Category: Security
-
Access The Virustotal API Via Ansible
I’ve been doing more security related automation lately(finding it really interesting). Part of a lot of folks process is to get an alert, then do some investigation enrichment. One of the resources people use is a great site called virustotal.com. It allows you to put in a URL or upload a file, and it will…
-
Cyberark Vault Integration With Ansible Tower
Cyberark has some impressive security tools, and in today’s example I’m using their Vault product. We are connecting in through their AIM(Application Identity Manager) system. Like other secrets engines, AIM allows me to pull secure credentials from it at run time. Also, I’d like to give a big shoutout to the team at CyberArk for…
-
Setup Hashicorp Vault Quickly For Your Lab
I recently had the need to use Hashicorp Vault with Ansible to store passwords-n-such, and I thought “Oh I’m sure this is simple.” Several hours later I realized “It’s not so simple.” I’ve put this together to be used in a LAB environment. The install method is good for production, but my configuration certainly is…
-
TheBrothersWISP – Ubiquiti Exploit – Security Best Practices
Mike, Greg, Miller, and Tomas talk about the recent Ubiquiti exploit(stuff happens, right), and some best practices for securing your network. Mike gives some indepth details on what happened, and we talk about ways to mitigate. To see the video please visit the link below!!!
-
Ubiquiti HTTP HTTPS Exploit
As I’m sure all of you are aware(we get it Mike), UBNT has a major exploit in older versions of firmware. These allow an attacker to exploit an UBNT device via HTTP/HTTPS without the need for login credentials. I believe it currently either resets the device to default or “locks it up.” Below is a…
-
Secondary IP On Cisco ASA
While decommissioning some old routers, I need to transfer an IP address to an ASA on a subnet. Unfortunately the ASA’s don’t allow you to do this. The standard “ip address X.X.X.X Y.Y.Y.Y secondary” doesn’t work. I did a quick google and this beautiful bastard had the solution, static ARP with proxy-arp. Figure out what…
-
Mikrotik Border Router Firewall Script
Here’s an older version of my firewall script that I’m making public. This is compiled from some wiki/forum/personal experience. It blocks spoofed traffic inbound, has some portknock rules included, SMTP spam blocking, some ICMP rate-limiting, blocks some port scans and DOS attacks. In the below script replace X.X.X.X, Y.Y.Y.Y, and Z.Z.Z.Z with your own values.…