Significant vulnerabilities were demonstrated as this year conference bringing in over $1.6million dollars in bug bounties! Within 90 Days we should see several patches released for the following:...
PWN2OWN – Recap
How to enforce Windows 10 to stay on a specific release and not upgrade automatically.
Here is a quick tip on how to keep your Windows 10 machine on a specific release or feature update version even when connected to Windows Update. Prerequsites Must be on 1803 and newer (make sure on...
Will the CISSP Certificate Increase my Salary?
I took my CISSP in 2016. It was nerve-wracking for me because I’m not particularly eager to sit down for exams. I learned about the CISSP certification and how hard it was to get when I was...
Automatically install SQL Server Report Server Plugin for Internet Explorer via Group Policy
When deploying a new SSRS instance that is running SQL Server SSRS 2014 and lower you need to make sure that the users of the SSRS Server are able to install and run reports. Contrary to what many...
My Personal rants on the Qualys Cloud.
I had no intention to write this but after 2 years of of using the platform and no real improvements I figured I would express my thoughts. Some of these issues are perplexing. Qualys generally has...
Programmatically Run CMD as an elevated administrator
Here is the code in order to elevate a CMD window as an Administrator by using powershell. Open up PowerShell and run the following Start-Process cmd -Verb runAs If you see the...
Handy Qualys Queries
Machines Require Reboot due to pending update and online 8 hours vulnerabilities.vulnerability.qid:90126 AND lastFullScan>now-8h Machines without reboot in 30 days system.lastBoot<now-30d AND...
Install VMware ESXi 7 on a R710 with an Intel 55xx CPU
Follow along to install ESXi 7 on a R710. I tried running this same procedure with ESXi 6.7 media but it did not work. Something changed in ESXi 7.x which allows the install to complete when setting...
Critical Updates – 2020 July
Microsoft — CVE-2020-1350 This update resolves a flaw in all versions of Windows DNS Servers that would allow an attacker to gain Local System or Domain Admin privileges. This is also a...
Critical Updates – 2020 February
Microsoft — CVE-2020-0688 tl;dr – Send or receive email and get RCE on Exchange Servers… yikes. All Exchange Servers installations in the world share a crypto-key.This update...