how2itsec

PRTG version 22.1.74 introduces protection from Cross Site Request Forgery (CSRF) attacks to harden the products security.  In CSRF the atta...

Apache.org is warning about new log4j vulnerabilities: CVE-2022-23302 CVE-2022-23302 is a high severity deserialization vulnerability in JM...

How to establish a SMB CIFS connection from your iOS device (iPhone or iPad), for example to your NAS storage system or some other network s...

The very critical CVE-2021-44228 can be detected by the following methods as Florian Roth has posted them on GitHub: https://gist.github.co...

When your nextcloud installation is showing an error like the following, then you could use " occ db:add-missing-indices " to repa...

Vulnerability-scanning and management is one of the most important topics in IT-security and unfortunately most companies forget or even don...

Problem Windows VMs (VMware vSphere) have issues when trying to resolve DNS names and run into network timeouts or packet loss on other pro...

From where does Windows know, if a file is from a trusted or untrusted source? Microsofts Smartscreen writes the downloaded origin into the ...

If you want to check if Microsofts Windows Credential Guard CredGuard is active, you may do so by either checking msinfo32.exe or powershell...

 A quite nice explanation of ransomware as a video by Last Week Tonight with John Oliver:       Additional tipps for everyone: https://how2i...

Discover the used SSHv2 algorithms/cipher suite using nmap or zenmap can be done using the follwing nse-script and steps: URL: https://nmap....

  @wdormann posted a very useful flowchart regarding Windows CVE-2021-34527 PrintNightmare: https://www.kb.cert.org/vuls/id/383432 Further...

gpupdate vs gpupdate /force   Microsoft Windows Group Policy refresh can be manually using the command "gpupdate". There is a ...

Netflix released an article about how they use eBPF in order to track and analyze network application traffic without having issues with res...

If your apache2 on linux system (in this case ubuntu 20) does not start due to "'dhparam.pem' does not exist or is empty" ...

Ryan Kovar and Steve Brant from Splunk released on Splunk .conf 2016 a bunch of useful PowerShell SIEM use cases: https://conf.splunk.com/f...

In order to verify your cloudflare API token, simply use the following command:  curl -X GET "https://api.cloudflare.com/client/v4/user...

I just found some nice Microsoft 365 licnese maps, which might be useful comparing serives, for example of Microsoft 365 Enterprise E3 vs E5...

List all your Azure Key Vaults Azure:~$ Azure:~$ az keyvault list --query [0].name "my-keyvault-93456" Azure:~$ Azure:~$ az ...