Questions tagged [windows]

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

Filter by
Sorted by
Tagged with
0
votes
1answer
82 views

public MySQL via XAMPP - security - whitelisting IP's versus VPN

I'm working on app that uses MySQL database on XAMPP Control Panel on Windows. I am concerned about security part. I received advice about connecting to MySQL through VPN so it won't be accessible so ...
0
votes
0answers
52 views

Non-malicious root causes for multiple failed logon in windows domain

While monitoring SIEM alerts, I saw that there was more than 200 failed logon for a user to several hosts in the domain. Obviously, it was triggered as a brute-force attempt. Assuming it was not an ...
1
vote
0answers
288 views

Purpose of SeDebugPrivilege for DLL injection

I have been recently working on a little DLL injection program in Go. While the program works and I am able to successfully inject into a remote process, Windows permissions system still seems to ...
0
votes
0answers
79 views

Why does msfvenom payload dll create the run32dll subprocess after it is injected into the explorer process memory?

I am researching payloads that msfvenom (metasploit framework) can be generated and existing methods of injection them into processes for manual incident investigation. Initial data Target: Windows ...
1
vote
1answer
103 views

How does malware avoid AV's when using a simple DLL injection technique?

As far as I understand it, a simple approach for a malware DLL injection would require 2 DLLs. The first for the DLL side loading, while the malicious DLL remains encrypted. And then this 'loader' ...
0
votes
0answers
55 views

The incoming traffic was allowed on my home network for two days. How to assess the damage?

My router's firewall was set to accept incoming traffic for about 48 hours. Misconfiguration from a user, apparently. I have few devices on the network (two Windows PC, Freenas, printer, chromecast TV)...
0
votes
0answers
49 views

Is it possible to verify that a USB adapter is not malicious? [duplicate]

I have some generic USB C-to-A and A-to-C adapters that were bought cheaply. I thought that if any of them had any advanced capabilities (other than being "dumb" adapters) such as mimicking ...
1
vote
0answers
41 views

WebApp Windows Command Injection without “||”

I've found an application that allows arbitrary file upload (client side validation on file extensions), however those files are not stored in a folder which is accessible by the webserver, so a web ...
0
votes
1answer
41 views

IPC Security on Server [duplicate]

An application is running in a customer's environment on a single server and consists of a collection of Windows Services that communicate with each other using (unencrypted) TCP messages. Although ...
1
vote
0answers
41 views

How am I supposed to trust binaries “submitted by anyone”? [duplicate]

I finally found a Chromium fork which appears to have made a serious effort to remove all the Google cancer. Sadly, I see this: https://ungoogled-software.github.io/ungoogled-chromium-binaries/ ...
2
votes
0answers
83 views

Are there any wormable vulnerabilities for legacy Windows operating systems that are left unfixed?

I want to know the status of remote, code executing vulnerabilities of old Windows operating systems that are left unfixed, if they exist at all. Exploits like EternalBlue or BlueKeep wreaked havoc on ...
0
votes
1answer
239 views

Is flash less secure now that it is End of Life? [closed]

As of this month, the Flash player has been disabled from all mainstream browsers. However, several platforms are still offering ways to use Flash content, most notably the games hosted on said ...
2
votes
1answer
128 views

Can a driver(malware) hide it self from device manager?

For security reasons, I have this question in mind. I am not a security professional, so I want to ask: Let's suppose my computer's firmware is hacked. If I disable the wifi driver on windows, can a ...
1
vote
1answer
76 views

How do I isolate/compartmentalize different use cases on one machine?

I have a decently powerful desktop running Windows that I use for 2 different use cases: playing games and storing/processing my personal data. As a security-aware person this makes me uncomfortable. ...
2
votes
0answers
35 views

Removing PATH from the Windows DLL Search Order

There exists a class of bugs on Windows where an unprivileged attacker can write a DLL to a location on disk, then add that location to the PATH variable. Then, when an elevated user process is trying ...
0
votes
0answers
19 views

How to connect Windows CNG with Nginx in order to protect server private keys?

As I read on this question, private keys are protected by CNG mechanisms in Windows. So using NGINX, I would like to know how to establish the communication between NGINX and this cryptographic API in ...
2
votes
1answer
125 views

Windows service with elevated privileges - Security concern

The company I work at uses a program on their Windows workstations that runs as the logged-in user but some tasks require elevated privileges. The user must be able to run these without having admin ...
0
votes
0answers
38 views

Is it possible for someone to “peel back” an image layer? [duplicate]

I am on a Windows 10 machine using Chrome (latest updates). I took a screenshot of Instagram, because I was having problems logging in, and then using Paint 3D applied a black rectangle to hide my ...
1
vote
1answer
109 views

Why do administrators create passwords vulnerable to kerberoasting? [closed]

I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was ...
2
votes
1answer
126 views

How do I add 2FA to my personal computer?

I have a Windows 10 PC that I would like to protect a little better. I've looked for solutions online, but they're all business oriented. What I would like, in an ideal situation, is having to enter ...
5
votes
1answer
206 views

Windows group policies to protect against Rubber Ducky attack

I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
1
vote
0answers
155 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
1
vote
2answers
155 views

Can someone know who created a cpp file?

I know that one can see the modification, access, and creation date of a file on Windows. And that the creation date, as well as other dates, can be modified at will. I just wonder if it is possible ...
0
votes
1answer
76 views

Web scraping is safe for security?

I'm working on web scraping and data mining for Alexa top-ranked websites in the world. I was doing that with node.js, Axios (for HTTP request), on a Windows machine (especially on WSL bash). After I ...
2
votes
0answers
76 views

Why do Windows AV software detect strings with case-sensitivitely?

