IIS ARR – configuration to use self-signed certificates on target server

In this new tutorial dedicated to IIS ARR, I will explain how to configure ARR in order to be able to use a self-signed certificate on the target server. In the previous tutorial, I explained how to do an SSL dump, in this configuration the target server is in HTTP, which means that the request …

Read more



IIS – Add the X-Forwarded-For field in the logs

In this tutorial, I will explain how to add the X-Forwarded-For field in the IIS logs, in order to retrieve the real IP address of a visitor when a reverse proxy is upstream of the IIS server. On the IIS Web server, open the Internet Services Management console. Select server 1 and click Logging 2. …

Read more



PowerShell: sign scripts

In this tutorial, I will explain how to sign your scripts. Before going into the subject, we will see why signing the scripts, the main reason is security. If your environment (computers + servers) is configured to run only signed scripts and a PowerShell script is launched in a malicious file, it will be neutralized …

Read more



PowerShell: download a file in HTTP, HTTPS

In this tutorial, I will explain how to download a file using PowerShell that is on a server accessible in HTTP or HTTPS. This can be particularly useful when administering a server without an interface, where the only browser installed is Internet Explorer or in a script. There are several solutions to download one using …

Read more



Install nano on Windows

In this tutorial, I will explain how to easily install nano on Windows (Desktop and Server). If you regularly use Linux, you are certainly familiar with it, for those who do not know nano, it is a command line text editor and it must be said that sometimes it is missing on Windows, particularly when …

Read more



PowerShell: show the contents of a text file

In this tutorial, I will show you how to display the contents of a text file (txt, yaml, php, vbs…) in a PowerShell window. In fact, it’s very simple, just use the Cmdlet Get-Content and specify the file name. Which give : If you are familiar with the cat command in Linux, you can also …

Read more



Windows Server: disable a cipher suite

In this tutorial, I will walk you through how to disable a cipher suite also call cipher. If you arrive on this tutorial by a search engine, there is a good chance that it is due to a vulnerability test and that you have an alert that goes up because vulnerable cryptographic suites (cipher) are …

Read more



WSUS manually import an update from the Microsoft Update Catalog

In this tutorial, I will explain how to manually import a site updatehttps://www.catalog.update.microsoft.com/ in WSUS with PowerShell. By default, this operation is possible automatically by passing the console and provided that you use Internet Explorer 11. In 2022, who still uses this browser? Download the update and retrieve its GUID Go to the site https://www.catalog.update.microsoft.com/ …

Read more