Unable to enroll any device when using Certificate based authentication

Enrollments are failing for all platforms. During the enrollment process,the server logs are showing a failure to sign the CSR, followed by a wipe triggered on the device: 2017-09-10T10:11:12.45+0100 | 32A9CFAD5515A088 | ERROR | http-nio-10443-exec-3 | com.sparus.nps.ios.agent.V10AgentHandler |...

ansible: jenkins_plugin module exposes passwords in remote host logs

A flaw was found in the way Ansible passed certain parameters to the jenkinsplugin module. A remote attacker could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in th...

FBI Asks Businesses to Share Details About DDoS Attacks

The FBI has made an appeal to organizations victimized by DDoS attacks to share details and characteristics of those incidents, echoing a similar plea made last year in the throes of a relentless wave of ransomware attacks. The bureau said victims should contact local field offices regardless of...

WEM Administration Console Agent list does not contain WEM Agents

Some or all WEM Agents do not appear in the Agent list within the WEM Administration Console. The Norskale Agent Service Event Viewer Logs on affected machines contain the following error: Level: Error Source: Norskale Agent service Event ID: 0 The creator of this fault did not specify a reason...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

OSXAuditor - Free Mac OS X Computer Forensics Tool

OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and deprecated system a...

PureVPN Aided FBI to Track CyberStalker by Providing His Logs

By Waqas On Friday a New Town, Massachusetts based man called Ryan This is a post from HackRead.com Read the original post: PureVPN Aided FBI to Track CyberStalker by Providing His Logs...

FBI Arrests A Cyberstalker After Shady "No-Logs" VPN Provider Shared User Logs

FBI recently arrested a psycho cyber stalker with the help of a popular VPN service and this case apparently exposed the company's lies about the "no logs" policy. Taking down cyber stalkers and criminals is definitely a good thing, and the FBI has truly done a great job, but the VPN company whos...

[SECURITY] [DSA 3993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3993-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 06, 2017 https://www.debian.org/security/faq -...

MAM Enrollment failing with Error Message"Request Failed"

You will see the following error messages in the Secure Hub Logs: 2016-09-06T22:55:17.691+0400INFO 4called for store with error Error Domain=com.citrix.Receiver.AuthManager Code=6 "CAMAuthManErrorCodeOutOfLicences" UserInfo=com.citrix.Receiver.AuthManager.DiagnosticDescription=The gateway is out ...

Some WEMs Agent are failing to check in with WEM Broker

Many WEM Agents do not check in with the WEM Broker Server and they are missing from the Agent List inside of the WEM Administration Console. For example, this screenshot shows only 4 Agents checking in but dozens more WEM Agents are configured and should be present in this list: The Debug logs o...

How to enable/collect logs on WEM Agent machine

Type of logs available: There are a number of logs that can be collected from the WEM Agent to help with troubleshooting/diagnosing an issue Note:Please make sure to revert all changes after completing log collection. For logging information related to WEM Brokers, see CTX228742 1. WEM Agent...

HTTP Client in JIRA does not accept RFC6265 compliant date format in "Expires" cookie header

When using AWS Application Load Balancer, the following WARN log messages are shown in the logs, as JIRA does not understand the "Expires" header used for sticky sessions. code:java 2017-09-27 01:44:47,292 HealthCheck:thread-7 WARN o.a.h.client.protocol.ResponseProcessCookies Invalid cookie heade...

ThunderShell - PowerShell based RAT

ThunderShell is a Powershell based RAT that rely on HTTP request to communicate. All the network traffic is encrypted using a second layer of RC4 to avoid SSL interception and defeat network hooks. Dependencies apt install redis-server apt install python-redis Logs Every errors, http requests and...

WEM admin console fails to connect with error: Error while connecting to the specified Infrastructure Server

The WEM Administration Console errors out while connecting to the broker with a generic error: "Error while connecting to the specified Infrastructure Server". Looking into the the WEM admin console debug logs %userprofile%\Citrix WEM Console Trace.Log the following error is reported: Exception -...

CVE-2017-7550

A flaw was found in the way Ansible passed certain parameters to the jenkinsplugin module. A remote attacker could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in th...

Zomato: Potential server misconfiguration leads to disclosure of vendor/ directory

Hi, Apologies for the weakness label, it was the closest I could find for what appears to be a server misconfiguration. Typically, in MVC frameworks like Slim which I see you are using here, Symfony, Laravel, etc., the front controller is the only thing exposed, leaving vendor/, logs/, and others...

How to generate the SecureHub device side logs

How to generate the SecureHub device-side logs and setup the correct debug level on them...

Verizon Wireless Internal Credentials, Infrastructure Details Exposed in Amazon S3 Bucket

Organizations continue to leak data through publicly accessible Amazon S3 buckets, pointing a harsh finger at continued lax attitudes toward the custodianship of sensitive data. Verizon is the latest business affected by this epidemic, leaking in this case files marked confidential from an intern...

Registration Request For Worker Was Rejected Due To An Unknown Error

New machines added to the XenDesktop Site failed to register. From the VDA Application logs it was found that the VDA wasdiscovering the Delivery Controller. On the Delivery Controller the below error is logged in the Application Event logs from Citrix Broker Service : Registration request for...