dirsearch.py

dirsearch is a simple command line tool designed to brute force directories and files in websites.

hashID | hash-identifier

Identify the different types of hashes used to encrypt data and especially passwords.

This replaces hash-identifier, which is outdated!

hashID is a tool written in Python 3 which supports the identification of over 220 unique hash types using regular expressions.

Supported hash list

--

1Password(Agile Keychain)

1Password(Cloud Keychain)

Adler-32

AIX(smd5)

AIX(ssha1)

AIX(ssha256)

AIX(ssha512)

Android FDE ≤ 4.3

Android PIN

Apache MD5

bcrypt(SHA-256)

BigCrypt

Blowfish(OpenBSD)

BSDi Crypt

Cisco Type 4

Cisco Type 8

Cisco Type 9

Cisco VPN Client(PCF-File)

Cisco-ASA(MD5)

Cisco-IOS(MD5)

Cisco-IOS(SHA-256)

Cisco-PIX(MD5)

Citrix Netscaler

Clavister Secure Gateway

CRAM-MD5

CRC-16

CRC-16-CCITT

CRC-24

CRC-32

CRC-32B

CRC-64

CRC-96(ZIP)

Crypt16

CryptoCurrency(Adress)

CryptoCurrency(PrivateKey)

Dahua

DES(Oracle)

DES(Unix)

Django(bcrypt-SHA256)

Django(bcrypt)

Django(DES Crypt Wrapper)

Django(MD5)

Django(PBKDF2-HMAC-SHA1)

Django(PBKDF2-HMAC-SHA256)

Django(SHA-1)

Django(SHA-256)

Django(SHA-384)

DNSSEC(NSEC3)

Domain Cached Credentials

Domain Cached Credentials v2

Double MD5

Double SHA1

Drupal > v7.x

Eggdrop IRC Bot

ELF-32

EPi

EPiServer 6.x < v4

EPiServer 6.x ≥ v4

Fairly Secure Hashed Password

FCS-16

FCS-32

Fletcher-32

FNV-132

FNV-164

Fortigate(FortiOS)

FreeBSD MD5

GHash-32-3

GHash-32-5

GOST CryptoPro S-Box

GOST R 34.11-94

GRUB 2

Half MD5

HAS-160

Haval-128

Haval-160

Haval-192

Haval-224

Haval-256

hMailServer

IKE-PSK MD5

IKE-PSK SHA1

IP.Board ≥ v2

IPMI2 RAKP HMAC-SHA1

iSCSI CHAP Authentication

Joaat

Joomla < v2.5.18

Joomla ≥ v2.5.18

Juniper Netscreen/SSG(ScreenOS)

Kerberos 5 AS-REQ Pre-Auth

Lastpass

LDAP(SSHA-512)

Lineage II C4

LinkedIn

LM

Lotus Notes/Domino 5

Lotus Notes/Domino 6

Lotus Notes/Domino 8

MangosWeb Enhanced CMS

MD2

MD4

MD5

MD5 Crypt

MD5(APR)

MD5(Chap)

MediaWiki

Microsoft MSTSC(RDP-File)

Microsoft Office ≤ 2003 (MD5+RC4)

Microsoft Office ≤ 2003 (SHA1+RC4)

Microsoft Office 2007

Microsoft Office 2010

Microsoft Office 2013

Microsoft Outlook PST

Minecraft(AuthMe Reloaded)

Minecraft(xAuth)

MSSQL(2000)

MSSQL(2005)

MSSQL(2008)

MSSQL(2012)

MSSQL(2014)

MyBB ≥ v1.2+

MySQL Challenge-Response Auth (SHA1)

MySQL323

MySQL4.1

MySQL5.x

NetNTLMv1-VANILLA / NetNTLMv1+ESS

NetNTLMv2

Netscape LDAP SHA

Netscape LDAP SSHA

NTHash(FreeBSD Variant)

NTLM

Oracle 11g/12c

Oracle 7-10g

osCommerce

OSX v10.4-10.6

OSX v10.7

OSX v10.8-10.9

Palshop CMS

PBKDF2-HMAC-SHA256(PHP)

PBKDF2-SHA1(Generic)

PBKDF2-SHA256(Generic)

PBKDF2-SHA512(Generic)

PBKDF2(Atlassian)

