linux: mac spoof nasıl yapılır

* Spoof the MAC address:

sudo ifconfig en1 ether [mac address to spoof]

Where it says "[mac address to spoof]", press Command-V to paste the victim's, er, I mean the machine-to-be-spoofed's MAC address.  Your machine may require an administrator password at this point.  This is the password you use to log into OS X on your own machine.

* Confirm the spoof:

ifconfig en1 | grep ether

Your displayed MAC address should now be different from what it was before.

A Developer’s Journey into Linux Containers

https://deis.com/blog/2015/developer-journey-linux-containers/

command line external ip information

$ curl ipinfo.io

Return IP information about your external ip address with JSON format

OS X El Capitan: how to run wireshark with iphone usb interface

Öncelikle cihazınıza ait udid bilgisini edinmeniz gerekiyor. Bu bilgiyi itunes summary kısmından öğrenebilirsiniz.

Detaylar:

https://blog.unlockbase.com/find-udid-blocked-icloud-iphone/

Sonrasında virtual interface oluşturmak için rvictl aracını kullanıyoruz.

localuserpc:~ root# rvictl -s en5

rvictl [-h][-l][-s <udid1> ... <udidN>][-x <udid1> ... <udidN>]

Remote Virtual Interface Tool starts and stops a remote packet capture instance 

for any set of attached mobile devices. It can also provide feedback on any attached 

devices that are currently relaying packets back to this host. 

Options:

-l, -L List currently active devices

-s, -S Start a device or set of devices

-x, -X Stop a device or set of devices

localuserpc:~ root# rvictl -s

Starting device XXX [SUCCEEDED] with interface rvi0

sonrasında çalıştırdığınızda rvi0 interface'i üzerinden filtreleme yapabilirsiniz;

localuserpc:~ root# wireshark

jq: command-line tool for parsing JSON.

Passing it through jq's parser, with the most basic option, will make it look nicer (with colors):

user@host:~$ curl -s https://status.github.com/api/status.json |\
  jq '.'
{
  "status": "good",
  "last_updated": "2015-01-21T16:59:01Z"
}

Do some basic selection:

user@host:~$ curl -s https://status.github.com/api/status.json |\
  jq '.status'
"good"

anti adblock killer ile adblock tespit eden siteleri bypass edin

https://greasyfork.org/en/scripts/735-anti-adblock-killer-reek

bu script'i kullanabilmeniz için tarayıcınızda tampermonkey kurulu olmalıdır.

2016 Data Storage Innovation Conference sunumları erişilibilir

2016 Data Storage Innovation Conference sunumları erişilibilir

http://www.snia.org/events/dsicon/presentations2016

Yeni sürüm BlackArch Linux yayınlandı

The new ISOs include over 1500 tools. For more details see the ChangeLog below.

Here's the ChangeLog :
include linux kernel 4.7.1
updated BlackArch Linux installer
added more than 100 new tools
updated all blackarch tools
updated all system packages
updated menu entries for window managers (awesome, fluxbox, openbox)

https://blackarch.org/blog.html

https://blackarch.org/tools.html

NSA Private Hacking Tools

NSA's Hacking Group Hacked! Bunch of Private Hacking Tools:

The Equation Group is a highly sophisticated threat actor described by its discoverers at Kaspersky Labs as one of the most sophisticated cyber attack groups in the world and "the most advanced ... we have seen", operating alongside but always from a position of superiority with the creators of Stuxnet and Flame.[1][2]

The name Equation Group was chosen because of the group's predilection for strong encryption methods in their operations. By 2015, Kaspersky documented 500malware infections by the group in at least 42 countries, while acknowledging that the actual number could be in the tens of thousands due to its self-terminating protocol.[2][3]

They are suspected of being tied to the United States National Security Agency (NSA).[4][5] By 2015, most of their targets had been in Iran, Russia, Pakistan,Afghanistan, India, Syria, and Mali.[2]


Hacker Demands $568 Million in Bitcoin to Leak All Tools and Data


Not just this, the hackers, calling themselves "The Shadow Brokers," are also asking for 1 Million Bitcoins (around $568 Million) in an auction to release the 'best' cyber weapons and more files.
İncelemek isterseniz aşağıdaki adreslerden indirebilirsiniz.

