Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
367
questions
1
vote
1
answer
75
views
Windows 10 Update - Man In The Middle Attack - Tamper Update [duplicate]
I am connecting to a wi-fi network and blocked all IP addresses in this network with a regular Windows 10 firewall. The only available IP addresses are:
192.168.1.1 = gateway
192.168.1.102 = my own ...
5
votes
3
answers
2k
views
Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?
Microsoft has published information about a recent security problem classified as "BitLocker Security Feature Bypass" identified as CVE-2022-41099 which points out that Windows Recovery ...
- 51
0
votes
0
answers
190
views
ERROR kuhl_sekurlsa_acquireLSA from customized mimikatz
Tried to call sekurlsa::logonpasswords function from mimikatz main source, but I get ERROR hl_aaaurlsa_acquireLSA ; Logon list
The program is executed with Administrator cred and I'm sure there's no ...
- 1
0
votes
0
answers
19
views
Windows CSP for remote signing
I have a system (lets call it signer) that has private keys for doing Authenticode code signing. I have bunch of build systems that want to sign generated build artifacts. Obviously I can't use ...
- 101
0
votes
0
answers
54
views
Can a Remote Desktop software prevent windows 10 keylogger from accessing what is typed on client computer during a session to a remote computer?
The “improve inking and typing” setting in Windows 10 allows Microsoft to send themselves processed samples of what is typed on a machine (not sure if it is processed to remove details as it’s typed ...
1
vote
0
answers
70
views
Blank decrypted Windows 10 passwords [duplicate]
I'm getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the --format=NT and --show arguments, and get:
username::1001:aad3b435b51404eeaad3b435b51404ee:...
- 11
0
votes
1
answer
95
views
Storing a key in a reasonably safe way
I’m developing an application that will run on a private, on premises network. The application will be accepting requests through an API, read some encrypted data from the disk, decrypt them, do some ...
- 537
1
vote
1
answer
74
views
Secondary disk safe to use after potential virus?
I've recently bought a new disk and made a fresh install on a home PC after having potential malware (or a very corrupted registry, whatever your take is on having numerous Blue Screens of Death, one ...
user130386
0
votes
0
answers
224
views
Searching in Chrome redirects to "find.fnavigate-now.com"
It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives?
https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
- 13
0
votes
0
answers
10
views
How to decrypt windows password with SAM and SYSTEM files? [duplicate]
Suppose we have access to SAM and SYSTEM file, I want to decrypt the password. I'd like not to use any third-party software and write my own algorithm. Is there a way to do so?
- 101
0
votes
0
answers
84
views
What are the security benefits or concerns about upgrading to Windows 11?
My Windows 10 machine is saying that I should upgrade to Windows 11. It even says that it brings "enhanced security".
Upgrading always brings a measure of uncertainty and while upgrading ...
- 126k
0
votes
0
answers
137
views
Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?
I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
- 105
2
votes
1
answer
409
views
Can an ISO file be harmful if opened as an archive?
I was trying to download something off a sketchy website, and ISO was a reasonable extension for what I was trying to get, but I was still pretty sure it was malicious. I didn't put much thought into ...
0
votes
0
answers
107
views
Netcat reverse shell, can't execute commands
I have used a stageless payload to gain a reverse shell using netcat. I get connection but the commands return nothing. I was wondering, why this happens? And how to fix this? The victim machine is a ...
- 1
0
votes
0
answers
171
views
Bluetooth USB device shows up as HID Keyboard. Is it safe?
I bought a USB Bluetooth adapter and my PC now has Bluetooth available, but while it's connected it is makes a "HID Keyboard" show up in my "Mouse, keyboard & pen" setting in ...
- 663
1
vote
0
answers
147
views
Is it safe to disable certificate checking?
I am developing a web API, which runs only on my local computer, and using PowerShell to test it. Here is an example test:
$baseUri = 'https://localhost:5001'
$body = '{
"title": "...
3
votes
0
answers
118
views
Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?
Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.)
Let's say ...
- 31
2
votes
0
answers
257
views
Use platform TPM as U2F for web applications
The Problem:
Use the platform TMP of my Windows Laptop/PC (no external device or USB token) as U2F in a web application to check if it is a known device.
My intended solution:
I need to store/create ...
- 71
2
votes
1
answer
396
views
Why does this Windows process run with High integrity?
Background
I'm trying to understand more about the Mandatory Integrity Control system in Windows, and have been looking through the background processes that are running at High integrity on my laptop....
- 123
1
vote
1
answer
127
views
How risky is it to let someone know the name of your Windows PC?
I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
- 25
2
votes
1
answer
142
views
Does only having Microsoft Office installed make you vulnerable to the CVE-2022-30190 RCE or having Windows as your OS is enough?
I was wondering whether you need to have Microsoft Office installed to be vulnerable to CVE-2022-30190 RCE.