PBKDF2(Cryptacular)

PBKDF2(Dwayne Litzenberger)

PDF 1.4 - 1.6 (Acrobat 5 - 8)

PeopleSoft

PHPass' Portable Hash

phpBB 3.x

PHPS

PostgreSQL Challenge-Response Auth (MD5)

PostgreSQL MD5

RACF

RAdmin v2.x

Redmine Project Management Web App

RIPEMD-128

RIPEMD-160

RIPEMD-256

RIPEMD-320

Salsa10

Salsa20

SAM(LM_Hash:NT_Hash)

SAP CODVN B (BCODE)

SAP CODVN F/G (PASSCODE)

SAP CODVN H (PWDSALTEDHASH) iSSHA-1

SCRAM Hash

scrypt

SHA-1

SHA-1 Crypt

SHA-1(Base64)

SHA-1(Oracle)

SHA-224

SHA-256

SHA-256 Crypt

SHA-384

SHA-512

SHA-512 Crypt

SHA3-224

SHA3-256

SHA3-384

SHA3-512

Siemens-S7

SipHash

Skein-1024

Skein-1024(384)

Skein-1024(512)

Skein-256

Skein-256(128)

Skein-256(160)

Skein-256(224)

Skein-512

Skein-512(128)

Skein-512(160)

Skein-512(224)

Skein-512(256)

Skein-512(384)

Skype

SMF ≥ v1.1

Snefru-128

Snefru-256

SSHA-1(Base64)

SSHA-512(Base64)

Sun MD5 Crypt

Sybase ASE

Tiger-128

Tiger-160

Tiger-192

Traditional DES

vBulletin < v3.8.5

vBulletin ≥ v3.8.5

Ventrilo

VNC

WebEdition CMS

Whirlpool

Woltlab Burning Board 3.x

Woltlab Burning Board 4.x

Wordpress ≥ v2.6.2

Wordpress v2.6.0/2.6.1

XOR-32

xt:Commerce

ZipMonster

Solaris: list wwn info

Aşağıdaki komut ile wwn bilgilerini görüntüleyebilirsiniz.

# fcinfo hba-port


WWN nedir?

A World Wide Name (WWN) or World Wide Identifier (WWID) is a unique identifier used in storage technologies including Fibre Channel, Advanced Technology Attachment (ATA) or Serial Attached SCSI (SAS).

Kaynak: wikipedia

Stitch: a cross-platform Python Remote Administration Tool

https://github.com/nathanlopez/Stitch

A Cross Platform Python Remote Administration Tool:

This is a cross platform python framework which allows you to build custom payloads for Windows, Mac OSX and Linux as well. You are able to select whether the payload binds to a specific IP and port, listens for a connection on a port, option to send an email of system info when the system boots, and option to start keylogger on boot. Payloads created can only run on the OS that they were created on.

Url bilgilerini çıkarma

Bu iş için lynx aracını aşağıdaki şekilde kullanabilirsiniz.

$ lynx -dump -listonly <url>

sandboxie ile şüpheli uygulamaları güvenle çalıştırın

Şüphe duyduğunuz uygulamaları izole ederek çalıştırmanıza olanak sağlayan bir uygulamala.

https://sandboxie.com/

Python SimpleHTTPServer ile dizin servisi

Bulunduğunuz dizini spesifik bir porta atayacağınız SimpleHTTPServer  ile hızlıca servis edebilirsiniz. Özellikle hızlıca ağ içi dosya transferi için kullanışlı.

$ python -m SimpleHTTPServer 8090

bugcrowd

bugcrowd.com

Utilize the collective creativity of tens of thousands of hackers to test your applications
https://bugcrowd.com/how-it-works

Grant DBA rights to specific user

$ sqlplus

SQL*Plus: Release 11.2.0.1.0 Production on Sat Jan 7 13:52:22 2017

Copyright (c) 1982, 2009, Oracle.  All rights reserved.

Enter user-name: sys as sysdba
Enter password:

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> grant dba to availabilityuser with admin option;

Grant succeeded.

Veritas Volume Replicator operational notes

VVR nedir?

Veritas volume replicator, Veritas storage foundation yeni adı ile Infoscale uygulamalarında prod ve drc tarafında uygulayabileceğiniz bir replikasyon çözümüdür.

