The ramblings of a computer geek
If you want to check the (MD5/SHA) hash of a file you can do this on Microsoft Windows with “Get-FileHash” within PowerShell. Here is a simple script to take a File, the Hash Algorithm Type and Expected Hash for the file to compare, it hashes the file and then compares it with the expected hash […]
More...If you need to perform a packet capture you can use the following below to get this exported to a PCAP file you can then open in WireShark. You can then TFTP off the file with the following: I normally use TFTP32/64 on the machine to which i’m TFTPing, but this has had problems recently. […]
More...A long running issue, which I covered in my previous posts: https://geekmungus.co.uk/?p=3532 and https://geekmungus.co.uk/?p=3593, this should be taken as the current status of the problem and the resolution. Issue Following the patch: KB5021131 CVE-2022-37966, which was released November 8th 2022 we’ve continued to have some issues with Kerberos authentication to servers (devices) that use (and […]
More...Microsoft Exchange provides the capability to allow publishing of user calendars to the Internet, this is different from calendar sharing (which is typically internal, i.e. within our organisation). These instructions explain how to enable publishing by policy and how to apply it your own user mailbox. Calendar Publishing Policy Configuration on Microsoft Exchange These steps […]
More...NOTE: See https://geekmungus.co.uk/?p=3619 for the most up to date article! The following is my analysis going going deeper into my recent article: https://geekmungus.co.uk/?p=3532, hopefully this will give you a bit more context and information, but also allowed me to work through the issue in my head through documentation. Synopsis The patch KB5019964 changes what the […]
More...If you are seeing this issue, you can resolve the problem by downloading and replacing the Windows driver with this one using Device Manager. In my case this was trying to use a USB to Serial (RS232) adapter which just wasn’t working. https://github.com/brucetsao/Drivers/raw/master/FAKE_PL2303/IO-Cable_PL-2303_Drivers-Generic_Windows_PL2303_Prolific.zip Connectix.nl provide a more detailed overview of the solution here.
More...Within the Microsoft Exchange configuration you’ll see that there is an InternalURL and ExternalURL attribute for each of the key Microsoft Exchange Web Services, e.g. OWA, ECP, ActiveSync etc. Personally i’ve never really used these when they are different, but what it allows is for your internal and external URLs to access the services to […]
More...
A big topic at the moment in Information Security is multi-factor authentication(MFA), also known as two factor authentication (2FA). So the first question, what is a “factor”? Put simply a “factor” is element that a principal (i.e. a person trying to logon to a system) can use to prove to the system they are the […]
More...During some upcoming changes I needed to test a mobile application to use a test IP address for a standard hostname. Problem is, I didn’t want to root my Android phone to be able edit the hosts file. There are apps such as “Hosts Go”, but in my case these didn’t work. On a normal […]
More...
The Kemp WAF is based on the OWASP ModSecurity Core Rule Set (CRS), it is a set of firewall rules that are loaded that provide generic signatures for common attack types (e.g. SQL Injection, XSS and so on), it uses string matching, regex techniques to look for and block attacks in a general way. What […]
More...