cactaceae21

git config --global user.name= git config --global user.email= git config --global core.editor=vim

git init Initialize directory for git repo git add Add files to staging git add . Adds all files to staging git commit -m "message" Commit staged changes git commit --amend Amend last commit

cactaceae21

Debian mods

Install "ssh" and "standard system utilities" only

Vim

apt install -y vim vim-runtime
echo -e "colorscheme murphy\nsyntax on" > .vimrc

Utils

cactaceae21

Queries

cactaceae21

Magic Mirror configs

Ubuntu 20.04 Minimal ubuntu-20.04.2-preinstalled-server-arm64+raspi.img.xz

default user: ubuntu/ubuntu

useradd -m -s /bin/bash mm2

cactaceae21

APT Update error pi@raspberrypi:~ $ sudo apt update Get:1 http://archive.raspberrypi.org/debian buster InRelease [32.6 kB] Get:2 http://raspbian.raspberrypi.org/raspbian buster InRelease [15.0 kB] Reading package lists... Done E: Release file for http://archive.raspberrypi.org/debian/dists/buster/InRelease is not valid yet (invalid for another 35d 1h 41min 5s). Updates for this repository will not be applied. E: Release file for http://raspbian.raspberrypi.org/raspbian/dists/buster/InRelease is not valid yet (invalid for another 36d 2h 53min 12s). Updates for this repository will not be applied.

pi@raspberrypi:~ $ sudo apt-get update --allow-releaseinfo-change

cactaceae21

Well Known Service Principal Names

Double %% marks in event logs Double %% marks in event logs 2 Audit Detailed File Share event logs

cactaceae21

Useful Links

• Unix / Linux - Regular Expressions with SED
• Regular Expressions - AWK
• 35+ Examples of Regex Patterns Using sed and awk in Linux
• Using Grep & Regular Expressions to Search for Text Patterns in Linux
• Illustrated jq tutorial
• How To Search Multiple Words / String Pattern Using grep Command on Bash shell
• The GNU Awk User’s Guide
• [RegEx for Formating Rsyslog Logs to work with Arcsight Template(StackOverflow)](https://stackoverflow.com/questions/56051254/regex-for-formating-rs

cactaceae21

Creating a certificate

RSA 4096 algorithm with SHA256 - will request subject details
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365

RSA 1024 algorithm with SHA1 - forcing just the Subject name without input
openssl req -x509 -newkey rsa:1024 -sha1 -keyout key.pem -out cert.pem -days 365 --subj "/CN=server"

Remove key password

openssl rsa -in original.key -out new.key

cactaceae21

Useful links

Pentesting and analysis

• https://github.com/enaqx/awesome-pentest#protocol-analyzers-and-sniffers

Network Analysis

• https://github.com/microsoft/etl2pcapng
• Timely acquisition of network traffic evidence in the middle of an incident response procedure

Malware Analysis

• http://malware-traffic-analysis.net/
• https://kindredsec.com/2020/01/07/the-basics-of-packed-malware-manually-unpacking-upx-executables/
• INetSim: Internet Services Simulation Suite

cactaceae21

• Get all network adapter details wmic nic get AdapterType, Name, Installed, MACAddress, PowerManagementSupported, Speed

  • More info on available fields
  • Useful extra fields
    • NetConnectionStatus
    • Status
    • PNPDeviceID
    • InterfaceIndex

• Reset WSL password