Peter Van Eeckhoutte (corelanc0d3r)

Free tool : Windows 2003/2008 Certificate Authority Certificate List Utility for pending requests and about-to-expire certificates

Published April 10, 2009 |

In one of my earlier posts, I have talked about setting up a Windows 2008 based Certificate Authority/PKI. Once your Windows 2008 CA setup is in place and configured, you can go ahead and starting issuing certificates. But at the same time, you need to put a maintenance/management procedure in place so you can stay […]

Posted in 001_Security, Certificates, My Free Tools, Windows Server | Tagged 2008, ca, certificate, certificate authority, certificate requests, Certificates, certificates expire, certutil, cfg, expired, file, file called, free, free tool, list expired, parameter, pending, pending certificate, pki, pvecacertlist, report, request, script, show pending requests, smtp, specify, too, use parameter, utility, working directory

Juniper ScreenOS : defeating iBGP full mesh requirement using route reflectors and confederations

Published March 22, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

As explained in one of my earlier posts, one of the requirements to successfully setup and operate an iBGP configuration is that all iBGP clients need to have a BGP connection to all other iBGP clients. (= full mesh). This is required because an iBGP device only exchanges information about its own networks and it […]

Posted in Juniper, Networking | Tagged as, autonomous system, bgp, bgpd, Cisco, cluster-id, confederation, ebgp, full mesh, ibgp, ios, Juniper, Linux and Unix, neighbor, path, peer-group, quagga, reflector-client, remote-as, route reflector, route-reflector-client, rr, screenos, zebra

Juniper : Netscreen/ScreenOS to HTML (ns2html) + audit your firewall config (nipper)

Published March 16, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

A short while ago, I came across 2 really nice tools that will help – visualizing screenos configs into html pages – auditing firewall configs Converting screenos to html The first tool, called ns2html, was developed by Rodrigo Pace de Barros and can be found at http://ns2html.sourceforge.net/ It is written in perl and both […]

Posted in 001_Security, Juniper, Scripts | Tagged audit, config, convert, export, export-juniper-netscreen-configuration, htm, html, Juniper, juniper-ssg-perl-script-config-html, netscreen-config-parser, netscreen-firewall-configurator, nipper, nipper-for-juniper, nipper-for-juniper-firewall, nipper-parsing-nokia-firewall, ns2html, ruleset, screen-os-config-audit, screenos, visualize

Cheatsheet : Cracking WPA2 PSK with Backtrack 4, aircrack-ng and John The Ripper

Published February 24, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

Basic steps : Put interface in monitor mode Find wireless network (protected with WPA2 and a Pre Shared Key) Capture all packets Wait until you see a client and deauthenticate the client, so the handshake can be captured Crack the key using a dictionary file (or via John The Ripper) I’ll use a Dlink […]

Posted in 001_Security, Linux and Unix, Networking | Tagged aircrack-ng, airodump-ng, backtrack, backtrack-5-crack-wpa2-without-dictionary, backtrack-to-crack-wpa2, crack, crack-wpawpa2-psk, hack-wpa-backtrack-4, how-to-crack-wpa2-with-backtrack-5, how-to-hack-wpa2-psk-password, how-to-hack-wpawpa-2-using-backtrack, john the ripper, jtr, linux-cracking-wpa-keys-with-kismet, psk, wireless, wpa, wpa handshake, wpa2, wpa2-psk

Cheatsheet : Cracking WEP with Backtrack 4 and aircrack-ng

Published February 20, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

I know, there a probably already a zillion number of websites that show how to crack WEP. So I guess this will be website zillion+1 learning how to audit your own WEP security. To be honest, the main reason I’m putting this info on this blog because I just wanted it as a quick reference- […]

Posted in 001_Security, Linux and Unix, Networking | Tagged aircrack, aircrack-ng, aircrack-ng-crack-wep-pdf, aireplay-ng, airodump, airodump-ng, arp, backtrack, backtrack-wep-crack, cheetsheet-wep-backtrack-5, crack, enough-iv-to-crack-wep, hacking-wep-backtrack, OPN, packetforge-ng, SKA, wep, wep-mac-filter-no-client, what-switch-in-mac-to-backtrack, wireless

Juniper Screenos : Redundant multi-exitpoint ISP routing failover using multiple vrouters, multiple OSPF areas and eBGP

Published February 6, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

Introduction As you most likely already know, Juniper screenOS supports a couple of dynamic routing protocols (OSPF, BGP, RIP). These protocols can be used to build very powerful and redundant networks, however there are some screenos specific issues with these implementations, and these issues may introduce a little bit of complexity in the design and […]

