Teri Radichel 🩵’s Post

Blue team friends: if you're not already, pay attention to webdav. It is an often forgotten function of HTTP where you can create a file share over HTTP rather than SMB or NFS. You can map it to a drive and run NTLM over it and do standard command line piping and redirection to and from remote files...but it also works over port 80 and/or 443, which you *definitely* have allow-listed in your firewall. And a lot of security tools treat it more like an internal file share than a web connection. Meaning they don't check drive mapping, authentication, and/or file transfers via webdav the way they check more typical HTTP GET downloads. https://lnkd.in/gY5AQt8G

Networking debugging tip of the day: To easily test firewall/security rules run `nc -zv <host> <port>` from the network source "nc" stands for 'netcat' "-z" sends zero bytes over the connection "-v" gives you 'verbose' output I use this almost everyday

The Journey of a Web Request From typing the URL into a browser to Loading the Page, in the following article I will dissect each step that happens when a user type https://www.google.com into their browser and press Enter. Explaining the DNS request and it's purpose, TCP/IP communication, the role off a firewall, how HTTPS encryption works, the role of a load balancer, the processing that happens on the server as well as database interaction, in a way a beginner will understand. https://lnkd.in/eexRQQzy

New VS Code update allows port forwarding directly from the application so please update your firewall to plug it! [https://lnkd.in/gdn2tZvx] <- link to block

It’s 2024! Here’s a summary of what Chrome Security has been working on in the first three months of the year (Q1 2024 update).

For my latest post on L2aC. Did you know that you can create a network switch from html table or a PA-3260 Firewall? :-) https://lnkd.in/d-E8V5NU I can even visualize the growth of the layer2 network, watch it:

Public URLs for localhost without downloading any binary Pinggy provides secure tunnels to localhost with a single command for developing, testing, and deploying your website or app easily. Create HTTP, TCP or TLS tunnels to your Mac / PC even if it's behind firewalls and NATs. Debug requests with built in debugger. https://lnkd.in/gyRUaWsH

The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, DNS, router admin requirements, STUN/TURN/UPnP/ICE, or spoofing. https://lnkd.in/dcz7Pj3R

RASPBERRY PI HOMELAB DAY 10 I figured out what was causing my DNS issues yesterday. Turns out, I had also installed another firewall daemon called firewalld, and it was blocking DNS connections (thank goodness it was allowing SSH, though!). I uninstalled firewalld, and now everything works! In this screenshot, you can see me add a couple of firewall rules from the command line. I have the firewall set to default deny, but to allow connections on a couple of ports only from my local network. You can also see me add a couple of rules at the bottom. I tested these ports, and MOST of them work as expected! Yes, most, not all. Everything is coming full circle, it seems, and now the firewall is preventing my laptop from discovering my Raspberry Pi via WSD (port 3702). My first thought is that I should try enabling SMB and NetBIOS ports as well, but I have spent enough time on this today, and I will try that tomorrow.

In Kubernetes, pod-to-pod communication is important. In one of the previous post I said that the most common issues are around: 1. The CNI. 2. Firewall. Here are 5 more: 3. Anti-affinity rules. 4. DNS resolution issues. 5. Messed up network policies. 6. Misconfigured service settings. 7. Faulty network hardware on worker nodes. Why should you know this? Because knowing these will help you quickly troubleshoot your Kubernetes problems. A healthy network is a happy network for happy app living on Kubernetes.