RedHat® Enterprise Linux Version 6x

• Installations -Network - VNC - Kickstart
  • Discuss features of RedHat® Enterprise Linux 6
  • Create HTTP installation source tree
  • Explore installation options
  • Install via HTTP - Text Mode
  • Perform VNC Install
  • Graphical installation
  • Kickstart, automated installation
  • Use Rescue Mode
  • Explore Single-User Mode
  • Discuss INIT - Upstart facilities
•  
• Explore Requisite Shell Utilities
  • 'pwd', 'touch', 'stat', 'ls', 'id'
  • 'echo', 'cat'
  • 'cp' - copy files
  • 'mv' - move files throughout the file system
  • 'tty' - Discuss terminals
  • 'tar' - explore features and advantages of tarballs
  • 'gzip', 'bzip2', 'zip' - Compress content
  • 'md5sum', 'sha1sum', 'sha256sum', 'sha512sum' - checksums
  • 'file' - discuss logic used to ascertain file type
  • 'find' - single and multiple expressions and criteria
  • Use 'w' commands
  • 'ps' - explore process lists
  • free & top - explore process management with top
  • Process lines with: 'grep'
  • Process fields with: 'awk'
  • Explore 'sed' - streams processing
  • Basics of: 'perl'
  • User and group management concepts
•  
• Permissions - Symlinks - Quotas - File System Management
  • Explain Discretionary Access Controls (DAC) file system permissions
  • Manipulate DAC permissions
  • Create Symbolic links
  • Implement file system quotas
  • Use 'parted' and 'fdisk' to manipulate partitions
  • FSTAB - explore File System Table
  • Allocate swap storage
  • Logical Volume Management (LVM) - Discuss concepts and applications
  • Allocate partitions for usage with LVM
  • Create Physical Volumes
  • Create Volume Groups based on Physical Volumes
  • Create Logical Volumes based on Volume Groups
  • Mount and use LVM Volumes
  • Resize LVM Volumes
  • Generate RAID volumes
  • Evaluate results
•  
• RPM | YUM Package Management
  • Query existing packages & file-based packages
  • Identify offline and online package repositories
  • Install packages
  • Upgrade packages
  • Remove packages
  • Create YUM repositories
  • Manage packages using YUM
  • Configure redundant YUM repositories
  • Explore Package Kit - GUI
•  
• CRON - System Scheduler
  • Explore Cron Implementation
  • Explain scheduler
  • Global and scope-based Cron options
  • Schedule jobs to run & examine the output
  • Configure individual Crontab entries
  • Explore 'at' & 'batch' usage
•  
• RSYSLOG and Logrotate
  • Discuss rsyslog facilities & levels
    
  • Configure TCP listener
  • Log Cisco router events to rsyslog server
    
  • Explore log rotation
•  
• Network Utilities
  • PING
  • Use Telnet to test TCP ports
  • Explore Netstat socket listings
  • Use arp to enumerate layer-2 neighbors
  • LFTP - basic usage, job control
  • LFTP - mirror and reverse mirror content
  • LFTP - batch, non-interactive, scripted mode
  • Explore: 'wget', 'curl' & 'ssh'
•  

