#certificate — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #certificate, aggregated by home.social.
-
Looks like Let's Encrypt has resumed issuing certs:
https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3
-
Ledger — прохождение сложной машины от Tryhackme
Ledger — это сложная машина Windows на TryHackMe, в центре которой находится неправильная конфигурация служб сертификатов Active Directory (AD CS). Первоначальная разведка выявляет контроллер домена ( labyrinth.thm.local ) с включенной аутентификацией SMB null и LDAP, раскрывающим учетные данные пользователя в примечаниях. Через certipy-ad находим шаблон сертификата ServerAuth , который уязвим к ESC1 , что позволяет любому аутентифицированному пользователю запросить сертификат, выдавая себя за администратора домена. Хэш NT администратора извлекается из поддельного сертификата, а psexec предоставляет командную оболочку NT AUTHORITY SYSTEM. Альтернативный путь эксплуатации через аутентификацию LDAP Schannel для случаев, когда Kerberos PKINIT не срабатывает.
https://habr.com/ru/articles/1032298/
#active_directory #certificate #esc #windows #nmap #cvss_v3 #mitre_attack #certipy #psexec #ldap
-
IQ Tests for Children, Teens, and Adults: Which Type of Test Is Best for Each Age Group?
As a clinical and forensic psychologist, one of the most common questions from parents and adults is not simply “What is my IQ?”, but “Which IQ test should we actually use at this age, and does it really matter?”.
https://iqcertificate.org/blog/iq-tests-for-children-teens-and-adults
#iqtest #children #adult #psychologist #education #teen #school #certificate
-
RE: https://infosec.exchange/@paulehoffman/115889970411988081
Side note: this is why things like "multi-perapective corroboration" for domain validation do not work.
When every single packet to
.irnameservers and servers inside Iran pass through two (yes, 2!) gateways, then those controlling the gateways can acquire a valid domain validation certificate for any.irdomain or any server located in Iran. -
RE: https://abyssdomain.expert/@filippo/115674985400164090
An archive of all CT-logged certificates with all the tools needed for an analysis! No more scraping.
-
"The forged certification marks that are different on each part in the component series is your trusted sign of Qwality."
#qwality #certification #forged #certificate #Chinesium #SafetyThird #electronic #component #AliExpress
-
ACME Renewal Information 的設計問題
#acme #ari #certificate #client #extension #infomation #letsencrypt #loading #renew #renewal #revocation #revoke
-
在 Linux 下 MITM 的 httptap
這兩天看到的有趣東西，可以在 Linux 在自動幫你塞 root CA，然後自動 MITM 攔截 HTTPS 連線的工具：「Httptap: View HTTP/HTTPS requests made by any Linux program (github.com/monasticacademy)」，
https://blog.gslin.org/archives/2025/02/06/12253/%e5%9c%a8-linux-%e4%b8%8b-mitm-%e7%9a%84-httptap/
#Computer #Linux #Murmuring #Network #OS #Security #Software #WWW #authority #ca #certificate #device #https #httptap #in #linux #man #middle #mitm #network #root #security #stack #tcp #the #traffic #tun
-
Let's Encrypt 簽發新的 Intermediate CA
Let's Encrypt 宣佈簽發新的 Intermediate CA：「New Intermediate Certificates」。
這次用 ISRG Root X1 簽了很多東西出來：
On Wednesday, March 13, 2024, Let’s Encr
#Computer #Murmuring #Network #Privacy #Security #Service #authority #ca #certificate #ecdsa #intermediate #isrg #key #letsencrypt #p384 #pinning #privacy #root #rsa #security #x1 #x2
-
"Reskilling. Upskilling. Certificates. Certifications. Badges. Licenses. Microcredentials. Alternative credentials. Digital credentials.So many terms. So little agreement on what they mean, least of all in #HigherEd."
https://www.insidehighered.com/news/2023/03/03/microcredentials-confuse-employers-colleges-and-learners
#Microcredentials #Degree #Students #Education #Universities #University #Certificate #Badge #Reskilling #Upskilling -
Hmm, strange, some apps won't start anymore ? Some #certificate bullshit again ? #N950 #N9 #meego #maemo
