vpnwall-services

## https://partiallydisassembled.net/posts/filebeat-fields.html

• Check all:

sudo filebeat export template

vpnwall-services

#!/bin/bash
#VERSION="9.4.2"
#apt-get install -y build-essential libreadline6-dev zlib1g-dev liblzo2-dev mt-st mtx postfix libacl1-dev libssl-dev libmysql++-dev mysql-server
#mkdir /tmp/bacula
#cd /tmp/bacula
#wget https://sourceforge.net/projects/bacula/files/bacula/$VERSION/bacula-$VERSION.tar.gz
#cd /usr/src/bacula*
#./configure --with-readline=/usr/include/readline --disable-conio --bindir=/usr/bin --sbindir=/usr/sbin --with-scriptdir=/etc/bacula/scripts --with-#working-dir=/var/lib/bacula --with-logdir=/var/log --enable-smartalloc --with-mysql --with-archivedir=/mnt/backup --with-job-email=your@email.com.br --#with-hostname=ip_or_qualified_name
#make -j8 && make install && make install-autostart
#chmod o+rx /etc/bacula/scripts/*

vpnwall-services

#Put me in /lib/systemd/system/
[Unit]
Description=My Miscellaneous Service
After=network.target

[Service]
Type=simple
User=nanodano
WorkingDirectory=/home/nanodano
ExecStart=/home/nanodano/my_daemon --option=123

vpnwall-services

Hacking With cURL

A list of examples and references of hacking with Bash and the Curl command.

What the heck is cURL?

cURL is short for "Client URL" and is a computer software project providing a library (libcurl) and command-line tool (curl) first released in 1997. It is a free client-side URL transfer library that supports the following protocols: Cookies, DICT, FTP, FTPS, Gopher, HTTP/1, HTTP/2, HTTP POST, HTTP PUT, HTTP proxy tunneling, HTTPS, IMAP, Kerberos, LDAP, POP3, RTSP, SCP, and SMTP Although attack proxies like BurpSuitePro are very handy tools, cURL allows you to get a bit closer to the protocol level, leverage bash scripting and provides a bit more flexibility when you are working on a complex vulnerability.

cURL GET parameters

HTTP GET variables can be set by adding them to the URL.

vpnwall-services

#!/bin/bash
apt-get install unzip -y
wget https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-amd64.zip
unzip ngrok-stable-linux-amd64.zip
mkdir /opt/ngrok
mv ngrok /opt/ngrok/ngrok
echo -e "You should now login on https://dashboard.ngrok.com/user/signup"
echo -e "Once done, you should copy the command inside the"
echo -e "Connect your account frame"
echo -e "It look like this"

vpnwall-services

#!/bin/bash
apt-get update ; apt-get install -y dirmngr
grep -q -F 'deb http://http.kali.org/kali kali-rolling main contrib non-free' /etc/apt/sources.list || echo 'deb http://http.kali.org/kali kali-rolling main contrib non-free' >> /etc/apt/sources.list
apt-key adv --keyserver pgp.mit.edu --recv-keys ED444FF07D8D0BF6
apt-get update
apt-get install -y -t kali-rolling

vpnwall-services

GREP 101

• Grep code recursively between <script></script> tags grep -oRP '<script[^>]*>(.*?)</script>'

• Grep minimum six numbers grep -E '[0-9]{6}' file.txt

• Grep files that does not containt string

vpnwall-services

#!/bin/bash
# Echo three passwords
cat /dev/urandom| tr -dc 'a-zA-Z0-9-_!@#$%+'|fold -w 28| head -n 3

# Echo one password and put it in clipboard
# Requirements: apt-get install -y xclip
cat /dev/urandom| tr -dc 'a-zA-Z0-9-_!@#$%+'|fold -w 28| head -n 1|xclip"

openssl rand 60 | openssl base64 -A

vpnwall-services

REGEX 101

• Trim spaces ^[\s]*(.*?)[\s]*$

• HTML tag <([a-z]+)([^<]+)*(?:>(.*)<\/\1>|\s+\/>)

vpnwall-services

# https://blog.levassb.ovh/post/terraform/

• Create apiuser on proxmox Datacenter => Storage => Create user => terraform apitokens => root @pam / new_token / privesc: no

• Snippets folder Storage => snippets / /storage/snippets /Snippets

• Add permissions to apiuser Permissions =>

/ root@pam!new_token PVEVMAdmin