Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [windows-permissions]

The tag has no usage guidance.

2
votes
0answers
77 views

Can a named pipe with a low integrity label have its SACL/DACL modified by a low integrity process?

If a named pipe on Windows has a Low Mandatory Level label and SYSTEM_MANDATORY_LABEL_NO_WRITE_UP in its SACL, but the DACL has WRITE_DAC and WRITE_OWNER for the current user, can a low integrity ...
300
votes
25answers
43k views

Should I let my child's school have access to my kid's personal laptop?

My kid is starting 6th grade and the school requires him to get a laptop and bring it to school. Now the school IT department wants to install some software on the laptop and is asking for ...
0
votes
1answer
44 views

Enter as guest into another server folder

I have a PC using Windows 7 in 192.168.0.10 where there is a folder, lets call Data, that i want to make avaliable for any computer connected to this network ( 192.168.0.X ) I have shared that folder ...
0
votes
1answer
61 views

Run as different user VS. Run as admin

Can anyone explain what the security implications are between these options and how they should be used? In windows (10) Run as different user Run as administrator
12
votes
2answers
2k views

How does consent.exe know what to display?

consent.exe is responsible for showning the UAC dialog. Looking at the command line parameters with Process Explorer, I see the following: consent.exe 1316 748 000000004385BD60 I have read How ...
1
vote
1answer
53 views

Is it possible to execute an executable with authenticated SMB?

Assume the following: An attacker has access to a remote Windows share on a remote host. Attacker manages to bruteforce a local Windows account on the host and can login to it via SMB. Attacker can ...
2
votes
2answers
166 views

What can someone do with (non-admin) command prompt on a network?

Say that an organization has a closed network - only its own computers can access it. Each of these computers has Windows 10 Enterprise. For obvious reasons, users aren't given administrator ...
1
vote
0answers
29 views

Questions regarding pass the ticket

In the blackhat talk by Gentikwiki on Mimikatz back in 2014, he mentioned that you can pass the service ticket also, but i am unable to replicate it in a lab. It throws an access denied. Passing the ...
1
vote
1answer
52 views

Laptop camera app permissions

I have a laptop with Windows 10. If I go on settings and then privacy there is a list of apps with the information about their permission to use my camera (I'm talking about the built-in camera, not ...
1
vote
3answers
129 views

Is there a way to overwrite a file being used by a service without service management permissions?

I am trying to demo an exploit and here is the scenario: A service is running with SYSTEM privileges where the executable it is running (binpath) can be modified by any user. The exploit consists of ...
3
votes
3answers
2k views

Windows Defender and Windows Processes

When I open up task manager, I see windows processes(services) at the bottom. As a programmer, I want to create a windows process/service for security research(windows defender) but I have some ...
3
votes
0answers
253 views

Exploiting Environment Variables in Scheduled Tasks for UAC Bypass

I am trying to escalate privileges from an ISS user on Windows Server 2012 R2 by exploiting Environment Variables in Scheduled Tasks for UAC Bypass as the following link explains the exploit: https://...
3
votes
2answers
1k views

How can I disable execution of programs from Downloads directory in Windows 10?

I run Windows 10 and I would like the contents of my system default "Downloads" folder to be non-executable. I want at least for a landing zone where I can scan files, run hash checks, and so on. ...
3
votes
1answer
294 views

What is the main risk of allowing services to logon as NT AUTHORITY\SYSTEM?

Many enterprises run service on production servers as SYSTEM without considering the risk that might arise from this configuration, what is the biggest risk associated with it? and how would attackers ...
0
votes
1answer
127 views

Suspicious app name in Windows 10 permission prompt

I downloaded MongoDB 3.4 from the MongoDB website here When I run the .msi file to install, I am prompted with the following screen asking me if I trust a39adfe.msi A Google search for a39adfe.msi ...
6
votes
2answers
116 views

Securing a process from local users

We require a method to run a process on a users machine whereby a local user cannot kill this process (from task manager or otherwise). Is there a way to make this application a system process or make ...
3
votes
2answers
4k views

How to find who granted local admin privileges to a user?

A friend of mine works in an organisation and one fine day realised that he has local admin access on his machine. He swear to me that he didn't have the privilege initially and needed to raise ...
-2
votes
1answer
117 views

How are viruses made for windows? [closed]

I know that windows source code is proprietary so how do hackers and others know what are the available exploits in windows so that the viruses can take their advantage.
0
votes
1answer
668 views

Why does Windows 7 remove Authenticated Users from file permissions when a folder is shared?

When I try to share a folder using the share tab in file properties, if I go back and remove sharing options from the Share tab, it also affects the Security tab, removing inheritance of permissions ...
1
vote
3answers
535 views

What can I do to prevent my web browser from accessing local files?

