..:: Corelan Cybersecurity Research ::.. - Part 18Corelan Cybersecurity Research

Merging & Syncing multiple Active Directory databases into one ADAM instance

Published August 3, 2008 |

Keywords : ldap authentication multiple domains combine adam adamsync adschemaanalyzer ldap proxy chain ldifde MS-ADAMSyncconf.xml MS-AdamSyncMetadata.ldf MS-ADAMSchemaW2K3.ldf Object Violation Naming Violation Ldap error occured. ldap_add_sW: Object Class Violation. Case definition : 2 AD domains, containing user accounts. One of the domains is a 2003 based domain and has the R2 + Exchange 2003 + Exchange […]

Posted in Active Directory, Windows Server | Tagged ad synchronization, adam, adam-use-different-domain, adamsync, adamsync-between-multiple-domains, adamsync-error-parsing-xml-xml-document-must-have-a-top-level-element, adamsync-multiple-domains, adamsync-multiple-queries, adschemaanalyzer, adsi, how-to-mere-many-active-directory-domains-into-one-domain, ldap, ldap-server-merge-multiple-forests, ldifde, ldifde-a-referral-was-returned-from-the-server, merge-active-directory-exchange, ms-adam-multiple-domain-directory, ms-user, password-sync-adam, windows-2008-adam-domain

Free Tool – Cisco Ironport C350 Safelist / Blocklist merge utility

Published July 27, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

If you have multiple Cisco Ironport C350 devices, you may have noticed that safelist / blocklist entries are bound to an individual device. So if your Ironport devices are both installed to handle incoming mails, end users need to manage safelists/blocklists on both devices in order to be sure that both devices operate in the […]

Posted in 001_Security, Cisco, My Free Tools, Networking | Tagged add-user-to-ironport-c350, backing-up-ironport-configuration, backup, backup-ironport-config, blocklist, c350, Cisco, free tool, iron-port-serial-number-with-cli, ironport, ironport-blacklist-entries, ironport-c350, ironport-c350-manual, ironport-c350-serial-manual, ironport-config-file-tool, merge, not-able-view-safelist, safelist, step-by-step-configuration-of-ironport-c350, sync

Free tool – Attachment filtering with Exchange 2007/2010 (custom transport agent)

Published July 21, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

Keywords : microsoft exchange 2007 attachment size filtering quarantine block reject small zip files attached When messaging admins need to implement some sort of attachment filtering, they mostly think about antivirus products, or using transport rules in Exchange 2007. I have discovered that not a lot of antivirus products nor the Exchange 2007 built-in functionalities […]

Posted in 001_Security, MS Exchange, My Free Tools | Tagged attachment filter, attachment-filter-exchange-2010-stand-alone, attachment-size-filtering-exchange-edge, deny-attachments-in-exchange-2010, edge-exchange-2010-allow-attachments, exchange-2010-allow-zip-files, exchange-2010-attachment-filtering, exchange-2010-html-tags-empty-body, exchange-2010-quarentined-encrypted-zip, exchange-2010-scripting-examples-for-attachments, exchange-create-rules-to-filter-outbound-attachments, exchange-transport-rule-save-attachment, free tool, how-to-get-attachment-filtered-exchange-2010-no-edge, html-attachments-exchange-2010, manag-attachment-filter, MS Exchange, ms-exchange-2010-allow-attachments-wit-cer, my-exchange-2007-is-quarantine-rar-messages, transport agent

Windows 2008 PKI / Certificate Authority (AD CS) basics

Published July 14, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

Keywords : Windows 2008 PKI Certificate Authority certutil certreq template root CA Enterprise CA convert pfx to pem generate custom certificate request subject alternate name san attribute Today’s blog post targets the deployment of a Windows 2008 server based Certificate Authority (AD CS) and will discuss some common scenario’s where certificates are used / required. […]

Posted in 001_Security, Active Directory, Certificates, MS Exchange, Windows Server | Tagged 2008, aia, backup, ca, capolicy.inf, certificate authority, certreq, certutil, common name, convert to pem, cp, crl, csp, custom request, distribution point, import-exchangecertificate, issuing, key recovation, keytool, lifetime, new-exchangecertificate, ocsp, root, san, software key storage provider, standalone, subject alternate name, validity, x.509

Icons Shortcuts and SendTo items in Windows XP/2003/Vista/2008

Published July 8, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

Fixing missing icons & shortcuts : Send To “Compressed Folder” is missing : Click Start->Run In the “open” box, type “cmd” (without the quotes) Click ok Enter the following command and press “return” rundll32 zipfldr.dll,RegisterSendto (you should not get any warnings or errors) The first time you are trying to zip, you may be prompted […]

Posted in Windows Client OS, Windows Server | Tagged 2000, 2003, 2008, all-users-send-to-windows-2003, desktop-icon-missing-from-quick-launch-serve-2003, how-sendto-xp-items, icons, internet explorer, internet-explorer-icon-missing-in-xp-quick-launch, lock computer, microsoft-nlb-and-juniper-ssg, missing, send-to-compress-shortcut-missing-xp, send-to-shortcut-missing, shortcut, ssg-nlb, user32.dll, vista, windows-2008-sendto, xp

