Edu4rdSHL

Pre-requisitos:

arch-install-scripts, deboostrap

Instalación ArchLinux: mkdir ArchLinux && pacstrap -c ArchLinux base linux-api-headers

Una vez iniciada sesion con systemd-nspawn -D ArchLinux (debe usar la opción -D solamente), debemos borrar los archivos /etc/securetty y /usr/share/factory/etc/securetty dentro del contenedor solamente, además de añadirlos al archivo /etc/pacman.conf del mismo, en la opción NoExtract. La línea sería la siguiente:

NoExtract = /etc/securetty /usr/share/factory/etc/securetty

Edu4rdSHL

#!/usr/bin/env bash
# Simple script to collect the info from the top enumeration tools, unify all the results in a same file, import the data to Findomain and include it in the monitoring process while saving to database.
# Usage:
# ./findomain_integration.sh domains_file findomain_config_file - see https://www.github.com/Edu4rdSHL/findomain/tree/master/config_examples
domains_file="$1"
config_file="$2"
total_file="all_external_subdomains.txt"

external_sources() {
    local amass_file="amass_output.txt"

Edu4rdSHL

gew1-accesspoint-a-2pxd.ap.spotify.com
gew1-accesspoint-a-4q1p.ap.spotify.com
guc3-accesspoint-a-4q55.ap.spotify.com
gew1-accesspoint-a-wmkv.ap.spotify.com
gew1-accesspoint-a-ltw9.ap.spotify.com
guc3-accesspoint-a-0r0n.ap.spotify.com
gew1-accesspoint-a-c5mw.ap.spotify.com
gew1-accesspoint-a-crll.ap.spotify.com
36.video-ak.cdn.spotify.com
gew1-accesspoint-a-1lfs.ap.spotify.com

Edu4rdSHL

[ SecHackLabs ~/Projects/Rust/Development/findomain ] [develop]
└─ ▶ time ./target/release/findomain -t aol.com --query-database -i --threads 100

Target ==> aol.com

Searching subdomains in the Findomain database for the target aol.com 🔍

Performing asynchronous subdomains resolution for 70600 subdomains with 100 threads, it will take a while. 🧐

Edu4rdSHL

If you installed your #ubuntu with full-disk #encryption a while, you may want to upgrade your #luks header version to enjoy improved #security and stronger password hashing algorithms.

Boot from USB

You can't change LUKS header from a live system - you need to boot a live Ubuntu USB to be able to access the encrypted partition. First, create a bootable USB stick using a regular Ubuntu installer image.

• Just get the latest installer ISO available
• You need the full installer, the mini network installer won't work
• You may need to disable Secure Boot in BIOS temporarily to boot from USB

Edu4rdSHL

scriptencoding utf-8

" To install nvim on ubuntu:
" sudo apt-get install software-properties-common
" sudo add-apt-repository ppa:neovim-ppa/unstable
" sudo apt-get update
" sudo apt-get install neovim
" sudo apt-get install python-dev python-pip python3-dev python3-pip
" sudo update-alternatives --install /usr/bin/vi vi /usr/bin/nvim 60
" sudo update-alternatives --config vi

Edu4rdSHL

OpenSSH_7.9p1, OpenSSL 1.1.1  11 Sep 2018
debug1: Reading configuration data /home/sechacklabs/.ssh/config
debug1: /home/sechacklabs/.ssh/config line 1: Applying options for aur.archlinux.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: resolving "aur.archlinux.org" port 22
debug2: ssh_connect_direct
debug1: Connecting to aur.archlinux.org [5.9.250.164] port 22.
debug1: Connection established.
debug1: identity file /home/sechacklabs/.ssh/aur type 0
debug1: identity file /home/sechacklabs/.ssh/aur-cert type -1

Edu4rdSHL

 ➤➤➤➤ ▶ sudo pacman -Fys jarsigner
:: Synchronizing package databases...
 testing is up to date
 core is up to date
 extra is up to date
 community-testing is up to date
 community is up to date
 multilib-testing is up to date
 multilib is up to date
 blackarch is up to date

Edu4rdSHL

 ➤➤➤➤ ▶ pacman -Fs jarsigner && pacman -Qi java-environment-common && which jarsigner
extra/bash-completion 2.8-1
    usr/share/bash-completion/completions/jarsigner
extra/java-environment-common 3-1
    usr/bin/jarsigner
    
Name            : java-environment-common
Version         : 3-1
Description     : Common files for Java Development Kits
Architecture    : any

Edu4rdSHL

sechacklabs@SecHackLabs:~$ pip --help
Traceback (most recent call last):
  File "/usr/bin/pip", line 11, in <module>
    load_entry_point('pip==10.0.1', 'console_scripts', 'pip')()
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 476, in load_entry_point
    return get_distribution(dist).load_entry_point(group, name)
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2700, in load_entry_point
    return ep.load()
  File "/usr/lib/python3.6/site-packages/pkg_resources/__init__.py", line 2318, in load
    return self.resolve()