• Network Interface Configuration
  • Discuss concepts
    
  • Identify key files & scripts
  • Explore: IPv4 & IPv6 configuration
    
  • Configure aliased interfaces
  • Provision additional NIC
  • Evaluate results
•  
• Very Secure File Transfer Protocol Daemon (VSFTPD)
  • Concepts & Applications
  • Explore configuration directives
  • Disable anonymous access
  • Source connections to VSFTPD
•  
• RSYNC
  • Discuss features
  • Synchronize inter-server content
  • Evaluate
•  
• Trivial File Transfer Protocol Daemon (TFTPD)
  • Concepts & Applications
  • Install and configure
  • Archive Cisco router configuration
  • Use 'tftp' client to move data
  • Discuss caveats
•  
• TELNETD
  • Concepts & Applications
  • Enable via XINETD
  • Source connections to TELNETD
•  
• NTPD
  • Explain NTP hierarchy
  • Configure time sources
  • Synchronize internal resources via NTP
  • Evaluate results
•  
• Dynamic Host Configuration Protocol (DHCPD)
  • Configure exclusive broadcast domain
  • Install and configure DHCPD
  • Implement reservations
  • Examine client configuration
  • Evaluate results
•  
• Domain Name System (DNS) - BIND
  • Configure BIND as a caching-only DNS server
  • Implement Master DNS Zones
  • Configure Master/Slave Zones with peer
  • Evaluate results of BIND configuration
  • Configure IPv4 reverse support
  • Configure IPv6 forward & reverse support
  • Resolve queries - compare & contrast client resolvers
•  
• Network File System (NFS) Implementation
  • Implement NFS Server
  • Export shares and discuss options
  • Mount NFS exports on remote Linux Host
  • Implement AutoFS
•  
• Samba Implementation
  • Implement Linux & Windows Integration via Samba
  • Use key Samba clients
  • Explore Samba Configuration files
  • Install Samba Server support
  • Configure Samba file sharing
    
  • Configure Samba-Active Directory Integration with Winbind
  • Evaluate results
    
•  

• Apache Web Server Implementation
  
  • Explore Apache configuration tree
    
  • Peruse log configuration variables
  • Configure IP-based Virtual Hosts
  • Configure Name-based Virtual Hosts
  • Implement Apache logging system per virtual host
•  
• MySQL® Relational Database Management System
  
  • Install MySQL® Relational Database Management System
    
  • Secure access to MySQL®
    
  • Explore MySQL® monitor shell-based interface
  • Create sample MySQL® database
  • Populate with data and execute queries
  • Discuss key SQL DML Commands
  • Evaluate results
•  
• PHP
  • Discuss features and benefits
  • Install Apache | MySQL Support
  • Write data-retrieval script
  • Execute & debug
  • Evaluate results
•  

• SELinux Intro
  • Discuss Concepts & Applications
  • Explore default configuration
  • Identify key tools
  • Expose SELinux subject | object labels
  • Enable SELinux-restricted functions on key services
  • Auto-relabel the file system
  • Copy & Move data & evaluate ramifications
  • Evaluate results
•  
• NMAP - Reconnaisance and Risk Assessment Tool
  • Discuss features & benefits
  • Install via YUM
  • Identifiy key NMAP configuration files
  • Identify commonly used NMAP options/switches/parameters
  • Perform service identification
  • Perform local & remote service risk exposure scans
•  
• IPTABLES - Firewall
  • Concepts & Applications
  • Explore default tables and chains
  • Define and test INPUT chain rules
  • Define and test OUTPUT chain rules
  • Explain IPTABLES default chains/filters and policies
  • Filter traffic based on Layers 3|4
  • Test connectivity
  • Evaluate IPTables6 (IPv6) support
  • Write IPv6 rules
  • Archive | Restore firewall rules
•  
• TCPDump
  • Concepts & Applications
  • Capture broad-based traffic
  • Narrow scope with Berkeley Packet Filters (BPFs)
  • Parse captured traffic
  • Evaluate results
•  
• Apache SSL
  • Features & Benefits
  • Explore default configuration
  • Generate usage keys for virtual hosts
  • Apply usage keys to virtual hosts & test configuration
  • Use 'tcpdump' to intercept clear-text & encrypted traffic
  • Compare and contrast capture results
•  
• VSFTPD - SSL
  • Features & Benefits
  • Reference SSL|TLS usage keys
  • Configure VSFTPD to support SSL|TLS exclusively
  • Evaluate connectivity with: LFTP & FileZilla
  • Liberate server configuration with hybrid approach
  • Capture FTP clear-text & encrypted traffic with: 'tcpdump'
  • Compare & contrast packet dumps
  • Evaluate results
•  
• Enhance Security Posture
  • Rationalize consequences (pros|cons) of lean presence
  • Discuss compliance benefits
  • Use 'nmap' to identify superfluous services: local & remote perspectives
  • Mitigate risk by reducing exposure
  • Loopback candidate daemons
  • Perform post-mitigation reconnaisance with 'nmap'
  • Document baseline configuration
  • Evaluate Results
•  

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism

zsync

• Discuss Features
• Prep Content
• Compression
• File Names