Why would you want to disable WSC?
I ruined my vacation by reverse engineering WSC
11–20 of 196 posts
Re: I ruined my vacation by reverse engineering WSC
#12The most invasive but effective way I've found to disable Defender is to boot into a live Linux USB, rename "C:\ProgramData\Microsoft\Windows Defender", and create an empty file in its place.
It's weird that windows wouldn't have a signed manifest that would detect that
You can also disable Windows Update entirely by taking ownership of wuaueng.dll and .exe. It’s the only effective method on Windows Home.
Re: I ruined my vacation by reverse engineering WSC
#13Is the point to actually disable defender or to highlight a vulnerability?
That is one possible point, but om machines with low memory, (like a lab full of 8Gb potatoes) this is a godsend. These lab PCs are so stripped down, that the only thing using most of the memory is WD. You should be able to make a normal mode to run full security and a gaming mode just run a semi large game,and yes, this does expose a vulnerability,but it can be easily brought back up.
Oof, really? Haven't really used windows much after 7, but it always seemed to me defender was pretty lightweight. At least compared to all the other products where just opening the UI would lag out the average machine.
Re: I ruined my vacation by reverse engineering WSC
#14Why would you want to disable WSC?
Performance reasons? Malware development? Hacking?
Re: I ruined my vacation by reverse engineering WSC
#15This is cursed:
https://github.com/es3n1n/defendnot/blob/master/defendnot-lo...
If you're curious what's actually going on there:
https://github.com/es3n1n/defendnot/blob/master/cxx-shared/s...
Re: I ruined my vacation by reverse engineering WSC
#16I recently read https://nostarch.com/windows-security-internals and this makes it much more relatable. I've know a bit about how alot of this back stuff works in Windows, but the timing is great - the last chapter of that book really goes into the same detail this author went about tokens and sids.
Re: I ruined my vacation by reverse engineering WSC
#17This is cursed: https://github.com/es3n1n/defendnot/blob/master/defendnot-lo... If you're curious what's actually going on there: https://github.com/es3n1n/defendnot/blob/master/cxx-shared/s...
yeah sorry i didnt feel like implementing my own RAII stuff for all the COM thingies due to time constraints. it will be changed in the next update though
Re: I ruined my vacation by reverse engineering WSC
#18What does CTF stand for?
Re: I ruined my vacation by reverse engineering WSC
#19What does CTF stand for?
A security competition of sorts https://en.wikipedia.org/wiki/Capture_the_flag_%28cybersecur...
Re: I ruined my vacation by reverse engineering WSC
#20What does CTF stand for?