Posted in Juniper, Networking | Tagged access-list, advertise, area, as prepend, as-path, as-path-access-list, bgp, ebgp, failover, Juniper, med, metric, multiple, multi_exit_disc, ospf, redistribute, redundant, route-map, screenos, track-ip, vrouter

Nessus/OpenVAS wrapper for ike-scan

Published January 30, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

ike-scan is a great tool to audit VPN/IPSec implementations. This tool, which runs under Lunix, Unix, MacOS and Windows, can be found at www.nta-monitor.com/tools/ike-scan/ (Latest version at time of writing is 1.9). My Nessus ike-scan NASL wrapper may or may not work with earlier versions or newer versions, so test test test) Some of the […]

Posted in 001_Security, Linux and Unix, My Free Tools, Networking | Tagged 001_Security, audit, download, free, free tool, groupid, ike, ike-scan, ipsec, ipsec-team-blog, nasl, nessus, openvas, phase1, plugin, prevent-ike-scan, proposal, scan, script, vpn

Monitoring your network with Powershell

Published January 28, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

I have written a small powershell script that will help you to monitor various hosts on your network. Instead of using ping to see if a host is alive, this script will connect to tcp ports, so you can also monitor hosts behind firewalls (or hosts that cannot be pinged). In addition to this, you […]

Posted in My Free Tools, Networking, Powershell | Tagged closed port, discover-if-host-is-alive-powershell, free tool, monitor, monitor-folder-powershell-ps1, network, open port, powerhell-network-port-status, powershell, powershell-active-ports, powershell-commands-to-scan-ports, powershell-display-open-ports, powershell-monitor-port, powershell-network-activity-monitor, powershell-network-diagnostics, powershell-network-discovery, powershell-network-scan, powershell-ping-monitor, powershell-scan-network, report

Juniper : Netscreen Remote Dial-UP VPN with AD Radius Authentication and route based VPN / tunnel interface

Published January 22, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

The following procedure explains how to set up a Juniper ScreenOS based firewall to accept Netscreen Remote Client VPN connections and authenticate users using Active Directory (Radius via Windows 2003 IAS or Windows 2008 NPS). We’ll assume that all traffic to from the client to the 192.168.0.0/16 networks needs to pass via the client VPN […]

Posted in 001_Security, Juniper, Networking, Windows Server | Tagged Active Directory, ad, client, external group, ias, ike, ip pool, Juniper, juniper-netscreen-firewall-configuration-videos, netscreen, nps, preshared key, psk, radius, remote, route based vpn, tunnel, vpn, vpn-remote-ip-local-ip, xauth

Exchange 2007 : Powershell script to select optimal database for a new mailbox

Published January 19, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

If you have multiple Storage Groups / Databases on your Exchange 2007 server, you may want to try to spread your mailboxes over all databases. You could use your “gut feeling” and/or select a database at random, or you could use a simple script to select the “best” database for hosting a new mailbox. The […]

Posted in MS Exchange, Powershell | Tagged average, database, exchange-2007-mailstore-size-free-powershell, exchange-2007-powershell-command-to-check-mailbox-database-size, exchange-2007-powershell-commands, exchange-2007-powershell-scripts, exchange-2007-ps-script-new-mailbox, exchange-2007-ps1-script-to-batch, exchange-database-command-check, exchange-select-database-by-size, exchange-shell-command-for-database-statusexchange-2007, get-mailboxdatabase, get-mailboxstatistics, most, optimal, powershell, powershell-commands-for-exchange-2007-mailbox-database-details, powershell-compare-exchange-2007-db-size, select, size

Corelan Cybersecurity Research

:: Knowledge is not an object, it's a flow ::

Juniper ScreenOS : defeating iBGP full mesh requirement using route reflectors and confederations

Juniper : Netscreen/ScreenOS to HTML (ns2html) + audit your firewall config (nipper)

Cheatsheet : Cracking WPA2 PSK with Backtrack 4, aircrack-ng and John The Ripper

Cheatsheet : Cracking WEP with Backtrack 4 and aircrack-ng

Juniper Screenos : Redundant multi-exitpoint ISP routing failover using multiple vrouters, multiple OSPF areas and eBGP

Nessus/OpenVAS wrapper for ike-scan

Monitoring your network with Powershell

Juniper : Netscreen Remote Dial-UP VPN with AD Radius Authentication and route based VPN / tunnel interface

Exchange 2007 : Powershell script to select optimal database for a new mailbox

Corelan Training

Donate

Corelan Team Merchandise

Corelan on Slack

Actions

Categories

Hi there!

We have good news for you!