Not everyone is vulnerable to the potential attack vector that researchers from INRIA, a French research institute, and Microsoft disclosed recently. In order to be vulnerable, the computer or server must support a class of deliberately weak export cipher suites. Support for these weak algorithms has remained in many …

Read More

This article explains how to create a bootable USB stick with Linux that can be used to boot UEFI-systems.

Read More

If you are building a secure computer, then the best approach is to never connect it to the internet. If the operating system on this computer is Windows, then you will have to activate it before you will be able to use it. This article explains how you can activate it by phone.
Windows can’t be activated right now …

Read More

Researchers from the Google Security Team have published findings about a vulnerability in SSL 3.0. CVE-­2014­-3566 has been allocated for this protocol vulnerability. It is possible to use nmap to scan for the presence of this vulnerability by doing a scan on the supported SSL/TLS protocols. This post shows how to scan for the POODLE weakness using nmap.

Read More

You may have heard of “Heartbleed”, a flaw in OpenSSL that could allow the theft of data normally protected by SSL/TLS encryption. It is possible to scan for the presence of this vulnerability using different methods. This page explains how you can scan for it from a Windows machine using nmap. Added April 15th, 2014: …

Read More

Some tips for doing things in vbscript. Convert a relative path to an absolute path strDirName = objFSO.GetAbsolutePathName(strDirName) Type-cast a String to an Integer intNumber = CInt(strNumber) Regular expressions in VBScript Set objIPAddressRegEx= new RegExp ‘Create a RegExp object objIPAddressRegEx.Pattern = …

Read More

How to enable the Windows Firewall, even though Domain Policies are prohibiting you from enabling it… Consider the following scenario: you have a Windows XP laptop which is connected to a Windows Domain. In order to avoid having connectivity issues, the Domain Admins decided that it would be best to fully disable the …

Read More

How to use SubInAcl.exe? SubInAcl version 5.2.3790.1180 USAGE —– Usage : SubInAcl [/option…] /object_type object_name [[/action[=parameter]…] /options : /outputlog=FileName /errorlog=FileName /noverbose /verbose (default) /notestmode (default) /testmode /alternatesamserver=SamServer /offlinesam=FileName …

Read More

This webpage contains a series of examples of how xcacls.vbs can be used. Overview Xcacls.vbs is an augmented version of the Extended Change Access Control List tool (Xcacls.exe) that ships in the Windows 2000 and Windows Server 2003 Support Tools. Xcacls.vbs is an unsupported utility that addresses specific …

Read More

In some companies, you can find that access to the C-drive of a Windows computer has been blocked. How do they do this? You can easily do this by creating an entry in your domain policy. The path to the policy is User Configuration\Administrative Templates\Windows Components\Windows Explorer In that location, two …

Read More