Pages

▼
▼

Windows Persistence Scheduled Tasks Obfuscation

›
In the great article „Securonix Threat Labs Security Advisory: Detecting STEEP#MAVERICK“ D. Iuzvyk, T. Peck, O. Kolesnikov reverse engineer ...

Paessler PRTG fixes OpenSSL vulnerability CVE-2022-1292

›
Paesslers PRTG version 22.3.79 will update its internal OpenSSL libraries to 1.0.2ze in order to address and fix CVE-2022-1292 . CVE-2022-...

Citrix ICA SSO saved credentials in XOR obfuscated readable storage

›
The Citrix ICA application stores user credentials for its SingleSignOn SSO functionality in readable form using XOR obfuscation with the ke...

Quick win securing Azure AD

›
An easy quick win for securing Azure Active Directory passwords is the feature " Azure AD Password Protection ". This helps you in...

Decrypt TLS sessions of Chrome & Firefox

›
How to decrypt TLS Sessions of browsers like Chrome and Firefox without Man-in-the-Middle MitM/Adversary-in-the-Middle AitM ( Att&ck T15...

Nextcloud Security & setup warning php-imagick svg support

›
 When running nextcloud, in the administration overview you might find the error: " Module php-imagick in this instance has no SVG supp...

Myths of IT Security

›
I recently saw Linus Neumann from the Chaos Computer Club in a video talking about IT security myths which I try to explain all time, howev...

Linux persistence techniques as a map

›
Pepe Berba has created a nice overview of linux persistence techniques as a map :  https://pberba.github.io/security/2021/11/22/linux-thre...

Git for Windows - Git uses certificate from internal PKI

›
If you initially want to git clone a repository from an internal git system from a windows system and the internal git system uses a certifi...

Azure CLI - list ip-addresses & show Azure Network Security Group & create Azure NSG rule

›
A few basic tasks in Microsoft Azure via CLI.  In order to use microsegmentation or zero-trust-networking in Azure (which I highly recommend...

IT-Security newsletter recommendations

›
 There are many newsletters, a few of them I can recommend: SANS NewsBites I'd compare it to reading international newspapers, narrowed ...

PRTG Hardening Security CSRF

›
PRTG version 22.1.74 introduces protection from Cross Site Request Forgery (CSRF) attacks to harden the products security.  In CSRF the atta...

New log4j 1.x vulnerabilities

›
Apache.org is warning about new log4j vulnerabilities: CVE-2022-23302 CVE-2022-23302 is a high severity deserialization vulnerability in JM...

iPhone iOS SMB CIFS connection

›
How to establish a SMB CIFS connection from your iOS device (iPhone or iPad), for example to your NAS storage system or some other network s...

Detect "log4shell" log4j RCE - CVE-2021-44228

›
The very critical CVE-2021-44228 can be detected by the following methods as Florian Roth has posted them on GitHub: https://gist.github.co...

Nextcloud repairing missing indexes in database

›
When your nextcloud installation is showing an error like the following, then you could use " occ db:add-missing-indices " to repa...
1 comment:

Apache Shiro Vulnerability RCE CVE-2016-4437 - not detected by Qualys and Tenable

›
Vulnerability-scanning and management is one of the most important topics in IT-security and unfortunately most companies forget or even don...