New answers tagged

0

I think you would need to dual-boot, as installers often require elevated privs to do anything meaningful, and there would be no guarantee that some residual process isn't running that may access your higher-value data, encrypted or not - at some point you will unlock it. On that note: you might consider VeraCrypt for your non-game system volume and data (...


3

The design of services on the Windows platform implies that if your software architecture requires using some additional privileges it needs to be split into the parts where one of them usually runs as a service under "System" account. The other part of the software typically communicates with this service using some IPC mechanism and runs with the ...


0

EDIT: I missed the line about being able to put the OVPN into Linux NetworkManager and it working. That makes it more likely that the provider actually uses OpenVPN, and stranger that it doesn't work on Windows. There might be a missing certificate authority - that is, Windows might not trust the certificate the server uses where NetworkManager either does ...


1

What is the motivation for administrators to launch services with SPN from domain user accounts? There are five ways you can set these things up: Local service on a workgroup machine Local user on a workgroup machine Local service on a domain joined machine Domain user on a domain joined machine (g)MSA on a domain joined machine There is a collective ...


0

This Answer is aiming on how to stop the rubber ducky: If you use Ubuntu, the approach presented in this video steming from this guide should work for you: open a terminal run the following command in the terminal: sudo echo 'blacklist usbhid' > /etc/modprobe.d/usbhid.conf run the following command in the terminal: sudo update-initramfs -u -k $(uname -...


1

As the OP states, I received the same error/output after initially escalating privs to system. meterpreter > hashdump [-] 2007: Operation failed: The parameter is incorrect. I remembered that during the exploit there was output saying that notepad was being used to kick it off. So I ran getpid and ps to see what my current process was. Turned out I was ...


3

Depending on the method used to transfer the file between PCs, it is possible that the filesystem still keeps the "owner" attribute of the file, as well as its other permission attributes. There can also be "alternate data streams" attached to the file that some code and content management systems use. These may be used to deduce the ...


1

The reason you don't find what you're looking for is that 2FA in the static-password + short-changing-code sense is pretty much pointless for a personal computer. It's only useful for network access or if the password grants access to a large number of systems, and is primarily useful as a defense against phishing. None of this tends to apply to a personal ...


2

A complete whitelist of trusted devices should block Rubber Ducky specifically as I don't think it has a programmable device ID, but I'm not 100% sure. However if the question is more generic, then no! The more programmable Bash Bunny can do the same thing and it supports programming it's device ID. I've bypassed whitelist device lockdowns by using a Bash ...


4

No. Plain text files only include the plain text, and no further metadata. Only the file system records metadata about the file, and as you've seen, it can be easily forged. However, further analysis of the file system or related systems may yield useful information. For example, if the file is stored on a network drive, it may be possible to look at log ...


2

I'm surprised I got attacks through the program. The word "attack" is likely an exaggeration here. Probably you just hit a site which has a very low reputation and has served malware in the past, i.e. "Malicious Domain" in the message. Nothing attacked you've actively here. Is it safe to do web scraping to such a random big list of URLs,...


Top 50 recent answers are included