Questions tagged [windows]

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

Filter by
Sorted by
Tagged with
1 vote
2 answers
347 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
user avatar
0 votes
1 answer
153 views

Is persistence via scheduled tasks possible if the user is not elevated?

As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
user avatar
  • 875
0 votes
1 answer
134 views

Trying to do an SQL injection into a login field [closed]

I have an assignment to make an SQL injection - I found a login field that spits out an error, but I can't seem to make queries work inside of it. For your information it's an Mysql server. What is ...
user avatar
1 vote
1 answer
150 views

Wiping a hard drive before reinstallation

A few years ago, I left a new laptop at a sketchy computer shop to downgrade the OS to Windows 7. The experience was a disaster. My goal now is to install Cinnamon Linux on the laptop and remove ...
user avatar
2 votes
1 answer
161 views

Check TRIM space on SSD

Is it possible to 'view' the space that TRIM would take care of to see if that space was really wiped? I am using both Windows and Linux.
user avatar
0 votes
0 answers
210 views

Does Microsoft implement "Windows Defender"-like security for WSL 2 instances?

I'm not certain whether WSL 2 instances, running in Hyper-V, are actually scanned by Windows Defender. I have found some articles on Google describing Window Defender's performance impact on WSL, but ...
user avatar
  • 1,087
0 votes
1 answer
259 views

How to check which process is modifying my clipboard?

I'm on Windows 10 last build and for a few days it looks like I have a malware that modifies ethereum addresses in my clipboard. I sadly tried a lot of antivirus, antispyware and nothing is found. I ...
user avatar
2 votes
2 answers
4k views

Windows file to look for to test LFI

For Linux, if we want to test local file inclusion we always search for /etc/passwd For old versions of Windows, (e.g. Windows XP) we search for win.ini What file should I search for in later ...
user avatar
  • 27
0 votes
1 answer
140 views

Can I recover files that I had on windows from a SSD that I converted to apfs (mac) and which method or tool to use?

I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
user avatar
  • 1
0 votes
1 answer
191 views

Can my school monitor what I'm looking at at home? Sophos is installed [duplicate]

yesterday I accidentally searched up a website and misspelled a character and it took me to an obscene website that I was horrified by on my school laptop. I was also on my school account. Can my ...
user avatar
0 votes
1 answer
121 views

ModSecurity Command Injection not working

I am testing web application firewall and I have installed ModSecurity 2.9 runs Core ModSecurity Rule Set ver.2.2.9 and to test on Web application I also install DVWA Platform: Windows and trying ...
user avatar
0 votes
1 answer
2k views

Brute-Forcing a Chrome Login Data file

Say I have a "Login Data" Chrome file that is encrypted with the user's Windows password. Is there a way I can brute-force the file and try to decrypt it using every password possible?
user avatar
  • 3
0 votes
2 answers
178 views

Windows File Metadata Audit

As part of auditing, I have to find whether an Excel file is modified by anyone after it was created in 2018 by the original user on a Windows 7 computer. I had verified the creation, modified and ...
user avatar
  • 1
1 vote
2 answers
866 views

Is factory reset enough to remove malware from laptop?

I have an ASUS laptop with Windows 10 that I want to factory reset. I used it for many years and did some torrenting with it in the past, so I wouldn't be surprised if something went wrong when it ...
user avatar
  • 121
1 vote
1 answer
812 views

Firefox pretending to update itself, but actually not doing it, and thus being a risk for security - what am I missing?

I am a long-time Firefox user and remember that usually the UAC prompt popped up when Firefox updated itself. Some months ago (or is it years?), Firefox obviously changed the way it updates itself: I ...
user avatar
  • 537
0 votes
1 answer
80 views

sysmon | rule ProcessTerminate | entry doesn't work

I installed sysmon and used the SwfitOnSecurity config file. Afterwards. I installed the sysmonTools shell so that I can have GUI for easier modification of the config file. My goal is to exclude ...
user avatar
2 votes
1 answer
164 views

How to "break" remote access on Windows and rooted Android?

