GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → gordonbay → Windows-On-Reins

gordonbay / Windows-On-Reins

Licence: GPL-3.0 license
Wor is a Powershell script to harden, debloat, optimize, enhance privacy, avoid fingerprinting and improve performance on Windows 10 and 11.

Programming Languages

powershell
5483 projects

Labels

sysadminwindows-10powershell-scriptperformance-optimizationprivacy-enhancing-technologiesprivacy-protectiondebloatprivacy-toolssysadmin-taskssysadmin-toolsysadmin-scriptsbloatware-removalwindows-10-amelioratedfingerprinting-protection

Projects that are alternatives of or similar to Windows-On-Reins

SDK-Privacy-Report
Privacy details of SDKs for Apple Privacy Nutrition & Google Safety Section disclosure.
Stars: ✭ 219 (+28.82%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection, privacy-tools
Hemmelig.app
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
Stars: ✭ 183 (+7.65%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection, privacy-tools
Win10 Initial Setup Script
PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019
Stars: ✭ 4,494 (+2543.53%)
Mutual labels:  sysadmin, windows-10, sysadmin-tasks
shifting
A privacy-focused list of alternatives to mainstream services to help the competition.
Stars: ✭ 31 (-81.76%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection, privacy-tools
autohosts
Automate hosts file updates on Linux and MacOS. Block Firefox telemetry, Google snooping and web trackers at the root.
Stars: ✭ 69 (-59.41%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection, privacy-tools
Windows10debloater
Script to remove Windows 10 bloatware.
Stars: ✭ 11,462 (+6642.35%)
Mutual labels:  windows-10, debloat, bloatware-removal
SafePad
SafePad : Encrypted Text Editor. This text editor uses very strong encryption to let you protect your secrets. Great for storing passwords, credit card details or any else that you want to keep safe.
Stars: ✭ 32 (-81.18%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection, privacy-tools
SophiApp
⚡ The most powerful open source tweaker on GitHub for fine-tuning Windows 10 & Windows 11
Stars: ✭ 1,859 (+993.53%)
Mutual labels:  windows-10, debloat
mobiletrackers
A repository of telemetry domains and URLs used by mobile location tracking, user profiling, targeted marketing and aggressive ads libraries.
Stars: ✭ 118 (-30.59%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection
awesome-privacy
A curated list of tools and services that respect your privacy.
Stars: ✭ 257 (+51.18%)
Mutual labels:  privacy-protection, privacy-tools
matrix
mirror of https://mypdns.org/my-privacy-dns/matrix as it is obviously no longer safe to do Girhub nor have we no longer any trust in them. See https://mypdns.org/my-privacy-dns/porn-records/-/issues/1347
Stars: ✭ 32 (-81.18%)
Mutual labels:  privacy-protection, privacy-tools
gpc-optmeowt
Browser extension for opting out from the sale and sharing of personal information per the California Consumer Privacy Act and other privacy laws
Stars: ✭ 75 (-55.88%)
Mutual labels:  privacy-enhancing-technologies, privacy-tools
powershell
Powershell repo
Stars: ✭ 14 (-91.76%)
Mutual labels:  sysadmin-tool, sysadmin-scripts
Windows11-betterUX
A non-destructive registry preset to improve the default user-experience with windows 10.
Stars: ✭ 21 (-87.65%)
Mutual labels:  windows-10, debloat
protect-your-privacy
Privacy resources for the layperson. Highlights resources, tools, VPNs, search engines, articles, books, and dark patterns.
Stars: ✭ 33 (-80.59%)
Mutual labels:  privacy-enhancing-technologies, privacy-tools
BMW-Anonymization-API
This repository allows you to anonymize sensitive information in images/videos. The solution is fully compatible with the DL-based training/inference solutions that we already published/will publish for Object Detection and Semantic Segmentation.
Stars: ✭ 121 (-28.82%)
Mutual labels:  privacy-enhancing-technologies, privacy-protection
Longhorn
Windows 10 Debloater
Stars: ✭ 18 (-89.41%)
Mutual labels:  windows-10, debloat
easylist-pac-privoxy
EasyList Tracker and Adblocks to Proxy Auto Configuration (PAC) File and Privoxy Actions and Filters
Stars: ✭ 99 (-41.76%)
Mutual labels:  privacy-enhancing-technologies, privacy-tools
devops-ninja
This is a collection of some very useful command-line commands that eases the life of a DevOps Engineer.
Stars: ✭ 27 (-84.12%)
Mutual labels:  sysadmin, sysadmin-scripts
privacy-settings
Guide to privacy settings for most major softwares and services.
Stars: ✭ 97 (-42.94%)
Mutual labels:  windows-10, privacy-tools
View All Similar Projects ➔

