André Rainho arainho

## mdm_check.sh
#!/usr/bin/env bash

# Check if a machine was enrolled via DEP (10.13+)
# Show whether a machine has a device enrollment profile (DEP) present (10.13.0+),
# and if the MDM enrollment is user approved (10.13.4+)
/usr/bin/profiles status -type enrollment

# Checking for a DEP profile on macOS
# Display the DEP profile for a macOS device in 10.13 and above:
sudo /usr/bin/profiles show -type enrollment

## pwnagotchi_install.sh
#!/usr/bin/env bash

# install pwnagotchi on rpi4

WIFI_DEV="wlan1"
AUTO_MODE=true
DEBUG=false
PWN_GRID=false
PWN_GRID_REPORT=false
HOME_NETWORK="YourHomeNetworkMaybe"

## zoom_uninstall_macos.sh
#!/usr/bin/env bash

# sources
https://drive.google.com/drive/folders/1MP0cNLyJjzPLNrvNDCZv9hRuif091f0c
https://apple.stackexchange.com/questions/358651/unable-to-completely-uninstall-zoom-meeting-app
https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

echo Stopping Zoom...
pkill "zoom.us"

## archlinux_hardening.sh
# https://wiki.archlinux.org/index.php/Firejail
# https://linux-audit.com/audit-and-harden-your-ssh-configuration/

sudo firecfg
mkdir -p /etc/pacman.d/hooks/
sudo bash -c 'cat > /etc/pacman.d/hooks/firejail.hook' << EOF
[Trigger]
Type = Path
Operation = Install
Operation = Upgrade

## pihole_recursive_dns.sh
#!/usr/bin/env bash

## Setting up Pi-hole as a recursive DNS server solution¶
## https://docs.pi-hole.net/guides/unbound/

## 1. The first thing you need to do is to install the recursive DNS resolver:
sudo apt update
sudo apt -y install unbound

## 2. Important: Download the current root hints file

## pihole_on_vps.sh
#!/usr/bin/env bash

# 🕵️🕵️🕵️ Check
# 1. read https://docs.pi-hole.net/ftldns/interfaces/
# 2. go to www.virustotal.com and check 'https://install.pi-hole.net'

# port 22 is open everywhere
# port 53 is open only for the value of 'YOUR_HOME_EXTERNAL_IP'

### ✏️✏️✏️ fill out

## rpi4_share_internet.sh
#!/bin/bash

WAN_IFACE="eth0"
USB_IFACE="usb0"

# apply config's
ip addr del 169.254.177.31/16 dev usb0
ip addr add 10.0.0.2/255.255.255.0 broadcast 10.0.0.255 dev usb0

sysctl net.ipv4.ip_forward=1

## void_interlock.sh
#!/usb/bin/env bash

# Setup interlock on USB armory (armv7) for 'Void Linux' or 'ArchLinux.'
# INTERLOCK - file encryption front end

#luks partition start
PARTITION_START="6820MB"

#use this tag for signal support
INTERLOCK_REPO_TAG="v2019.01.30"

## install_docker.sh
#!/usr/bin/env bash

# Setup docker and docker-compose ( no prompts )

### Uninstall old versions ###################################################
sudo apt-get -y remove docker docker-engine docker.io containerd runc

### SET UP THE REPOSITORY ###################################################

# Update the apt package index

## install_vault.sh
#!/usr/bin/env bash

export VERSION=1.4.2
wget https://releases.hashicorp.com/vault/${VERSION}/vault_${VERSION}_linux_amd64.zip

# unzip the package and remove the zip file:
unzip vault_${VERSION}_linux_amd64.zip && rm vault_${VERSION}_linux_amd64.zip

# vault runs as a single binary named vault, other files in the package can be safely removed
ls -al | grep vault
	#!/usr/bin/env bash

	# Check if a machine was enrolled via DEP (10.13+)
	# Show whether a machine has a device enrollment profile (DEP) present (10.13.0+),
	# and if the MDM enrollment is user approved (10.13.4+)
	/usr/bin/profiles status -type enrollment

	# Checking for a DEP profile on macOS
	# Display the DEP profile for a macOS device in 10.13 and above:
	sudo /usr/bin/profiles show -type enrollment
	#!/usr/bin/env bash

	# install pwnagotchi on rpi4

	WIFI_DEV="wlan1"
	AUTO_MODE=true
	DEBUG=false
	PWN_GRID=false
	PWN_GRID_REPORT=false
	HOME_NETWORK="YourHomeNetworkMaybe"
	#!/usr/bin/env bash

	# sources
	https://drive.google.com/drive/folders/1MP0cNLyJjzPLNrvNDCZv9hRuif091f0c
	https://apple.stackexchange.com/questions/358651/unable-to-completely-uninstall-zoom-meeting-app
	https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

	echo Stopping Zoom...
	pkill "zoom.us"
	# https://wiki.archlinux.org/index.php/Firejail
	# https://linux-audit.com/audit-and-harden-your-ssh-configuration/

	sudo firecfg
	mkdir -p /etc/pacman.d/hooks/
	sudo bash -c 'cat > /etc/pacman.d/hooks/firejail.hook' << EOF
	[Trigger]
	Type = Path
	Operation = Install
	Operation = Upgrade
	#!/usr/bin/env bash

	## Setting up Pi-hole as a recursive DNS server solution¶
	## https://docs.pi-hole.net/guides/unbound/

	## 1. The first thing you need to do is to install the recursive DNS resolver:
	sudo apt update
	sudo apt -y install unbound

	## 2. Important: Download the current root hints file
	#!/usr/bin/env bash

	# 🕵️🕵️🕵️ Check
	# 1. read https://docs.pi-hole.net/ftldns/interfaces/
	# 2. go to www.virustotal.com and check 'https://install.pi-hole.net'

	# port 22 is open everywhere
	# port 53 is open only for the value of 'YOUR_HOME_EXTERNAL_IP'

	### ✏️✏️✏️ fill out
	#!/bin/bash

	WAN_IFACE="eth0"
	USB_IFACE="usb0"

	# apply config's
	ip addr del 169.254.177.31/16 dev usb0
	ip addr add 10.0.0.2/255.255.255.0 broadcast 10.0.0.255 dev usb0

	sysctl net.ipv4.ip_forward=1
	#!/usb/bin/env bash

	# Setup interlock on USB armory (armv7) for 'Void Linux' or 'ArchLinux.'
	# INTERLOCK - file encryption front end

	#luks partition start
	PARTITION_START="6820MB"

	#use this tag for signal support
	INTERLOCK_REPO_TAG="v2019.01.30"
	#!/usr/bin/env bash

	# Setup docker and docker-compose ( no prompts )

	### Uninstall old versions ###################################################
	sudo apt-get -y remove docker docker-engine docker.io containerd runc

	### SET UP THE REPOSITORY ###################################################

	# Update the apt package index
	#!/usr/bin/env bash

	export VERSION=1.4.2
	wget https://releases.hashicorp.com/vault/${VERSION}/vault_${VERSION}_linux_amd64.zip

	# unzip the package and remove the zip file:
	unzip vault_${VERSION}_linux_amd64.zip && rm vault_${VERSION}_linux_amd64.zip

	# vault runs as a single binary named vault, other files in the package can be safely removed
	ls -al \| grep vault