Tools Selfhost Bitwarden Password manager on Debian Linux using Cloudflare Tunnels Password managers are a necessity in today's world. With passwords being breached every day, the requirements to stay secure are constantly increasing. The concern comes from what cloud provider is hosting your passwords/secrets and if they are protecting it correctly (Cough cough...). This guide is to steer
Research Microsoft 365 Phishing Token Theft Attack Identity Provider (IdP) token theft is a growing tactic in todays phishing attacks. Token theft can happen in many ways but a common real world method is token theft through a phishing email/site. Here I will map out the attack chain that I've seen and become familiar
Vulnerability CVE-2011-3389: BEAST Attack SSL/TLS Vulnerability - Disabling SSL/TLS 1.0/TLS 1.1 Introduction SSL(Secure Sockets Layer)/TLS(Transport Layer Security) are cryptographic protocols designed to provide a secure connection over a network. SSL is technically deprecated as it is unsecure, but the term is still commonly used to refer to TLS. This protocol is widely used to secure web browsing, emails,
Tools changedetection.io: Webpage Monitoring for Patch Management Part of my job is monitoring updates for many systems that are released monthly. For the most part, patch Tuesday keeps these updates on a pretty consistent schedule. The concerning updates are the out-of-band updates that are released at anytime, on a as-needed basis, usually to patch
Vulnerability NetBIOS Vulnerability: Mitigating risks by disabling service NetBIOS(Network Basic Input/Output System) is an old service that allows computers to communicate with each other over a LAN and to identify Windows systems names in TCP/IP. Originating in 1980s, NetBIOS ran over IEEE 802.2 and IPX using NetBIOS Frames (NBF) and NetBIOS over IPX/SPX
Vulnerability CVE-2013-3900: Authenticode Signature Verification - Certificate Padding Description Microsoft republished a security vulnerability Jan 21, 2022 to re-address an issue that allows remote attackers to execute arbitrary code in the context of the current user by exploiting the WinVerifyTrust function of Windows Server and Windows 10/11. If the user is logged in with administrator creds,