Windows On Reins - Windows 10 Ameliorated, Bloatware removal, privacy fix and performance optimization

made-with-powershell Discord

Warning

I do not take responsibility for what may happen to your system. This is at your own risk.

Before running WOR (stand by)

After (stand by)

  • The Wifi was turned on a few moments before taking the screenshot in both cases.

What it does - Security

  • Harden the system to prevent Mimikatz credential scraping attack
  • Harden the system to prevent Airstrike domain account hash capture attack
  • Disable NetBIOS and Link-Local Multicast Name Resolution (LLMNR) protocol. Both imposes security risk for layer-4 name resolution spoofing attacks, ARP poisoning, KARMA attack and cache poisoning
  • Disable SMB Server, it's known for opening doors for mass ransomware attacks - WannaCry and NotPetya
  • Disable Anonymous enumeration of shares. Allowing anonymous logon users to list all account names and enumerate all shared resources can provide a map of potential points to attack the system (Stigviewer V-220930)
  • Disable Wi-Fi Sense, it connects you to open hotspots that are "greenlighted" through crowdsourcing. Openning doors to Lure10 MITM attack and phishing (Stigviewer V-220808)
  • Disable Remote Assistance (RA). RA may allow unauthorized parties access to the resources on the computer. (Stigviewer V-220823)
  • Disable Autoplay, "allowing autoplay to execute may introduce malicious code to a system" (Stigviewer V-63673)
  • Disable WPAD (Web Proxy Auto-Discovery Protocol), it exposes the system to MITM attack
  • Apply Google's DNS to all connections to prevent some types of MITM attacks and DNS spoofing

What it does - Performance

  • Disable the Diagnostic Policy Service. To avoid some I/O operations to the file system and reduce system load
  • Disable Windows Malicious Software Removal Tool due to high disk usage
  • Disable NTFS encryption and compression due to processing overhead on filesystem operations
  • Disable of scheduled defragmentation due to lack of parameters and waste of disk cycles
  • Disable Windows Superfetch, due to high RAM usage and is known for causing slow boot times
  • Disable Windows Hibernation, there are some evidence that if you use HDD and not a SSD disabling it may lead to lower boot times
  • Disable Winmgmt service, Windows Management Instrumentation. This service transfer unusual amount of data, keeps windows updates silent running even if user had it opt-out
  • Allow user to disable Cortana
  • Disable SmartScreen Filter, due to huge performance impact, it checks online data about running programs
  • Disable BITS - Background Intelligent Transfer Service, UsoSvc - Update Orchestrator Service, DusmSvc - Data Usage, the all showed the same behavior, its aggressive bandwidth eating will interfere with you online gameplay, work and navigation. Its aggressive disk usable will reduce your HDD or SSD lifespan
  • Disable DoSvc (Delivery Optimization), it overrides the windows updates opt-out user option, turn your pc into a p2p peer for Windows updates, mining your network performance and compromises your online gameplay, work and navigation
  • Disable wlidsvc service, due to conflicts with some games
  • Disable Fax service
  • Disable Xbox Dvr, its may cause fps problems on some games
  • Disable Windows SgrmBroker - System Guard Runtime Monitor Broker, big name and big memory usage on some systems
  • Disable Windows SystemRestore, due to performance draw and never works when you need it
  • Disable Windows ShadowCopy, due to performance draw
  • Disable Windows Fast Boot, due conflicts with Steam and several other programs
  • Disable Adobe updates
  • Disable Nvidia NGX updates, due to high network usage and lack of settings
  • Apply Google's DNS to all connections to improve name resolution timing

