security 🦾🦿

A collection of 26 posts

ethical hacking 🤖

Using Wireshark to Sniff and Capture Credentials in an Unsecured HTTP protocol.

Wireshark needs no introduction... It's one of the most popular network protocol analyzers to date. It's a powerful network protocol analyzer used by network administrators, security professionals, and developers for network troubleshooting, analysis, software development, education, and more.

how to 🪄

Mosh Server as an SSH Alternative.

Indeed, even with a robust internet connection, SSH can sometimes prove unreliable. This is due to the fact that even brief interruptions in the connection between the client and server can lead to complete stalls, forcing you to terminate and re-establish the connection.

how to 🪄

GHOST CMS: backup and restore ⏤ Self-hosting.

We’ve talked a lot about security… but one of the most overlooked aspects of running a website is having a backup. You must take all necessary precautions to ensure that your website is regularly and safely backed up.

how to 🪄

How to automatically Backup Your Files to a Remote Server with Rsync.

The Rsync command on Unix-like operating systems synchronizes files from a source to a destination, either locally or remote network connection. Rsync is a file-copying program that is both quick and flexible.

how to 🪄

Query the systemd Journal?

journalctl is a utility for querying and displaying logs on systemd, kernel and journal on journald written by systemd-journald.service. See our previous post on Systemd journal. Working with journalctl command 1. All logs When run without any parameters, the following command will display all the logs in the paginated

how to 🪄

How to install Fing on Ubuntu Debian Servers.

The Fing Command Line Interface (Fing CLI) is a standalone program that provides a set of very handy network troubleshooting tools (NIC information, scan, ping, traceroute, and so on). Installation The software has been packed using Debian (DPKG) and Read Hat (RPM) package manager. Below is the Architecture supported: • i686

how to 🪄

Using the SSH Client Config File ~/.ssh/config.

Imagine you have to regularly connect to +15 remote systems over SSH. That means to remember all of the remote IP addresses, different usernames, non-standard ports, what authentication keys to use, and various command-line. Quite a big waste of time. Fortunately, SSH allows you to generate a config file that

linux 🍹

SYN-SYN-ACK and ACK 🤝

Understanding TCP Flags TCP flags are used to indicate a particular state during a TCP conversation. TCP flags can be used for troubleshooting purposes or to control how a particular connection is handled. Each of them has its own significance. They initiate connections, carry data, and tear down connections. Commonly

how to 🪄

How to: Use Postfix to Outbound Email as Gmail Relay on Ubuntu - 2-step verification (Update !!!)

Postfix is a mail transfer agent (MTA) a software that implements Simple Mail Transfer Protocol (SMTP). They transport E-Mail messages from one computer to another. MTAs talk to other MTAs, and either * deliver mail locally * or hand it off for delivery to an mail delivery agent (MDA)/LDA if it

security 🦾🦿

Is 256-bit SSL Encryption any Safe?

SSL certificates enable encrypted connections between a client and a web server via the transport layer security (TLS) protocol. Nobody can intercept a message while it’s being transmitted over an encrypted connection. Again, it does not protect your website from getting hacked.

security 🦾🦿

User authentication process.

Have you ever asked yourself how the user authentication process works? Let's jump. What is User Authentication? User authentication is a security process that covers all of the human-to-computer interactions that require the user to register and log in. Simply said, authentication asks each user: 'who the

linux 🍹

Hashing, Salting, and Password Storage on Linux.

Whenever you want to check your email, open an SSH session, or even make a purchase on any of your favorite websites, you were prompted to create (and if not too much asked, try to remember it!) a password. It is the first line of defense against unauthorized access to your data.

how to 🪄

Using Monit to Monitor Linux Daemon, CPU, Filesystem, Network and Files on Ubuntu Server.

Services on any server must be operational and perform their duties effectively. It is critical to monitor the overall state of your server, including processes, programs, directories, files, and so on. This is known as system monitoring.

linux 🍹

Understand the /etc/passwd file.

The /etc/passwd file is used to keep track of every registered user that has access to a system. In other words, it stores user account information.

how to 🪄

passwd Command.

Both Linux and UNIX-like (UN*X) operating systems use the passwd command to change user's password. The passwd is used to update a user’s authentication token (password) stored in /etc/shadow file. The passwd change passwords for user and group accounts.

how to 🪄

Install & Use Glances to monitor Ubuntu Server.

Whether you're a system administrator or a casual desktop user, you've probably heard of the most popular terminal-based system monitoring tools, TOP, and its colorful, feature-rich cousin-in-law HTOP. 😬😅

security 🦾🦿

How to Check if Your iPhone is Infected with Pegasus Spyware.

Concerned about recent revelations of widespread political espionage? On the list: Journalists, activists, prime ministers, presidents and a king identified over 1,000 people in 50 countries who were allegedly under surveillance using the Pegasus spyware.

security 🦾🦿

Security Auditing on Ubuntu Server using Lynis.

Lynis is a free and open source host-based auditing tool for UNIX-like operating systems. It scans the system for security information, general system information, configuration mistakes, security issues, user accounts without a password, wrong file permissions, firewall auditing, and so on.

linux 🍹

SCP Command on Linux Systems.

SCP (Secure Copy Protocol) is a command-line tool in Linux and Unix-like (UN*X) systems that is used to transfer/ copy files and directories across the systems in a secure way over the network.

linux 🍹

Deadly Commands You Should Never Run on *nux Systems ☠️

Whether you're a Linux newbie or veteran, you should never run a command unless you know exactly what it does. Linux can be a double-edged sword. It assumes that you know what you're doing and gives you the freedom to do whatever you want.

how to 🪄

Three ways to Lock and Unlock accounts on Linux Systems.

One of the most critical part of any administrator is the ability to manage user accounts. In the following article, we are going to illustrate the different ways in which a user account can be locked and unlocked in a Linux system.

linux 🍹

Chmod +rwx Command on Linux Systems. (Permissions)

In Linux and Unix-like (UN*X) operating systems, a set of flags associated with each file determines who can access that file, and how they can access it. These flags are called file permissions or modes, as in "mode of access."

linux 🍹

Introduction to hashing and checksums on Linux Systems.

Have you ever heard or wondered how to make use of a checksum - Here is an introduction that shows you what is it, and how to use the proper tools to verify the integrity of a file.

how to 🪄

How to Redirect HTTP to HTTPS in Nginx.

Today, we will explain how to redirect the HTTP traffic to HTTPS in Nginx. How we can secure our website by redirecting all unsecured traffic on port 80 to SSL secured port 443.

proxies

Forward Proxy VS Reverse Proxy.

The position of a proxy — is what makes a proxy either a forward or reverse proxy. The easiest way to remember the difference between these two proxy is - Forward proxy is used by clients where as Reverse proxy is used by servers. Let us jump into it.