Pages

▼
▼
Showing posts with label Hardening. Show all posts
Showing posts with label Hardening. Show all posts

Monitor UniFi WLAN Access Point with PRTG with SNMPv3 Auth+Encrypted

›
This is a tiny guide howto monitor your UniFi wireless accesspoint, in this case a Unifi U7 pro with SNMPv3 with AES-Encryption and SHA-Auth...

Almost perfect protection for websites and other services - Mutual TLS

›
Its hard to secure your IT services and applications. The list of possible attacks is long, as shown in the Mitre Att&ck framework , the...

FortiGate admin interface authentication bypass

›
There are rumors about a vulnerability in Fortinets FortiGate firewalls where you may bypass authentication on their admin interfaces. Affec...

Citrix ICA SSO saved credentials in XOR obfuscated readable storage

›
The Citrix ICA application stores user credentials for its SingleSignOn SSO functionality in readable form using XOR obfuscation with the ke...

Quick win securing Azure AD

›
An easy quick win for securing Azure Active Directory passwords is the feature " Azure AD Password Protection ". This helps you in...

Myths of IT Security

›
I recently saw Linus Neumann from the Chaos Computer Club in a video talking about IT security myths which I try to explain all time, howev...

Windows Credential Guard CredGuard active?

›
If you want to check if Microsofts Windows Credential Guard CredGuard is active, you may do so by either checking msinfo32.exe or powershell...

Browser Client-Side Storage Partitioning - Total Cookie Protection

›
A step to increase it-security is segmenting client-side (cookie) storage: https://github.com/privacycg/storage-partitioning " User a...

API security - How to start securing APIs

›
APIs are great, they are everywhere and they grow. When thinking about API security very often very basic security mechanisms are missing. T...

haveibeenpwned.com Cit0day pwned readmore.de and many others

›
This summary is not available. Please click here to view the post.

Forget the phrase "password" - it should be pass-sentence

›
It is unfortunate that the word "password" has the word "word" in it. That leads to people almost always use one word, a...

List FortiGate Certificates via CLI - CA certificates and local Certificates

›
You can either use the GUI of the FortiGate to list all certificates, or use the CLI. Either using the commands: Using the "get...

Small/Medium Businesses - New network devices (switches, routers,..) - Minimum ToDo list

›
Most small/medium businesses don't do much configuration, monitoring, cfg-baselineing or follow best practises with their network device...

Solution for Skybox connection issue to Fortinet FortiGate or FortiManager

›
If you are using the Skybox ( https://www.skyboxsecurity.com/ ) solution for your environment, during the initial setup there might be an is...

Hardening FortiGate connection to FortiAnalyzer

›
The FortiGate uses OFTP (Fortinets proprietary Optimized Fabric Transfer Protocol, not Odette File Transfer Protocol ) to transfer data betw...