Tag: Security
All the articles with the tag "Security".
Setting the Killbit for an ActiveX Control
Updated:Adding a killbit for a control that Nessus says requires one. https://support.microsoft.com/en-gb/help/240797/how-to-stop-an-activex-control-from-running-i
Kali and OpenVAS
Updated:In house we use Nessus to scan for vulnerabilities, but that's a commercial subscription based product. It's not expensive, but it's not something I want t
Hardening Windows
Updated:When it comes to Microsoft Windows straight out of the box it's full of security weaknesses. These are a number of ways to harden it so that your vulnerabi
SSL/TLS as a Server Admin
Updated:I don't trust you just because we can encrypt data together. I need to trust you based on a 3rd party we both trust telling me that you are who you say you are.
Diving Deeper into Windows SSL
This response to a question raised some interest and I found it very interesting. I then went to investigate the keys and values on my own machine. This ca
TLS and NPS
Updated:Looks like NPS only supports TLS1.0 by default. So if you go restricting your ciphers too much you'll find none of your NPS clients able to connect using E
SSH Weak MAC Algorithms Enabled
Updated:OpenSSH_6.0p1 Edit /etc/ssh/sshd_config add or amend the following: Ciphers aes128-ctr,aes192-ctr,aes256-ctr MACs hmac-sha1,hmac-ripemd160
Nessus Certificates
In order to get your Nessus server to pass a vulnerability scan you'll need to replace the original self-signed cert it uses for its web server. It's easy
Strong Ciphers
Updated:Strong Ciphers for Apache, nginx and Lighttpd https://cipherli.st/ Mozilla SSL Configuration Generator https://mozilla.github.io/server-side-tls/ssl-config
Kali Linux
For penetration testing https://www.kali.org/