WPS Office Zero Day Vulnerability on 7 Aug 2023 - workaround on network level but have side effect

Solution:

Block *.wps.cn on firewall, since the attacker use the vulnerability to redirect the WPS to xxxwps.cn, then trigger the attack by exploit the vulnerability.

 

Drawback:

Cannot use some wps cloud service, function and features (e.g. 云文档等功能)

 

WPS Office Zero Day Vulnerability on 7 Aug 2023 - workaround on network level but have side effect

How to disconnect from vSwitch after the hyper-v feature have been uninstalled - Windows 10

Problem: The vSwitch still exist and the physical interface still connect to the vSwitch after the hyper-v feature have been removed on Windows 10 16273

Workaround: (Please run ipconfig /all >> C:\temp\IP.txt to backup the network config like IP address first)

1. Start by using the Get-NetAdapterBinding cmdlet to display the bindings for the specified interface:

PS C:\> Get-NetAdapterBinding -InterfaceAlias "Ethernet"

Remark: The "Ethernet" is the display name of the physical network connection (You can check it under "Control Panel" > "Network and Internet" > "Network Connections")

2.  PS C:\> Disable-NetAdapterBinding -Name "Ethernet" -ComponentID vms_pp

3. Reboot the machine

Reference:

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2012/AdminTips/Network/using-powershell-disable-network-adapter-bindings.html

How to disconnect from vSwitch after the hyper-v feature have been uninstalled - Windows 10

Net use error 64 and 53

From Server A to Server B (Different subnet)
error 64

From Server B to Server B net use locally and Server B to Server C (Same Subnet)
error 53

Since those new Server are domain member server, it is using DNS/WINS service for network resource resolution. And also, user account "user" which is a local account, we need to use <server name>\user for connection.

Resolved:

Reference:
http://garclak-kb.blogspot.hk/2009/12/smb-error-codes.html
http://www.howtonetworking.com/systemerrors.htm#System error 53 - The network path was not found.
https://www.bleepingcomputer.com/forums/t/449159/win-7-pro-x64-group-policy-error-mapped-drives-not-connectable-after-a-while/
https://www.veeam.com/kb1230
http://www-01.ibm.com/support/docview.wss?uid=swg21505912
http://support.dameware.com/kb/article.aspx?ID=300059
http://superuser.com/questions/971542/why-am-i-getting-error-53-network-path-not-found-after-net-use-delete
http://superuser.com/questions/583868/windows-7-cannot-access-samba-share-error-53-and-network-path-was-not-found
https://technet.microsoft.com/en-us/library/cc940100.aspx

Net use error 64 and 53

Router Default password website

Select the router manufacturer to find all passwords and models for that router:

http://www.routerpasswords.com/

Router Default password website

Secunia Corporate Software Inspector (CSI)

The Secunia CSI is a highly efficient vulnerability and patch scanner that:

• Inspects multiple hosts for vulnerable programs.
• Covers programs from both Microsoft and thousands of other vendors.
• Gives security status (insecure/end-of-life/patched) for each program.
• Shows the criticality rating for each insecure program.
• Provides direct links to relevant patches for insecure programs.

http://secunia.com/vulnerability_scanning/corporate/

Secunia Corporate Software Inspector (CSI)

(Freeware) NetworkMiner – Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files.

The purpose of NetworkMiner is to collect data (such as forensic evidence) about hosts on the network rather than to collect data regarding the traffic on the network. The main view is host centric (information grouped per host) rather than packet centric (information showed as a list of packets/frames).

http://networkminer.sourceforge.net/

(Freeware) NetworkMiner – Network Forensic Analysis Tool (NFAT)

(Cisco) Pure Networks Security Scan

Free wireless sceurity scan

http://nmreports.linksys.com/nmscan/default.jsp

(Cisco) Pure Networks Security Scan