Overview: Rclone is a tool I recently discovered that allows you to sync files to cloud-based storage. You are not limited to a single cloud destination, either. This guide is focused on installing and configuring rclone for a VPS, such as Linode or DigitalOcean. Setup: This guide was written using a Debian 8 (jessie) install. Download […]
Overview: As part of reconnaissance stage of a pentest, you may wish to capture home pages of an organizations’ websites. One option to do just that is HTTPscreenshot. HTTPscreenshot has been touted to be a tool for both red and blue teams. This tool was released at SchmooCon 2015, developed by Justin Kennedy and Steve Breen. […]
Overview: Looking to browse the internet “anonymously” using off-the-shelf hardware? Heading down to your local coffee shop to “borrow” wifi to upload the latest ISIS targets is no longer a viable option. Learn how to browse the internet using tor. Tor is short for The Onion Router. Its premise is that your traffic is bounced […]
Overview: I recently set up a few servers out in “the cloud.” I needed a way to ship all the logs generated by these hosts to my splunk instance. Since shipping raw syslog data across the internet is a bad idea, this also needed to be secure. I opted for an ssh tunnel from my […]
Overview: Hosting your own email server can have its benefits. You not only have control over your email, but configuring dovecot/postfix is a marketable skill. Lets say you are out on the town and stop into your local big box store. You are in the checkout line when the cashier asks if you would like […]
Recently, I had to reset a user account password on an Acer netbook. Recovery can take some time, unless you have the right tools such as hashcat and a few gtx 780 TI cards laying around. Resetting a password can take less time and there are many options available. My personal favorite is to replace […]
First, admit that the internet trolls have won. You can no longer leave the keys to your car under the sun visor. So, trust no one and block everything! I present a copy of my iptables firewall rules, slightly modified for ambiguity.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 |
*filter # Allow all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0 -A INPUT -i lo -j ACCEPT -A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT # Force SYN packet check -A INPUT -p tcp ! --syn -m state --state NEW -j DROP # Force fragmented packet check -A INPUT -f -j DROP # Drop XMAS packets -A INPUT -p tcp --tcp-flags ALL ALL -j DROP # Drop NULL packets -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # Accept all established inbound connections -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # Allow all outbound traffic - you can modify this to only allow certain traffic -A OUTPUT -j ACCEPT # Allow HTTP and HTTPS connections from anywhere (the normal ports for websites and SSL). -A INPUT -p tcp --dport 80 -j ACCEPT -A INPUT -p tcp --dport 443 -j ACCEPT # Allow email (postfix, dovecot) -A INPUT -p tcp --dport 465 -j ACCEPT -A INPUT -p tcp --dport 25 -j ACCEPT -A INPUT -p tcp --dport 587 -j ACCEPT -A INPUT -p tcp --dport 993 -j ACCEPT # Allow SSH connections # The -dport number should be the same port number you set in sshd_config -A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT # Drop ping -A INPUT -p icmp -m icmp --icmp-type 8 -j DROP # Log iptables denied calls -A INPUT -j LOG --log-prefix "iptables denied: " --log-level 7 # Reject all other inbound - default deny unless explicitly allowed policy -A INPUT -j REJECT -A FORWARD -j REJECT COMMIT |