Liquid-Phantom @liquid-phantom - Tumblr Blog

KL01: Post Install Setup

…is complete and available in the Library at (Red Team (Offensive Security) \ KL01: Post Install Setup.

A preview is below and I will export the full PDF to anyone who would like a copy.

Tutorial 002: Setting up a Pen Testing Lab in Kali Linux

…is complete and available in the Library at (Red Team (Offensive Security) \ Tutorial 002: Setting up a Pen Testing Lab in Kali Linux.

A preview is below and I will export the full PDF to anyone who would like a copy.

PF05: Port Forwarding Using A Pivot Point

…is complete and available in the Library at (Red Team (Offensive Security) \ Tutorial 001: Port Forwarding \ PF05: Port Forwarding Using A Pivot Point).

A preview is below and I will export the full PDF to anyone who would like a copy.

Forwarding The X Windows System

…is complete and available in the Library at (Red Team (Offensive Security) \ Tutorial 001: Port Forwarding \ PF04: Forwarding The X Windows System).

A preview is below and I will export the full PDF to anyone who would like a copy.

Dynamic Port Forwarding

...is complete and available in the Library at (Red Team (Offensive Security) \ Tutorial 001: Port Forwarding \ PF03: Dynamic Port Forwarding).

A preview is below and I will export the full PDF to anyone who would like a copy.

Remote Port Forwarding

...is complete and available in the Library. I have also re-categorized the Port Forwarding Tutorials and placed them into (Red Team (Offensive Security) \ Tutorial 001: Port Forwarding) because they are offensive by nature even if we have permission to use them they are more often then not, used to bypass some of of defensive security.

A preview is below and I will export the full PDF to anyone who would like a copy.

Local Port Forwarding

Due to popular demand, I am working on a Four Part Port Forwarding Tutorial. The first section, Local Port Forwarding" is complete and available in the Library at (The Basics \ Tutorial 009: Port Forwarding \Local Port Forwarding)

A preview is below and I will export the full PDF to anyone who would like a copy.

CenterIM is now Supported

CenterIM is a CLI based Instant Message application that uses TLS encryption. It is not supported on my Jabber server. Setup instructions are available in the Library. "The Basics / Configure Jabber in Linux CLI"

100th Command: The most "BOSS" one-liner.

Reason: This command is a one line monitoring tool. It is running on my

CORE00 VM host server. When I attach an LCD to this box (which does not have a GUI) I will run this to get an overview of what is going on.

Realistic Challenge #1(Disk Full Problems)

...has been posted in the Challenges section of The Library. You can preview it below.

Liquid-Phantom’s Top 100 Linux Commands Part 4/4

These are my top 25 Most Confusing/Over Complicated/Unnecessary commands.