RVG'ye yeni bir volume ekleme işlemi:

Öncelikle primary ve secondary tarafında volume tanımı yapılmalı ve logtype=dcm belirtilmeli ve secondary tarafta mkfs.vxfs ile biçimlendirme yapılmalıdır.

prod # vradmin -g cbsdg addvol rvg_rclus home0


RVG'den volume çıkarma işlemi:

Öncelikle volume primary sistemde umount yapılmalı. Umount işlemi için eğer VCS (Veritas Cluster Server) kullanıyorsanız cluster explorer arayüzü veya hares komut çağrılarını kullanabilirsiniz.

Aşağıdaki işlem sonrası hem prod hem de drc tarafında vxprint çıktılarında volume'ün RVG kapsamından çıktığını gözlemledim.

Sonrasında:

prod # vradmin -g cbsdg delvol rvg_rclus home0


Mevcut bir Rlink kaydı üzerinde düzenleme işlemi:

Öncelikle rlink pause edilmeli.

prod # vxrlink -g cbsdg pause rlink_rclus
prod # vxedit -g cbsdg set remote_dg=cbsdg rlink_rclus
prod # vxrlink -g cbsdg resume rlink_rclus





Veritas Storage Foundation and High Availability Solutions Replication Administrator's Guide:
https://origin-download.veritas.com/resources/content/live/DOCUMENTATION/5000/DOC5264/en_US/sf_replication_admin_60_lin.pdf

Ücretsiz olarak kullanabileceğiniz en iyi 10 networking monitoring çözümü

1. monit
2. ganglia
3. munin
4. cacti
5. nagios
6. zabbix
7. observium
8. zenoss
9. collectd
10. argus

Kaynak:

sixrevisions.com/tools/10-free-server-network-monitoring-tools-that-kick-ass

Varsayılan şifreler ile alakalı siteler

http://www.defaultpassword.com

http://www.routerpasswords.com

Ağ yöneticileri için sertifikasyon yol haritası

Kaynak:

http://www.itcareerfinder.com/brain-food/blog/entry/it-certification-path-network-administrator.html

turnkeylinux virtual appliance çözümü

vm appliance çözümü

• What is a virtual appliance?
• What is Turnkey Linux?
• Why use TurnKey?
• Screenshots.
• Where do I start?
• Launch TKL on Amazon with The TurnKey Hub.
• Installing a TKL appliance using ISO (VirtualBox tutorial)
• Configuring TKL for usage with non-US keyboard
• Configuring timezone
• TKL appliance general Tutorials and How-Tos
• TKL appliance specific notes
• Connecting to my TKL appliance to administer it and/or upload/edit files
• Resetting the default passwords
• What's under the hood?
• Who are you guys?
• How do I get involved?

Veritas Cluster Server: make main.cf writable and save

Veritas Cluster Server ile uygulamalarınızı high available çalışmalarını sağlayabilirsiniz.

A/A veya A/P senaryolar için kullanabilirsiniz.

Çok sayıda resource üzerinde çalışıyorsunuz konsol tabanlı operasyon yapma ihtiyacı söz konusu olabiliyor bu durumda konsol operasyonlarınız öncesi main.cf dosyasını yazıalbilir hale getirip işlemlerinizi yapıp kaydetmeniz gerekiyor.

main.cf veritas cluster server ayarlarının saklandığı her bir node'da bulunan dosya.

Yazılabilir yapmak için:
# haconf -makerw

Kaydetmek için:
# haconf -dump -makero

Veritas Storage Foundation / Infoscale: volume, disk grubu yaratma ve listeme

Volume yaratma:

# vxassist -g cbsdg make dataVol02 10m

Volume listeleme:

# vxlist vol

Disk grubu yaratma

# vxdg init <dgname>

Disk grubu ve disk listeme

# vxdisk -e -o alldgs list

# vxdg list

xargs usage

xargs can also be used to parallelize operations with the -P maxprocs argument to specify how many parallel processes should be used to execute the commands over the input argument lists. However, the output streams may not be synchronized. This can be overcome by using an --output file argument where possible, and then combining the results after processing. The following example queues 24 processes and waits on each to finish before launching another.

find /path -name '*.foo' | xargs -P 24 -I '{}' /cpu/bound/process '{}' -o '{}'.out

https://en.wikipedia.org/wiki/Xargs

tcpdump komutu kullanım örnekleri

www.thegeekstuff.com/2010/08/tcpdump-command-examples

Linux Security Administrator's Guide

general overview of security issues that face the administrator of Linux systems. It covers general security philosophy and a number of specific examples of how to better secure your Linux system from intruders. Also included are pointers to security related material and programs.

www.linuxsecurity.com/docs/SecurityAdminGuide/SecurityAdminGuide.html

15 popüler ağ güvenliği aracı

1. Nmap

Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap homepage.


