Linux and Information Security Stuff

Restore Proxmox Container and VM from Backup

* Restore Container from backup pct restore <containerIDToCreate> <backupFileName>.tar.zst --storage <storageName> * Restore VM from backup qmrestore <backupFile>.tar.zst <vmIDToCreate> -unique -storage <storageName> Note: use -unique option to Create unique mac for ethernet

Bash

Generate UUID in bash

Sometimes you may need to generate random UUIDs in bash shell. Here's a quick way to generate one : uuidgen If you need to get just the uuid and no dashes , you can use sed : uuidgen | sed 's/-//g' Another way to use the kernel random

PowerShell - Check Last System Reboot/Shutdown Reason

You might encounter situations where you PC may have shutdown or rebooted when trying to wake up from sleep or other reasons. You can use PowerShell to pull windows event logs to look for clues as to why that may have happened. You can also use this to pull any

Running WiFi Access point on a Raspberry PI

I needed to spoof a wireless access point with a specific mac address and was looking for a way to temporarily create a "Rogue" access point for testing. It is extremely easy to configure a WiFi Access point with a Raspberry pi that has a Wireless Interface as

hard link

Creating Hard Link in Windows

I have used hard links abundantly in Linux, but had never tried or had the need for a hard link in windows. Today I came across an application that I needed to use, but wanted to put the data directory in a specific directory that syncs and is available to

alpine linux

Install and Configure WireGuard VPN

Wireguard is a very simple, fast and secure VPN solution. It is being widely adopted and heavily developed. Installation in Centos 7: yum install kernel-devel kernel-headers # you have to install kernel headers first yum install epel-release https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm yum install yum-plugin-elrepo yum install

Error: Unfortunately you can't have non-Gradle Java modules and > Android-Gradle modules in one project

If you encounter this error in Android Studio when trying to run an android application after freshly importing a project. You just have to delete the following files and directories: * .idea directory * .iml files Once you delete these files and directories, re-open your project and it should work.

Install Kali Linux with PowerShell on Windows without Virtual Machine (WSL)

Start PowerShell as an administrator. Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux And then, you need to restart your machine, so hit y Start PowerShell as an administrator again. Now, that you have WSL enabled, you can install Kali Linux just by going to the Microsoft Store. Or, you can install it via

Local Certificate Authority for Private Networks

First, we will need to create a Certificate Authority in our home network so that we can sign the certificates. To do that, you can find two scripts in my GitHub repository. We will start by cloning it. Link to the repo: https://github.com/amitn322/localca git clone https:

Upgrade ProxmoxVE 6.1 to 6.2 without Subscription

Once you have SSHed into your Proxmox: cd /etc/apt/sources.list.d/ There, you should find two files, pve-enterprise.list and pve-no-subscription.list. To make sure that you don't pull anything off the enterprise version, comment out the text in pve.enterpirse.list . Now, in pve-no-subscription.list

Linux

Getting exit status of the command when using pipes

I came across a situation where i needed the exit code of last command but before passing it through the pipe. For example, running the following command would give the exit code 0, even if the first command failed : root@NTRTR:/tmp# wl -i eth0 assoclist | wc -l wl: wl

alpine linux

Alpine with XFCE and VNC on a virtual machine

I was looking to create a light weight virtual machine with Graphical user interface for segmenting some of my internet browsing endeavors. I tested a couple of light weight Linux distros but ended up with just using Alpine Linux with XFCE as the Desktop Environment and VNC for remote access.

nginx

Hosting HTTPS sites with Nginx

Youtube Version !Indroduction What is SSL/HTTPS/TLS? * SSL - Secure Sockets Layer * It is the standard technology used to encrypt the communication between the client and the server. * This is done to avoid any man in the middle attacks. * HTTPS - Hyper Text Transfer Protocol Secure * HTTPS appears in

nginx

Nginx - SSL Passthrough Reverse Proxy

Nginx 1.9.3+ allows TCP load balancing or SSL passthrough. What this means is you can reverse proxy or load balance web applications without having to terminate SSL at the nginx. Example Configuration for name based access: stream { map $ssl_preread_server_name $name { www.somesite.com some-server; www.

OSCP Review - Proctored Version

About Me: I am motivated IT professional with 14 years of experience in the IT industry. During the initial days of my career I worked as a programmer. After some time I got interested into Systems Administration and started working as a systems engineer. Later in my career I took

replication

Setting up PostGresql Replication with Loadbalancing with PGPOOL II

Installation (on both Master and Slave Nodes): yum install https://yum.postgresql.org/9.5/redhat/rhel-7-x86_64/pgdg-centos95-9.5-3.noarch.rpm yum install postgresql95 postgresql95-server postgresql-libs postgresql95-contrib rsync Initialize the database and configure postgresql /usr/pgsql-9.5/bin/postgresql95-setup initdb cd /var/lib/pgsql/9.5/data cp postgresql.

Rotate your video with ffmpeg

You might run into an issue with the orientation on your videos at times and yeah it is super easy to rotate your video with a free and open source utility ffmpeg. Here is how : ffmpeg -i input.mp4 -vf "transpose=1" output.mp4 Where 0=90 Degrees

FFMPEG

Cut Video file with ffmpeg

FFMPEG is an open source and really powerful audio/video processor. You can do a lot of different things with ffmpeg. One of which is to cut video. Below are some examples to see how you can cut video with free ffmpeg. Basic Syntax: ffmpeg -i [input_file] -ss [start_

Postfix

Configure postfix to use Sendgrid as default Relay

If you would like to configure postfix to use Sendgrid as the mail relay, you can do so by editing the postfix main configuration file. vi /etc/postfix/main.cf And then paste the content below at the end of the file : smtp_sasl_auth_enable = yes smtp_sasl_password_

Wordpress Admin Security

Yeah there are a lot of script kiddies out there scanning word press sites and brute forcing word press admin logins. There are ways you can limit access to the wordpress admin panel from restricted set IP Address or block unwanted browser agents. Here are some examples using .htaccess and

Bash

Touch command tips and tricks

Changing modification time using touch: touch -d '-4 day' filename touch -d '-4 hour' filename touch -d "30 days ago" filename Setting Timestamp : touch -t 201606101712 filename

Bash - Convert a comma separated list to any Array

#!/bin/bash IFS="," sampleData="59,100,23,98,50" arr=($sampleData) for i in "${!arr[@]}";do echo Item $i:"${arr[$i]}" done unset IFS echo "Completed"

wake on lan

Random Wake up of Windows Machine from Sleep mode

It happens at times that the windows machine wakes up randomly from sleep mode. Here are some steps you may be able to follow to identify the cause and address the issue : Find out the cause of the wake : powercfg -lastwake You may see the Device that woke the computer

Installing newer or multiple version of python on Centos

I stumbled across this situation where I needed to install python > 2.7 on Centos. Yum breaks if you upgrade the system python as yum relies on python 2.6 . So the only way to not touch the system python but still be able to use later version of

manage postfix queue

Postfix Queue Management

Retry delivery of mail in queue : postqueue -f Flush mail for a domain to primary mail server from Relay server: postqueue -s domain.com Delete all email in queue for a domain: postqueue -p | tail -n +2 | awk 'BEGIN { RS = "" } /@example.com/ { print $1 }' | tr -d

Amit's Blog