According to http://mftbug.surge.sh [ed note: potentially dangerous link on the page], any web page can attack a user through the browser without knowledge about the user. How can we stop this default ...
11
votes
2answers
52k views

Windows groups and permissions: Authenticated Users group meaning

What is the purpose of the "Authenticated Users" group in Windows? Under Linux it doesn't exist and I'm starting to think this is another idiosyncrasy or over-engineering of the Windows operating ...
2
votes
1answer
826 views

How to set up a secure VirtualBox VM in Windows

What's a good way to make a Debian VM reasonably safe for online banking if running Windows as a host system? I thought of the following points: normal usage of the Windows system as a restricted ...
4
votes
1answer
207 views

Does write permission over a windows service always imply privilege escalation?

Context: Doing a lab pentest on a windows VM, I got a shell as LocalService. I modified the binpath to execute a meterpreter. Then I changed the SERVICE_START_NAME to "LocalSystem" by doing: sc ...
3
votes
1answer
761 views

Security benefits of running as standard user vs. administrator

I heard in a podcast a while back (I believe it was Steve Gibson's Security Now) that running Windows as standard user vs. administrator mitigates 99% of Windows vulnerabilities (I think that was the ...
0
votes
1answer
93 views

Can virtual machines access files/drives protected by host?

Say I have a windows machine with a recovery partition that is locked with system permissions and is inaccessible through the windows operating system. Is it possible that a virtual machine running ...
0
votes
1answer
276 views

Does the separation of the OS partition (C:) and data partition (D:) in Windows increase security?

I have to manage the security of thousands of laptops. Nowadays our laptops have two partitions, C:, hidden to users but accessible and D: where users store documents, images, etc. Do this separation ...
0
votes
1answer
3k views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
3
votes
1answer
135 views

Possible security measures to put into place before allowing screen sharing

I have someone who is having their non profit small company receive a financial audit. They are prepared for it but the financial auditors have asked to also do part of it remotely and would like to ...
3
votes
5answers
1k views

May be justified to use generic and shared user accounts in order to segregate and reduce risk?

Imagine I have a group of users called "support" that participates solving different kinds of problems. Each user has a nominal username like jsmith that has not much privileges but additional ...
1
vote
0answers
3k views

is it possible Windows privilege escalation using freesshd keys? [closed]

I have unprivileged shell one system.By browsing all folder i found freeSSHD folder Directory of C:\Program Files\freeSSHd 09/26/2008 02:07 PM <DIR> . 09/26/2008 02:07 PM <...
0
votes
0answers
77 views

Encrypt a file before being copied

I am working on a program that will prevent data theft. I want to encrypt every file that is being copied to an external drive before it is actually copied using a symmetric encryption. Is it ...
2
votes
2answers
565 views

Attacker able to install screen capturing software in Windows 7 guest account

I am operating in a guest account of Windows 7. Could an attacker that got onto my PC through malware I installed, install a video program that records everything I do and send the result back to his ...
0
votes
1answer
3k views

Exploit HTTP PUT Method in Microsoft IIS 5.0

I'm trying to test if it's possible to use the PUT method to upload content to a IIS 5.0 server. The WebDav is actualy enabled and the PUT method is allowed for public/internet users: OPTIONS /...
0
votes
3answers
3k views

Is there a combination of Windows permissions that allow execution of a .NET executable but not reading nor copying its content?

I suppose that if a file is executable by anyone, in other words, if a user has enough permissions to execute an executable in Windows, it will be possible to read the contents of the executable and ...
1
vote
1answer
538 views

IT support and security concerns regarding local VM's

I started working at a large financial institution several weeks ago as a software engineer and despite every other aspect of this job being great, I am haunted by the constant restrictions that ...
1
vote
1answer
527 views

Bluetooth Peripheral Vulnerabilities [duplicate]

I've read some interesting Bluetooth vulnerability questions, but I didn't notice one recently. Bluetooth has long been disabled in our organization, and I'm looking to enabling it because of repeated ...
0
votes
1answer
55 views

Public folders security

If using one standard user account (for daily task) and one administrator account, then while in standard you can download some virus or whatever and put that into public folder. of course, assuming ...
0
votes
1answer
1k views

Can local Admin on Windows be given restricted permissions?

Looking at a lot of different security software on Windows, a lot of them rely on some settings on the computer which can probably be overridden by a local administrator. For eg. some DLP software ...
3
votes
1answer
805 views

Localhost WebSocket defense

If a malicious application has found its way onto a computer running a localhost only WebSocket server, would it help if the communications used SSL? If so, how could SSL fail if a malicious app ...
1
vote
1answer
149 views

Reliability of windows OS security for “program files” safe guard

I want to do inter process communication between Firefox (via extension) and my application. Both reside in "Program files" (of windows 7 OS). I also assume that malware is running in the system and ...