Let's say you want to "break" all remote access capabilities on your rooted Android phone and your Windows PC. What do you do or delete so remote access is truly broken and can't be used (by ...
user avatar
  • 29
5 votes
2 answers
729 views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
user avatar
1 vote
1 answer
2k views

Is Deluge safe to use still when it's not been updated since the first part of 2017?

https://dev.deluge-torrent.org/wiki/Download https://ftp.osuosl.org/pub/deluge/windows/?C=M;O=D The latest version of Deluge for Windows that can actually be downloaded and installed is deluge-1.3.15-...
user avatar
1 vote
1 answer
210 views

Using other programming languages for malware against EDR?

As an example, one of the most basic malware to inject into a process to get a C2 beacon goes like this: Get Handle of a process -> VirtualAllocEx -> WriteProcessMemory -> CreateRemoteThread ...
user avatar
1 vote
1 answer
347 views

Can I view a user's browser history if the history/cache has been cleared?

A client wants to track a specific employee's browsing habits. Assuming that the employee knows how to clear their browser history, is there any way to recover the history so it can be read by ...
user avatar
0 votes
3 answers
651 views

Is it safe to use non-ASLR DLL in an enabled ASLR EXE

Is it safe to use non-ASLR DLL in an enabled ASLR EXE? Would the DLL be loaded to and will use random addressed, or should all the dependencies enable ASLR? In addition, what about other security ...
user avatar
1 vote
1 answer
129 views

Rogue network printers as an attack vector in windows

I recently installed a new printer in our network. Just because I was interested, I switched to wireshark when scanning for and adding the printer on windows. I noticed that it was discoverd through ...
user avatar
  • 13
1 vote
0 answers
133 views

Determining Windows version from a list of files

I have a list of files taken from a dead system, but not the actual files themselves, or any other information (e.g. properties) that would indicate the OS version. Is there a way to determine the ...
user avatar
0 votes
1 answer
156 views

Safely use compromised USB drive to transfer data from one PC to another [duplicate]

How to use a USB hard disk to transfer files from Ubuntu to Windows 10 PC in a secure manner? I have not used that disk for a while but it was probably exposed to a few PCs that do not belong to me. ...
user avatar
  • 101
-2 votes
1 answer
4k views

How am I supposed to interpret a VirusTotal result of "some engines think this is malware"? [closed]

I just scanned another installer/EXE with VirusTotal. I've come to depend on this crappy service owned by the evil Google, in spite of its ambiguous messages and extremely confusing interface, because ...
user avatar
1 vote
1 answer
275 views

Does Windows Device Encryption use a new key to encrypt each time?

Say I have a machine running Windows 10 with built in Device Encryption enabled. Say I want to reinstall Windows and sell the machine. I am wondering: after the format and reinstall, is a new key ...
user avatar
  • 11
1 vote
0 answers
163 views

MessageBoxA only shows up in debugger?

This question is related to crackmes.de's k1 by xtfusion. I'm trying to add custom shellcode through stack overflow. The shellcode works perfect under Windows XP (without ASLR) when the program is ...
user avatar
  • 111
3 votes
1 answer
2k views

How can wkhtmltopdf be used without introducing a security vulnerability?

Background Per the project website, wkhtmltopdf is a "command line tool to render HTML into PDF using the Qt WebKit rendering engine. It runs entirely "headless" and does not require a ...
user avatar
0 votes
0 answers
217 views

Is Chrome Browser/ Computer compromised by KMSPico?

I recently installed a new windows key for my friend. He was using a hack program previously, known as Auto KMS. So after new keys installation, I used Windows defender to remove AutoKMS program. The ...
user avatar
  • 101
4 votes
2 answers
1k views

Does this registry entry for implementing custom protocol handlers in Windows present a security risk?

Background Some features are not yet available on the web platform and thus require cooperation with a native application in order to provide them. One method for a web application and a native ...
user avatar
0 votes
0 answers
123 views

Does Windows log the movement of files?

If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure ...
user avatar
0 votes
0 answers
101 views

Taking over Windows DC as a domain user

What do you suggest in order to take over a Windows Domain Controller, given the fact that you gained access to a domain user workstation and so you have domain user credentials? I have domain user ...
user avatar
  • 39
0 votes
1 answer
320 views

Bypass NTFS Encryption via Password Change (Encrypting File System)

Is it possible to bypass NTFS encryption if the password used to encrypt the RSA key is a password to an AD account? So if an administrator can simply change your password, they would then be able to ...
user avatar
  • 638
1 vote
0 answers
283 views

Wireshark how do I see data from a phone on the same network

So I am wondering how can I see the data on wireshark? I have my router setup to where there is no password so I can automatically connect whatever devices on to my network. First I connect my phone ...
user avatar
  • 11
0 votes
3 answers
429 views

Can my school track my laptop?

