knowledge base
ping 8.8.8.8dhcp get address dhclient eth0 -v sysctl -A …. print the whole list of system settings use users: compgen -u/etc/sysctl.conf : stored here /etc/hostname – hostname of the machine /etc/hosts – basic translation host name <-> ip address DNS /etc/bind named-checkconf service bind9 status systemctl status bind9.service -l dig @127.0.0.1 courses.cs.ut.ee nslookup est //existance of TLD est Enable auto-starting the bind9:# systemctl...
Firstly, go to the Advanced Options for… and press e find menuentry for ‘recovery mode ‘ than find line starting with linux, press right arrow, press end and write init=/bin/bash ctrl+x choose recovery mode here we go– should show root@(none):/ command mount -rw -o remount / type passwd for changing root password (passwd user for another user) reboot HERE WE...
Kibana for k-space 193.40.101.76:7443 ids :8443 log (kibana) :9443 moloch :8000 cuckoo IDS, IPS HIDS/HIPS, NSM intrusion detection system intrusion prevention system Host IDS Rule based /behavior based Where to start Steamus network SELKS (preconfigured image) Suricata Ransomware are using specific TLS certificate, RAPID 7 SSLyze https map Certificate chain validation, vulnerability (heartbleed…) Moloch Bonus Lab virustotal.com wargame. Login first using...
goo.gl/KdSCtt Signing certificate URL of this doc is https://pad.koodur.com/p/x509 Lab assignment: – Generate RSA keypair and certificate signing request on your laptop – Send CSR to lauri.vosandi@gmail.com – Install one of following OpenVPN options below – Try to compose OpenVPN configuration file based on the bits and pieces from slides – Wait for Lauri to...
no definition for terrorism. there have not been terrorist cyber attack with great demages Cyber warfare Physical demage of injury = breach of sovergenity loss of functionality (email of government dont work 2007 Estonia) = not serious enoug (Tallinn manual), could be seen in case that it leads to neseccity to repair assets, than it is breach If Estonia is...
BASICS:https://treaties.un.org/doc/publication/ctc/uncharter.pdf Article 2 (4)All Members shall refrain in their international relations from the threat or use of force against the territorial integrity or political independence of any state, or in any other manner inconsistent with the Purposes of the UnitedNationsArticle 51Nothing in the present Charter shall impair theinherent right of individual or collective selfdefenseif an armed attack occurs against a...
use only bcrypt or scrypt for hashinghttps://medium.com/4iqdelvedeep/1-4-billion-clear-text-credentials-discovered-in-a-single-database-3131d0a1ae14 https://gist.github.com/scottlinux/9a3b11257ac575e4f71de811322ce6b3 Rainbowtables if NTLM tables, just go to find it in rainbowtables ihatefirewallsandlovepasswords hashcad, johntheripper student counsellor: probally year of birtheveryone has different passwordsWe have no root access in this lab Shared pad: https://pad.koodur.com What to use instead of passords?biometry (fingerprint is digitalized = another kind of password)face recognition – if used one camera, it...
Passive (DNS? Social Media accounts),Active Vulnerabilities identificationadvanced hackers use tools that produce less traffic Exploitation -exploit: piece of software which takes advantage of vulnerabilities– Web archives: https://archive.org/WhoisSearch enginesShodanMetadata of documentsIP and port scanning traceroute : 3 different packets send to the next IP. that idicates reachability traceroute: request timed out in the middle of path: this host is unreacahble but other...
incident response – the process by which organization handles a date breach or cyberattack and conseqences of it Dig. forensics != data recovery Dig. forensics != incident response Digital forencis is a sum of incident response, data recovery… You will be expert in several fields of forensics, not in every most probably. It is not possible within 45 minutes like...