Information Technology, Control, Audit and Security Experience

WebLogic is Oracle’s proprietary application server. It is Java base and Inherited when it acquired BEA Systems in 2008. it's used by many businesses to build and deploy enterprise applications. Weblogics popularity and widespread use has made it a target by malicious individuals. In this post, I will provide you with suggested control that can be implemented to ensure your weblogic server is as secure as possible. Weblogic Components To begin we first need to understand the basic concept of Weblogic Components. It should be noted that all the WebLogic components are Java processes. 1. Domain: This is a top-level definition of a typical application environment. It contains all the shared configuration and resources for the managed servers within the domain. It must have a single AdminServer. It can have zero-to-many managed servers. Managed Servers can be clustered across multiple machines (High Availability). It can have all applications under a single domain o...

Oh SNAP! I have forgotten my Admin Server password for the organisations WebLogic domain. Have you ever forgot the password of WebLogic domain?  Have you been in a situation when you took over administration of the server and discovered the wrong password was handed over to you by the previous administrator who is no longer accessible? These are recurring issues experienced by Administrators. Additionally, password change can be regularly enforced by the organisations security policy forcing the admin to perform this task frequently So how do you go about achieving this? In this post I will be discussing how to reset the WebLogic password. This tutorial will focus on achieving this through the command line.

SQLServer is a relational database solution created by Microsoft. It utilises several types of login to gain access to the database namely: Windows authentication which is the default, and is often referred to as integrated security because SQL Server security model is tightly integrated with Windows. In this type of authentication Windows users who have already been authenticated do not have to present additional credentials. SQL Server authentication . In this type of login ,user name and passwords are stored in the database for authentication purposes. This type of authentication is used when you have a user not integrated with windows needs access to the database. In this post I will be showing you various techniques employed to crack password using the SQL Server authentication through port 1433 which is used for MSSQL service What is required You will need Backtrack 5 or Kali linux to run these commands Virtual machine to host the operating system where requ...

Have you ever experienced the situation where you wanted to utilise a wifi configured to connect to one machine in an entirely new machine, but couldn't remember the wifi password? In today's post we will be looking at how we can extract wifi passwords via command prompt. To get this done a utility will be used called Netsh . According to Microsoft, Netsh is a command-line scripting utility that allows you to display or modify the network configuration of a computer that is currently running. So lets get busy with these simple steps.  1. Start up the Netsh utility by opening a command prompt and typing the followikng netsh This should take you to the netsh prompt 2. Enumerate the available wifi configured on the machines by typing the following wlan show profile 3. Here we will be revealing the wifi password of " xox " by typing the following: wlan show profile xox key=clear Now under the Security settings you will see the wifi ke...

For security reasons, it is important to ensure that your system is properly secured by ensuring it has the necessary security updates/Patch required. This post will focus on how to identify the status of your patch update. It will be done thorough the command line

Active Directory is essential to any Microsoft network built on the client-server network model. It provides a simplified query for administrators and users to manage resources, sites, services, and users on a network Active Directory was first provided in Microsoft Windows 2000. It is often managed and controlled through the MMC (Microsoft Management Console). In this post, I will be discussing the most common Active Directory Security issues.

VLAN stands for Virtual Local Area Network. This is a local area network where the computers, servers and other network devices are LOGICALLY connected regardless of their physical location. Vlan is capable of logically grouping these devices into separate segments. Its main purpose is to provide the following: Network security Network traffic management Simplification of Network Lets look at a simple implementation of a VLAN. Supposing you have a 3 story building and each floor houses separate sensitive departments (Accounts, Shipping and Support) . As a network administrator, if you were asked to isolate network traffic from all departments  you have 2 options. 1. either you create a separate network hardware for these system which might cost alot of money or 2. Create a VLAN using a VLAN capable switch. This will create the separated logical network for you while you can easily create rules to preventing the logical network from communicating with each oth...