Road to CISSP – Certified Information Systems Security Professional

IT Security continues to be a very important topic in the IT ecosystem, ensuring your Information Security is as good as it can be also makes good business sense, through the reduction of risk of loss and showing commitment to your customers of your organisation’s quality and capability. Information Security doesn’t just come from technical … Read more

HPE DL360 Gen10Plus BIOS Admin Password

I’ve recently had a problem on some new servers where a BIOS Admin Password had been set by accident, HPE provide this as a solution on their forums: https://community.hpe.com/t5/proliant-servers-ml-dl-sl/how-do-i-disable-the-bios-admin-password-on-a-gen10-dl360/m-p/7166755#M178013 However the Gen10Plus (+) servers appear to be a bit different, upon entering the forward slash “/” on the end of the password to remove it, … Read more

VMware Datastore Showing “Not Consumed”

I had a host that was showing devices with no datastore, saying “Not Consumed”. This is what you’d expect to see for a device where the device has yet to be formatted with VMFS. Now in this case it definitely had a VMFS filesystem created. The fix for this was fairly simple. Essentially the host … Read more

Cheeky PowerShell Hash Script

If you want to check the (MD5/SHA) hash of a file you can do this on Microsoft Windows with “Get-FileHash” within PowerShell. Here is a simple script to take a File, the Hash Algorithm Type and Expected Hash for the file to compare, it hashes the file and then compares it with the expected hash … Read more

Continuing Analysis and Resolution of NetApp and RC4 Issues Caused by (KB5019964) For CVE-2022-37967 and KB5021131 CVE-2022-37966

A long running issue, which I covered in my previous posts: https://geekmungus.co.uk/?p=3532 and https://geekmungus.co.uk/?p=3593, this should be taken as the current status of the problem and the resolution. Issue Following the patch: KB5021131 CVE-2022-37966, which was released November 8th 2022 we’ve continued to have some issues with Kerberos authentication to servers (devices) that use (and … Read more