Pages

▼
▼

Myths of IT Security

›
I recently saw Linus Neumann from the Chaos Computer Club in a video talking about IT security myths which I try to explain all time, howev...

Linux persistence techniques as a map

›
Pepe Berba has created a nice overview of linux persistence techniques as a map :  https://pberba.github.io/security/2021/11/22/linux-thre...

Git for Windows - Git uses certificate from internal PKI

›
If you initially want to git clone a repository from an internal git system from a windows system and the internal git system uses a certifi...

Azure CLI - list ip-addresses & show Azure Network Security Group & create Azure NSG rule

›
A few basic tasks in Microsoft Azure via CLI.  In order to use microsegmentation or zero-trust-networking in Azure (which I highly recommend...

IT-Security newsletter recommendations

›
 There are many newsletters, a few of them I can recommend: SANS NewsBites I'd compare it to reading international newspapers, narrowed ...

PRTG Hardening Security CSRF

›
PRTG version 22.1.74 introduces protection from Cross Site Request Forgery (CSRF) attacks to harden the products security.  In CSRF the atta...

New log4j 1.x vulnerabilities

›
Apache.org is warning about new log4j vulnerabilities: CVE-2022-23302 CVE-2022-23302 is a high severity deserialization vulnerability in JM...

iPhone iOS SMB CIFS connection

›
How to establish a SMB CIFS connection from your iOS device (iPhone or iPad), for example to your NAS storage system or some other network s...

Detect "log4shell" log4j RCE - CVE-2021-44228

›
The very critical CVE-2021-44228 can be detected by the following methods as Florian Roth has posted them on GitHub: https://gist.github.co...

Nextcloud repairing missing indexes in database

›
When your nextcloud installation is showing an error like the following, then you could use " occ db:add-missing-indices " to repa...
1 comment:

Apache Shiro Vulnerability RCE CVE-2016-4437 - not detected by Qualys and Tenable

›
Vulnerability-scanning and management is one of the most important topics in IT-security and unfortunately most companies forget or even don...

Windows VMs have issues resolving DNS names, run into network timeouts or packet loss

›
Problem Windows VMs (VMware vSphere) have issues when trying to resolve DNS names and run into network timeouts or packet loss on other pro...

Microsoft SmartScreen - Mark of the Web Zone.Identifier ReferrerUrl in NTFS Alternate DataStream

›
From where does Windows know, if a file is from a trusted or untrusted source? Microsofts Smartscreen writes the downloaded origin into the ...