############################################### Lynx (lynx) Lynx is a command line based web browser. It is useful for scripting web related tasks, browsing the internet without getting malware or looking like an elite hacker. Example: lynx Reason: Even if you do nothing productive with lynx it is still super cool to check out at least once and just to play around with. ############################################### Watch (watch) Watch will monitor a process in real time. It is best used when you need to run the same command over and over again to monitor for changes. Example: watch -n 1 -d 'ifconfig' Reason: The example command will update the stats on the screen in real time and highlight any changes. This can be adapted to almost any command. ############################################### Disk Usage (du) Used to display information about the disk utilization and the file system. Example: du --max-depth=1 -h Reason: The command in the example is extremely useful when trying to locate large files that are consuming disk space. ############################################### Alias (alias) Used to create command shortcuts. Example: alias ll='ls -lSh' Reason: Use of alias will save a ton of time. ############################################### Network Status (netstat) Displays all network connections to and from the local host. Example: netstat -ant Reason: Once you learn to read the output, you can quickly see what connections your computer has established with other computers. These connections can be killed with tcpkill. ############################################### NetCat (nc) A simple networking service that can be used to listen or establish a connection with other networking services. Example: NetCat Cheat Sheet Reason: NetCat is very easy to use and a good learning tool for beginner hackers. ############################################### List PCI, List USB (lspci, lsusb) Displays attached internal and external components of the computer. Example: lspci Example: lsusb Reason: This is like the Device Manager in Windows. ############################################### IPtables (iptables) IPtables is a software firewall that is built into most common versions of Linux. It is relativity easy to configure and highly effective. Example: iptables -L Example NAT Setup: Allow NATing using host's route table sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -j ACCEPT Reason: This is an elite command because of its overall ease of use and high functionality. ############################################### Numbering Lines (nl) Adds line numbers to text files. Example: cat report.txt | nl Reason: When coordinating with other users, being able to reference config files with line numbers is much more efficient then not. ############################################### TCPdump (tcpdump) One of the most common tools used to dump raw traffic from an interface. Another common CLI tool is tshark. Example: tcpdmp -i eth0 Reason: Packet capture software is indispensable when it comes to network troubleshooting. ############################################### Translate (tr) Th Translate command is used to transpose text. It can be used for rudimentary encryption or to fix punctuation. Example: cat message.txt | tr 'abc' 'zyx' > encrypted.txt Reason: USEFUL IF YOU TYPED SOMETHING IN ALL CAPS AND WANT TO CHANGE IT QUICKLY. ############################################### Secure Shell (ssh) (port fwd and stuff) P55 SSH is obviously used to connect to remote devices but it can also be used to create a secure SSL channel in which to encapsulate non encrypted traffic. Example: ssh -R8080:127.0.0.0:443 [email protected] Reason: N/A ############################################### Super Simple Mail Tranfer Protocol (ssmtp) SSMTP is a command that sends email from the CLI using the SMTP protocol. It if extremely easy to setup and use. Example: cat report | ssmtp [email protected] Reason: This is an elite command because of its overall ease of use and high functionality. ############################################### Awkward (awk) AWK is like a mini programming language that is primarily used to reformat and sort text. Example: cat file.txt | awk -F " " '{print$1}' Reason: Being able to quickly extract data from a large file (logs) and then analysis it is critical for a good security or network engineer. ############################################### Difference (diff) Displays the difference between two text based files. Example: diff file1.txt file2.txt Image: Good for comparing changes in config files against their backups. ############################################### Disk Duplicate (dd) Used to create an exact bit for bit copy of a file. It is also a very common tool to use to wipe a disk, flash an image file or to recover data from a damaged drive. Example: dd if=ubuntu.iso of=/media/USB1 Reason: This tool is invaluable when it comes to coping or backing up full disk images. If you need to create a boot-able flash drive, or copy a file system to a hard drive this is your best method. ############################################### Process (ps) Displays which processes are running in a system. By adding the brackets you can exclude your grep command in the search. Example: ps -wef | grep -i [p]rocess Reason: This is the Linux equivalent of the Windows Task Manager. Need I say more? ############################################### Who (who) Displays other users who are logged into a system, what command they are running and how long they have been on the system. Example: who Reason: The reason I mention this command is not only the usefulness of the command itself but also because I wanted to share a trick you can use when your sysadmin locks the who command. By checking to see processes are running you can in turn see who is logged into a system. (ps -wef | grep -i [s]sh) ############################################### At (at) Used t execute a command at a specific time. Example: cat report.txt | ssmtp [email protected] | at 1145 jan 31 Reason: Cron is the ideal tool to setup continuous task execution but at provides a simple one-off way to run a command at a specified time. ############################################### Cron Tab (crontab) The crontab is a conf file where you can setup automated tasks. Anything that you can script, can be automated via cron. Example: sudo contab -e Reason: Automation saves time and makes the world go round. ############################################### Split (split) Split is used to divide files into smaller files which makes them easier to transfer and work with. It is smart enough that if you are splitting a text file each section will still be read-able. Example: split -M 100 newfile.part aBigFile.txt Reason: When uploading files to a hosting site you may experience a file size cap. When transferring files, large files may error or timeout. For these reasons you may need to split up large files. Compression also helps. ############################################### Secure Copy (scp) Used to copy data from one host to another using ssh. Example: scp gingersnap@wonderwoman:/home/gingersnap/secrets/Credit_Card_info.txt /home/aHacker/downloads Reason: SCP is my personal favorite method of transferring files between computers. That and wget, but SCP is secure. ############################################### World Count (wc) Used to count the number of words or lines in a text file. Example: cat messages.log | wc -l Reason: Knowing how many lines of text are in a file can be more useful then you think. It also helps to determine is a config file has been modified. ###############################################

