Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 52676

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

1 vote

Minimum access required to access LSA Secrets

LSASS is a System level process, so any kind of access to it will require Admin level privileges. I would guess that your user had admin access and you didn't realize it. You can check your level of …
RoraΖ's user avatar
  • 12.5k
4 votes

About windows services and service control Manager

SeTcbPrivilege Windows Services are programs that run in the background to perform necessary operations for the operating system to function. … Access Tokens Access Tokens are Windows way of allowing threads/processes/users to access certain portions of the operating system. …
RoraΖ's user avatar
  • 12.5k
2 votes
Accepted

Controlling variables used by an application

This is generally done by reverse engineering the game to find out where in running memory these variables live within the program. There are two ways to modify those variables. Program Patch An at …
RoraΖ's user avatar
  • 12.5k
6 votes
Accepted

What is the risk that Windows 8's loopback protection feature protects me from?

In Windows 8 has a new runtime that allows for the running of Immersive Apps. For all Immersive Apps, Win8+ runs them in an AppContainer. … And Windows says, "Fine! But we don't like it." There is no real security benefit, it's just what needs to happen for Fiddler to work. …
RoraΖ's user avatar
  • 12.5k
1 vote
Accepted

Analyze Windows executable

If it's a simple binary I would suggest first downloading Strings for Windows. It's a version of the Linux programs of the same name. It runs through and prints out all strings in a binary. … If the binary is packed or encoded the easiest way to analyze a Windows binary for these things is a tool called PE Insider or CFF Explorer. …
RoraΖ's user avatar
  • 12.5k
25 votes

How does Internet Explorer know what text files I have viewed?

Many of the operations performed by Internet Explorer call directly into Windows services. … So any time you visit a secure website all of the operations are actually performed by a Windows service. …
RoraΖ's user avatar
  • 12.5k
5 votes
Accepted

Unregistering keyboard hooks by timeout expiration

Hooks are only removed in Windows 7 and above. This is probably the least of your concern, but worth mentioning. …
RoraΖ's user avatar
  • 12.5k
0 votes

On Windows, how to restrict access to a folder, sub folder and files to only some applicatio...

These aren't the easiest Windows object in the world to work with, but they do what you want. More than you probably want to know about Windows security descriptors and access control. … In Windows this approach is probably a bad idea, and not worth the amount of flaming hoops you would have to jump through to make it work. …
RoraΖ's user avatar
  • 12.5k
2 votes
Accepted

Malicious programs that takes advantages of Windows vulnerabilities

It can check Windows permissions, but the account permissions in Windows is a complicated subject. …
RoraΖ's user avatar
  • 12.5k
3 votes

Hooking Windows SSL libraries

Windows uses its Secure Channel (schannel.dll) for all SSL/TLS type communications. You can try to look at the Windows docs for TLS. …
RoraΖ's user avatar
  • 12.5k
2 votes

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the pass...

I don't know do they? If you're asking the tinfoil hat type of question: Does the FBI/NSA have access to all harddrives on the internet? Then I believe the answer is no. If a court order is handed …
RoraΖ's user avatar
  • 12.5k
13 votes
1 answer
4k views

Does KASLR really provide more security against exploits?

Windows 8 has taken extra steps to ensure that ASLR is effective. … Does this exist in the Windows world? If so, does Windows do a better job at its implementation? Or maybe the world just isn't ready for it yet... …
RoraΖ's user avatar
  • 12.5k
2 votes

Decrypting SSL using Wireshark on Linux vs Windows

In Wireshark (Ubuntu 14.04) you can Right Click the SSL stream, and go to: Protocol Preferences > Secure Sockets Layer Preferences Here you can add RSA Key lists where you can enter the password of …
RoraΖ's user avatar
  • 12.5k
6 votes
Accepted

How is the file overlay read by an exe/virus?

The overlay is just appended data to the end of the executable file. Detecting this can be tricky. But keep in mind that this portion is only ignored when loading an executable into memory. Opening …
RoraΖ's user avatar
  • 12.5k