David Fletcher// The following blog post is meant to expand upon the findings commonly identified in BHIS reports. The “Server Supports Weak Transport Layer Security (SSL/TLS)” is almost universal across the breadth of our testing. Why is this finding important? This finding is important because attackers are ultimately interested in data. Use of a strong […]
David Fletcher // On a recent internal penetration test engagement, I was faced with using a Juniper VPN to access the target network. One small problem, Juniper does not formally support Linux operating systems. The Juniper Pulse and Pulse Secure clients are only available for Windows and OSX. Since I didn’t have an OSX system […]
David Fletcher // Have you ever looked at Nessus scan results to find the below in the output? Recently I was on engagement and encountered just this situation. I found myself wondering how in the world I would validate all of these findings for SSL/TLS. Luckily, one of my co-workers suggested I take a look […]
