Sunday, May 31, 2020

wget with Powershell

 function global:wget($Address, [switch]$NoCache)

{

 $client = New-Object Net.WebClient

 $proxy = New-object System.Net.WebProxy "10.0.0.10:8080"

 $proxy.Credentials = New-Object System.Net.NetworkCredential ("DOMAIN\user", "password") 

 $client.proxy=$proxy

 $Client.Headers.Add("user-agent", "Windows Powershell WebClient Header") 

 if ($NoCache) {

  # doesn't use the cache at all

  $client.CachePolicy = New-Object Net.Cache.RequestCachePolicy([Net.Cache.RequestCacheLevel]::NoCacheNoStore)

 }

 

 $client.DownloadString($Address)

}

 

wget -Address "http://be4sec.blogspot.com" -NoCache

Sunday, May 17, 2020

FireEye NX SmartVision SC Killswitch

SmartVision is the lateral movement detection module of the network security product (NX) of FireEye. There are too many documents and descriptions about it on FireEye's website, so I will not touch on it here. I just want to explain what SC Killswitch is in the SmartVision configuration, since there is no any explanation about it anywhere.

The SC Killswitch is not a user configurable setting, so there is no any command to enable or disable it even if you see it is like configurable in show menu.

#show smartvision config


It is something about status of the SmartVision module. Sometimes, some Security-Contents may have to restart SmartVision module. This SC Killswitch value indicates whether SmartVision module should be restarted or not. If this value is no;

SC Killswitch: no

this simply indicates that there is no need to restart SmartVision module.

A Sad Story: Don't Invest, Just Prodigalize

Last week, a friend called me, gave some bad news about a company. The company was looking for help since they became a victim of Egregor ra...