network Archives - Black Hills Information Security

network

Blue Team, How-To Active Directory, AD, AD Best Practices, Best Practices, Link Layer Multicast Name Resolution, LLMNR, network

How to Disable LLMNR & Why You Want To

Kent R. Ickler // Link-Local Multicast Name Resolution (LLMNR) This one is a biggie, and you’ve probably heard Jordan, John, me and all the others say it many many times. LLMNR was (is) a protocol used that allowed name resolution without the requirement of a DNS server. It was (is) able to provide a […]

Read the entire post here

C2, External/Internal, Red Team egress filtering, exposed ports, firewalls, network

Poking Holes in the Firewall: Egress Testing With AllPorts.Exposed

Beau Bullock // If you have been even remotely in touch with technology in the past thirty years you have probably heard of this thing called a “firewall”. If not, a “firewall” decides what does and does not get to proceed through it. Most organizations have one of these protecting their network from the rest […]

Read the entire post here