Liquid-Phantom’s Top 100 Linux Commands Part 3/4

These are my top 25 Most Confusing/Over Complicated/Unnecessary commands.

################################################################Print Working Directory (pwd)Displays the user's current directory and the full path to that directory.Example: pwd Reason: Elite users will have their PATH show their working directory making this command null and void. ################################################################ Who Am I (whoami) Displays the user account that you are actively using. Example: whoami Reason: Elite users will have their PATH show their user account making this command null and void. ################################################################ Touch (touch) Create a blank file. Example: touch file.txt Reason: There is rarely a use for this. Elite users will use wakka's (>, >>) to add content to a file like so: echo "hello" > file.txt ################################################################ Add User (useradd/adduser) These commands are used to create a new user on a system. One will setup the account for use and the other will create the account but not configure them. Example: adduser tim Reason: These commands are over complicated for your average user to comprehend and having both installed on a systems adds extra confusion. ################################################################ Change Mode (chmod) Changes permissions in Linux. Example: chmod +x script.sh Reason: Despite Linux permissions actually being easier and more simple then Windows Permissions, the number system (which is optional) it confuses people to no end. ################################################################ Change Owner (chown) Changes the Owner of a file or directory. Example: chown root file.txt Reason: Similar to chmod, this command seems to confuse people even though its actually not very complicated. ################################################################ Remove Directory(rmdir) Deletes a directory. Example: rm My_Music Reason: This command is unnecessary because you can accomplish the same thing with: rm -r My_Music ################################################################ Head (head) Displays the first page of a file Example: head readme.txt Reason: This command is unnecessary because you can accomplish the same thing with: <cmd> | more ################################################################ Find (find) Used to find the location of a string that you searched for. Example: find ssh Reason: Find has an overcomplicated syntax. Locate is much easier to use. ################################################################ Less (less) Less is a tect viewer, much like a tect editor without the edit ability. Example: less report.txt Reason: Although there are a few legit uses for less, more often then not you will be better of with "| more" or to open the file in vi or nano. The syntax and controls are also unnecessarily overcomplicated. ################################################################ Type (type) (like which but only works in BASH Used to determine the original location of a file or program. Example: type ssh Reason: Does the same thing as "which" but only work in BASH. ################################################################ Where Is (whereis) (use locate Search tool used to find files by their name. Example: whereis *.txt Reason: Does the same thing as "locate". ################################################################ Enhanced Grep (egrep) (grep -E Has more powerful functions then the grep command. Example: egrep <string> file.txt Reason: For simplicity, use "grep -E" and not "egrep" it makes earning Linux CLI much easier. ################################################################ fgrep (grep -f Has more powerful functions then the grep command. Example: fgrep <string> file.txt Reason: For simplicity, use "grep -f" and not "egrep" it makes earning Linux CLI much easier. ################################################################ Gun Zip (gunzip) (gzip -d Used to compress files. Example: gunzip file.txt Reason: Save a few letters on your keyboard and use: gzip -d ################################################################ Compare (comm) Used to compare the differences in two files. Example: comm file1.txt file2.txt Reason: Use "diff" its more common and easier to use. ################################################################ Compare (cmp) Used to compare the differences in two files. Example: comm file1.txt file2.txt Reason: Use "diff" its more common and easier to use. ################################################################ Mount and Unmount (mount/umount) Used to "attach" (or remove) a filesystem on a drive to a directory so that it may be accessed by the user and the system. Example: mount -t ext3 /dev/sdb1 /mnt/backups Reason: Mount is a very powerful tool but also one that the major of people rarely use and thus it appears to be confusing. ################################################################ Path ($PATH) The PATH is an environment variable and works the same way in Linux and OSX as it does in Windows. By adding directories to your PATH, you can execute command and scripts from that directory anywhere in the system. Example: echo "$PATH" Example: PATH=$PATH:/home/newDIR Reason: The PATH if a very common tool but relatively few people ever mess with it more than once if that. ################################################################ Disk Usage (du) and Disk Full (df) Both of these command are used to display information about the disk utilization and the file system. Example: du --max-depth=1 -h Example: df h Reason: These commands are actually pretty easy to use but my complaint is that we have two of them. I would have liked to see the functionality of both built into one command. ################################################################ Reboot (reboot) Used to restart a computer. Example: reboot Reason: Just use shutdown -r. Less commands to remember. ################################################################ Format Disk (fdisk) Used to format a dick in Linuk Example: fdisk /dev/sdb Reason: If you have access to a GUI, use gparted. fdisk's "interactive" menus are more confusing then they need to be. ################################################################ Server Message Block Client (sbmclient) Used to connect to Windows File Shares Example: smbclient -U admin \192.168.1.2\SHARE Reason: The command is very glitchy and does not always work as expected. ################################################################ Screen (screen) Used to give GUI like features to a CLI in term of window control and having multiple active CLI windows without an actualy GUI. Example: screen -d Reason: Just use a real GUI or use & to run commands in the background. ################################################################ Making Room for the most "BOSS" one-liner. ################################################################

