Palo Alto Destination “U-TURN” NAT
Last week I was asked to configure access to a web app that sits within an isolated…
Security
IP Address intelligence from Linux CLI
Using the Linux CLI for open source intelligence gathering can be pretty powerful. Let me show you…
How to run the BlueKeep RCE with Metasploit on Kali Linux
First off this post is for educational purposes. I used a controlled lab environment to test the…
Using Python Paramiko to automate commands on Palo Alto PAN OS
So Palo Alto TAC recently confirmed to me that PAN OS 9.0.3 has a bug wherein the…
Setting up AD Auth with Hashicorp Vault
Hashicorp Vault is open source and can be used in DevOps processes for secure automated retrieval of…
Palo Alto Networks Powershell Backup Script
As we recently rolled out a bunch of PA firewalls, I have created a powershell script to…
ELK Stack with Palo Alto Firewall – Using Curator to clear indexes
I recently deployed an ELK stack (Elasticsearch, Logstash, Kibana) VM as logger for a Palo Alto Networks…
Request a SAN certificate using MS CA Web enrollment Pages
1. Run these commands on the MS CA server: certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 net stop certsvc net…
Multiple vulnerabilities in D-Link Routers
Released on Friday 12/10/18: Multiple vulnerabilities in D-Link routers Directory Traversal in httpd server in several series…
Using the Palo Alto API for Captive Portal Logout
It’s API time! Haven’t had a post in a while but in wanted to share this: This…