As far as I understand, MSDT is the issue here (the attack vector so to say) and as shown ...
- 1,542
0
votes
2
answers
247
views
Unintended file downloaded. Am I likely to have gotten a virus?
I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
0
votes
1
answer
145
views
Non executable virus?
Bitdefender detected
.class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135
.tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
0
votes
0
answers
40
views
Windows 10 Cybersecurity on Stand-Alone Computer
I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
- 255
0
votes
2
answers
99
views
Is this weird folder "Up8d76c_31187" a windows thing?
I noticed it becaue one of these exe's started running after a BSOD.
Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further?
Edit: Other exe's are worse: VirusTotal ...
- 103
2
votes
0
answers
281
views
Can a virus infect windows 10 bootable media?
I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
- 29
1
vote
2
answers
350
views
Is Windows 10 Home more secure than Windows 10 Pro in some way?
I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language.
...
- 758
0
votes
0
answers
176
views
How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]
My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine.
I am ...
0
votes
2
answers
242
views
Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]
I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
0
votes
1
answer
277
views
Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]
Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
0
votes
0
answers
38
views
No UAC appearing for newly installed applications
Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
- 1
1
vote
2
answers
243
views
Bought a new Laptop. Can't reset. Is it Safe?
I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
- 13
0
votes
1
answer
1k
views
pwdump8-8.2 correct hash for Microsoft Account Win10
I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account.
I used - PwDump8.2
I have an admin account unlocked on the system and can access most files.
I know ...
- 5
1
vote
0
answers
119
views
Does Windows 10 log network activity?
I've been thinking a lot about private browsing recently. Here's a scenario I've been thinking about:
Let's say I have a browser installed on my Windows 10 PC called "ChromeFox" (made up, it'...
0
votes
0
answers
139
views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
0
votes
2
answers
230
views
How to securely encrypt my computer and protect it from thieves and others
I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
0
votes
2
answers
227
views
Setting Up MFA and/or best security for personal computer for RDS
I am in the process of converting an older computer into a dedicated machine learning server. I want to be able to RDS into it from my current computer and ideally from anywhere. However, I do want to ...
- 53
-3
votes
1
answer
93
views
Is Windows 10 Insider Build usable within SOC 2 compliance? [closed]
Or Windows 11 pre-release, just cause I'm curious?
(By employees if that wasn't implicit.)
0
votes
1
answer
238
views
How to find discrepancy between exploitable and unexploitable VM
For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
1
vote
0
answers
19
views
Suspicious HEAD http requests [duplicate]
On my Windows 10 machine, I run mitmproxy on localhost:8080. I've changed the system proxy setting to point to my local proxy server.
Apart from what I expect to see, I can also see the following HEAD ...
- 111
0
votes
1
answer
1k
views
Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?
I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox.
I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
- 1
0
votes
1
answer
521
views
How to prevent DNS leaks without using a VPN
I use Windows 10, and I've configured my network to use Quad9 in Windows settings.
I've also enabled DoH.
Now, when I go to ExpressVPN DNS Leak
Test webpage to know whether I have DNS leaks or not, it ...
- 1
0
votes
1
answer
251
views
How do I stop local users from bypassing the UAC on Windows 10?
I'm the admin for a Windows 10 machine with a few local users. While I understand there are other ways to bypass security with access to the physical machine, I'd like to protect against hacks that ...
- 305
5
votes
1
answer
512
views
Windows Defender catches Trojan right after clean install
I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
- 51
0
votes
1
answer
115
views
Does data recovery of file depends on its extension?
Most free to use data recovery tools (Recuva, Easus, MiniTools) offers good recovery with known file extensions for picutres, videos and documents (.png, .xlsx etc). But lesser known file extensions, ...
- 103
1
vote
1
answer
770
views
Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]
Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how?
Note: I'm not trying to do anything malicious. All of this is ...
- 21
0
votes
1
answer
283
views
How to check TCP sequence number to detect mitm?
I suspect that my router (I'm using an iPhone as router) has been owned and the attacker is making some kind of mitm attack. I suspect also that some html and js code has not been sent to my laptop ...
- 11
0
votes
0
answers
353
views
Isolate Dual-Boot Windows OS's - Encryption Programs
My machine has
Name
Model
Disk No.
Capacity
SDD
LITEON L8H
0
240 GB
HDD
HGST
1
1 TB ( 932 Gb )
SDD contains: Windows 10 (for work)
HDD contains:
Partition 1 /
├─ Files ( text , imgs , video , ...
- 1
0
votes
0
answers
121
views
Securely deleting Volume Shadow Service (VSS) in Windows 10
Suppose that VSS is enabled and snapshots exist. If I run a program to wipe the free disk space on my drive, would this delete the VSS snapshots? It might do since the program works by filling up the ...
0
votes
2
answers
221
views
Haven't updated my Windows 10 for more than a year
Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS.
I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down.
Now, ...
