10
votes
Accepted
Mitigate MS17-010 on Windows XP? (wannacry ransomware)
Microsoft released patches for all operating systems in custom support. Please see here.
For English language patches, direct links are Windows XP SP2 x64 and Windows XP SP3 x86. Localized version of ...
9
votes
Dangers of searching "safe" websites using Windows XP?
Things are going wrong here, horribly:
I have software that only works with Windows XP.
Okay. That tends to happen from time to time.
I have a computer that runs Windows XP.
That is good, ...
8
votes
How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?
Even if you are not actively accessing anything, your computer is. Windows is a very talkative OS, and will broadcast all his services all around the network, and depending on the network ...
7
votes
Accepted
Safely use old windows XP machine in business network
It is not that uncommon to have these out-of-support and vulnerable machines in an organisation. It's important to perform a risk assessment to determine the impact of any vulnerabilities.
High-Level ...
6
votes
Accepted
Can't remove suspicious bridge connection
Yes, it is a case of nuke it from orbit.
The fact that you can not remove this particular piece of visible malware does not matter. Even if you could, there might be loads of malware that you can not ...
5
votes
Accepted
How can I tell if Windows is running SMB?
Answer to this question:
(1) There is no service that runs the SMB server. It is a native system process that runs in the NT kernel.
(2) If the kernel is running SMB, it can be detected by giving ...
4
votes
How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?
a computer running on an out-of-date Windows XP system with no antivirus software was getting infected with malicious software within a few minutes after connecting it to the internet without any user ...
4
votes
Accepted
Threat of a Windows XP machine connected to a local network via WIFI (today in 2018)
TL;DR - keep it off the web!
The longer version is that because is no longer supported, it is highly vulnerable and easy to exploit with almost no effort. (To see how little effort, search XP on ...
4
votes
Mitigate MS17-010 on Windows XP? (wannacry ransomware)
There is a MS17-010 patch for Windows XP Embedded systems that fits the regular Windows XP. You can download it at the link below:
http://catalog.update.microsoft.com/v7/site/search.aspx?q=4012598
...
4
votes
How can I tell if Windows is running SMB?
In Windows, you can open cmd.exe and run this command:
sc query mrxsmb10
In addition, you can also check to see in Windows Registry if there is a key for SMB in (it's not always present):
HKLM:...
2
votes
How can I tell if Windows is running SMB?
SMB is Server Message Block protocol–it's used for file sharing so if you have enabled windows file-sharing–you have a service using the SMB protocol.
If you are on Windows XP you would have to ...
2
votes
Dangers of searching "safe" websites using Windows XP?
You could run the Windows XP machine on a virtual machine without any networking interface enabled.
If you need to get data onto it you can add them via a shared folder that the VM has access to.
...
2
votes
Does running Windows XP pose a security threat to the whole internal network?
There is nothing specific to XP that poses a threat to other machines on the network. The fact that it can be controlled by a malicious actor is the threat that it poses. With XP, this threat is more ...
1
vote
Accepted
Is there a security threat to a Windows XP computer only being used as an analogue fax server?
Despite this XP machine is not directly accessible from the Internet and there might not be attack vectors through the analogue fax machines, being on the same LAN makes it a good target for lateral ...
1
vote
Safely use old windows XP machine in business network
Think about possible threats. How could an attacker gain access to the system?
An attacker could monitor the internet connection and block the updates or insert fake updates.
=> To protect against ...
1
vote
Does running Windows XP pose a security threat to the whole internal network?
Support for Windows XP ended April 8, 2014. Microsoft will no longer provide security updates or technical support for the Windows XP operating system.
Hence there is a greater chance of compromise ...
1
vote
How can malware immediately infect a Windows XP computer as soon as it goes online without any user action?
You are correct in assuming there were (and still are) botnets constantly portscanning all valid IPv4 addresses. You can actually observe this in the log of every Internet firewall. This isn't as ...
1
vote
Can serving HTTPS to Internet Explorer on Windows XP be made secure?
basically daniel Azuelos has a pretty solid answer but I want to expand a bit upon that.
IE on XP is for many reasons obviously not a good Idea, but first and foremost, unless someone can have IE6 on ...
1
vote
Accepted
PSExec not working against windows XP (metasploit)
Try setting the SMBDomain to a single dot "." or the system name rather than WORKGROUP and see what happens.
1
vote
WireShark tried to load a suspicious system.dll
Hmm, how did you install wireshark on your system? IMHO, what is bad is the existence of a system.dll file in c:\Document and settings\administrator\locals...\temp (I cannot remember exactly how the ...
1
vote
WireShark tried to load a suspicious system.dll
Download the 32bit Portable Apps version of Wireshark directly from Wireshark.org not from some third party site where their system could have been compromised. Verify the signature with the hash ...
1
vote
Browser Autopwn2 Unable to Exploit "Victim" on Separate Network
Since they're on two separate networks, how are they going to communicate? is there a GATEWAY that they share or similar that would allow them to communicate?
If so, might want to test simple ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
windows-xp × 29windows × 8
metasploit × 5
exploit × 4
vulnerability × 4
malware × 3
tls × 2
virus × 2
buffer-overflow × 2
kali-linux × 2
dep × 2
network × 1
certificates × 1
wifi × 1
http × 1
penetration-test × 1
firewalls × 1
antivirus × 1
virtualization × 1
known-vulnerabilities × 1
python × 1
wireshark × 1
antimalware × 1
defense × 1
banks × 1