Liquid-Phantom’s Top 100 Linux Commands Part 2/4

These are my top 25 Rare/You've Never Heard Of Commands.

Sets various properties for a wireless network connection such as Mode, Frequency, and Channel. Example: iwconfig eth0 txpower 15 Reason: Most people will configure a wireless connection via a GUI. This command is mostly useful in scripting or when setting up an automation script. #################################################### Wireless List (iwlist) Used to scan for wireless access points Example: iwscan wlan0 scanning Reason: The reason this command is rare is because when most people are learning how to hack wireless networks they will learn to scan using the aircrack-ng suite and therefor this command is overlooked. #################################################### MAC Changer (macchanger) Changes the MAC Address of a computer temporarily. The change will revert on reboot. Example: macchanger -r wlan0 Reason: MAC addresses are "burned" into the hardware of a given NIC and as a result most people believe that they can not be changed. It is possible to permanently alter a MAC by re-flashing the ROM on a NIC but using macchnager is easier. #################################################### HEX Data Viewer (xxd) Displays the hex data of a file. Example: xxd file.txt Reason: There are several GUI based hex tools that are more common. Wireshark will also display hex data when reviewing a pcap. #################################################### Stat (stat) Displays detailed information of on a file including last accessed. Example: stat file.txt Reason: Once again this information can be attained from the GUI and is not commonly sought after. #################################################### File (file) Displays data of the type of a file. In the case of a text file, it will tell you if it is an ACSII, RTF or something else. Example: file file.txt Reason: Once again this information can be attained from the GUI and is not commonly sought after. #################################################### Mask (umask) Displays the permissions of the current directory. Can also be used to apply permissions. Example: umask -U Reason: It is easier to use ls -l to read permissions and chmod to change the mode (permissions) of a file/directory. #################################################### Which (which) Used to determine the original location of a file or program. Example: which ssh Reason: Most people don't care. Every once in a while you need to use a full path or remap something that broke and this command will come in handy. #################################################### Cut (cut) Displays only a desired column(s) in a text file. To display the 2nd through 5th character for each line in a file so this: Example: cat file.txt | cut -c2-5 Reason: Most people don't need to manipulate text in this fashion and those who do use more sophisticated tools like AWK and SED. #################################################### TCP Kill (tcpkill) Used to kill TCP connections that meet a specified criteria. To kill all TCP connection that are using port 22 on either side do this: Example: tcpkill -i eth0 port 22 Reason: This command is extremely useful if you want to force kill a connection for one of any number of reasons. If you have admin creds you can even kill other people connections. #################################################### Tee (tee) Used to display the output of a command to the screen as well as record it to a file. Example: ls | tee record.txt Reason: There are better ways of doing this in a script setting but the tee command is useful and quick for a one-liner. #################################################### MD5 Summery (md5sum) Prints the MD5 hash value of a file. Hashs are used to verify the integrity of a file. Example: md5summ file.txt Reason: It is almost impossible to know if someone is ease dropping on your internet connection or if the file you were trying