Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].
1
vote
Minimum access required to access LSA Secrets
LSASS is a System level process, so any kind of access to it will require Admin level privileges. I would guess that your user had admin access and you didn't realize it. You can check your level of …
4
votes
About windows services and service control Manager
SeTcbPrivilege
Windows Services are programs that run in the background to perform necessary operations for the operating system to function. … Access Tokens
Access Tokens are Windows way of allowing threads/processes/users to access certain portions of the operating system. …
2
votes
Accepted
Controlling variables used by an application
This is generally done by reverse engineering the game to find out where in running memory these variables live within the program. There are two ways to modify those variables.
Program Patch
An at …
6
votes
Accepted
What is the risk that Windows 8's loopback protection feature protects me from?
In Windows 8 has a new runtime that allows for the running of Immersive Apps. For all Immersive Apps, Win8+ runs them in an AppContainer. … And Windows says, "Fine! But we don't like it." There is no real security benefit, it's just what needs to happen for Fiddler to work. …
1
vote
Accepted
Analyze Windows executable
If it's a simple binary I would suggest first downloading Strings for Windows. It's a version of the Linux programs of the same name. It runs through and prints out all strings in a binary. … If the binary is packed or encoded the easiest way to analyze a Windows binary for these things is a tool called PE Insider or CFF Explorer. …
25
votes
How does Internet Explorer know what text files I have viewed?
Many of the operations performed by Internet Explorer call directly into Windows services. … So any time you visit a secure website all of the operations are actually performed by a Windows service. …
5
votes
Accepted
Unregistering keyboard hooks by timeout expiration
Hooks are only removed in Windows 7 and above. This is probably the least of your concern, but worth mentioning. …
0
votes
On Windows, how to restrict access to a folder, sub folder and files to only some applicatio...
These aren't the easiest Windows object in the world to work with, but they do what you want.
More than you probably want to know about Windows security descriptors and access control. … In Windows this approach is probably a bad idea, and not worth the amount of flaming hoops you would have to jump through to make it work. …
2
votes
Accepted
Malicious programs that takes advantages of Windows vulnerabilities
It can check Windows permissions, but the account permissions in Windows is a complicated subject. …
3
votes
Hooking Windows SSL libraries
Windows uses its Secure Channel (schannel.dll) for all SSL/TLS type communications. You can try to look at the Windows docs for TLS. …
2
votes
Can the FBI or government agencies decrypt my hardrive and/or force me to give them the pass...
I don't know do they? If you're asking the tinfoil hat type of question: Does the FBI/NSA have access to all harddrives on the internet? Then I believe the answer is no. If a court order is handed …
13
votes
1
answer
4k
views
Does KASLR really provide more security against exploits?
Windows 8 has taken extra steps to ensure that ASLR is effective. … Does this exist in the Windows world? If so, does Windows do a better job at its implementation?
Or maybe the world just isn't ready for it yet... …
2
votes
Decrypting SSL using Wireshark on Linux vs Windows
In Wireshark (Ubuntu 14.04) you can Right Click the SSL stream, and go to:
Protocol Preferences > Secure Sockets Layer Preferences
Here you can add RSA Key lists where you can enter the password of …
6
votes
Accepted
How is the file overlay read by an exe/virus?
The overlay is just appended data to the end of the executable file. Detecting this can be tricky. But keep in mind that this portion is only ignored when loading an executable into memory. Opening …