Collaborate Disseminate
I’m trying setup some local software with valid Lets Encrypt certificates. Currently, on my Windows DNS server, I setup a Primary zone called some.domain.com and within it, an A record that points to my local server’s IP.
It works!
However… Continue reading DNS zone for local ssl support [migrated]
CVE-2021-1675, a Windows Print Spooler vulnerability that Microsoft patched in June 2021, presents a much greater danger than initially thought: researchers have proved that it can be exploited to achieve remote code execution and – what’s … Continue reading PoC for critical Windows Print Spooler flaw leaked (CVE-2021-1675)
I am following the following walk-through for a box called Sheild on Hack the Box (HTB).
https://www.aldeid.com/wiki/HackTheBox-StartingPoint-Shield
For privilege escalation, the walkthrough says "Running the sysinfo command on the me… Continue reading Methodology to find exploit for Windows Servers
I’ve recently attempted to set up a certificate authority on my small server environment (Windows server 2019). When attempting to connect to the server from my laptop using remote desktop, I get an inconsistent error depending on which ap… Continue reading "Certificate Revocation Unknown" strange error from Remote Desktop – Windows server 2019 CA [closed]
There’s an event referred to as spring cleaning, where we take some time from our regular routines to focus on bringing order back to our homes. We remove the junk that has accumulated, and clean and organize the remaining items so they look good again… Continue reading May 2021 Patch Tuesday forecast: Spring cleaning is in order
I am taking over an AD role and one of the tasks I want to accomplish is to "clean up" active directory… remove stale accounts, empty groups, ensure groups have the right users in them.
The domain has a few thousand users.
What… Continue reading Active Directory / Domain spring cleaning best practices [migrated]
A strange case occurred recently on our Windows Server 2019.
It runs some Hyper-V VMs,
Apache+PHP7 via mod_fcgid (as a service logged in as a restricted user www),
Nginx (as a service logged in as a restricted user www-front),
A nodejs ser… Continue reading Windows Server 2019 hacking case [closed]
A strange case occurred recently on our Windows Server 2019.
It runs some Hyper-V VMs,
Apache+PHP7 via mod_fcgid (as a service logged in as a restricted user www),
Nginx (as a service logged in as a restricted user www-front),
A nodejs ser… Continue reading Windows Server 2019 hacking case [closed]
Guardicore announced new capabilities that extends microsegmentation and zero trust security to the industry broadest catalog of legacy servers, applications, and operating systems (OS). Customers using Guardicore Centra to protect their hybrid data ce… Continue reading Guardicore extends microsegmentation and zero trust security to protect legacy infrastructure and IT
Have the same certificates installed on several machines, but this happens on only one of them.
The certificates are self-signed certificates.
The certificates are used for WCF message security.
Installing the certificates with the followi… Continue reading Windows X.509 certificate private keys lost