Questions tagged [windows]

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

Filter by
Sorted by
Tagged with
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
2
votes
1answer
121 views

Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?

I am doing some research for school about the Kerberos protocol and its vulnerabilities, especially the Pass the Ticket attack. Related articles are always talking about Active Directory so I was ...
0
votes
2answers
202 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
0
votes
1answer
73 views

Is persistence via scheduled tasks possible if the user is not elevated?

As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
0
votes
1answer
73 views

Trying to do an SQL injection into a login field [closed]

I have an assignment to make an SQL injection - I found a login field that spits out an error, but I can't seem to make queries work inside of it. For your information it's an Mysql server. What is ...
1
vote
1answer
95 views

Wiping a hard drive before reinstallation

A few years ago, I left a new laptop at a sketchy computer shop to downgrade the OS to Windows 7. The experience was a disaster. My goal now is to install Cinnamon Linux on the laptop and remove ...
2
votes
1answer
92 views

Check TRIM space on SSD

Is it possible to 'view' the space that TRIM would take care of to see if that space was really wiped? I am using both Windows and Linux.
0
votes
0answers
69 views

Does Microsoft implement “Windows Defender”-like security for WSL 2 instances?

I'm not certain whether WSL 2 instances, running in Hyper-V, are actually scanned by Windows Defender. I have found some articles on Google describing Window Defender's performance impact on WSL, but ...
0
votes
1answer
117 views

How to check which process is modifying my clipboard?

I'm on Windows 10 last build and for a few days it looks like I have a malware that modifies ethereum addresses in my clipboard. I sadly tried a lot of antivirus, antispyware and nothing is found. I ...
2
votes
2answers
1k views

Windows file to look for to test LFI

For Linux, if we want to test local file inclusion we always search for /etc/passwd For old versions of Windows, (e.g. Windows XP) we search for win.ini What file should I search for in later ...
0
votes
1answer
72 views

Can I recover files that I had on windows from a SSD that I converted to apfs (mac) and which method or tool to use?

I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
0
votes
1answer
114 views

Can my school monitor what I'm looking at at home? Sophos is installed [duplicate]

yesterday I accidentally searched up a website and misspelled a character and it took me to an obscene website that I was horrified by on my school laptop. I was also on my school account. Can my ...
0
votes
0answers
60 views

Error while doing DCOM lateral movement

Current user is in "Distributed COM Users" group. Anyone can help with using DCOM for lateral movement? Getting this error: PS C:\> $ComputerName = "TEST-BOX" # Remote computer ...
0
votes
1answer
62 views

ModSecurity Command Injection not working

I am testing web application firewall and I have installed ModSecurity 2.9 runs Core ModSecurity Rule Set ver.2.2.9 and to test on Web application I also install DVWA Platform: Windows and trying ...
0
votes
1answer
849 views

Brute-Forcing a Chrome Login Data file

Say I have a "Login Data" Chrome file that is encrypted with the user's Windows password. Is there a way I can brute-force the file and try to decrypt it using every password possible?
0
votes
1answer
83 views

Windows System Audit

As part of auditing, I have to find whether an excel file is modified by anyone after it was created in 2018 by original user in a windows 7 computer. I had verified the creation, modified and ...
2
votes
2answers
587 views

Is factory reset enough to remove malware from laptop?

I have an ASUS laptop with Windows 10 that I want to factory reset. I used it for many years and did some torrenting with it in the past, so I wouldn't be surprised if something went wrong when it ...
2
votes
1answer
428 views

Firefox pretending to update itself, but actually not doing it, and thus being a risk for security - what am I missing?

I am a long-time Firefox user and remember that usually the UAC prompt popped up when Firefox updated itself. Some months ago (or is it years?), Firefox obviously changed the way it updates itself: I ...
0
votes
0answers
20 views

sysmon | rule ProcessTerminate | entry doesn't work

I installed sysmon and used the SwfitOnSecurity config file. Afterwards. I installed the sysmonTools shell so that I can have GUI for easier modification of the config file. My goal is to exclude ...
2
votes
1answer
106 views

How to “break” remote access on Windows and rooted Android?

Let's say you want to "break" all remote access capabilities on your rooted Android phone and your Windows PC. What do you do or delete so remote access is truly broken and can't be used (by ...
2
votes
0answers
239 views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
0
votes
0answers
97 views

LMv2 in NTLM authentication

I have done some research about NTLM and his challenge responses, and I have one last thing left unresolved. The LMv2 response, which is the newer version on of the old Lan Manager response, is ...
0
votes
0answers
40 views

Details on why SmartScreen blocked my download

One of our downloads (an installation full of embedded MSI, exe and whatnot) is getting flagged by SmartScreen on run as well as on download in MS Edge. Download in other browsers seems to work fine, ...
0
votes
1answer
921 views

Is Deluge safe to use still when it's not been updated since the first part of 2017?

https://dev.deluge-torrent.org/wiki/Download https://ftp.osuosl.org/pub/deluge/windows/?C=M;O=D The latest version of Deluge for Windows that can actually be downloaded and installed is deluge-1.3.15-...
2
votes
0answers
132 views

Using other programming languages for malware against EDR?

As an example, one of the most basic malware to inject into a process to get a C2 beacon goes like this: Get Handle of a process -> VirtualAllocEx -> WriteProcessMemory -> CreateRemoteThread ...
1
vote
1answer
200 views

Can I view a user's browser history if the history/cache has been cleared?

