Where is Sysprep in Vista?

Monday, April 21st, 2008

In previous versions of Microsoft Windows, the System Preparation Tool (sysprep.exe) was found in the Deployment.cab file on your product CD. If you’ve examined the Vista DVD however, there’s no such cabinet file present. So where can you find sysprep now? Turns out, it’s included in the operating system itself now ...

PowerShell – More than the command prompt

Monday, April 21st, 2008

Abstract Windows PowerShell™ is a new Windows command-line shell designed especially for system administrators. The shell includes an interactive prompt and a scripting environment that can be used independently or in combination. Introducing Windows PowerShell Most shells, including Cmd.exe and the SH, KSH, CSH, and BASH Unix shells, operate by executing a command ...

Details of privilege escalation hole in Windows

Monday, April 21st, 2008

In a security alert last week, Microsoft reported a vulnerability which allows local users and users signed on with access to an Internet Information Server (IIS) or MS SQL server to escalate their privileges. Server operators such as hosting providers who allow user code to be executed, for example on ...

The New E-spionage Threat

Friday, April 18th, 2008

The e-mail message addressed to a Booz Allen Hamilton executive was mundane—a shopping list sent over by the Pentagon of weaponry India wanted to buy. But the missive turned out to be a brilliant fake. Lurking beneath the description of aircraft, engines, and radar equipment was an insidious piece of ...

ActiveX module in Microsoft Works opens up security hole

Friday, April 18th, 2008

A demonstration of a security hole in the Microsoft Works Image Server (WkImgSrv.dll) ActiveX module contained in the Microsoft Works office suite has appeared on the Bugtraq mailing list. The demo appears to only cause a system crash. McAfee, however, has already found fully functional exploits which allow attackers to ...