Collaborate Disseminate
The free and open source network forensics tool NetworkMiner now comes with improved extraction of files and metadata from several protocols as well as a few GUI updates. But the biggest improvements for version 2.3 are in the commercial tool NetworkMi… Continue reading NetworkMiner 2.3 Released!
I’d like to know what kind of risks are are arising from the following kind of connection and how to combat them:
For testing purposes I’d need to connect via SNMP from a dedicated test VLAN(multiple testing devices with com… Continue reading Risk to consider when using SNMP
I’d like to know what kind of risks are are arising from the following kind of connection and how to combat them:
For testing purposes I’d need to connect via SNMP from a dedicated test VLAN(multiple testing devices with com… Continue reading Risk to consider when using SNMP
Cisco patched nine publicly disclosed remote code execution vulnerabilities in the SNMP subsystem running in its IOS and IOS XE software. Continue reading Cisco Patches Publicly Disclosed SNMP Vulnerabilities in IOS, IOS XE
I’m trying to find a resource that lists default SNMP mib values and object identifiers for various vendors / operating systems to use with snmpwalk. I have a list of MIB tree values for Microsoft Windows SNMP but can’t find … Continue reading List of default SNMP MIB tree values / OIDs? [closed]
We are looking for SNMP agent software for linux, which supports TSM (TLS/DTLS).
Our private keys are stored to HSM (behind pkcs#11 interface). And we want to use those keys.
Clear choice for Linux would be net-snmp. It supp… Continue reading SNMP agents and Transport Security Model (TSM) with HSM support. [on hold]
The vulnerability scan found SNMP community names on one of the Windows servers. We don’t use SNMP – therefore, I removed the Windows features “SNMP Service Service” and the “SNMP WMI Provider” which required a reboot. Anothe… Continue reading Vulnerability scan finds SNMP community names but can’t find them
I published the following diary on isc.sans.org: “SNMP Pwn3ge“. Sometimes getting access to company assets is very complicated. Sometimes it is much easier (read: too easy) than expected. If one of the goals of a pentester is to get juicy information about the target, preventing the IT infrastructure to run
[The post [SANS ISC Diary] SNMP Pwn3ge has been first published on /dev/random]
Researchers at Silent Signal have ported the ShadowBrokers’ Equation Group exploit for Cisco ASA firewalls to newer versions of the product. Continue reading Leaked ShadowBrokers Attack Upgraded to Target Current Versions of Cisco ASA
Industrial control system operators running Rockwell MicroLogix 1400 PLCs have been warned about a vulnerability that exposes these devices in critical industries to attack. Continue reading Undocumented SNMP String Exposes Rockwell PLCs to Remote Attacks