They said this doesn't work 🤣 Hacking networks with VLAN hopping and Python

OSINT: You can't hide // Your privacy is dead // Best resources to get s...

Tech Tip Fortigate

 If you are like me the industry standard has turned to MFA (Multi Factor Authentication) for Administrative Accounts or connecting via VPN. 

I like and use Fortinet and the FortiGate's NGFW Systems. I was having issues with using LDAP accounts being able to bypass vpn connections with just the standard Windows Account. To be honest it would allow them to connect without a token never even prompting them for the token. 

You have to turn set username-sensitivity disable under the users profile in the CLI. 

Here is an example. 

Hope this helps some admins it was kind of a head scratcher for me. 

How to detect Password Spray attack in Active Directory

OSINT Framework & Passive Recon

Intercepting mobile traffic | Burp Suite Tutorial | Hakin9 Magazine

Python Cheat Sheet

 

https://hakin9.org/python-cheat-sheet-for-hackers-and-developers/?fbclid=IwAR2mvGvdTN0RIu4wvgff_oI0gHgw-rzbQBZC3XON6BARh4dMNAikh4r4-Z8

Microsoft warns Exchange Online basic auth will be disabled

 Microsoft warned customers today that it will start disabling Basic Authentication in random tenants worldwide on October 1, 2022.

This reminder comes after the company's September announcement and after seeing that there are still lots of customers who haven't yet moved their clients and apps to Modern Authentication.

Full Story @ https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-exchange-online-basic-auth-will-be-disabled/?fbclid=IwAR3ujn2Ao-RzIaD27spzlU4fjVqUyv83nPAqPnrMTgPsrGo6VsjH92JesDs