Microsoft Windows 10: Adjust memory quotas for a process

This privilege determines who can change the maximum memory that can be consumed by a process. This privilege is useful for system tuning on a group or user basis. OpenVAS Vulnerability Test $Id: win10adjustmemoryquotasprocess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Adjust memo...

Microsoft Windows 10: Enable computer and user accounts to be trusted for delegation

This policy setting determines which users can set the Trusted for Delegation setting on a user or computer object. Security account delegation provides the ability to connect to multiple servers, and each server change retains the authentication credentials of the original client. Delegation of...

Microsoft Windows 10: Log on as a service

This policy setting determines which service accounts can register a process as a service. Running a process under a service account circumvents the need for human intervention. OpenVAS Vulnerability Test $Id: win10logonasservice.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Log on a...

Microsoft Windows 10: Debug programs

This policy setting determines which users can attach to or open any process, even those they do not own. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components need this user right. This user right provid...

Microsoft Windows 10: Deny log on through Remote Desktop Services

This policy setting determines which users are prevented from logging on to the device through a Remote Desktop connection through Remote Desktop Services. It is possible for a user to establish a Remote Desktop connection to a particular server, but not be able to log on to the console of that...

Microsoft Windows: Account lockout duration

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaccountlockoutduration.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Account lockout duration WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Windows: Minimum password length

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdminlength.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Minimum password length WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

Microsoft Windows: Minimum password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdminage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Minimum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows - Local Privilege Escalation

Microsoft Windows - Local Privilege Escalation include "stdafx.h" define PML4BASE 0xFFFFF6FB7DBED000 define PDPBASE 0xFFFFF6FB7DA00000 define PDBASE 0xFFFFF6FB40000000 define PTBASE 0xFFFFF68000000000 typedef LARGEINTEGER PHYSICALADDRESS, PPHYSICALADDRESS; pragma packpush,4 typedef struct...

Microsoft Windows Lockdown Policy .NET Remote Code Execution

A remote code execution vulnerability has been reported in Microsoft Windows Lockdown Policy. The vulnerability is due to an error in the .NET Framework. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...

Microsoft Windows - Local Privilege Escalation

include "stdafx.h" define PML4BASE 0xFFFFF6FB7DBED000 define PDPBASE 0xFFFFF6FB7DA00000 define PDBASE 0xFFFFF6FB40000000 define PTBASE 0xFFFFF68000000000 typedef LARGEINTEGER PHYSICALADDRESS, PPHYSICALADDRESS; pragma packpush,4 typedef struct CMPARTIALRESOURCEDESCRIPTOR UCHAR Type; UCHAR...

Microsoft Windows 10: Allow Cortana

This policy setting disables Cortana. If disabled, Cortana will be turned off. OpenVAS Vulnerability Test $Id: win10allowcortana.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Cortana Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Microsoft Windows: Turn off Windows Location Provider

This policy setting turns off the Windows Location Provider feature. If enabled, the Windows Location Provider feature is turned off, and programs are not able to use the Windows Location Provider feature. OpenVAS Vulnerability Test $Id: winlocationprovider.nasl 11363 2018-09-12 13:46:05Z emoss $...

Microsoft Windows 10: Send file samples when further analysis is required

This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set. Possible settings: - 0: Always prompt - 1: Send safe samples automatically - 2: Never send - 3: Send all samples automatically OpenVAS Vulnerability Test $Id:...

Microsoft Windows 8.1: Automatically send memory dumps for OS-generated error reports

This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps. If you enable or do not configure this policy...

WHP - Microsoft Windows Hacking Pack

M$ Windows Hacking Pack =========== Tools here are from different sources. The repo is generally licensed with WTFPL, but some content may be not eg. sysinternals. "pes" means "PE Scambled". It's useful sometimes. Remote Exploits =========== Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play...

Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779) - Ver2

A heap-based buffer overflow vulnerability exists in the DNSAPI component of Microsoft Windows. The vulnerability is due to insufficient validation of certain components of NSEC3 records. A remote attacker could exploit this vulnerability by sending a malicious DNS response directly to the target...

Microsoft Windows Kernel (Windows 7 x86) - Local Privilege Escalation (MS16-039) Exploit

Exploit for windows platform in category local exploits include include include include pragma commentlib, "psapi.lib" define POCDEBUG 0 if POCDEBUG == 1 define POCDEBUGBREAK getchar elif POCDEBUG == 2 define POCDEBUGBREAK DebugBreak else define POCDEBUGBREAK endif static HBITMAP hBmpHunted = NUL...

Microsoft Windows URL Moniker Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. Interaction with a particular library is required to exploit this vulnerability but specific attack vectors may vary. The specific flaw exists within the implementation o...

Microsoft Windows: Set the intranet update service for detecting updates

Check Setting OpenVAS Vulnerability Test $Id: winusewuserverpath.nasl 11535 2018-09-21 19:39:46Z cfischer $ Check value for Set the intranet update service for detecting updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...