kudosqujo

# metasploitable IP = 10.0.0.165
nmap -sS --send-ip 10.0.0.165 # stealth scan
nmap -sT --send-ip 10.0.0.165 # tcp full connect scan
nmap -sA --send-ip 10.0.0.165 # ack scan
nmap -sX --send-ip 10.0.0.165 # xmas scan

nmap -Pn -n --send-ip -D <decoy> <target> # decoying, disable ping scanning, disable name resolution, send ICMP echo requests instead of ARP requests
nmap -e eth0 -S <spoof> <target>          # spoofing

nmap -sT -p 80,443 --open 10.0.0.0/24               # scan ports 80 & 443 on every addr within the given range

kudosqujo

Several useful command-line programs for accessing the network and web sites are already installed on your attacker VM.

• tcpdump can be used to sniff network traffic.
• netcat behaves like a simple TCP client or server taking input and output to standard input and standard output.
• curl and wget are two different programs for accessing web sites from the command line, both with lots of options.
• w3m is a text based web browser.

All of them have manual pages you can read to learn more.

You can copy files between different hosts by using the scp command: changing the port is a capital -P

kudosqujo

{
  "Name": "See all, change nothing",
  "IsCustom": true,
  "Description": "The subscription viewer.",
  "Actions": [
    "*/read"
  ],
  "NotActions": [],
  "AssignableScopes": [
    "/subscriptions/<some subscription id>"

kudosqujo

# Assumes you have the `openssl` utility installed

# Generate a random 64 byte hex encoded string
openssl rand -hex 64

kudosqujo

#!/bin/sh
# ^ User data shell scripts must start with the #! characters and the path to the interpreter you want to read the script

yum -y install httpd    # Install Apache web server
chkconfig httpd on      # Enable the web server
/etc/init.d/httpd start # Start the web server

# see AWS Technical Essentials Student Guide v4.7.9 - page 51

kudosqujo

#                   LOCAL               REMOTE
git checkout -b <branch_name> origin/<branch_name>

kudosqujo

File.write('some_file.txt', "Hello there\n", mode: 'a')

kudosqujo

#  ---------------------------------------------------------------------------
#
#  Description:  This file holds all my BASH configurations and aliases
#
#  Sections:
#  1.   Environment Configuration
#  2.   Make Terminal Better (remapping defaults and adding functionality)
#  3.   File and Folder Management
#  4.   Searching
#  5.   Process Management

kudosqujo

# Delete remote branches that have been merged into 'origin/develop' (besides current, 'origin/develop' and 'origin/master')
git pull --rebase upstream develop:develop
git push origin develop:develop
git remote prune origin
git branch -r --merged origin/develop | grep -wv 'master\|develop' | sed 's/^origin\///' | xargs -n 1 git push -d origin
git remote prune origin

# Delete local branches that have been merged into 'develop' (besides current, 'develop' and 'master' branches)
git branch --merged develop | grep -wv '\*\|master\|develop' | xargs -n 1 git branch -d

kudosqujo

# Create a new db
mysqladmin -u root -p create some_db.test

# Create a dump from a local DB
mysqldump -u some_user -p some_db.test > some_db.test.dump.sql

# Create a dump from a remote host (like an RDS snapshot)
mysqldump -u some_user -p -h my-db-1234.somehash.us-north-1.rds.amazonaws.com some_db.test > some_db.test.dump.sql

# Populate a db using a dump