jeremypruitt

Reminders

Remember to log all the things!

• Metasploit - spool /home//.msf3/logs/console.log
• Save contents from each terminal!
• Linux - script myoutput.txt # Type exit to stop

Setup

jeremypruitt

DevOps Engineer Interview Questions

Table of Contents

1. General Questions
2. Network Questions
3. Linux Questions
4. Windows Questions
5. Security Questions
6. Cloud Questions

jeremypruitt

console.log('Loading function');

var AWS = require('aws-sdk');  
AWS.config.region = 'us-west-2';

exports.handler = function(event, context) {  
    console.log("\n\nLoading handler\n\n");
    var sns = new AWS.SNS();

    sns.publish({

jeremypruitt

from PIL import Image, ImageDraw, ImageSequence, ImageFont
import io
import click

FIRST_NUMBER = click.prompt('Enter the low number of the range', default=10330, type=int)
LAST_NUMBER = click.prompt('Enter the high number of the range', default=10346, type=int)
FRAME_DURATION = click.prompt('How long to hold on each number', default=100, type=int)
ANIMATED_GIF_FILENAME = click.prompt('Enter the name of the animated gif to generate', default="incrementing-counter.gif", type=str)

TEXT_COLOR = (255,255,255)

jeremypruitt

# Formatting
DEFAULT=`tput sgr0`
BRIGHT=`tput bold`
RED=`tput setaf 1`
GREEN=`tput setaf 2`
YELLOW=`tput setaf 3`
BLUE=`tput setaf 4`
MAGENTA=`tput setaf 5`
CYAN=`tput setaf 6`
WHITE=`tput setaf 7`

jeremypruitt

#!/usr/bin/env bash
set -e
set -o pipefail

# FORMATTING ###################################################################

DEFAULT=`tput sgr0`
BOLD=`tput bold`
RED=`tput setaf 1`
GREEN=`tput setaf 2`

jeremypruitt

# syntax=docker/dockerfile:1.0.0-experimental

# -------------------------------------------------------------------------
FROM python:3.8-slim
# -------------------------------------------------------------------------
LABEL maintainer="Jeremy Pruitt <jepruitt@aligntech.com>"

ARG VERSION
ARG BUILD_DATE
ARG VCS_REF

jeremypruitt

Vault Admin

The Vault Admin is responsible for ensuring the vault service and its backend are available. They also manage the bringup process in the event of an outage, including coordination of the shamir secret holders during the process of unsealing the vault.

Requires:

• Much more consideration for production :)
• Vault binary

For PoC purposes, just use the in-memory vault dev mode:

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add unattended.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.126 unattended.htb" >> /etc/hosts

jeremypruitt

Awesome Security CLI Commands

ffuf

A go-based single-binary and very fast replacement for both gobuster and wfuzz. It can perform both dirbuster style URL path/extension-specific fuzzing, and also URL param fuzzing.

Wfuzz style of URL param fuzzing:

$ ffuf -w /usr/share/commix/src/txt/passwords_john.txt \