Security – Page 2 – shell{&}co

Deploy Petya vaccination files on AD domain members

I have written the following script to deploy Petya vaccination files on all Active Directory domain members. These files are simple text file deployed on the destination system folder C:\Windows. This technic has been discovered by Amit Serper and it

Automatically install and renew Let’s Encrypt certificates

Automatically install and renew Let’s Encrypt certificates The Electronic Frontier Foundation is the leading nonprofit organization defending civil liberties in the digital world. Founded in 1990, EFF champions user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots

Configure OCSP Stappling

What is OCSP OCSP is a protocol to check the revocation status of a certificate. This check is performed on the CA Implementation example found in this Wikipedia article: Alice and Bob have public key certificates issued by Ivan, the

Online SSL configuration checker

I have found a website to check my web server SSL configuration: SSL checker from High-Tech Bridge In the past, I was using the free tool provided by Qualys It seems to me the tool from by High-Tech Bridge gives

Configure HKPK on Apache

What is HKPK The Wikipedia explanation is the following: HTTP Public Key Pinning (HPKP),[1] sometimes incorrectly known as certificate pinning, is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. For

Restrict a group’s rights to a specific command with sudo

Wikipedia sudo is a program for Unix-like computer operating systems that allows users to run programs with the security privileges of another user, by default the superuser. It originally stood for “superuser do” as the older versions of sudo were

Generate a random password with custom character sets

With this script you will be able to generate a random password with custom character sets : define a set for the lower case characters : variable $chars_low define a set for the upper case characters : variable $chars_upp define

Local Administrator Password Solution with Powershell

The “Local Administrator Password Solution” (LAPS) provides a centralized storage of secrets/passwords in Active Directory (AD) – without additional computers. Each organization’s domain administrators determine which users, such as helpdesk admins, are authorized to read the passwords. Source Boe Prox

Reset a lost local administrator password

There are different ways to reset a lost local administrator password on a Windows system. Boot disk If you have a physical access to the machine, you can use a very useful boot disk and follow these steps: At the

Active Directory Password complexity checker

If you have enabled the password complexity in your Active Directory domain through GPO, you probably have received complaints from the users : “I cannot find a password. Every time I try to enter a new password, a message indicates