you are browsing the Linux category

Android

Kali linux nethunter on unrooted android – rootless nethunter!

I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing rootless nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store app from https://store.nethunter.com I had to enable install from this source Read more…

By Jonathan Mitchell, 7 months4 weeks ago

Kali Linux

Kioptrix Walkthrough Guide

I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…

By Jonathan Mitchell, 1 year1 week ago

jonathansblog

Website crawler software kali linux

Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…

By Jonathan Mitchell, 1 year2 days ago

Apache

Fail2ban centos

Installing and configuring the fail2ban centos service fail2ban is a service for linux systems that checks log files for failed login attempts and automatically inserts firewall rules to block further attempts at logins from those IP addresses for a specified amount of time. Installing fail2ban on centos is relatively easy Read more…

By Jonathan Mitchell, 1 year1 year ago

Apache

Mod Security Web Application Firewall

What is a WAF A WAF is a web application firewall. A Web Application Firewall protects HTTP applications (eg websites) using a set of rules to protect against various common attacks, such as SQL Injection and Cross site scripting (XSS). Mod Security Web Application Firewall Mod_Security is an apache (and Read more…

By Jonathan Mitchell, 1 year1 year ago

Apache

Malware detection on Plesk systems

Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…

By Jonathan Mitchell, 1 year1 year ago

Hardware hacking

Raspberry Pi hacking

This tutorial will show you how to make a Raspberry Pi hack tool by installing Kali on the Raspberry Pi – by the end of this guide you will have a Kali Raspberry Pi hacking tool with lots of tools ready for use! Install Kali on the Raspberry Pi Following Read more…

By Jonathan Mitchell, 1 year1 year ago

jonathansblog

Metasploit for website pentest

Metasploit for website pentest using wmap. This is a short tutorial on using the wmap module inside metasploit. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll Read more…

By Jonathan Mitchell, 1 year4 weeks ago

Commandline

Vagrant with sshfs and public network

Vagrant with sshfs. You can use sshfs in vagrant with only a private network. This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some testing from an external Read more…

By Jonathan Mitchell, 2 years1 year ago

Kali Linux

Installing metasploitable with vagrant

Metasploitable background: What is metasploitable? “Metasploitable is a Virtual Machine that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit.” Why do we need metasploitable? One of the problems you encounter when Read more…

By Jonathan Mitchell, 2 years4 weeks ago

Commandline

How to use metasploit to scan for vulnerabilities

Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…

By Jonathan Mitchell, 2 years4 weeks ago

Android

Ad blocking on android using dns666

Ad blocking on android using dns666. There are a ton of ad blocking apps on android, but dns666 is the best I’ve found after trying a number of them out – it works by setting a vpn back to your device and (selectively) routing all traffic through that vpn This Read more…

By Jonathan Mitchell, 2 years2 years ago

Apache

Php fpm with apache on centos7

This is a short post detailing how to manually setup php fpm with apache on centos7. php fpm is a great solution (especially when used with nginx, but you may want to keep running apache while still having some of the benefits of fmp – you might even be running Read more…

By Jonathan Mitchell, 2 years ago

jonathansblog

Burpsuite beginners tutorial – how to use burp suite

This is a burp suite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated Read more…

By Jonathan Mitchell, 2 years4 weeks ago

Kali Linux

Vega scanner tutorial for beginners in kali linux

This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…

By Jonathan Mitchell, 2 years2 years ago

Kali Linux

DVWA vagrant

This is a short post on how to setup a dvwa vagrant box for your testing. I recommend this method when installing and testing new tools (and even for developing tools of your own) – there are known vulnerabilities in this system, so you can use the scientific method while Read more…

By Jonathan Mitchell, 2 years2 years ago

Development

Installing mariadb 10.2 mysql 5.7 in centos

Installing mariadb 10.2 mysql 5.7 in centos If you use the following method to install the latest mariadb, updates will be installed with the regular yum update commands! The first part is to add the mariadb official repo to your system. 1) firstly, create an empty file at /etc/yum.repos.d/mariadb.repo sudo Read more…

By Jonathan Mitchell, 2 years2 years ago

Commandline

Vagrant with NFS and public_network

Vagrant with NFS and public_network. You can use NFS in vagrant, but it requires a private_network to work; This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some Read more…

By Jonathan Mitchell, 2 years2 years ago

Commandline

How to remove unused kernels in linux

This is a short post on how to remove unused kernels in linux. I’m adding it here because I use it regularly and keep forgetting the commands – it might help you too! Removing kernels manually firstly, check your running kernel version uname -a next, show all the installed kernels: Read more…

By Jonathan Mitchell, 2 years2 years ago

Alt coins

Mining monero in osx using xmring

There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…

By Jonathan Mitchell, 3 years2 years ago

Kali Linux

Blackarch pacman package groups for tools

Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…

By Jonathan Mitchell, 3 years3 years ago

Hardware hacking

Blackarch on the chuwi hi10pro – install and config

Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…

By Jonathan Mitchell, 3 years3 years ago

Kali Linux

Kali linux wpa_supplicant cli config

Kali linux wpa_supplicant cli config. To setup a wifi connection using wpa_supplicant on the cli in kali, first you have to bring up your network interface ifconfig wlan0 up Next, we create a config file wpa_passphrase ‘router_ssid’ ‘wifi_password’ > /etc/wpa_supplicant.conf We need to edit the config file and remove some Read more…