I do a distance education program in Australia. My distance ed school sends out laptops to all students on loan until they leave school/the program. The laptop is specifically a Lenovo Thinkpad Yoga ...
user avatar
3 votes
4 answers
222 views

Why did "terminal commands" never get a version of SQL "parameterized queries"?

I was taught horrible bad practice when I initially "learned" SQL, which baked in user-submitted input with quotes and attempted to "escape" this (in the beginning, I didn't even ...
user avatar
0 votes
2 answers
921 views

Can Microsoft access the contents of my OneDrive Personal Vault?

I found the article to be quite informative that addresses the question "Can Microsoft access my private files?" (Can Microsoft access all private data if a user installs Windows 10?), which ...
user avatar
  • 101
0 votes
1 answer
245 views

DLL hijack privileges

DLL hijacking means that malicious software gets admin rights from default or it means you need to elevate your privileges first? Because I tried to change a DLL in Windows/System32 folder, but I can'...
user avatar
0 votes
1 answer
175 views

Why did my DoS attack fail against Windows 10?

I have multiple devices - a Samsung and a Lenovo tab, an Amazon Alexa, an HP laptop running Windows 7, and another running Windows 10. Bored, I tried to DoS my Windows 10 laptop using my Windows 7 ...
user avatar
1 vote
2 answers
2k views

The security of an SMB port exposed to the internet

I have installed a Windows machine with update 1909 (build 18363.720 (March 2020) (On which I try to find vulnerabilities with nmap), which includes smb 3.1.1 with the latest fixed bugs. I created a ...
user avatar
4 votes
2 answers
370 views

Are there security reasons for prohibiting universal mac address modification?

Background In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA). If it is 0, then ...
user avatar
  • 401
1 vote
1 answer
102 views

Is MS-CHAPv2 in windows 8.1 secure in 2020? In Windows 10?

My provider still uses VPN with MS-CHAP2(no encryption). How easy can it be exploited? I see a lot of articles but they are from 2012/2013. And some sites do not work. What is going on? Has Microsoft ...
user avatar
0 votes
1 answer
344 views

Does a VPN utilizing PPTP and MS-CHAPv2 without encryption pose a risk to security?

I see there is no encryption for ms chap v2 (providers settings.) Furthermore, what can I do if the provider refuses to cooperate and improve security? Can a vulnerability in this setup be exploited ...
user avatar
3 votes
2 answers
5k views

When/why should the "mark this key as exportable" option be selected when importing a certificate?

When a certificate is being imported on Windows, at some point the following option is available: [] mark this key as exportable I understand that this is used in case the certificate needs to be ...
user avatar
1 vote
2 answers
249 views

I am a member of the Administrators group on a Windows 7 box, how can I spawn a reverse shell with elevated privileges?

I am learning Windows Privilege escalation. I've managed to add a user to the Administrators group but I don't know how to execute nc.exe, present in the Temp dir, with elevated privileges. I am ...
user avatar
  • 11
0 votes
1 answer
115 views

server access to application owners

I am looking for the right practice to provide access to application owners. As of now they are part of system admins groups. whoever part of the group login tho the servers any time and do any stuff. ...
user avatar
1 vote
1 answer
15k views

Windows Defender found threats in Kali Linux disc image

Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
user avatar
  • 151
3 votes
4 answers
8k views

Using OpenVPN on Windows instead of VPN apps: missing certificate

Sorry this might be a noob question, but I subscribed to a VPN provider which ships its own app on Windows. Now I thought I'd prefer to use the OpenVPN client app instead. I create a profile by ...
user avatar
1 vote
0 answers
88 views

Can USB-C be restricted for display only (i.e. no data transfer)?

I want to allow users to connect their company mobile phones to company tablets for display only using USB-C. These are windows tablets. Is there anyway of restricting the USB-C to only allow display?...
user avatar

1
3 4
5
6 7
43