What it does - Quality of Life

  • Disable "Get tips and suggestion when i use Windows";
  • Disable "Offer suggestions on hou i can set up my device";
  • Disable Windows Ads within file explorer;
  • Allow users to definitively disable windows updates;
  • Allow users to definitively disable windows defender;
  • Installation of VC++ resources;
  • Allow users to clear all the bloatware that cames with Windows installation;
  • Disable Windows sound effects, and W11 startup sound;
  • Disable error reporting;
  • Enable dark mode;
  • Install Nvidia control panel, if you own a Nvidia card;
  • Dracula's dark mode for Notepad++;
  • Disable error reporting;
  • Disable Action Center ;
  • Disable People's Bar;
  • Show Computer shortcut on desktop;
  • Remove all pinned bloatware from your start menu;
  • Disable sticky keys;
  • Disable Windows from asking your feedback;
  • Disable SecurityHealthService, due to anoying and non configurable popups;
  • Disable WpnService, push notification service;
  • Disable Razer Chroma SDK Server. Its night and you have that game with Razer SDK enabled running and messing up your keys;
  • Disable Windows Licence check;
  • Put "This PC" shortcut on desktop;
  • Disable Game Bar tips;
  • Disable Vmware Host Server, service uses port 80;
  • Firefox: disable recomendations and offers;
  • Firefox: autoplay audio and video;

Fingerprinting Prevention and privacy

  • Disable Diagtrack, Windows Diagnostics Tracking, design by Microsoft to spy on users and to intefere with your programs
  • Disable autoplay and autorun
  • Disable Windows Location Tracking and Wifi Sensor
  • Disable Windows lfsvc service, Geofence service, a cute name for a location tracking service
  • Disable NvTelemetryContainer, Nvidia telemetry agent
  • Disable Windows Media Player Network Sharing Service
  • Disable files last modification date, in most cases;
  • Disable Windows unique advertise ID;
  • Disable and clear ETL and perfomance logs;
  • Clears file thumbnails and allows user to complete disable it;
  • Clears minimized windows thumbnails and allows user to complete disable it;
  • Disable recent opened files history;
  • Disable Cortana web search;
  • Disable location tracking;
  • Disable recycle bin;
  • Enable DNS-over-HTTPS (DoH), both on Windows and Firefox, it encrypts the communication between the client and the resolver to prevent the inspection of domain names by network eavesdroppers;
  • Firefox: Enable Encrypted Client Hello (ECH), to prevent TLS from leaking any data by encrypting all messages;

Gaming

  • Disable Windows mouse acceleration (ideal for FPS games);
  • Disable VBS (Virtualization-based security), may have a significant performance boost, specially in games;
  • Ensure that Hardware Accelerated Scheduling is ON, in very rare cases it may reduce latency;

Usage

  1. Run Power Shell as admin;

  2. Type the following to enable PowerShell script execution: Set-ExecutionPolicy Unrestricted -Force

  3. Confirm the question;

  4. Run the script: %path-to-file%/wor.ps1

or just right click the file wor.ps1 and select "Execute with powershell"

Notes

  • To prevent Windows to install bloatware, this script must be run before connecting to the internet for the first time;
  • Disabling Windows defender is unreversible and needs the system to be in safe mode;
  • Some NICs may show the preferred DNS encryption as "Unencrypted Only" after running the the fingerprinting prevention. Thats not true, the DNS is being handled over HTTPS (DoH) and there will be no traffic on port 53. Test using::

pktmon filter remove

pktmon filter add -p 53

start --etw -m real-time

Recommended Filterlists

Recommended Hosts filters

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].