craig-m-unsw

ufw (Uncomplicated Firewall) example setup

install from ufw if missing:

sudo dnf install -y ufw

sudo apt install -y ufw

craig-m-unsw

#!/bin/bash
# Create a bin for privilege escalation. 

where_gcc=$(which gcc || exit 1)

TMPFILE="devtest.c"
FILEDEST="/usr/local/bin/beroot"
TMPDIR=$(mktemp -d)
CURWD=$(pwd)
cd $TMPDIR || exit 1;

craig-m-unsw

#!/usr/bin/env bash

# A script to install ansible as per:
# https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html
#
# For Debian/Ubuntu and RedHat/CentOS


#
# Installation functions

craig-m-unsw

Automation for the People

Long ago, the first time I read "The Pragmatic Programmer", I read some advice that really stuck with me.

"Don't Use Manual Procedures".

This in the chapter on Ubiquitous Automation. To summarize, they want you to automate all the things.

The trouble was that I hadn't much of an idea how to actually go

craig-m-unsw

---
# Install Puppet Bolt on RHEL/CentOS 8 - https://puppet.com/docs/bolt/
#
# To use on localhost:
#
# ansible-playbook --connection=local -i "127.0.0.1," role-puppet-bolt.yml

- name: Install puppet bolt
  hosts: all
  gather_facts: no

craig-m-unsw

---
# Ansible role to show creating and using custom facts.
# https://docs.ansible.com/ansible/latest/modules/setup_module.html
#
# ansible-playbook --connection=local -i "127.0.0.1," role-custom-facts-demo.yml

- name: Ansible custom facts
  hosts: all
  gather_facts: no

craig-m-unsw

Linux pentest lab

Install Vagrant and VirtualBox (MacOS, Windows, Linux).

Start the virtual machines:

vagrant validate Vagrantfile
vagrant up

craig-m-unsw

disposable CentOS 7 VMs

An example of a fast, low effort, cross platform CentOS 7 development environment.

Write code, automate, and then rinse and repeat.

requirements

• Install Vagrant https://www.vagrantup.com/downloads
• Setup a Hypervisor https://en.wikipedia.org/wiki/Hypervisor

craig-m-unsw

Fedora VM for Podman

Use a Fedora 36 (May 10, 2022) provided Vagrant box to run Podman, and MacOS to run the Podman client.

• https://podman.io/
• https://alt.fedoraproject.org/cloud/

For x86_64 VirtualBox and LibVirt hosts.

setup

craig-m-unsw

minimum project

For a minimum viable proof of concept or as a place to run some tools, I keep coming back to this same pattern.

foo-bar/
    ├── .gitignore
    ├── README.md
    ├── playbook.yml
 └── Vagrantfile