When I stood up a Palo Alto firewall to do research for my blog post on The Dangers of Client Probing on Palo Alto Firewalls, I also found something interesting in the UI. Under Device -> Certificate Management -> SSL Decryption Exclusion there was a list of domains that by default were exempt from SSL…
n00py Blog- Introducing Slackor, a Remote Access Tool Using Slack as a C2 Channel
- Understanding UNC paths, SMB, and WebDAV
- Exploiting Genuitec Secure Delivery Center (SDC) < Version 5.4.7 (Local File Inclusion)
- Popping shells on Splunk
- Dark Tip: Avoiding SSL Inspection on Palo Alto Firewalls
- The Dangers of Client Probing on Palo Alto Firewalls
- Bypassing Duo Two-Factor Authentication (Fail Open)
- Executing Meterpreter in Memory on Windows 10 and Bypassing AntiVirus (Part 2)
- Executing Meterpreter in Memory on Windows 10 and Bypassing AntiVirus
- Ducky-in-the-middle: Injecting keystrokes into plaintext protocols