2. Wireshark

Wireshark is a network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. Wireshark homepage.


3. Metasploit Community edition

Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners. This helps prioritize remediation and eliminate false positives, providing true security risk intelligence. Metasploit community edition homepage.


4. Nikto2

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1200 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Nikto2 homepage.


5. John the Ripper

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version. John the Ripper homepage.


6. ettercap

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. ettercap homepage.


7. NexPose Community edition

The Nexpose Community Edition is a free, single-user vulnerability management solution. Nexpose Community Edition is powered by the same scan engine as Nexpose Enterprise and offers many of the same features. Nexpose homepage.


8. Ncat

Ncat is a feature-packed networking utility which reads and writes data across networks from the command line. Ncat was written for the Nmap Project as a much-improved reimplementation of the venerable Netcat. It uses both TCP and UDP for communication and is designed to be a reliable back-end tool to instantly provide network connectivity to other applications and users. Ncat will not only work with IPv4 and IPv6 but provides the user with a virtually limitless number of potential uses. ncat homepage.


9. Kismet

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet also supports plugins which allow sniffing other media such as DECT. kismet homepage.


10. w3af

w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. w3af homepage.


11. hping

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features. hping homepage.


12. burpsuite

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. BurpSuite homepage.


13. THC-Hydra

A very fast network logon cracker which support many different services. hydra homepage.


14. sqlmap

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections. sqlmap homepage.


15. webscarab

WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. But, for the simplest case, intercepting and modifying requests and responses between a browser and HTTP/S server, there is not a lot that needs to be learned. WebScarab homepage.

linux: mac spoof nasıl yapılır

* Spoof the MAC address:

sudo ifconfig en1 ether [mac address to spoof]

Where it says "[mac address to spoof]", press Command-V to paste the victim's, er, I mean the machine-to-be-spoofed's MAC address.  Your machine may require an administrator password at this point.  This is the password you use to log into OS X on your own machine.

* Confirm the spoof:

ifconfig en1 | grep ether

Your displayed MAC address should now be different from what it was before.

A Developer’s Journey into Linux Containers

https://deis.com/blog/2015/developer-journey-linux-containers/

command line external ip information

$ curl ipinfo.io

Return IP information about your external ip address with JSON format

OS X El Capitan: how to run wireshark with iphone usb interface

Öncelikle cihazınıza ait udid bilgisini edinmeniz gerekiyor. Bu bilgiyi itunes summary kısmından öğrenebilirsiniz.

Detaylar:

https://blog.unlockbase.com/find-udid-blocked-icloud-iphone/

Sonrasında virtual interface oluşturmak için rvictl aracını kullanıyoruz.

localuserpc:~ root# rvictl -s en5

rvictl [-h][-l][-s <udid1> ... <udidN>][-x <udid1> ... <udidN>]

Remote Virtual Interface Tool starts and stops a remote packet capture instance 

for any set of attached mobile devices. It can also provide feedback on any attached 

devices that are currently relaying packets back to this host. 

Options:

-l, -L List currently active devices

-s, -S Start a device or set of devices

-x, -X Stop a device or set of devices

localuserpc:~ root# rvictl -s

Starting device XXX [SUCCEEDED] with interface rvi0

sonrasında çalıştırdığınızda rvi0 interface'i üzerinden filtreleme yapabilirsiniz;

localuserpc:~ root# wireshark

jq: command-line tool for parsing JSON.

Passing it through jq's parser, with the most basic option, will make it look nicer (with colors):

user@host:~$ curl -s https://status.github.com/api/status.json |\
  jq '.'
{
  "status": "good",
  "last_updated": "2015-01-21T16:59:01Z"
}

Do some basic selection:

user@host:~$ curl -s https://status.github.com/api/status.json |\
  jq '.status'
"good"