by Austin Ralls | Jun 30, 2021 | CarveFacts, News
When performing internal tests on a company’s network, one of the top priorities is compromising Windows workstations and servers. This is made much easier when local administrator accounts have the same password on multiple machines. Sharing local account...
by Ángel Suárez-Bárcena Martín | Apr 19, 2021 | CarveFacts, Featured, News, Uncategorized
Some organizations may believe that they are enforcing a second authorization factor when using Microsoft Single-Sign On on Azure Active Directory, but their configuration might have an easy way to bypass it. When configuring Conditional Access policies to enforce...
by Brad Dixon | Apr 6, 2021 | CarveFacts, Featured, News
You can view decrypted TLS connections in Wireshark by creating a key log file using mitmproxy: Set an environment variable to point to the desired location to record the TLS encryption keys: export SSLKEYLOGFILE=$PWD/keylogfile.txt.Then start mitmproxy and proxy your...
by Austin Ralls | Jan 27, 2021 | CarveFacts, Cloud, News
Is your website hosted behind a CDN? Could an attacker brute force or guess your website’s origin URL? Are your origin servers hardened against DDoS threats? A common website configuration consists of hosting your applications with infrastructure...
