TD Wiki linux:admin

linux:admin:apache

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

apache Serving directories outside www_root Problem: want to serve a wiki inside home directory: wiki -> /home/dang/data/mydirectory/www_local/tdwiki/www/dokuwiki-2012-09-10 Symlink from www_root * create symlink to the directory in “home”

linux:admin:bash_script

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

Bash script * *

linux:admin:dhcp_scapy

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

DHCP DoS with scapy * * DHCP Denial of Service with scapy by foip on December 9th, 2010 1. Introduction This is a small post explaining how to run a starvation attack against a DHCP server with only three lines of code (thanks to Scapy!). Information & download regarding Scapy :

linux:admin:fail2ban

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

Setup fail2ban to mitigate DDOS * Installation sudo apt-get install fail2ban sudo systemctl start fail2ban sudo systemctl enable fail2ban Config: sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local sudo vim /etc/fail2ban/jail.local [DEFAULT] ignoreip = 127.0.0.1/8 192.168.18.10/32 bantime = 10d maxretry = 2 findtime = 600 [sshd] enable = true port = ssh filter = sshd logpath = /var/log/auth.log maxretry = 3 sudo s…

linux:admin:firewalld

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

Firewalld *

linux:admin:fsck

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

fsck Needed After Reboot Fedora Boot netinst iso and choose rescure. When prompted to mount root, skip mounting and we go directly to command line. fsck /dev/mapper/fedora-root

linux:admin:install_nat_subnet_or_virtual_net

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

Install Subnet or Virtual Net What we do? * bridge * fireall with iptables * dnsmasq * test with virtual machine Bridge Iptable rules Dnsmasq Virtual Machine KVM Troubleshooting * dnsmasq uses config file, in which some configuration does not work. REmove all these files and start dnsmasq with minimal config from command line.

linux:admin:iptables

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

iptables * * There are three tables in total. The first is the mangle table which is responsible for the alteration of quality of service bits in the TCP header. This is hardly used in a home or SOHO environment. The second table is the filter queue which is responsible for packet filtering. It has three built-in chains…

linux:admin:linux_webserver

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

linux web server Folder structure root@debian32:/var/www# mkdir vfoss.org root@debian32:/var/www# mkdir sividuc.org root@debian32:/var/www# midr vfoss.org/htdocs root@debian32:/var/www# mkdir vfoss.org/htdocs root@debian32:/var/www# mkdir vfoss.org/cgi-bin root@debian32:/var/www# mkdir vfoss.org/logs root@debian32:/var/www# cp -r vfoss.org/* sividuc.org/

linux:admin:mysql

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

Mysql install add users mysql> CREATE USER 'monty'@'localhost' IDENTIFIED BY 'some_pass'; mysql> GRANT ALL PRIVILEGES ON *.* TO 'monty'@'localhost' -> WITH GRANT OPTION; mysql> CREATE USER 'monty'@'%' IDENTIFIED BY 'some_pass'; mysql> GRANT ALL PRIVILEGES ON *.* TO 'monty'@'%' -> WITH GRANT OPTION; mysql> CREATE USER 'admin'@'localhost'; mysql> GRANT RELOAD,PROCESS ON *.* TO 'admin'@'localhost'; mysql> CREATE USER 'dummy'@'localhost';

linux:admin:nfs

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

NFS nfsServer: 2.0.0.1:/share/folder nfsClient: 2.0.0.100 [root@nfsserver ~]# yum install nfs-utils nfs-utils-lib [root@nfsserver ~]# yum install portmap (not required with NFSv4) [root@nfsserver ~]# apt-get install nfs-utils nfs-utils-lib [root@nfsserver ~]# /etc/init.d/portmap start [root@nfsserver ~]# /etc/init.d/nfs start [root@nfsserver ~]# chkconfig --level 35 portmap on [root@nfsserver ~]# chkconfig --level 35 nfs on [root@nfsserver ~]# mkdir /share/folder vi /etc/exports /share/f…

linux:admin:open_vpn_dns

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

OpenVPN DNS update * opensuse: * Ubuntu: 1. Using systemd-resolve 1.1 Theory . 1.2 Manual configuration Prerequisites First check if you have systemd-resolved installed and running: systemctl status systemd-resolved Check if you have the resolvectl…

linux:admin:scapy_netscan

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

Packet Wizardry: Ruling the Network with Python By Rob klein Gunnewiek aka detach v2005-03-28 (This paper is subject to change.. new techniques will probably be added over time) Foreword =x=x=x=x= In this tutorial I will cover techniques involving packet construction and manipulation to master the network from the Python command line. No prior knowledge of Python is required, however I guess that when you're as excited about this as I am, you will want to start learn…

linux:admin:ssh

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

SSH Key ssh-keygen -t rsa chmod 700 ~/.ssh chmod 600 ~/.ssh/id_rsa chmod 644 ~/.ssh/id_rsa.pub Your identification has been saved in id_rsa_1s2n. Your public key has been saved in id_rsa_1s2n.pub. The key fingerprint is: ae:71:3a:16:22:91:78:7b:25:1e:5f:dd:60:fc:f2:28 dang@localhost.localdomain The key's randomart image is: +--[ RSA 2048]----+ | . | | + | | . . o + | |. + o . . o o | | . + = .S + | | o + o.E . . | | o ...o. | | o= …

linux:admin:systemd_debug_log

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

Logging systemd To turn on debug loggin, use “systemctl edit systemd-resolved”, then write the two lines: [Service] Environment=SYSTEMD_LOG_LEVEL=debug

linux:admin:tcpdump

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

tcpdump tcpdump -ttvn -ieth1 example Syntax: Protocol Direction Host(s) Value Logical Operations Other expression Value: ether, fddi, ip, arp, rarp, decnet, lat, sca, moprc, mopdl, tcp and udp. If no protocol is specified, all the protocols are used.

linux:admin:wine_office_kms

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:36+00:00

Wine KMS Activation This work for playonlinux: In order to activate Office with a KMS you will have to edit a number of registry values. So first start the Wine registry editor for your office prefix: Open PlayOnLinux Choose Configure Select Office 2010 from list of installed applications on left Click on the Wine Tab Click Registry Editor

linux:admin:wsl

Anonymous (anonymous@undisclosed.example.com) — 2025-02-20T14:55:37+00:00

WSL Windows 1. File permission Create this file and restart windows to add metatdata to files: cat /etc/wsl.conf [automount] enabled = true options = "metadata,umask=22,fmask=11"