SSH login with RSA keys
To generate a new key pairs Install public key on the server or just copy it to ~/.ssh/authorized_keys Use Privete key with ssh client, mobaXterm, PuTTy…etc
Download large backup file from Plesk
Download files larger then one gigabyte with any browser can be very frustrating as browsers can’t download files much larger then one gigabyte. SSH to your server and execute this command: Insert .xml file in the following command to make backup file that you can download via FTP, SFTP…
ovpnConfig – client config file maker for openVPN
To install openVPN server on linux box (debian, ubuntu, raspberry pi), and to make all certificates follow this tutorial: openVPN server install After you generate all certificates and put them in right place use this script to make config file for client: ovpnConfig To make certificates for more clients and
Kubernates
Nod –> VM or phisical Machine Pod –> smallest component (one container per pod usually, but can be more) each pod gets an IP (internal, dynamic – K8s virt.net) Service –> Fix IP for Pod (internal or external) act as loadbalancer also, use less busy nod Ingress –> Entry point
Docker CLI
docker pull <image_name> pulls image from repo docker run image_name:9.6 download and run with spec.version, run creates container from image. start just start it docker ps list all runninig containers docker images list all mages docker run -d <image_name> run in detached mode (background) docker stop <container-ID> stops container docker
OpenVPN server (debian,ubuntu,kali,raspberry pi) + IOS13 – IOS16 client
Update: this is still working on December 2023 with IOS16 /etc/openvpn/vars content Initialize PKI Build the CA without a password Generate the server key Sign the server certificate Build a Diffie-Hellman key exchange Generate a HMAC signature Copy all the certificate and key to the /etc/openvpn Generate Client certificate Sign
OpenVPN server on Mikrotik with IOS13 client
Mikrotik OS6.47 Generate a Self-Signed CA certificate Generate a certificate for the vpn server (mikrotik router), sign it and trust it. Generate a certificate for the vpn client (ipad or phone) and sign it. Export CA certificate Export client certificate to pcks12 file type (required for ios) Exported client key
nmap scanning commands
-sP 10.1.1.0/24 find live hosts on subnet (PING) -sT -p 80,445,8080 10.10.10.0/24 find open tcp ports -sU -p 500,4500 192.168.10.10 udp port scan -sS -p 80,445,22 192.169.0.0/24 stealthy port scan (SYN) -O 192.168.4.5 OS detection -A 10.10.10.10 OS detect, ver.detect, traceroute -sS -D 10.5.5.5 10.10.5.9 Decoy –script vuln 192,170.34.90 vulnerability
Mikrotik – selfsign SSL certificate – ROS 5.25
On Mikrotik terminal: Fill all data. Country, state, city, mail, domain, organisation…etc. It will create 2 files: certificate-request.pem private-key.pem On linux box: Then back on Mikrotik:
OpenSSL – ssh to legacy systems
Unable to negotiate with 192.168.100.18 port 22: no matching host key type found. Their offer: ssh-dss This fix all SSH login negotiation errors by adding all outdated alogorithams. (there are reasons why this protocols are removed. Use it with caution and DO NOT USE IN PRODUCTION)
Install backtrack 3 on hdd with dual boot
Scenario with very old laptop Compaq Armada m700 What is the point of using 2008 distro in 2020? No point, just nothing else works with this particular laptop. Compaq Armada m700, (20 years old laptop), 448MB ram, 160gb hdd, builtin USB 1.1, PCMCIA card USB 2.0, PCMCIA wireless card Netgear
Kali Linux 2020 unable to boot after install
If you have more then one drive in your computer with more then one OS you can finish with this: At this point you can try to locate kali partition and set root and prefix and try to boot… Even if you find the right .mod to boot, it doesn’t
Raspberry PI Torrent BOX with Transmission
Always update your PI before doing anything else Install transmission Change default directories where torrents will be stored (default one is hard to find) Change directories, username, password and IP whitelist in transmission settings file Restart transmission to apply the changes Stop transmission deamon and change user and permissions Change
DDNS – ddclient on Raspberry Pi
Check your public IP curl ip.changeip.com Register free domain on changeip.com and point it to your public IP Check that your new domain points to your public IP nslookup your_new_domain.com 8.8.8.8 Install ddclient sudo apt-get install ddclient Conf file /etc/ddclient.conf # Configuration file for ddclient generated by debconf## /etc/ddclient.confssl=yesprotocol=changeip# How
CUPS + AirPrint on Raspberry PI
Install CUPS and Enable Remote Access Add Pi user to lpadmin group Enable Remote Access /etc/cups/cupsd.conf Comment out Listen localhost:631 and add Port 631 then Allow access Restart CUPS Now you are able to access remotely x.x.x.x:631 and add the printer Install AirPrint Make your old printer AirPrint capable Add those files
Vim Commands
V – selects entire lines v – selects range of text ctrl-v – selects columns gv – reselect block Text Entry Commands (Used to start text entry) a Append text following current cursor position A Append text to the end of current line i Insert text before
Ping UDP/TCP Port
Ping UDP port: nmap -sU -p port target nping –udp -p port target hping3 -S –udp -p port target Ping TCP port: nmap -p port target nping –tcp -p port target hping3 -S -p port target
L2TP + IPsec VPN server on Raspberry Pi (IOS 10 support)
First at all, what is Raspbery Pi? It is super small computer (credit card size) running on version of Debian linux called Raspbian. It is ideal for home server, and control of your home devices such as cameras, printers,etc… In case your provider gave you the router without VPN support