Teri Radichel 🩵’s Post

Simple Universal Fortigate Fuzzer Extension Script: This is a small extension script to monitor suff.py, or the Simple Universal Fortigate Fuzzer, and to collect crashlogs for future analysis.

Got in some more work with tcpdump and Wireshark, there's a reason these two are so prevalent. They are built very well and are easy to use with lots of functionality. Blog post soon.

Successfully completed TryHackMe room - Moniker Link (CVE-2024-21413) - Microsoft Outlook Remote Code Execution Vulnerability. Exploiting this vulnerability, an attacker could craft a malicious link that bypasses the Protected View Protocol, which leads to the leaking of local NTLM credential information and remote code execution (RCE). #H4CK3R #TryHackMe #cyersecurity

The Moniker Link (CVE-2024-21413) room on TryHackMe. The vulnerability bypasses Outlook's security mechanisms when handing a specific type of hyperlink known as a Moniker Link. An attacker can abuse this by sending an email that contains a malicious Moniker Link to a victim, resulting in Outlook sending the user's NTLM credentials to the attacker once the hyperlink is clicked.

ADVISORY: A vulnerability in FortiOS allows for remote attackers to execute arbitrary code or commands. Read full advisory here: https://lnkd.in/grUCxeCh

More practice with TCPDump and Wireshark.

Want to learn one of the the secret weapons for all things networking? From troubleshooting to security, discover the secrets flowing through your network, spot vulnerabilities, and ensure your data's safety! I've done multiple Wireshark walkthroughs on my YouTube channel, but here is one of my favorites! https://lnkd.in/g6bunRk4

10 Steps to Detect, Prevent, and Remediate the Terrapin Vulnerability: You don't have to stop using SSH keys to stay safe. This Tech Tip explains how to protect your system against CVE-2023-48795. https://lnkd.in/gS8Su4_J

On February 13th, 2024, Microsoft announced a Microsoft Outlook RCE & credential leak vulnerability with the assigned CVE of CVE-2024-21413 (Moniker Link). Haifei Li of Check Point Research is credited with discovering the vulnerability. The vulnerability bypasses Outlook's security mechanisms when handing a specific type of hyperlink known as a Moniker Link. An attacker can abuse this by sending an email that contains a malicious Moniker Link to a victim, resulting in Outlook sending the user's NTLM credentials to the attacker once the hyperlink is clicked. #Moniker Link #(CVE-2024-21413) #Activedirectory #besafe #besecure

For me, this was one of the rooms where I learned the most on TryHackMe where I was able to learn to capture vulnerabilities using Telnet, FTP, SMB.