LetsDefend: Adobe ColdFusion RCE

Servers utilizing Adobe ColdFusion were exploited in the wild. LetsDefend rated this challenge as Medium in difficulty. This Blue Team challenge can be accessed at https://app.letsdefend.io/challenge/adobe-coldfusion-rce. I answered the questions using the tools Hayabusa, Timeline Explorer, CyberChef and PowerShell. Scenario: A web server was isolated for suspicious use of the nltest.exe command. Investigate the Windows …

How to Upgrade OpenSSH on Linux

This is a walk-through on how to upgrade your version of OpenSSH. One of the main reasons why an organization needs to upgrade their OpenSSH server is when there are vulnerabilities found on older versions, especially findings from Security Rating solutions providers such as BitSight, SecurityScorecard, and even just Shodan. Everything that I have found …