local server Archives

Winsage

March 19, 2025

Microsoft Windows File Explorer Vulnerability Let Attackers Perform Network Spoofing

A vulnerability identified as CVE-2025-24071 has been discovered in Windows File Explorer, allowing attackers to extract NTLM hashed passwords with minimal user interaction. This high-severity flaw, termed “NTLM Hash Leak via RAR/ZIP Extraction,” exploits Windows Explorer’s automatic file processing when a specially crafted .library-ms file is extracted from a compressed archive. The file contains a malicious SMB path that triggers an NTLM authentication handshake, leaking the victim’s NTLMv2 hash. Microsoft addressed this issue in its March 2025 updates. A proof-of-concept exploit was published by researcher 0x6rss, and evidence suggests the vulnerability may have been exploited in the wild prior to its disclosure. Users are advised to apply security updates and implement protections against NTLM relay attacks.

Winsage

December 21, 2024

How to setup IPAM on Windows Server

IP Address Management (IPAM) in Windows Server automates and centralizes the management of IP address infrastructure, allowing administrators to monitor, manage, and audit DHCP and DNS servers. Setting up IPAM involves several steps: verifying prerequisites (supported Windows Server version, active directory domain, and operational DHCP/DNS roles), installing IPAM through Server Manager or command prompt, configuring IPAM for file sharing and access settings, configuring server discovery, and managing servers and settings. To add an IP address to IPAM, users access the IPAM console, navigate to the IP Address Space section, select the desired IP Address block, and provide necessary details before saving the changes.

Tech Optimizer

December 20, 2024

PostgreSQL Tips: Installing the PostgreSQL Client

To install the psql client for PostgreSQL on various operating systems: - **macOS**: Use Homebrew with the command `brew install libpq`. Then link it with `brew link --force libpq`. - **Ubuntu (16.04 and 18.04)**: Run `sudo apt-get install postgresql-client` to install the PostgreSQL 10 client. - **Red Hat Enterprise Linux (RHEL 7)**: First, configure the repository with `sudo yum install https://download.postgresql.org/pub/repos/yum/10/redhat/rhel-7-x86_64/pgdg-redhat10-10-2.noarch.rpm`, then install the client with `sudo yum install postgresql10`. - **Fedora (27 and 28)**: Execute `sudo dnf install postgresql.x86_64` to install the PostgreSQL client. - **Windows 10**: Download the PostgreSQL installer from Enterprise DB, select only the Command Line Tools during installation, and configure the PATH environment variable to include `C:Program FilesPostgreSQL10bin`. These steps allow users to connect to IBM Cloud Databases without needing a full PostgreSQL installation.

Winsage

November 10, 2024

How to run a local Linux web server running in a Windows 11 window

Developers working with PHP, MySQL, or other programming languages can set up a local Linux web server on Windows 10 and 11 using the Windows Subsystem for Linux (WSL). To create a local Linux server, users can install AlmaLinux OS 9 from the Microsoft Store, set up a username and password, and update the environment with the command PLACEHOLDERb7c5d03666b3256a. The root user password can be set with PLACEHOLDERa83ee36d02e0ed37. To install VirtualMin, users need to download a shell script using PLACEHOLDER046927d781263e03, make it executable with PLACEHOLDER3420ebbe8bed59dc, and run it with sudo ./install.sh. After installation, access the VirtualMin interface via the provided URL, log in as root, and complete the Post-Installation Wizard. It's recommended to change the default MariaDB password and configure a new virtual server with a domain name and admin credentials. Users can manage databases through http://IPaddress/phpmyadmin and can optionally assign a hostname in the hosts file for easier access. To allow read and write access to the publichtml directory, the command PLACEHOLDER51fa7d64c675f048 should be executed. The local site can be accessed through specific URLs, including the home page, Virtualmin Control Panel, and database management. For the web server to function correctly, an AlmaLinux-9 window must remain open in Windows.