New answers tagged

0

It is possible to use schtasks.exe without elevation, though you can't create tasks for other users without knowing their passwords, or for system accounts without knowing an admin password. For example, the line schtasks /create /sc once /st 14:08 /tn testcalc /tr calc.exe, run from a non-elevated prompt, successfully popped calc.exe for me at the expected ...


2

Since this is an assignment, you need to learn more of the underlying function. You have a big helper in that the server is returning detailed error information, in the security world this is a big no-no. There are numerous SQL sub dialects, but in general what you need to do is: Break the standard processing You've already done this with the insert of the ...


0

I usually use the hosts file like @nobody's answer. FWIW I usually look at this too which includes some other files of interest for an LFI: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/.


2

The good part here is that you want to completely install a new OS. You don't need Windows to work or not be infected. In fact, you could fill the disk with random data prior to the Linux install in order to ensure nothing is left. You mention that you are concerned about something there latching into the new OS. A virus installed on Windows affecting a ...


1

TRIM is handled internally by the SSD controller. There aren't any standard ATA commands to obtain this information, and if there are vendor specific commands it's unlikely they are documented. A simplified example of TRIM: The OS writes some data to the disk at location 0. At this point, the OS can read the data back whenever it needs to. The OS no longer ...


1

You can reboot, close every single auto-start program you have, close anything not crucial, copy one Ethereum address to clipboard, paste it somewhere and see if it changed. Then you could use Process Explorer to list every single running process, and run strings (form SysInternals too) on each one searching for the changed address. Unless the address is ...


0

C:\Windows\System32\drivers\etc\hosts is pretty commonly used to check for read access to the file system while pentesting. If I remember correctly, this file exists on Windows 7 and later, but I'm not sure if it exists on earlier versions.


0

From the Disk Utility User Guide, Erase and reformat a storage device in Disk Utility on Mac: Note: With a solid-state drive (SSD), secure erase options are not available in Disk Utility. For more security, consider turning on FileVault encryption when you start using your SSD drive. This gives you some chances to recover some files, if the drive wasn't ...


0

It is technically possible, even with Sophos installed. But unlikely if you were at home and are not having a VPN connection established to your school. But nobody will be able to answer it with a yes or no without doing an analysis of your computer.


0

Since chrome v80, chrome encrypts cookies and passwords using AES256-GCM with a randomly generated key. The key used for encryption is then encrypted with DPAPI and stored in the 'Local State' file in the user's chrome profile. However, the DPAPI is used in Local_Machine scope which means that any user on the computer where the encryption was done can ...


0

Unfortunately unlike Word, Excel does not have a "Revision Tracking" feature. However, there is an option in the home panel's info section, where you can see "Version History". However, if the content in the document was copied and pasted into another document, then there would be no older version history to display. That is one way one ...


-4

Not most malwares or virus can be removed by factory resetting or formatting your computer hard disk


3

If you have a TPM, you can enable secure boot and proceed the factory reset. This way should assert than the restored OS is healthy as it is signed by ASUS. Then you will be able to disable secure boot for your linux needs. Without a TPM, the main concerns are about a rootkit (able to insert itself in the OS after the factory reset) or about a malware which ...


0

As far as I know Firefox updates when you close and restart the browser. What happens normally for me is that I download the FF update when it proposes this in the browser. When done with my browsing session I close FF and restart it. Then you should see a window with a loading bar displaying FF being updated. When that is done, it launches the browser with ...


0

You can get windows inside DEV edition which gives you the option to DoH your whole system. Also you can download whonixOS which is an operating system that runs inside your windows OS. It's more secure. For added security you can run TailsOS from a USB which leaves no trace of what your doing on your Windows OS. Boot the USB from BIOS, do whatever you need ...


Top 50 recent answers are included