As Windows is case-insensitive, the string mimikatz can be evaluated the same as MIMIKATZ or MimIkaTZ. A naive method of AV evasion by switching cases of some characters in suspicious string has been ...
0
votes
0answers
31 views

Are there known escapes to get disc access when a Bitlocker-encrypted password is locked at the Windows login screen?

So on a bitlocker-encrypted single drive on a laptop, if the laptop is booted and waiting at the login screen, is there a way to escape from here to get disc access, possibly excluding that of ...
0
votes
1answer
213 views

Can I elicit responses from “any remote host” on “all protocols” if I want to?

An nmap scan of my test computer returns a result of “5357 / tcp open wsdapi”. After some research, this is something that can be exploited. It is explained here that: By default, WSDAPI will listen ...
0
votes
1answer
59 views

Windows Firewall allows the connection to more than one user who shares the same external IP address

I wrote a stand-alone anticheat. When the client anticheat connects to its server, the server creates a firewall rule allowing the game client to gain access to the server. The problem is the firewall ...
28
votes
5answers
7k views

Is a password-protected stolen laptop safe?

Let's assume I have a Windows 10 computer and my login password has an entropy of infinity. If I did not encrypt my entire hard-drive, does it matter how secure my password is? Is it possible for ...
0
votes
1answer
85 views

USN Journal leaks information on exFAT-hosted files (in VeraCrypt containers)

I'm using a secondary drive to store encrypted files, in VeraCrypt file containers. Unfortunately, even if the external drive is formatted as exFAT, Windows leaks information on files inside mounted ...
0
votes
0answers
57 views

making CORS request to 3rd party API

I am modifying a javascript application running on an apache web server. This runs on a windows server inside of our corporate network which I am referring to as "local server" in the ...
0
votes
1answer
89 views

Spoof publisher info on Windows applications

Let me start by acknowledging that I have absolutely no experience with Windows development and this is purely for academic purposes. I apologize for incorrect terminology and welcome corrections or ...
7
votes
2answers
213 views

Do people even exist who actually vet all the updates to their open source software?

A year or so ago, I set up this system which, whenever Composer (that's PHP's packet/library update manager) fetched new updates to my few (but critically required) third-party libraries, created a ...
0
votes
0answers
136 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
0
votes
1answer
217 views

How to generate a config file from a .csr using OpenSSL (or other)?

I want to export the configuration details from an existing CSR or Certificate to a config file which I can use with OpenSSL to generate a new CSR. Background Our CA has changed. For the old one, I ...
2
votes
1answer
665 views

What are the privacy implications of the “Your Phone” app on Windows?

I'm trying to decide whether or not to use the Your Phone app on Windows, and not finding much information on it. It requires a Microsoft account, but I don't really see why that should be necessary ...
1
vote
1answer
1k views

Is it safe to use an executable if only unknown antiviruses detected something?

Recently I downloaded Open Shell application and checked it via VirusTotal. Most famous antiviruses like Bitdefender, Nrothon, Kaspersky found nothing. But some of antiviruses thing there are some bad ...
7
votes
1answer
197 views

CertGetCertificateChain doesn't recognise revoked certificate if the reason is “unspecified”

In my program I use CertGetCertificateChain to investigate the validity of certificates. If in my test PKI I revoke a certificate and specify the reason "unspecified", the error code in the ...
0
votes
0answers
97 views

How to prevent my ISP from seeing what sites I visit without a VPN

I use opera browser, and while the built-in VPN has been working relatively well it's been preventing me from joining discord voice calls and using omegle. Is there a way to hide my activity from my ...
0
votes
1answer
62 views

Information disclosure via ktpass tool

The Microsoft ktpass tool can be used to generate a .keytab file that contains a secret key. I'd like to understand the output of the tool. An example output can be found here. I'm interested in the ...
2
votes
1answer
212 views

What are the security risks to have admin rights for a user account on Windows 10?

I am considering the security risks to have a standard user added to the Administrators group on an enterprise Windows 10 machine that is dedicated to that user. This is related to security only, so ...
1
vote
1answer
109 views

How are games and software executables injected with custom code & without breaking offset?

Introduction – Context Everyone has seen so called "Injectors" or "Cracks" for certain programs & games at some point in their life. These applications inject their own code ...
0
votes
2answers
2k views

How to dump the memory of a given process with Volatility 3?

It seems that the options of volatility have changed. How can I extract the memory of a process with volatility 3? The "old way" does not seem to work: If desired, the plugin can be used to ...
0
votes
1answer
83 views

Directory to place files on windows

on linux when we have a foothold and we want to transfer files to the victim we usually transfer it to /tmp beacuse it is writable and always there. what directory should we transfer our files if we ...
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
2
votes
1answer
121 views

Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?

I am doing some research for school about the Kerberos protocol and its vulnerabilities, especially the Pass the Ticket attack. Related articles are always talking about Active Directory so I was ...
0
votes
2answers
200 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
0
votes
1answer
72 views

Is persistence via scheduled tasks possible if the user is not elevated?

As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
0
votes
1answer
72 views

Trying to do an SQL injection into a login field [closed]

I have an assignment to make an SQL injection - I found a login field that spits out an error, but I can't seem to make queries work inside of it. For your information it's an Mysql server. What is ...
1
vote
1answer
93 views

Wiping a hard drive before reinstallation

A few years ago, I left a new laptop at a sketchy computer shop to downgrade the OS to Windows 7. The experience was a disaster. My goal now is to install Cinnamon Linux on the laptop and remove ...

1
2
3 4 5
41