By Jonathan Mitchell, 3 years2 years ago

Kali Linux

Chuwi hi10 pro kali linux wifi fixes

I wrote a previous post about kali on the hi10, and promised a followup on Chuwi hi10 pro kali linux wifi fixes; here it is. The on-board wifi works out of the box in kali 2018.01 :D Kali chuwi hi10 pro wifi fix if you have just installed kali on Read more…

By Jonathan Mitchell, 3 years2 years ago

Hardware hacking

Ubuntu on the chuwi hi10 pro

After trying Kali on the hi10 pro (its totally not ready for the bay-trail / cherry-trail platforms) I decided to give ubuntu on the chuwi hi10 pro a go (after hearing good things about their support) This is a short tutorial on dual booting ubuntu linux and windows10 on the Read more…

By Jonathan Mitchell, 3 years3 years ago

Hardware hacking

Kali on the Chuwi Hi10 Pro – updated for Kali 2020

This post is now updated with install information for using 2020 versions of Kali on the Chuwi Hi10 Pro. When I first wrote this post I seriously wouldn’t have recommended Kali on the Chuwi Hi10 Pro as an every-day system – Starting with 2018.01 and the 4.14 kernel it makes Read more…

By Jonathan Mitchell, 3 years4 weeks ago

Commandline

Dd-wrt web ui crashes

I have a router running dd-wrt. sometimes the dd-wrt web ui crashes and you cant access the interface, but your WAN connection works, and you can still login via ssh On the dd-wrt command-line there are a couple of utilities available to let you start and stop services. If your Read more…

By Jonathan Mitchell, 3 years3 years ago

Kali Linux

Automatic updates in kali

Automatic updates in kali (and other apt based distros). There are a ton of ways to do automatic updates in kali linux (though this will work on debian, ubuntu, proxmox and any other apt-based system): 1) unattended-upgrades 2) a cron script 3) cron-apt This post will go through the various Read more…

By Jonathan Mitchell, 3 years3 years ago

Commandline

Linux commands for networking with command line

This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…

By Jonathan Mitchell, 4 years1 month ago

Alt coins

Mining altcoins in centos with minergate

Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…

By Jonathan Mitchell, 4 years2 years ago

Apache

Install xdebug in centos7 with php7

I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…

By Jonathan Mitchell, 4 years2 years ago

Kali Linux

How to install birdwatcher in kali linux

How to install birdwatcher in kali linux Birdwatcher is an OSINT data analysis and data gathering tool for twitter. Birdwatcher has been designed to feel like metasploit or recon-ng, so should be familiar for anyone who has used those tools. Install birdwatcher in kali linux: Kali has ruby 2.2.x. by Read more…

By Jonathan Mitchell, 4 years2 years ago

Apache

Install php7 on centos7

There are a couple of different ways to install php7 on centos7 – Installing yum-plugin-replace and inline-replaceing the whole php subsystem seems to be the easiest way: You need to have a couple or yum repo’s enabled for this to work properly: webtactic and epel rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm rpm -Uvh Read more…

By Jonathan Mitchell, 4 years2 years ago

Commandline

Yum-cron installing and configuring

yum-cron is an alternate interface to yum that is optimised to be convenient to call from cron. It provides methods to keep repository metadata up to date, and to check for, download, and apply updates. Rather than accepting many different command line arguments, the different functions of yum cron can Read more…

By Jonathan Mitchell, 4 years4 weeks ago

Apache

Configuring free SSL certs with Letsencrypt in centos

Configuring free ssl certs with letsencrypt in centos Using letsencrypt in centos requires a few modifications to your centos before you can run the letsencrypt client. The setup for vhosts in centos is different from the setup in debian based distros. This is how I modified my centos install to Read more…

By Jonathan Mitchell, 4 years1 year ago

Hardware hacking

Pihole on a raspberry pi

Pihole on a raspberry pi – making a network wide advert blocker with a raspberry pi. I have a router using dnsmasq with adblocking setup on my router. I also have a raspberry pi (which was being used as a retropi machine). I also have a Pizero. My retropi setup Read more…

By Jonathan Mitchell, 4 years1 year ago

Apache

Hardening ssl ciphers

Hardening ssl ciphers. I wrote a post previously about disabling sslv2 and enabling sslv3 and tlsv1. Times have changed since then, its been best-practice for a long time now to only use tlsv1.1 and tlsv1.2 with forward secrecy. This post replaces the previous post, and will be updated with the Read more…

By Jonathan Mitchell, 5 years5 years ago

Commandline

Copy a file to multiple locations in linux

How to copy a file to multiple locations in linux. cp doesnt let you copy one file to multiple locations; There are a few ways to do this, but the one I always return to uses find To copy the contents of a directory to multiple other directories find /location/to/folder Read more…

By Jonathan Mitchell, 5 years2 years ago

Hardware hacking

Trendnet 811dru optware

Trendnet 811dru optware – I tried for days and couldn’t get optware to work, so I ended up using entware (optware alternative) – at the end of the day it allows me to install stuff with a package manager in the 811dru, so I’m not bothered what its called :D Read more…

By Jonathan Mitchell, 5 years ago