File Urls
- ———-

magnet:?xt=urn:btih:40a5f1514514fb67943f137f7fde0a7b5e991f76&tr=http://diftracker.i2p/announce.php

https://mega.nz/#!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv_405hX8kn7MEsa1iLH5UjKU
https://app.box.com/s/amgkpu1d9ttijyeyw2m4lso3egb4sola
https://www.dropbox.com/s/g8kvfl4xtj2vr24/EQGRP-Auction-Files.zip
https://ln.sync.com/dl/5bd1916d0#eet5ufvg-tjijei4j-vtadjk6b-imyg2qkd
https://yadi.sk/d/QY6smCgTtoNz6

# unzip EQGRP-Auction-Files.zip 

Archive:  EQGRP-Auction-Files.zip

  inflating: eqgrp-auction-file.tar.xz.gpg  

  inflating: eqgrp-auction-file.tar.xz.gpg.sig  

  inflating: eqgrp-free-file.tar.xz.gpg  

  inflating: eqgrp-free-file.tar.xz.gpg.sig  

  inflating: public.key.asc          

  inflating: sha256sum.txt           

  inflating: sha256sum.txt.sig 

# gpg --output eqgrp-free-file.tar.xz --decrypt eqgrp-free-file.tar.xz.gpg

tar -xf eqgrp-free-file.tar.xz

(Password: theequationgroup)

# cd Firewall/

# ls

BANANAGLEE  BARGLEE  BLATSTING  BUZZDIRECTION  EXPLOITS  OPS  padding  SCRIPTS  TOOLS  TURBO

https://webcache.googleusercontent.com/search?q=cache:owtq6OBSmgEJ:https://theshadowbrokers.tumblr.com/+&cd=1&hl=en&ct=clnk&gl=us

firefox: An error occurred during a connection to localhost:5634. Issuer certificate is invalid. (Error code: sec_error_ca_cert_invalid)

Platform: Red Hat Enterprise Linux Server release 6.6

Veritas Operations Manager Server 6.1 kurulumu sonrası https://localhost:5634/ arayüzüne firefox ile erişim sağlamaya çalıştığımda aşağıdaki hatayı aldım.

Secure Connection Failed

An error occurred during a connection to localhost:5634. Issuer certificate is invalid. (Error code: sec_error_ca_cert_invalid)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

Çözüm:

Go to about:config

security.use_mozillapkix_verification

set it to true (you can double click on it to do so) and restart firefox

epel and remi repo installation on centos 6

• Command to install the EPEL repository configuration package:    yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm
• Command to install the Remi repository configuration package:    yum install http://rpms.remirepo.net/enterprise/remi-release-6.rpm

Multilib Protection warning for i686 package installation on Red Hat x86_64

To bypass this warning you need to edit /etc/yum.conf and add protected_multilib=0 line in the [main] section of the config

ShmooCon 2016 videos

ShmooCon is an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues. 

https://archive.org/details/shmoocon-2016

WIFI PINEAPPLE

http://hackmiami.org/wp-content/uploads/2013/07/Wifi-Pineapple-Mark-IV-aceversion.pdf

Ebowla: Framework for Making Environmental Keyed Payloads

Slides:

https://github.com/Genetic-Malware/Ebowla/raw/master/Infiltrate_2016_Morrow_Pitts_Genetic_Malware.pdf

Demos

Demo1: https://www.youtube.com/watch?v=rRm3O7w5GHg

Demo2: https://youtu.be/Bu_qDrbX9Zo

Demo3: https://youtu.be/mlh70LtwmDo

ansible: IT automation engine

Ansible is a radically simple IT automation engine that automates cloud provisioning,configuration management, application deployment, intra-service orchestration, and many other IT needs.

https://www.ansible.com/quick-start-video

etcd: open-source distributed key value store

etcd is an open-source distributed key value store that provides shared configuration and service discovery for CoreOS clusters. etcd runs on each machine in a cluster and gracefully handles master election during network partitions and the loss of the current master.

https://coreos.com/etcd/docs/latest/getting-started-with-etcd.html

iscsiadm ipuçları

iSCSI nedir?

iSCSI, depolama aygıtlarını TCP/IP kullanan bir ağ üzerinden bağlama yöntemidir. Yerel ağ (LAN), geniş alan ağı (WAN) veya Internet üzerinden kullanılabilir. iSCSI aygıtları, ağ üzerinden erişilebilen başka bir bilgisayarda bulunan, bağlanabileceğiniz disk, teyp, CD ve benzeri diğer depolama aygıtlarıdır.

10.1.0.3 ip adresli makinaya openfiler kurdum ve vg ve lun yapılandırması gerçekleştirdim.

node'lara ait ip blokları için initialize yetkisi tanıdım.

