As a Network Engineer, my development workflows are not very disciplined or strong. I mainly use Git as a place to store my completed work, in the form of GitHub. This does work, however, I am missing out on many very useful features that Git version control has to offer and any collaboration with a […]
This lab takes the initial config from the post, Creating FortiGate Config with Terraform, and adds in the IPS config to the firewall rule that permits all traffic between INSIDE and DMZ. The IPS policy is the default from FortiNet that blocks critical attacks. The attack that I will demonstrate is the ever popular vsftpd
Enabling FortiGate IPS with Terraform – Metasploit Test Read More »
For this lab I have created a small topology with a FortiGate which will be configured with Terraform. There are two networks INSIDE 192.168.10.0/24 and DMZ 192.168.20.0/24. The other interface is for OUTSIDE this is connected into my home lab network and has an IP of 10.10.30.215. Terraform is used to configure the FortiGate firewall,
Creating FortiGate Config with Terraform Read More »
Terraform can be downloaded from here, Select the OS (Windows, in this case) and CPU type ADM64 is most likely. Once downloaded, extract the executable and move it somewhere. I have moved it to C:\Terraform Then add it to the path environment variable under: system >>> settings >>> Advanced system settings >>> environment variables Once
Terraform Installation – Windows Read More »
I am going to demonstrate two different FortiGate versions. 6.2.3 and 7.2.4. The major differences for a lab are in regards to the trial licencing and the limitations each has. The FortiGate trial licencing has some limitations that should be understood. Pre 7.2.1 the images had limited encryption usage quite heavily. For me this was
Adding FortiGate to GNS3 Read More »
This is a quick guide to show the ease to create a phishing site. I am using zphisher. There are a number of these menu-driven phishing site creators, most of which do not work, or work well, zphisher is the best I have found. The phishing site will create will be for LinkedIn. This will
Create a Phishing Site with Zphisher Read More »