Install Telnet Client from Command Prompt Windows 10
This post covers how to install the telnet client from the command prompt on Windows 10. Run the following command: pkgmgr /iu:”TelnetClient”
Category Windows
Detecting Windows Lateral Movement
I came across a great article on detecting windows lateral movement and wanted to share it with everyone: CERT-EU Security Whitepaper 17-002 “Detecting Lateral Movements in Windows Infrastructure”
Install Chrome using PowerShell
To install Google Chrome using Powershell (headless install) run the following command from and Administrative PowerShell Prompt: $LocalTempDir = $env:TEMP; $ChromeInstaller = “ChromeInstaller.exe”; (new-object System.Net.WebClient).DownloadFile(”, “$LocalTempDir\$ChromeInstaller”); & “$LocalTempDir\$ChromeInstaller” /silent /install; $Process2Monitor = “ChromeInstaller”; Do { $ProcessesFound = Get-Process | ?{$Process2Monitor…
Event id 8004 – Finding the Source of Windows Password Spraying Attacks
Password Spraying Finding the source of Windows password spraying attacks can be daunting as the Event log does not provide the source IP of the machine making the calls. Windows Event Logs Ideally all of your Windows Event logs from…
Windows Batch Programming Notes and Examples
Recently I’ve been writing a lot of windows batch files that need to be compatible with both Windows 7 and Windows 10. I’ve decided to document some of what I have learned below. Check if .bat file was ran with…
vmfusion cannot write to new drive windows 10
Recently I added a new drive to my Windows 10 VM using VMFusion 10.0. I was unable to write to it even after making myself owner of it. After digging in this for a while it appears that VMWare is…
Disabling Internet Explorer Security Mode from PowerShell
Internet Explorer Enhanced Security mode can be frustrating to disable. Here is a fast way to disable it. First open an Administrative PowerShell Window. Next run the following: $AdminKey = “HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}” $UserKey = “HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}” Set-ItemProperty -Path…
Analyzing Windows Registry Keys on OSX
I’ll be reviewing how to analyze a .reg file for unique values on OSX Prerequisite dos2unix will be required brew install dos2unix Instructions In this example we will assume you have dumped all of HKEY_CURRENT_USER\Software\ in to a file named…
iis disable debug
In IIS to disable debug do the following. Modify the Web.config File Open the Web.config file in a text editor such as Notepad.exe. Web.config file is typically located in the application directory. Modify the compilation element and set debug=”false” <compilation…
Using lzop on Windows
I wanted a fast way to backup an AppDynamics MySQL database directory on windows. The answer was lzop. Tools GoW 0.8.0 (GNU on Windows) lzop for Windows Setup Set your Enviornment PATH After installing GoW and extracting lzop.exe set your…