable with expired SHA256 certificate but valid SHA1 certificate?
Microsoft's Media Creation Tool to create Windows 10 installation media has a SHA1 digital signature and a SHA256 digital signature (shown via file properties). However, the certificate for SHA256 ...
0
votes
2answers
482 views
How can I track executed PowerShell commands within a network?
I wanto to track PowerShell commands which are executed by users in the intranet. How can I do this?
I need the user's information and their executed commands. Is it possible?
Edit 1: I guess I can ...
1
vote
0answers
51 views
Strange auto login attempt [closed]
Whenever I turn on my pc instead of showing the login screen, some characters are automatically typed in the input field and attempting to login and then I'm getting wrong pin entered, I'm not able ...
9
votes
1answer
704 views
Does Windows Update modify Hosts file?
I have Avira installed with Hosts file protection enabled.
I've noticed a pattern where Avira warns me of an attempted modification of the Hosts file (but alas doesn't tell me which process did the ...
0
votes
0answers
40 views
Demonstrable benefits to implementing FIPS mode?
I am involved in the creation of a device that will be used in secured facilities. The product team has, for whatever reason, decided to use Windows (so please, no OS flame wars). As I look at ...
0
votes
0answers
56 views
How to protect Windows 10 network backup against ransomware (cryptolock) by removing permissions on NAS
Windows backup has files structure like this:
Backup set directory:
Backup files directory:
I am considering protecting network backup by periodical removing write permission to already uploaded ...
2
votes
1answer
521 views
How secure is bitlocker with a pin when whole machine is stolen?
I assume if I use Bitlocker on Windows 10 on a laptop with a TPM chip without a password, then if the laptop gets stolen, then the attacker can simply turn the machine on and then he gets to the ...
2
votes
2answers
801 views
Does Windows Subsystem for Linux provide additional security (VM-like isolation) over running native Windows programs?
On a Windows 10 machine, is it safer to run the Linux version of a browser using Windows Subsystem for Linux instead of running the Windows version?
I'm asking because I've read the Wikipedia article ...
2
votes
3answers
180 views
Minimal usage in Windows 10 justify filtering all ports besides 22, 80, 443?
I use Windows 10 home on my personal computer. I opened up cmd and ran:
netstat -a
I saw a large list of ports that are on "LISTEN" mode and some others I couldn't recognize their state as I never ...
1
vote
2answers
231 views
How can I change windows security settings using python? i.e. Password Requirements / Require Ctrl - Alt - Delete to log in
I am writing code in Python 2 or 3 to script Cybersecurity functions. Functions such as Lockout Duration, Password Length, and other things that involve a lot of clicking that could easily be ...