Building IPSec VPN with Juniper Netscreen ScreenOS (CJFV)

Published June 25, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

A few days ago, I have posted some ScreenOS basics on this blog. Today, it is time to take it one step further and to look at setting up and especially troubleshooting IPSec VPN’s with Juniper Netscreen devices. The need for VPN A VPN can be defined as the simulation of a private connection by […]

Posted in 001_Security, Juniper, Networking | Tagged 3des, aes, aggressive mode, asic, cjfv, dh, diffie hellman, hmac, ike, ipsec, isakmp, Juniper, main mode, netscreen, phase 1, phase 2, policy based, proxy id, psk, route based, screenos, sha, vpn

Juniper Firewall ScreenOS Basics (CJFV)

Published June 22, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

ScreenOS Concepts & Terminology The following document is based on ScreenOS v5.4.0r7.0 – Interface = connection to a specific subnet. An interface is assigned an IP address only if firewall is operating in L3 mode. Default interface names can vary on different Netscreen devices. – Zone : logical grouping of subnets and interfaces. All devices […]

Posted in 001_Security, Juniper, Networking | Tagged basic, block-intra-subnet-traffic-juniper, change-route-juniper-batch-file, cjfv, copy-image-from-ssg-firewall-to-tftp, how-to-recover-a-password-on-a-juniper-firewall, Juniper, juniper-firewall-policy-to-monitor-multiple-subnets, juniper-firewall-screenos-get-policy, juniper-firewall-set-service-ping, juniper-screenos-policy, nat-many-to-one-juniper-gui, netscreen, scp-disabled-for-root-juniper, screenos, screenos-get-time, screenos-nat-table, screenosdefault-policylog, set-filter-juniper-ssg, ssg5-config-file-scp-download

Cisco switch IOS cheat sheet

Published June 22, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

Reset to factory defaults : connect console (9600/8/None/1, no flow control) take out power cable press mode button (at the front), hold it, and put power cable back switch will go into recovery mode run : flash_init load_helper rename the config file : rename flash:config.txt flash:config.old run : boot When asked to enter the initial […]

Posted in Cisco, Networking | Tagged access-class, access-list, bpdu, cdp, Cisco, command, conf int, conf t, configure, enable, enable conf, errdisable, etherchannel, ios, mem, neighbor, ntp, portfast, pruning, root, root bridge, running-config, snooping, spanning, spanning tree, startup-config, stp, switch, switchport, trunk, vlan, vlans, vtp, vtp domain

Windows 2003 Server Network Load Balancing (NLB) for IIS based SMTP services

Published June 17, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

In this post, I will explain how to set up 2 or more Windows 2003 servers to use the Windows Server built-in NLB functionalities in order to provide high availability and network load balancing for IIS based SMTP services. Requirements You need to have at least 2 servers that communicate to each other over 2 […]

Posted in Windows Server | Tagged afinity, alivemsgperiod, alivemsgtolerance, cluster, converging, heartbeat, iis, iis-load-balancing-windows-server-2003-configuration, ip conflict, multicast, network load balancing, network-load-balancing-host-unreachable, nlb, nlb-nodes-at-physically-separated, smtp, smtp-cluster-windows-2003, take-server-out-of-drainstop, unicast, virtual-nlb-interface-cards, windows-server-2003-load-balancing-iis

Free Tool – Password Generator dll for Visual Studio (and other languages)

Published May 30, 2008 |

By Peter Van Eeckhoutte (corelanc0d3r)

Because some of my own applications required the ability to create random passwords, I decided to write a small dll that will allow me to implement the generation of random passwords in a fast and easy way. You can download the dll from How to use the dll in Visual Studio Create a new Visual […]

Posted in Development, My Free Tools | Tagged add-password-in-my-compiled-dll, C#, c-password-generator-dll, dll, dll-for-password-generator, dll-random-generator, free tool, generator-dll, password generator, password-dll-file-generator, password-generator-dll, password-generator-in-visual-studio-tools, random, random-password-generator-net-dll, set-password-for-dll, set-password-on-dll, set-password-to-dll-file, visual-studio-2008-password-generator, visual-studio-password-creator, visual-studio-password-random-letter-generator

Corelan Cybersecurity Research

:: Knowledge is not an object, it's a flow ::

Merging & Syncing multiple Active Directory databases into one ADAM instance

Free Tool – Cisco Ironport C350 Safelist / Blocklist merge utility

Free tool – Attachment filtering with Exchange 2007/2010 (custom transport agent)

Windows 2008 PKI / Certificate Authority (AD CS) basics

Icons Shortcuts and SendTo items in Windows XP/2003/Vista/2008

Building IPSec VPN with Juniper Netscreen ScreenOS (CJFV)

Juniper Firewall ScreenOS Basics (CJFV)

Cisco switch IOS cheat sheet

Windows 2003 Server Network Load Balancing (NLB) for IIS based SMTP services

Free Tool – Password Generator dll for Visual Studio (and other languages)

Corelan Training

Donate

Corelan Team Merchandise

Corelan on Slack

Actions

Categories

Hi there!

We have good news for you!