Stephan Lang

[Stephan Lang @DaStivi]

@RinoTheBouncer

[Stephan Lang @DaStivi]

@evleaks So my Xiaomi 14 ultra, also had the additional battery pack with USB-C...

[Stephan Lang @DaStivi]

@TrendsterO @techspence Sadly even some Microsofts own wizards and Powershell scripts doesn't work correctly if you use protected Users group on your admin account... 🤦‍♂️

[Stephan Lang @DaStivi]

@techspence It could be fixed so easily by Microsoft ...

[Stephan Lang @DaStivi]

@CyberWarship •Activate complexes password requirements & all rules for it
•deactivate IPMI
•define IP-Range from where idrac is reachable
•deactivate Serial over LAN
•block HTTP/80
•force TLS1.2
•disable RACADM
•disable RedFish

[Stephan Lang @DaStivi]

@CyberWarship I've some idrac best practice settings would be interesting what you'll say about this... basically default credentials is a No-Go of course! Honestly there are a lot more hidden settings per-default activated that might can get exploited!

[Stephan Lang @DaStivi]

@TeslaCharging what's the reason this SuC is offline ?

[Stephan Lang @DaStivi]

@nullenc0de There a couple more "exe" You need to block... Like powershell, CMD etc too... Normal users , normally don't need them to connect to the internet! Another very important part you need to block these tools from running elsewhere then original location with applocker

[Stephan Lang @DaStivi]

@buttahsan @MSFTExchange Good move because then you most probably will be able to upgrade to ex2025! Downside could be the used winsrv.. have u used server 2022 already? server 2019 is be supported a little longer then exchange 2019, only downside could be OS support for ex2025 that's not known yet...

[Stephan Lang @DaStivi]

@Sopbeen22 @MSFTExchange That's not true... "Completely" is kinda stretch able... But at least not a full exchange is needed (no exchange services are running) from a security perspective this is perfect already..
. You still need exchange mgmt tools... But that's not a problem.

[Stephan Lang @DaStivi]

@TeslaClubAT It depends... Check my calculations in TFF forum.... When you only charge to around 80% and the charging rates are ok, but we all know this might depend on many factors, and you have to have long slow charging rates it costs easily twice as much!

[Stephan Lang @DaStivi]

@ThomasVrhydn I did see the option IRL in endpoint settings... But looks like it's rolled out on waves, as other tenants that have preview enabled didn't have the option yet...

[Stephan Lang @DaStivi]

@vxunderground But if you could edit hkey_classes_root you wouldn't need to hide this that way... And as long as ah normal User can't run anything outside program files or Windows it's also relatively safe...

[Stephan Lang @DaStivi]

@_maxq_

[Stephan Lang @DaStivi]

@samilaiho Still don't know why someone would put ah veeam server (or esx/vcenter) in the internet.. You just don't deserve it otherwise...

[Stephan Lang @DaStivi]

@JimSycurity @JosephRyanRies @DanielUlrichs Same as i thought too while Reading this.... Again its not needed to take control of ah particular object and change it, you can propaply just use an existing non Windows Computer object, or get into the system of such machine and exploit from there

[Stephan Lang @DaStivi]

@JosephRyanRies 1 – Compatibility mode. Windows domain controllers will require that Netlogon clients use RPC Seal if they are running Windows, or if they are acting as either domain controllers or Trust accounts.

2/2

[Stephan Lang @DaStivi]

@JosephRyanRies does it make any difference whats the operating system for ah computer account is in AD? as we had Netapp's that where set as "Windows 10" Operating system and had issues... after changing type to Netapp it started working... in KB this is mentioned: 1/2

[Stephan Lang @DaStivi]

@arstechnica thats ah fucking nightmare... i mean moved to my own Bitwarden Vault but basically you've to change all passwords after this Lastpass disaster...

@samilaiho did you read about this allready?

[Stephan Lang @DaStivi]

@astro_josh Wow, is there ah high-resolution version available to use it as desktop background, that would be awesome! 🤩