Company Smartphone Security (B) - Aim WSUS Server. After scanning found that there are two hosts to meet our needs, send us a stable remote shell. They are WSUS (Windows Update Server) and Antivirus (Antivirus Related Server), respectively, because these services must have Internet access to update the database, let's start from the first. There is an interesting question, NTLM hash of the local administrator is enough to access this server? Perhaps our answer is yes. In a public ...
Corporate Smartphone Security (C) - Aim at domain controllers and look for Golden Ticket. Before leaving the internal network, we decided to get the hash of the domain controller, especially the Kerberos account (krbtgt) and wanted to create a Golden Ticket *. Golden Ticket refers to the forged TGT (Ticket Granting Ticket). Similarly, the Silver Ticket is a forged TGS (Ticket Granting Server).
Company Smartphone Security (a) - From APK to Golden Ticket: Initial Probing, Getting Domain Admin Access from an Android Smartphone, and More ... This article describes the potential dangers of using a personal smartphone in an enterprise network, These cases are typical after the actual case has occurred. It turns out that it is not difficult to trick an employee into installing a malicious application, bypassing network protection, accessing corporate networks, elevating and obtaining confidential information. In addition, it turns out that bypassing all protection mechanisms (including anti-virus software) without being discovered ...
"Tenkine Server channel May 9 News" Huawei debuted its large data storage products Oceanstor N9000 at the US Interop 2013 (International It Information technology trade fair). Hua Oceanstor N9000 based on the "Trinity" of innovative ideas, storage, analysis, archiving in one, the adoption of a new generation of scale-out architecture, the implementation of data lifecycle management, to help users calmly face large data challenges. With the wide application of the technology of IoT, Sociality and BYOD, the data exploded ...
The exposure of the NSA's secret file to steal data in June 2013 has rekindled concerns about the security of corporate data stored on the cloud. But the exposure of the NSA surveillance program will not cause some companies to be afraid of data disclosure no longer using hosting services, instead, it facilitates enterprise users and cloud service providers to reform their internal security and privacy policies and enhance cloud data security, something that businesses and suppliers have long overdue to do. Snowden first leaked NSA surveillance to media ...
In June 2013, the exposure of the private files stolen by the U.S. National Security Agency (NSA) rekindled fears of corporate data stored on the cloud. However, the exposure of the NSA surveillance program does not prevent some enterprises from adopting managed services for fear of data breaches. Instead, it enables enterprise users and cloud service providers to reform their internal security and privacy protection strategies, enhance the security of cloud data, And this is what businesses and suppliers should have done, but have not done yet. Edward & middo ...
When we use a separate storage device, we have to be very clear about what type of storage device, what interfaces and transport protocols you have, how many disks there are in the storage system, what type, what size, and what kind of connection cable to use between the storage device and the server. In order to ensure data security and business continuity, we also need to establish corresponding data backup system and disaster tolerance system. In addition, regular state monitoring, maintenance, software and hardware updates and upgrades are necessary for storage devices. If you are using cloud storage, then everything mentioned above ...
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.