Astiostech – Blog, News and Updates
#TeamOpenSourceMalaysia
There’s a simple exploit code on SMB2 protocol (implemented in the newer OSes of Microsoft) that can easily remote BSDO a Windows server or client. SRV2.SYS fails to handle malformed SMB headers for the NEGOTIATE PROTOCOL REQUEST functionality. The NEGOTIATE PROTOCOL REQUEST is the first … “Windows SMB2 'SRV2.SYS' Remote Denial of Service Exploit (and screen shots on Windows 2008 SP2)”
Read MoreThis has probably been blogged a thousand times but let me be the 1001th ..blogger ;). Thought I’d share this from Windows 7 perspective instead. So, here’s the rundown: I got myself W2008 R2 and Windows 7 RTM up and running, joined the domain and … “Logging on to Windows 2008 domain as an administrator on Windows 7 domain computer”
Read MoreSome MSI programs require elevated privilege to run and its always cumbersome to run it through runas. In Windows Vista/7, the shell integration (right click) of an Exe will contain a Run As Administrator function like below. But for MSI files, there’s no such context! … “MSI and Run As Administrator”
Read MoreHave you ever wondered what does Event 4790 or 4767 in your security audit is all about? Well, i do, but i don’t know many many more. These IDs are super important, say for instance the famous 4740. This event ID should always be tracked. … “Security Event Logs – Windows 2008 and Nagios”
Read MoreMicrosoft should just disable the feature in Explorer that hides known extensions. But in Windows 7, its still not and you should. By default it is turned on. This is bad. Here’s why; It is very easy to simply trick a user into thinking that … “Why you should NOT hide extensions for known extensions (Windows users)”
Read MoreOk here’s the update. Windows is supposedly have a successor to desktop virtualization called Windows Virtual PC (this is currently in Beta). Well, i wanted a virtual desktop so i downloaded Windows VPC (the VPC website “knew” i was on Windows 7 and directed me … “Virtual PC 2007 and Windows 7 – UPDATED”
Read MoreHi just to let you guys know, when testing InCognito mode on Chrome, certain sites don’t work, these are some popular sites like facebook, hotmail and probably others as well. This is possibly because Incognito mode doesn’t allow browser/computer information be taken off the brower … “Chrome Incognito doesnt work with Facebook (And perhaps other sites too)”
Read MoreI read a recent online article that UAC can be switched off without user intervention in W7. I was curious to test it out. So i powered up my good ol’ VM running W7 and tested the script. Firstly i logged on as a “normal” … “Windows 7 Bypass “UAC””
Read MoreThis is a by the way article since i’ve got nothing better to do sitting at a client after a network migration. Alright, a little history, Internet Explorer 8/Chrome comes with a feat called InPrivate/Incognito browsing. InPrivate and Incognito, as the name implies ensure whatever … “Launching InPrivate/Incognito ala CLI and InPrivate testing of its claims ;)”
Read MoreOk, i’ve just had my hands on Windows 7 Beta DVD (thanks to Rizal from MS). I took some time to test the base operating system and try to put a review up in here for those who are interested to know what’s installed for … “The All New Windows 7 – Security Review (Out of the box)”
Read More