Fitzroy

general recent conversations

The DMZ

A serious place where infosec is discussed PS we don't do hard...

Fitzroy

Jan 18, 2017 17:21

In the latest version of Nessus (6.9.1), the equivilant policy appears to be 'Internal PCI Network Scan' - however the compliance options and plugins are not visible. Any ideas how are you supposed to determine exactly what the scan is going to do before running it?

Fitzroy

Jan 18, 2017 17:21

I haven't used Nessus for a few years. It used to be the case that the built-in PCI policy which at that time was called 'Prepare for PCI-DSS Audits'
(mention on this InformationExchange forum post: http://security.stackexchange.com/questions/35922/nessus-html5-version-5-0-3-pci-scan)
you could view the compliance options and plugins (all plugins were enabled by default).

Root Access

For all you Super Users out there. You have backups, right?

Fitzroy

Oct 25, 2014 17:18

You can't be too careful.

Fitzroy

Oct 25, 2014 17:18

@bob OK - just checking...

Fitzroy

Oct 25, 2014 17:15

@bob Are you a Visual Fox Pro developer?

Fitzroy

Oct 25, 2014 16:14

Fitzroy

Oct 25, 2014 14:23

When you look at the Common File Dialogue and Windows Explorer side-by-side they're practicaly the same thing. A very nice solution. Thanks.

Fitzroy

Oct 25, 2014 14:20

beat me to it. thanks.

Fitzroy

Oct 25, 2014 14:19

Invoke it using powershell, or perhaps it can be invoked with rundll. I'll see.

Fitzroy

Oct 25, 2014 14:19

@bob thanks Bob. That's steered me in the right direction. Without reinventing the wheel, I can just come up with a solution using the common file dialogue.

Fitzroy

Oct 25, 2014 14:14

Yeah - works perfectly. Why didn't I think of that... shamed

Fitzroy

Oct 25, 2014 14:12

ok - I try it.

Fitzroy

Oct 25, 2014 14:12

Sorry - completely missed that suggestion!

Fitzroy

Oct 25, 2014 14:10

how can i invoke it easily?

Fitzroy

Oct 25, 2014 14:08

Oh well - seems it's not possible...

Fitzroy

Oct 25, 2014 14:06

I then opened an elevated powershell prompt and ran 'explorer c:\' and tried to access the folder. Same result.

Fitzroy

Oct 25, 2014 14:06

OK - tested it. Created a directory and gave administrators group permissions only. Using an account that is a member of administrators, launched Windows Explorer normally, tried to open the folder and as expected got the warning that "You don't currently have permission to access this folder".

Fitzroy

Oct 25, 2014 13:54

There's only one way to find out - try it. Will let you know the outcome...

Fitzroy

Oct 25, 2014 13:53

OK, correction - the option is still present in Windows 7. But apparently after Windows Vista you can no longer run explorer elevated. At least not without some hackery. That's according to this post: social.technet.microsoft.com/Forums/windows/en-US/… "...explorer has a component which blocks every request to elevate the Explorer."

Fitzroy

Oct 25, 2014 13:46

OK - just reading an article on the subject...

Fitzroy

Oct 25, 2014 13:46

So I've just discovered

Fitzroy

Oct 25, 2014 13:45

The option is called "Launch folder windows in a separate process" . But it was dropped after Windows Vista. Dang.

Fitzroy

Oct 25, 2014 13:43

Yes - thats a good trick! forgot about that!

Fitzroy

Oct 25, 2014 13:42

...And Windows probably doesn't let you do that anyway

Fitzroy

Oct 25, 2014 13:42

You'd have to run the whole explorer.exe as elevated. Yuk.

Fitzroy

Oct 25, 2014 13:42

Basically any third party file explorer would do the trick. The only reason Windows Explorer is useless is because it's related to the explorer.exe shell.

Fitzroy

Oct 25, 2014 13:41

But it's a valid suggestion.

Fitzroy

Oct 25, 2014 13:40

I like to use the native OS tools where ever possible.

Fitzroy

Oct 25, 2014 13:39

I don't use the Windows GUI much these days

Fitzroy

Oct 25, 2014 13:39

I'm happy to use cmd/powershell - but not all other admins are.

Fitzroy

Oct 25, 2014 13:38

@Bob As it's not possible to run an elevated instance of Windows Explorer, I was hoping that I could run IE elevated and use to navigate directories. Not being able to run Windows Explorer elevated is problematic on a system with UAC enabled.

Fitzroy

Oct 25, 2014 13:20

Should have probably said, I attempted this on Windows 7 running IE8

Fitzroy

Oct 25, 2014 13:18

I'm sure it used to be possible to browse directories using Internet Explorer. It behaved just like Windows Explorer. When I attempt to navigate to C:\ or C:/ it just launches a Windows Explorer window. Anyone know if this is still possible?

VBA Rubberducking

This chat has moved to Discord: discord.gg/MYX9RECenJ

Fitzroy

Oct 25, 2014 16:19

@RubberDuck It's quite easy to do using WMI.

Fitzroy

Oct 25, 2014 15:50

@RubberDuck How about checking for the presence of an 'excel.exe' process?

Fitzroy

Oct 25, 2014 14:50

I don't like code that relies on the error handler to get you out of trouble. You should think about all possible scenarios and cater for them. When something calls the error handler - see if you can use pre-emptive checking to avoid that ever happening again.

Fitzroy

Oct 25, 2014 14:46

My functions often start with a series of prerequisite checks.

Fitzroy

Oct 25, 2014 14:45

@RubberDuck Which is my reason for contining to use both. I like the distinction.

Fitzroy

Oct 25, 2014 14:44

I always write code that avoids jumping to the error handler when a condition isn't satisifed. EG, need to write a file to C:\blah - then check that the path jolly well exists first. Don't just jump to the error handler.

Fitzroy

Oct 25, 2014 14:41

So I can see where you're going with that.

Fitzroy

Oct 25, 2014 14:41

Also - the called function might not be producing 'an error' it may just be that a condition wasn't met

Fitzroy

Oct 25, 2014 14:40

I mean, I think I get the intention behind it.

Fitzroy

Oct 25, 2014 14:39

@enderland I can see where you're coming from with that approach.

Fitzroy

Oct 25, 2014 14:32

@RubberDuck Did you find a legitimate case for fixed length strings? Something I'm often asked is why VBA has subs and functions, why not always use functions and simply don't set a return value if you don't need one. Yet I continue to use both...

Fitzroy

Oct 25, 2014 14:26

And hello!

Fitzroy

Oct 25, 2014 14:26

anyway - sorry, thinking out loud.

Fitzroy

Oct 25, 2014 14:26

Same for everyone actually.

Fitzroy

Oct 25, 2014 14:25

@RubberDuck why does your image annoyingly block the textbox. argh

Discussion between Fitzroy and Hopele…

Imported from a comment discussion on superuser.com/questions/...

Fitzroy

Apr 25, 2014 18:16

As I said, I'll leave chat open, so can resume at home if you wanted to ask me anything further.

Fitzroy

Apr 25, 2014 18:16

I'll check the post again later this evening when I get home.