A client wants to track a specific employee's browsing habits. Assuming that the employee knows how to clear their browser history, is there any way to recover the history so it can be read by ...
0
votes
3answers
491 views

Is it safe to use non-ASLR DLL in an enabled ASLR EXE

Is it safe to use non-ASLR DLL in an enabled ASLR EXE? Would the DLL be loaded to and will use random addressed, or should all the dependencies enable ASLR? In addition, what about other security ...
1
vote
1answer
87 views

Rogue network printers as an attack vector in windows

I recently installed a new printer in our network. Just because I was interested, I switched to wireshark when scanning for and adding the printer on windows. I noticed that it was discoverd through ...
1
vote
0answers
64 views

Determining Windows version from a list of files

I have a list of files taken from a dead system, but not the actual files themselves, or any other information (e.g. properties) that would indicate the OS version. Is there a way to determine the ...
0
votes
1answer
79 views

Safely use compromised USB drive to transfer data from one PC to another [duplicate]

How to use a USB hard disk to transfer files from Ubuntu to Windows 10 PC in a secure manner? I have not used that disk for a while but it was probably exposed to a few PCs that do not belong to me. ...
-2
votes
1answer
871 views

How am I supposed to interpret a VirusTotal result of “some engines think this is malware”? [closed]

I just scanned another installer/EXE with VirusTotal. I've come to depend on this crappy service owned by the evil Google, in spite of its ambiguous messages and extremely confusing interface, because ...
1
vote
1answer
133 views

Does Windows Device Encryption use a new key to encrypt each time?

Say I have a machine running Windows 10 with built in Device Encryption enabled. Say I want to reinstall Windows and sell the machine. I am wondering: after the format and reinstall, is a new key ...
1
vote
0answers
116 views

MessageBoxA only shows up in debugger?

This question is related to crackmes.de's k1 by xtfusion. I'm trying to add custom shellcode through stack overflow. The shellcode works perfect under Windows XP (without ASLR) when the program is ...
1
vote
0answers
974 views

How can wkhtmltopdf be used without introducing a security vulnerability?

Background Per the project website, wkhtmltopdf is a "command line tool to render HTML into PDF using the Qt WebKit rendering engine. It runs entirely "headless" and does not require a ...
0
votes
0answers
120 views

Is Chrome Browser/ Computer compromised by KMSPico?

I recently installed a new windows key for my friend. He was using a hack program previously, known as Auto KMS. So after new keys installation, I used Windows defender to remove AutoKMS program. The ...
0
votes
0answers
101 views

Reflective DLL Injection using mingw compiles with no Errors, But doesn't work

I've been playing around with the Reflective DLL injection code, I can compile the Dll's in mingw easily and inject them using the original compiled binaries given here. I can also compile the ...
4
votes
2answers
552 views

Does this registry entry for implementing custom protocol handlers in Windows present a security risk?

Background Some features are not yet available on the web platform and thus require cooperation with a native application in order to provide them. One method for a web application and a native ...
0
votes
0answers
77 views

Does Windows log the movement of files?

If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure ...
0
votes
0answers
67 views

Taking over Windows DC as a domain user

What do you suggest in order to take over a Windows Domain Controller, given the fact that you gained access to a domain user workstation and so you have domain user credentials? I have domain user ...
0
votes
1answer
161 views

Bypass NTFS Encryption via Password Change (Encrypting File System)

Is it possible to bypass NTFS encryption if the password used to encrypt the RSA key is a password to an AD account? So if an administrator can simply change your password, they would then be able to ...
1
vote
0answers
111 views

Wireshark how do I see data from a phone on the same network

So I am wondering how can I see the data on wireshark? I have my router setup to where there is no password so I can automatically connect whatever devices on to my network. First I connect my phone ...
0
votes
0answers
84 views

Any Recommended Windows 10 Process Mitigations

I am looking to do the maximum process mitigations for most processes (such as web browsers, document viewers, etc) on my Windows 10 machine (Via powershell's set-processmitigation). However, I can't ...
0
votes
3answers
219 views

Can my school track my laptop?

I do a distance education program in Australia. My distance ed school sends out laptops to all students on loan until they leave school/the program. The laptop is specifically a Lenovo Thinkpad Yoga ...
3
votes
4answers
182 views

Why did “terminal commands” never get a version of SQL “parameterized queries”?

I was taught horrible bad practice when I initially "learned" SQL, which baked in user-submitted input with quotes and attempted to "escape" this (in the beginning, I didn't even ...
0
votes
2answers
407 views

Can Microsoft access the contents of my OneDrive Personal Vault?

I found the article to be quite informative that addresses the question "Can Microsoft access my private files?" (Can Microsoft access all private data if a user installs Windows 10?), which ...
0
votes
1answer
124 views

DLL hijack privileges

DLL hijacking means that malicious software gets admin rights from default or it means you need to elevate your privileges first? Because I tried to change a DLL in Windows/System32 folder, but I can'...
0
votes
1answer
131 views

Why did my DoS attack fail against Windows 10?

I have multiple devices - a Samsung and a Lenovo tab, an Amazon Alexa, an HP laptop running Windows 7, and another running Windows 10. Bored, I tried to DoS my Windows 10 laptop using my Windows 7 ...
1
vote
2answers
1k views

The security of an SMB port exposed to the internet

I have installed a Windows machine with update 1909 (build 18363.720 (March 2020) (On which I try to find vulnerabilities with nmap), which includes smb 3.1.1 with the latest fixed bugs. I created a ...
4
votes
2answers
232 views

Are there security reasons for prohibiting universal mac address modification?

Background In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA). If it is 0, then ...
1
vote
1answer
55 views

Is MS-CHAPv2 in windows 8.1 secure in 2020? In Windows 10?

My provider still uses VPN with MS-CHAP2(no encryption). How easy can it be exploited? I see a lot of articles but they are from 2012/2013. And some sites do not work. What is going on? Has Microsoft ...

1 2
3
4 5
41