10 votes
Accepted

Mitigate MS17-010 on Windows XP? (wannacry ransomware)

Microsoft released patches for all operating systems in custom support. Please see here. For English language patches, direct links are Windows XP SP2 x64 and Windows XP SP3 x86. Localized version of ...
Marko Vodopija's user avatar
9 votes

Dangers of searching "safe" websites using Windows XP?

Things are going wrong here, horribly: I have software that only works with Windows XP. Okay. That tends to happen from time to time. I have a computer that runs Windows XP. That is good, ...
Tobi Nary's user avatar
  • 14.4k
8 votes

If most ATMs are Windows XP, and Windows XP is no longer updated...?

ATMs normally lie on a isolated network directly to the bank that owns the ATM. This is normally enforced by a VPN-router if theres no leased point-to-point line at the location, where the local end ...
sebastian nielsen's user avatar
8 votes

How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?

Even if you are not actively accessing anything, your computer is. Windows is a very talkative OS, and will broadcast all his services all around the network, and depending on the network ...
ThoriumBR's user avatar
  • 54.1k
7 votes
Accepted

Safely use old windows XP machine in business network

It is not that uncommon to have these out-of-support and vulnerable machines in an organisation. It's important to perform a risk assessment to determine the impact of any vulnerabilities. High-Level ...
schroeder's user avatar
  • 129k
7 votes

If most ATMs are Windows XP, and Windows XP is no longer updated...?

Microsoft is supporting Windows XP under certain circumstances As this article states the US Navy has re-upped support for their Windows XP footprint for another year as of 2015. Microsoft is ...
Citizen's user avatar
  • 378
6 votes
Accepted

Can't remove suspicious bridge connection

Yes, it is a case of nuke it from orbit. The fact that you can not remove this particular piece of visible malware does not matter. Even if you could, there might be loads of malware that you can not ...
Anders's user avatar
  • 65.6k
4 votes

How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?

a computer running on an out-of-date Windows XP system with no antivirus software was getting infected with malicious software within a few minutes after connecting it to the internet without any user ...
LSerni's user avatar
  • 22.8k
4 votes
Accepted

Threat of a Windows XP machine connected to a local network via WIFI (today in 2018)

TL;DR - keep it off the web! The longer version is that because is no longer supported, it is highly vulnerable and easy to exploit with almost no effort. (To see how little effort, search XP on ...
SomeGuy's user avatar
  • 750
4 votes

Mitigate MS17-010 on Windows XP? (wannacry ransomware)

There is a MS17-010 patch for Windows XP Embedded systems that fits the regular Windows XP. You can download it at the link below: http://catalog.update.microsoft.com/v7/site/search.aspx?q=4012598 ...
George's user avatar
  • 41
4 votes

How can I tell if Windows is running SMB?

In Windows, you can open cmd.exe and run this command: sc query mrxsmb10 In addition, you can also check to see in Windows Registry if there is a key for SMB in (it's not always present): HKLM:...
anonymous coward's user avatar
4 votes
Accepted

How can I tell if Windows is running SMB?

Answer to this question: (1) There is no service that runs the SMB server. It is a native system process that runs in the NT kernel. (2) If the kernel is running SMB, it can be detected by giving ...
Tyler Durden's user avatar
  • 1,156
3 votes

PenTesting - Configuring vulnerabilities on XP SP 1/2/3 & Server 2008

I'd recommend combining a search of Metasploit modules with software from Oldversion as being a good starting point for this kind of research. You can search Metasploit based on exploit reliability ...
Rory McCune's user avatar
  • 62.3k
3 votes
Accepted

TLS_RSA_WITH_AES_128_CBC_SHA on Windows XP

For TLS, the .NET framework utilises the underlying TLS API exposed by the operating system. It does not re-implement the TLS protocol in managed code. The operating system's TLS stack pulls cipher ...
Polynomial's user avatar
  • 135k
2 votes

How can I tell if Windows is running SMB?

SMB is Server Message Block protocol–it's used for file sharing so if you have enabled windows file-sharing–you have a service using the SMB protocol. If you are on Windows XP you would have to ...
Ross's user avatar
  • 223
2 votes

Dangers of searching "safe" websites using Windows XP?

You could run the Windows XP machine on a virtual machine without any networking interface enabled. If you need to get data onto it you can add them via a shared folder that the VM has access to. ...
Marek Andreansky's user avatar
2 votes

Does running Windows XP pose a security threat to the whole internal network?

There is nothing specific to XP that poses a threat to other machines on the network. The fact that it can be controlled by a malicious actor is the threat that it poses. With XP, this threat is more ...
schroeder's user avatar
  • 129k
1 vote
Accepted

Is there a security threat to a Windows XP computer only being used as an analogue fax server?

Despite this XP machine is not directly accessible from the Internet and there might not be attack vectors through the analogue fax machines, being on the same LAN makes it a good target for lateral ...
Esa Jokinen's user avatar
1 vote

Safely use old windows XP machine in business network

Think about possible threats. How could an attacker gain access to the system? An attacker could monitor the internet connection and block the updates or insert fake updates. => To protect against ...
Luc's user avatar
  • 32.9k
1 vote

Does running Windows XP pose a security threat to the whole internal network?

Support for Windows XP ended April 8, 2014. Microsoft will no longer provide security updates or technical support for the Windows XP operating system. Hence there is a greater chance of compromise ...
Sayan's user avatar
  • 2,031
1 vote

How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?

You are correct in assuming there were (and still are) botnets constantly portscanning all valid IPv4 addresses. You can actually observe this in the log of every Internet firewall. This isn't as ...
Tilman Schmidt's user avatar
1 vote

TLS_RSA_WITH_AES_128_CBC_SHA on Windows XP

Or alternatively, Is there any secure protocol+cipher that can be used by a .NET app running on Windows XP to contact a web server over https and if so what need to be done to allow that? As I ...
Peter Green's user avatar
  • 5,300
1 vote

Can serving HTTPS to Internet Explorer on Windows XP be made secure?

basically daniel Azuelos has a pretty solid answer but I want to expand a bit upon that. IE on XP is for many reasons obviously not a good Idea, but first and foremost, unless someone can have IE6 on ...
My1's user avatar
  • 394
1 vote
Accepted

PSExec not working against windows XP (metasploit)

Try setting the SMBDomain to a single dot "." or the system name rather than WORKGROUP and see what happens.
user144242's user avatar
1 vote

WireShark tried to load a suspicious system.dll

Hmm, how did you install wireshark on your system? IMHO, what is bad is the existence of a system.dll file in c:\Document and settings\administrator\locals...\temp (I cannot remember exactly how the ...
Serge Ballesta's user avatar
1 vote

WireShark tried to load a suspicious system.dll

Download the 32bit Portable Apps version of Wireshark directly from Wireshark.org not from some third party site where their system could have been compromised. Verify the signature with the hash ...
Rowan Hawkins's user avatar
1 vote

Browser Autopwn2 Unable to Exploit "Victim" on Separate Network

Since they're on two separate networks, how are they going to communicate? is there a GATEWAY that they share or similar that would allow them to communicate? If so, might want to test simple ...
Mara's user avatar
  • 46

Only top scored, non community-wiki answers of a minimum length are eligible