Download Tester
REAL MALWARE
Use this at your own risk, and for educational purposes. Other payloads can be found here: https://abrasive-lantana-35c.notion.site/Real-Malware-hoster-578c09c109b84f599165614d37b2d30b This page has been created in order to demonstrate proper function of NGFW / UTM / AV engines with real stuffs. Exploit.PDF.Agent.u.ZIP Checkpoint… Continue Reading
FortiOS IPSEC pre-shared key (PSK) recovery logic
In various scenarios, you may want to recover psk plaintext from encrypted format out of a FortiGate or from a FortiGate config backup. Method 1: “Print Instructions” menu through a FortiClient profile, ther are 2 alternatives for recovering PSK: I… Continue Reading
FortiGate: Proxy ou Flow-based inspection – Le grand dilemne ?
Essayons ici de clarifier quelques points sur ces 2 approches Modes d’inspection Flow-based Avantages & inconvénients ? J’ai pour habitude de dire, du plus indolore au plus complexe/précis Implicit flow < Implicit proxy-based < transparent redirect to web proxy OU… Continue Reading
Embedded content AMP test documents
This document aims to run tests against Antivirus Engine, URL Filter and Click Sanitization.
FortiGate Troubleshooting steps guidelines
Hello,I’ve been working on this diagram to ease troubleshooting decisions while debugging traffic flows through FortiGate It’s a beta version. If you have any thoughs about how to improve it, let me know in comments.
Nouveau Challenge DGSE – Opération Brigitte Friang
Nouveau Challenge DGSE – Opération Brigitte Friang Evil Country, régime autoritaire fictif est sujet à de violentes manifestations contre le régime en place. De nombreux signaux indiquent qu’Evil Gouv est prêt à passer à l’action afin de faire taire la… Continue Reading
Fortigate – Finding MTU of an interface
Recently I had the need to show the MTU of an Fortinet Fortigate firewall interface. By default, if there are no changes the MTU will be 1500. But in this case I needed to be able to show that the… Continue Reading
Un gentil petit site web vulnérable pour des tests WAF
bWAPP, or a buggy web application, is a free and open source deliberately insecure web application.It helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities.bWAPP prepares one to conduct successful penetration testing and ethical hacking projects. What… Continue Reading