Security

Use SpamHaus threat feeds with Fortigate

29th June 2021

SpamHaus is a well known service that keeps a curated downloadable list of Internet offenders. to see a link to the list https://www.spamhaus.org/drop/ You can see the DROP list and…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

SMB Security Maturity Levels

23rd June 2021

Level 1: Free / easy / 1 hour fixes-Block China, Russia, Ukraine on your firewall and email-Turn on email banner for external emails-make sure PCs are running a version of…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

A case for port security

12th June 2021

Port security watches for multiple MAC addresses on a port and if it detects >1 it disables the port. Pros:+If a user tries running responder, the port gets disabled+If a…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

Privilege Escalation on modern versions of Linux

11th June 2021

Ubuntu 18+ and a number of other modern distros using Polkit have a vuln that allows privilege escalation to root.a video by the bug’s discoverer shows it’s not that hard…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

Article: 10 Browser Extensions for Security Researchers

21st May 2021

10 Browser Extensions for Security Researchers https://flip.it/p13JP6

๐Ÿ“Œ
0๐Ÿ’ฌ read more

HoneyDocs

17th May 2021

a HoneyPot is a server or IP address that logs traffic that attempts to logon to it. It is generally deployed on a private network and it’s visibility is limited…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

How to Pentest

15th April 2021

Prep: I like to break a pentest into a few categories: Intruder Scope: who is able to do this attack? Entire Internet (worst) / Local Area (think Wifi) / Targeted…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

HoneyPot

22nd March 2021

Recently installed tPotCe honeypot from .ISO onto a VmWare virtual machine. Super nice dashboard. This is a quick win to install on an INTERNAL network and listen for nosey malware….

๐Ÿ“Œ
0๐Ÿ’ฌ read more

Windows GeoFiltering the cheap and hacky way

16th March 2021

I started from this post and moved the file downloads into powershell remrem http://www.gregsitservices.com/ip-security/ip-security-package.zip wget “https://www.ipdeny.com/ipblocks/data/aggregated/cn-aggregated.zone” -outfile “cn-aggregated.zone”wget “https://www.ipdeny.com/ipblocks/data/aggregated/ru-aggregated.zone” -outfile “ru-aggregated.zone”wget “https://www.ipdeny.com/ipblocks/data/aggregated/ir-aggregated.zone” -outfile “ir-aggregated.zone”wget “https://www.ipdeny.com/ipblocks/data/aggregated/kp-aggregated.zone” -outfile “kp-aggregated.zone”wget “https://www.ipdeny.com/ipblocks/data/aggregated/kr-aggregated.zone” -outfile “kr-aggregated.zone”…

๐Ÿ“Œ
0๐Ÿ’ฌ read more

Add Report-Phishing button to Outlook

12th March 2021

For your entire Organization… or just a group to start with Logon to the Office365 admin center, Settings, Integrated Apps, Add-ins Deploy Add-In Office Web add-in Choose from the Store…

๐Ÿ“Œ
0๐Ÿ’ฌ read more