Windows

From Rory.wiki

Jump to: navigation, search

Contents

Links & Resources

Handy Guide to re-installing windows 7 with upgrade media

Some xp optimization notes has zone good info on using fsutil to speed filesystem access up

execution policy for powershell To run unsigned scripts locally you need to run the following as an admin in a powershell window set-ExecutionPolicy RemoteSigned

Using ntsd to execute commands remotely

WMI

Disabling boot time defrag on xp

handy for virtual machines that you don't want locking up your hard disk every time they start

1. Start Regedit. 2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction 3. Select Enable from the list on the right. 4. Right on it and select Modify. 5. Change the value to Y to enable and N to disable. 6. Reboot your computer.

Identifying SQL Server version

List of how to tell version of SQL Server in use from version information returned by the server

Another List

General Notes

Net use syntax for null connections

net use \\host\IPC$ "" /u:""

Getting Password Hashes from system and sam files

process here. This mentions using the Auditor Live CD. However on ubuntu the two programs bkhive and samdump2 are available in the repos.

NT Backup File Reader

Backup File reader Links to binaries are on this page.

Reading information from "password" fields

Some applications will display passwords ostensiably hidden in "password" type fields where the data is present but only stars or black circles are shown on screen. In web apps this is trivial to circumvent by "view source" but in windows apps can be trickier. Per here there's a number of apps that do the job, I've used this one successfully.


Dumping Hashes without installing tools

Windows Hash Dumping

Personal tools