Trao đổi với tôi

http://www.buidao.com

11/7/22

[System Info] How to Block a Program with Windows Firewall in Windows 10

 Sometimes you may want to prevent an application from accessing the Internet. This tutorial gives a step-by-step guide to teach you how to block a program with Windows firewall in Windows 10.

Normally you would want your applications to have free access to the network. However, no matter for what reason, you wish to block a program from accessing the Internet, you can check the step-by-step guide below to block program with Windows firewall in Windows 10.

How to Block a Program with Windows Firewall Windows 10

Step 1. Open Windows Firewall window

You can click Start, and type Windows Defender Firewall. Choose the top result to open Windows Defender Firewall.

You can also click Start, type control panel and choose the top result to open Windows Control Panel. Then click System & Security -> Windows Defender Firewall to open Windows Defender Firewall.

Step 2. Click Advanced settings

In the Windows Defender Firewall, you can click Advanced settings to enter into Windows Defender Firewall with Advanced Security app.

Windows Defender Firewall Advanced settings

Step 3. Enter into Firewall rule creation window

Next you can click Outbound Rules in the left column and it will display all existing outbound Windows firewall rules in middle window.

In the right Outbound Rules Actions column, you can click New Rule option to open a new window in which you can create a new Firewall rule by your own.

create a new Firewall rule

Step 4. Create a new Firewall rule

In the new window, you can choose “What type of rule would you like to create?”

You can click Program to get ready to rule controls connections for a program, and click Next.

click Program option

Step 5. Select the target program

You can tick This program path and click Browse to find path of the target program you want to block.

input the program path

You can click This PC in the left column, select the hard drive, and open the program’s folder and select the target program.

If you open the program in Firewall, Windows will restructure the path of the file. You can avoid this problem by manually coping and pasting the file path to the box.

Click the address bar to copy the path of the program, and paste it to the box. Please do contain the app’s name and extension at the end of the path.

Step 6. Name the Firewall rule

You can click Next button three times, and input a name for the new Firewall rule. Then click Finish button to create the new Firewall rule to block the program with Windows Firewall in Windows 10 and prevent the program from accessing the Internet.

Related: 3 Ways to Disable Windows Defender Antivirus on Windows 10

Download/Use Microsoft Phone Link App to Link Android and PC
Download/Use Microsoft Phone Link App to Link Android and PC

Download and use Microsoft Phone Link (Your Phone) app for Windows 10/11 to link your Android phone and PC to access all Android content right from the PC.

READ MORE

How to Temporarily Disable a Program

Step 1. You can click Start and type Windows Defender Firewall. Choose Windows Defender Firewall to open it.

Step 2. Click Allow an app or feature through Windows Firewall in the left column. And click Change settings.

Step 3. Find the target program you want to block. If you can’t find the program in the list, you can click Allow another app…-> Browse, locate the program and open it, select the program name and click Add to add it to the list.

Step 4. Make sure the target program is not checked in the left. If a program is not checked, then it means Windows Firewall already blocks the program. Finally, click OK to save the changes and prevent the program from running on your Windows 10 computer.

temporarily disable a program in Windows Defender Firewall

Bottom Line

With the step-by-step guide above, hope you can easily block a program with Windows Firewall in Windows 10 now.


Link: https://www.minitool.com/news/block-program-with-windows-firewall-009.html

11/3/22

[Reverse] Reverse engineering Delphi executables

1/ IDR can be good for viewing class metadata and generating scripts that can (sometimes) improve IDA results, although they usually need to be manually edited to fix some bogus results.

https://github.com/crypto2011/IDR 

2/With IDA I've noticed sometimes it doesn't automatically detect a Delphi executable, so you can improve the analysis by:

- Open the executable but uncheck automatic analysis.
- Options -> Compiler to Delphi with calling convention Fastcall.
- Set the default string literals to Delphi or Delphi (16 bits), depending on how recent the executable is.
- View -> Open Subviews -> Type libraries, remove the defaults.
- View -> Open Subviews -> Signatures, remove the default and add the flirt signatures for your target (for example "bds" for Delphi 6/7), and mssdk32/64.
- Finally, start the analysis.

This can help quite a bit, although the flirt signatures tend to have a lot of false positives for VCL functions, so just be aware.

3/Check this out
https://github.com/Coldzer0/IDA-For-Delphi

4/Python 3.9 support for IDA 7.5

https://hex-rays.com/blog/python-3-9-support-for-ida-7-5/