Maxim Prototype-X

Linux Magic System Request Key Hacks

Documentation for sysrq.c

What is the magic SysRq key?


It is a 'magical' key combo you can hit which the kernel will respond to
regardless of whatever else it is doing, unless it is completely locked up.

Signal	Value	Action	Comment
SIGHUP	1	Term	Hangup detected on controlling terminal or death of controlling process
SIGINT	2	Term	Interrupt from keyboard
SIGQUIT	3	Core	Quit from keyboard
SIGILL	4	Core	Illegal Instruction
SIGABRT	6	Core	Abort signal from abort(3)
SIGFPE	8	Core	Floating point exception
SIGKILL	9	Term	Kill signal
SIGSEGV	11	Core	Invalid memory reference
SIGPIPE	13	Term	Broken pipe: write to pipe with no readers

(from Understanding Nginx Server and Location Block Selection Algorithms - https://goo.gl/YyzshP)

server {

This Document roughly describes a HAProxy Cluster Setup on Ubuntu 16.04 based on an example Configuration with 3 Nodes

This Document is still work in Progress the Following Stuff still needs to be done:

Action	tmux	screen
start a new session	`tmux` `tmux new` `tmux new-session`	`screen`
start a new session with a name	`tmux new -s name`	`screen -S name`
re-attach a detached session	`tmux attach` `tmux attach-session`	`screen -r`
re-attach a detached session with a name	`tmux attach -t name` `tmux a -t name`	`screen -r name`
re-attach an attached session (detaching it from elsewhere)	tmux attach -dtmux attach-session -d	screen -dr

	sudo dpkg-reconfigure wireshark-common #Select "Yes"
	chmod +x /usr/bin/dumpcap
	sudo setcap 'CAP_NET_RAW+eip CAT_NET_ADMIN+eip' /usr/bin/dumpcap
	or
	`sudo setcap 'CAP_NET_RAW+eip CAT_NET_ADMIN+eip' $(which dumpcap)'

	# local port forwarding
	# the target host 192.168.0.100 is running a service on port 8888
	# and you want that service available on the localhost port 7777

	ssh -L 7777:localhost:8888 user@192.168.0.100

	# remote port forwarding
	# you are running a service on localhost port 9999
	# and you want that service available on the target host 192.168.0.100 port 12340

	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)

	000000 Officially Xerox
	000001 SuperLAN-2U
	000002 BBN (was internal usage only, no longer used)
	000003 XEROX CORPORATION
	000004 XEROX CORPORATION
	000005 XEROX CORPORATION
	000006 XEROX CORPORATION
	000007 XEROX CORPORATION
	000008 XEROX CORPORATION
	000009 powerpipes?

	# Monitoring on interface eth0
	tcpdump -i eth0 -n port 67 and port 68