Platform: 

Red hat Linux 6.5 x86_64

iscsiadm -m session --rescan

iscsiadm -m discovery -t sendtargets -p 10.1.0.3:3260

iscsiadm -m node -T iqn.2006-01.com.openfiler:tsn.ce262c997ea5 -p 10.41.0.2:3260

iscsiadm -m node -T iqn.2006-01.com.openfiler:tsn.ce262c997ea5 -p 10.41.0.2:3260 -l

# disable all active sessions

iscsiadm -m node | while read line; do iqn=$(echo $line | awk '{print $2 }'); iscsiadm -m node -T $iqn --portal $(echo $line | awk '{print $1 }' | sed -r 's/(.+:3260),.*/\1/') -u;  done

# delete all node records

iscsiadm -m node | while read line; do iqn=$(echo $line | awk '{print $2 }'); iscsiadm -m node -o delete -T $iqn --portal $(echo $line | awk '{print $1 }' | sed -r 's/(.+:3260),.*/\1/');  done

# list node records

iscsiadm -m node

# discover targets on specific hosts

iscsiadm -m discovery -t sendtargets -p 10.41.0.131:3260

# login to target

iscsiadm -m node -T iqn.2005-10.org.freenas.ctl:target01 -p 10.41.0.131:3260 -l

virtualbox: create internal test vm network

$ VBoxManage dhcpserver add --netname testlab --ip 10.1.0.1 --netmask 255.255.255.0 --lowerip 10.1.0.2 --upperip 10.1.0.100 --enable

localuser-MacBook-Pro:~ localuser$ VBoxManage list dhcpservers

NetworkName:    HostInterfaceNetworking-vboxnet0

IP:             192.168.56.100

NetworkMask:    255.255.255.0

lowerIPAddress: 192.168.56.101

upperIPAddress: 192.168.56.254

Enabled:        Yes

NetworkName:    testlab

IP:             10.1.0.1

NetworkMask:    255.255.255.0

lowerIPAddress: 10.1.0.2

upperIPAddress: 10.1.0.100

Enabled:        No


https://www.virtualbox.org/manual/ch08.html#vboxmanage-dhcpserver

hpux: tips

HP-UX, HP'nin üretiği 9000 ve Itanium serisi sunucularda kullanılan UNIX varyantı bir işletim sistemidir.

initscripts:

/sbin/init.d/


messages:

/var/adm/syslog/syslog.log


http://kmit4u.blogspot.com.tr/2010/06/task-os-aix-freebsd-hp-ux-linux-openbsd.html

unix domain socket interface for kafka server

Bruce is a producer daemon for Apache Kafka. Bruce simplifies clients that send messages to Kafka, freeing them from the complexity of direct interaction with the Kafka cluster. Specifically, it handles the details of:

• Routing messages to the proper brokers, and spreading the load evenly across multiple partitions for a given topic. Clients may optionally exercise control over partition assignment, such as ensuring that a group of related messages are all routed to the same partition, or even directly choosing a partition if the client knows the cluster topology.
• Waiting for acknowledgements, and resending messages as necessary due to communication failures or Kafka-reported errors
• Buffering messages to handle transient load spikes and Kafka-related problems
• Tracking message discards when serious problems occur; Providing web-based discard reporting and status monitoring interfaces
• Batching and compressing messages in a configurable manner for improved performance
• Optional rate limiting of messages on a per-topic basis. This guards against buggy client code overwhelming the Kafka cluster with too many messages.

command:

bruce --msg_buffer_max 65536 --receive_socket_name /var/run/bruce/bruce.socket --config_path /etc/bruce/bruce_conf.xml --log_echo --log_level LOG_DEBUG

volfied

http://playdosgamesonline.com/volfied.html

advanced torrent client

https://www.tixati.com/download/

https://download1.tixati.com/download/tixati-2.34-1.portable.zip

httpd: compression

 AddType application/x-javascript .js
 AddType text/css .css
 AddOutputFilterByType DEFLATE text/css application/x-javascript text/x-component text/html text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/x-icon application/javascript
  BrowserMatch ^Mozilla/4 gzip-only-text/html
  BrowserMatch ^Mozilla/4\.0[678] no-gzip
  BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
  Header append Vary User-Agent env=!dont-vary

linux: how to find which pid is listenning specific port number

# ps -p $(fuser 22/tcp 2>/dev/null | awk '{print $1}') -o args