InfoSecMonkey (@realinfosecmonkey)

Claude Code says Combobulating. Mine says Blaming DNS. Here is the 30 second config. Link in bio. #ClaudeCode #AI #Terminal #DevTools #InfoSecMonkey

Part 2: leak one route between VRFs, and why your FortiGate ping lies to you. Guide in bio. #FortiGate #VRF #Routing #NetworkEngineer #InfoSecMonkey (Link in bio)

Same subnet, twice, on one FortiGate. VRFs make it legal. Full guide in bio. #FortiGate #VRF #Networking #NetworkEngineer #InfoSecMonkey (Link in bio)

Part 2: a forked ARTEX image handed out root shells to anyone with the trigger. Here's how to hunt it. #ARTEX #docker #cybersecurity #supplychain #InfoSecMonkey Full breakdown: link in bio.

A pentest tool now runs real nation-state attacks. Here's how ARTEX works and how to find it on your network. #ARTEX #AIsecurity #cybersecurity #blueteam #InfoSecMonkey Full breakdown: link in bio.

Part 2 - One leading space keeps an API key out of your shell history. Plus read -s and Keychain. Full guide in bio. #zsh #macos #cybersecurity #apisecurity #InfoSecMonkey

Deleting .bash_history does not clear your history. Bash writes it back on exit. Here is the right order. Full guide in bio. #bash #linux #cybersecurity #sysadmin #InfoSecMonkey

Part 3: audit outgoing NTLM, then deny it, then kill WebClient so the hash can't leave over WebDAV. #Windows #ActiveDirectory #CyberSecurity #SysAdmin #InfoSecMonkey Full guide: link in bio.

Part 2: the Outlook bug only works if SMB can reach the attacker. One FortiGate policy fixes that. #FortiGate #Firewall #ZeroDay #NetworkSecurity #InfoSecMonkey Full guide: link in bio.

One opened .msg file leaks your NTLM hash. Here's how I check if Outlook is patched. Part 1 of 3. #Outlook #CyberSecurity #ZeroDay #SysAdmin #InfoSecMonkey Full guide: link in bio.

Part 1 - Your server saw the attack. It never wrote it down. Two settings fix event 4688. Full guide, link in bio. #WindowsServer #BlueTeam #SOC #PowerShell #InfoSecMonkey

Part 2: one nftables rule, MPTCP off, then patch. Your Linux servers vs CVE-2026-98432. Full guide in bio. #Linux #CVE202698432 #nftables #InfoSecMonkey

Part 2: lock down the Linux servers behind your FortiGate. Check the kernel, drop TCP packets whose IP header is longer than 20 bytes, turn MPTCP off, restart services, then patch and reboot. Traffic that never crosses the NPU still needs this. Full guide: link in bio. #Linux #LinuxKernel…

Stop copy-pasting ports between tools. One nmap flag feeds the whole chain. Full guide in bio. #nmap #pentest #cybersecurity #redteam #InfoSecMonkey

Patching sshole is one upgrade and one restart. Then check your logs for logins that should never happen. #OpenSSH #AlpineLinux #PatchNow #Linux #InfoSecMonkey Full guide: link in bio

Part 2: schedule the CVE-2026-76463 Meraki fix for every network with one API call. Use the version id, not the name. #Meraki #Cisco #CVE #Patching #InfoSecMonkey Full guide: link in bio

Cisco Meraki CVE-2026-76463 is an 8.8 with no workaround. Here is how I find every affected box in two API calls. #Meraki #Cisco #CVE #NetworkSecurity #InfoSecMonkey Full guide: link in bio

Part 1 - A 257 byte password logs in to accounts with no password on Alpine. Here's how to check your box. #OpenSSH #AlpineLinux #CyberSecurity #Linux #InfoSecMonkey Full guide: link in bio

Caption: Part 2: find SonicWall VPN logins your IdP never saw. One script, two log exports. Link in bio for the script #SonicWall #ThreatHunting #BlueTeam #CVE #InfoSecMonkey

Caption: One stolen password skips SonicWall SAML MFA. Here's how to check and what to patch to. #SonicWall #CyberSecurity #VPN #CVE #InfoSecMonkey Link in bio for the full guide

Part 2: no machine cert, no password prompt. One FortiGate setting decides if the cert is even checked. Link in bio. #FortiGate #FortiClient #IKEv2 #VPN #InfoSecMonkey

Your VPN checks the password. It never checks the laptop. One cert per device fixes that. Full guide, link in bio. #FortiGate #VPN #OpenSSL #PKI #InfoSecMonkey

Move FortiGate certs from SCEP to EST in five lines. Renewal over mTLS, no shared secret. #FortiGate #Fortinet #PKI #cybersecurity #InfoSecMonkey Full guide: link in bio.

SCEP still issues your Wi-Fi and VPN certs. It trusts a password, not a device. Part 2 fixes it. #SCEP #PKI #cybersecurity #networking #InfoSecMonkey Full guide: link in bio.

Part 3 - Prove your key matches your cert in 10 seconds. #openssl #pki #tls #sysadmin #InfoSecMonkey Full guide: link in bio

Part 2 - OpenSSL 3 won't open your old PFX? One flag fixes it. #openssl #pkcs12 #sysadmin #cybersecurity #InfoSecMonkey Full guide: link in bio

Your .cer file might be lying to you. PEM vs DER in 45 seconds. #openssl #pki #sysadmin #cybersecurity #InfoSecMonkey Full guide: link in bio

Part 2: import the GoDaddy intermediate as a CA cert, restart sslvpnd after hours, verify. Guide in bio. #FortiGate #Fortinet #SSL #SSLVPN #InfoSecMonkey

Browser says the cert is fine. curl says error 60. Your FortiGate is only sending the leaf. Part 2 tomorrow, guide in bio. #FortiGate #SSL #OpenSSL #NetworkSecurity #InfoSecMonkey

Part 2: push the Paint CVE-2026-83844 fix with winget, then verify 11.2609.401.0. Link in bio. #Windows11 #PowerShell #winget #SysAdmin #InfoSecMonkey