U.S. General Services Administration: Weak password policy leading to exposure of administrator account access

Hi, The login endpoint https://mysmartplans.gsa.gov/Marathon/Default.aspx is having weak password policy. During the recon, I came across a mysmartplans overview document http://www.accentimaging.com/accent/pdfs/Accent%20MySmartPlans.pdf . In this document few users are mentioned like - rick, ban...

Best practices for securely using Microsoft 365—the CIS Microsoft 365 Foundations Benchmark now available

This post was cowritten by Jonathan Trull, Chief Security Advisor, Cybersecurity Solutions Group, and Sean Sweeney, Chief Security Advisor, Cybersecurity Solutions Group. Were excited to announce the availability of the Center for Internet Securitys CIS Microsoft 365 Foundations Benchmarkdevelope...

Microsoft Windows: Password must meet complexity requirements

This test checks the setting for policy type OpenVAS Vulnerability Test $Id: winpasswdcomplexityrequirements.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Password must meet complexity requirements WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Maximum password age

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdmaxage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Maximum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Enforce password history

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdhistory.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Enforce password history WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...