Skip to content

Instantly share code, notes, and snippets.

View ychaouche's full-sized avatar

Yassine Chaouche ychaouche

View GitHub Profile
root@messagerie-prep[10.10.10.19] ~ # _asroot tcpdump -i eth0 -l -n "host 10.10.10.19 and (tcp[13]==2 or icmp or udp) and src net not (192.168.0.0/16 or 172.16.0.0/16 or 10.0.0.0/8) and port 53"
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
12:56:08.111496 IP 199.249.120.1.53 > 10.10.10.19.56505: 36063- 0/8/9 (821)
12:56:08.239833 IP 192.99.37.66.53 > 10.10.10.19.63603: 27326*- 1/4/8 TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9VtkDG1wmhnqLYLoSlnKcA0IA738GmsKa/HC2Q790KJkslz8Q3lq4W/1aeOPNxK0iASSWcetcbAI+KDGqxXf9UfRay8oSfNc+SmcFOihoY" "iwVcFnzoPfU0QZVLQUjKCKv2ovlkiMqT2NgZa7+i53DrcCzCwe06PbB6eXmMFD/eLSeinPqeMC9vdZ6AG/Y9LoBFCCqxTGJ4rSv6XzBzDOFPSYYFiKAZQBzX0q0oNxtEtextYOFGIaINtBpcA5cA9Z8EX4xqbgQS77fWi79TVSHWOXMITdvkoKyx6EeCPDEl3TwsfZmm2WqaRCrZJZfSgKtzmpM3UWJcM50Cn6J5ywIDAQAB" (716)
12:58:36.291710 IP 192.5.6.30.53 > 10.10.10.19.34266: 14639- 0/6/1 (477)
12:58:36.305884 IP 162.159.3.11.53
@ychaouche
ychaouche / pr -l11
Last active November 28, 2024 09:24
root@messagerie-prep[10.10.10.19] ~ # mail.dsn.report.failed | head | pr -l11
2024-11-28 10:03 Page 1
Nov 24 06:29:02 to=<[email protected]>, status=deferred (host mailstore1.secureserver.net[92.204.80.3] refused to talk to me: 554 sxb1plibsmtp01-30.prod.sxb1.secureserver.net CMGW IB106. Connection refused. 197.201.1.126 is listed on the Policy Block List (PBL).?? <http://www.spamhaus.org/query/ip/197.201.1.126> Please visit http://www.spamhaus.org/pbl/ for more information.)
root@messagerie-prep[10.10.10.19] ~ # head /tmp/interactivebans.banned.sorted
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
@ychaouche
ychaouche / lsmod
Last active November 19, 2024 15:32
# lsmod | grep geo
xt_geoip 12558 2
x_tables 27392 17 xt_mark,xt_CT,xt_comment,ipt_ULOG,xt_recent,ip_tables,xt_tcpudp,xt_NFLOG,xt_geoip,xt_conntrack,xt_LOG,xt_multiport,iptable_filter,ipt_REJECT,iptable_mangle,xt_addrtype,iptable_raw
#
Got a list of helpful bash scripts/functions/aliases to deal with packages
/**************************/
/* 1. all package.* utils */
/**************************/
11:11:28 ~ -1- $ package.
package.count package.list.all
package.describe package.list.installed
17:16:27 ~ -1- $ openssl s_client -connect messagerie.algerian-radio.dz:993 -crlf
CONNECTED(00000003)
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
0 s:/CN=*.algerian-radio.dz
i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
1 s:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
Start Time: 1727712531
Timeout : 300 (sec)
Verify return code: 19 (self signed certificate in certificate chain)
---
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLA
a login [email protected] password with spaces
a BAD Error in IMAP command received by server.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
77 authenticate PLAIN
+
xxx
77 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in
78 ID ("name" "Thunderbird" "version" "91.13.1")
* ID ("name" "Dovecot")
78 OK ID completed.
79 ENABLE UTF8=ACCEPT
79 OK Enabled.
Algeria DZA 1950 9018423
Algeria DZA 1951 9269869
Algeria DZA 1952 9521212
Algeria DZA 1953 9772646
Algeria DZA 1954 10014393
Algeria DZA 1955 10247428
Algeria DZA 1956 10482183
Algeria DZA 1957 10717503
Algeria DZA 1958 10953641
function printfln {
format_string="$1"
shift
printf "$format_string\n" "$@"
}