Configuring Duo Two Factor Authentication with Palo Alto GlobalProtect
During the COVID-19 lockdown I was asked to setup a VPN and secure it with two factor…
Security
SMBGhost CVE-2020-0796 Remote Command Execution Demo
Back in March Microsoft released a patch for KB4551762 / CVE-2020-0796, dubbed ‘SMBGhost’ the vulnerability affects Windows…
Palo Alto Destination “U-TURN” NAT
Last week I was asked to configure access to a web app that sits within an isolated…
IP Address intelligence from Linux CLI
Using the Linux CLI for open source intelligence gathering can be pretty powerful. Let me show you…
How to run the BlueKeep RCE with Metasploit on Kali Linux
First off this post is for educational purposes. I used a controlled lab environment to test the…
Using Python Paramiko to automate commands on Palo Alto PAN OS
So Palo Alto TAC recently confirmed to me that PAN OS 9.0.3 has a bug wherein the…
Setting up AD Auth with Hashicorp Vault
Hashicorp Vault is open source and can be used in DevOps processes for secure automated retrieval of…
Palo Alto Networks Powershell Backup Script
As we recently rolled out a bunch of PA firewalls, I have created a powershell script to…
ELK Stack with Palo Alto Firewall – Using Curator to clear indexes
I recently deployed an ELK stack (Elasticsearch, Logstash, Kibana) VM as logger for a Palo Alto Networks…
Request a SAN certificate using MS CA Web enrollment Pages
1. Run these commands on the MS CA server: certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 net stop certsvc net…