to download was replaced/modified on its way down to you. By confirming the md5sum before and after you can ensure that a file was not altered from its original state. #################################################### CD Record (cdrecord) Used to burn files to a CD from the command line. Example: cdrecord -v dev=0,4,0 Suse-9.0*iso Reason: Rarely will people burn files to a CD from the CLI and when they do its more often then not an ISO in which case, DD is the ideal tool. #################################################### Renice (renice) Used to chnage the runtime priority of a process. Example: renice {priority} pid Example: renice 19 2243 Reason: It is not a common need to re-prioritize processes. This command is most useful when running several long data-mining processes and you want to prioritize one over the others. #################################################### Sleep (sleep) Used to pause a system or cause it to wait for a specified number of seconds. There is little use for this command outside of a script but it still works the same. Example: sleep 1000 Reason: Unless you are writing scripts or pranking your friend, this command is more or less worthless and therefore is not commonly used. #################################################### Last (last) Displays the last time a specified user access a system. Example: last user Reason: Unless your a sys-admin it is rare to spy on other users. If you are working in a multi-user environment where people from different geo-locations are working on the same devices this would be a good way to see if someone was recently on a device. #################################################### PrintF (printf) Works like echo but provides additional formatting options. Useful in scripts. Example: printf Hello Reason: Most people use echo so printf is less common but it great when writing scripts. #################################################### Expression (expr) Used to calculate values in a CLI. Also good for scripting. Example: expr 1+ 2 Reason: GUI Calculators are all the rage these days but those of you elite enough will find this a huge time saver. Seriously. #################################################### Shred (shred) Used when erasing files. Much like when wiping a drive, shred will overwrite a file so that it can not be recovered easily. Can also be used on a while drive. Example: shred file.txt Example: shred /dev/sda Reason: Most people done care about their files being recovered or do not realize the real danger that is present. Those who care use fill disk encryption and make the need to wipe date irrelevant. #################################################### Lame (lame) Used to compress audio files into the MP3 format. Example: lame song.wav song.mp3 Reason: Most people will just use a GUI application for this. #################################################### ID3 Tag (id3tag) Used to view and edit meta data of audio files. Example: id3tag song.mp3 Reason: There are GUI based tools that make this process easier. #################################################### Logger (logger) Used to manually add logs to a systems default log file. Example: logger "System Rebooted" Reason: Since most people don't review system logs on a daily basis they wont take the time to make note of what they do to a system. ####################################################

Pro Tip of The Day #63 (Yesterday's Date)

When writing a script, use the following line to define a date variable equaling yesterday’s date.

YDATE=$(date -d “yesterday” +%F)

>echo $YDATE

2015-02-01

Awe

Peek

No More Google Docs

Hey guys, just wanted to let everybody know that I am no longer using Google Docs. I have switched over to another tool. If anybody requires the files that are linked in previous posts and are no longer working, please message me and I will send you an updated link.

—liquid-phantom

Trending Blogs

Recently Viewed Blogs

Liquid-Phantom