Debian® Linux Version 3x

• Introduction to & Installation of Debian GNU/Linux
  • Identify Debian GNU/Linux distribution sites
  • Explain various methods of obtaining Debian GNU/Linux
  • Explain the various Debian GNU/Linux strains (Woody/Sarge/Sid)
  • Explain how the efficient Jigsaw Download (jigdo) process operates
  • Install Jigsaw Download tool on RedHat system to obtain Debian ISO images
  • Demonstrate how to obtain Debian GNU/Linux using the efficient Jigsaw Download (Jigdo) process from RedHat Linux and Windows 2003 systems
  • Prepare (Burn) Debian GNU/Linux media based on Jigdo for installation
  • Demonstrate how to obtain Debian GNU/Linux using the traditional ISO images from RedHat Linux & Windows 2003 Systems
  • Prepare (Burn) Debian GNU/Linux media based on ISO downloads for installation
  • Demonstrate how to obtain Debian GNU/Linux using a minimal CD for network installation
  • Prepare Debian GNU/Linux media based on the minimal CD ISO download for installation
  • Prep the Intel-based system for a Workstation installation of Debian GNU/Linux
  • Install Debian Linux on Intel-based x86 machine using CD-ROMs
  • Use CFDISK to create user-partitions on the Debian Workstation system
  • Use CFDISK to create a system-Swap partition
  • Configure the installation process with Workstation-oriented packages
  • Prepare the Intel-based system for a Server installation of Debian GNU/Linux
  • Install Debian Linux on Intel-based x86 machine using CD-ROMs
  • Use Fdisk to create server-oriented partitions on the Debian Server system
  • Use Fdisk to create a system-Swap partition
  • Configure the installation process with Server-oriented packages
  • Prep the Intel-based system for a Network installation of Debian GNU/Linux
  • Identify Network Installation ISO Image repositories
  • Download Network Installation ISO Image & burn to CDRW
  • Use Fdisk to create server-oriented partitions on the Debian Server system
  • Use Fdisk to create a system-Swap partition
  • Identify and specify Debian mirrors to obtain installation packages from
  • Install Debian Linux on Intel-based x86 machine using HTTP
  • Configure the installation process with Server-oriented packages
  • Prepare the Sun Fire SPARC-based headless system for a Remote Network installation of Debian GNU/Linux using SSH, CKermit & serial connectivity
  • Install Debian GNU/Linux SPARC edition using the Module -1 Binary
  • Configure server-oriented drive partitions using Fdisk
  • Configure optimal server-oriented Swap partition using Fdisk
  • Configure the Sun Fire SPARC system with network connectivity
  • Update Debian SPARC system with latest security patches using APT
•  

• Explore the Debian GNU/Linux KDE Desktop Interface & Default Applications
• Identify Documentation - Man Pages & Graphical
• Explore Debian GNU/Linux GNOME Desktop Interface & Default Applications
• Upgrade Mozilla web browser software
• Implement Macromedia Flash plug-in and configure support in Mozilla and evaluate results
• Implement the current Java Runtime Environment (JRE/J2SE) for system-wide access to Java applets/etc.
•  
• Basic Debian GNU/Linux Skills
• Demonstrate usage of the following useful commands & concepts
  • ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami, man, info
  • alias, cat, file, chmod, chown, history
  • Standard in/out, UNIX Pipes, Redirection, Command Chaining
  • ps, df, free, vmstat, top, kill
  • less & more, head & tail, diff
  • which & whereis, w, who
  • find, grep, locate
  • tar, gzip/gunzip, bzip2, zcat
  • PING (Packet Internet Groper) - used to issue ICMP echo requests
  • dig (Domain Information Groper) - used to query DNS servers
  • Demonstrate typical usage of the vi text editor
  • Demonstrate typical usage the nano text editor
  • Tarball Archiving & compression of files & directories with TAR/GZIP/BZIP2
  • Explain UNIX/Linux file security & permissions (-rwxrwxrwx)
  • Use mount/umount to access CD-ROM and floppy devices
  • Explore /etc/fstab (File system Table file)
  • Explore TCP/IP Configuration
  • Install Wget and demonstrate its typical usage to interface to HTTP/FTP servers
•  
•  

• Advanced Package Management Tool (APT) Concepts
  • Explain classes of Debian GNU/Linux Packages
  • Identify Debian GNU/Linux Package Management Tools
  • Inventory currently installed DEB packages
  • Demonstrate Packge Group Selection with tasksel
  • Discuss Package Refinement with dselect
  • Identify key Advanced Package Tool (APT) configuration files
  • Search for Debian GNU/Linux packages using Advanced Package Tool (APT)
  • Install/Update/Remove software using APT
  • Configure APT to query multiple sources for packages
  • Use DPKG to install a DEB package located on an EXT3 File System
  • Configure APT to install packages from varying versions of Debian GNU/Linux
  • Use Aptitude to manage Debian GNU/Linux packages
  • Install Apt-Spy using APT to identify optimal mirrors
•  

• Disk Management using CFDISK & FDISK
  • Provision additional Storage partitions using CFDISK
  • Partition using FDISK additional user space
  • Use MKE2FS to provision multiple 20GB EXT2 & EXT3 File Systems
  • Use TUNE2FS to convert existing EXT2 File Systems to EXT3 File Systems
  • Provision additional Swap storage
  • Use MKSWAP & SWAPON to enable additional Swap storage
  • Provision multiple Temp File System (TMPFS) using free memory
  • Demonstrate typical usage of Temp File Systems for fast I/O
  • Update File System Table (FSTAB) to reflect system changes
•  

• Remote Desktop (RDP) Client Implementation
  • Download and intall RDesktop prerequisites (dev packages, etc.)
  • Compile, implement & explore RDesktop Terminal Services desktop connectivity to Windows 2003/2000/XP servers running Remote Desktop Protocol (RDP)
•  

• Secure Shell (SSH) Client
  • Explain SSH concepts, implementation, etc.
  • Use SSH Client to connect to remote Linux Systems using password authentication
  • Identify key SSH-client files (.known_hosts, public/private key pairs,etc.)
  • Authenticate to remote Linux systems using alternate credentials
  • Use Secure Copy Protocol (SCP) to move data between systems non-interactively
  • Use Secure File Transfer Protocol (SFTP) to move data between systems interactively
  • Demonstrate how to generate Public/Private key (RSA/DSA) pairs using SSH-Keygen
  • Demonstrate using SSH to authenticate to remote Linux hosts without passwords
•  

• System V Debian GNU/Linux Runlevel implementation
  • Explain Debian GNU/Linux System V Init Runlevel (0 - 6) concepts & applications
  • Identify key startup files, including scripts (inittab,Sscripts,Kscripts,etc.)
  • Identify startup log files & entries using DMESG & exploration
•  

• TCP/IP Configuration
  • Identify key files for the transition from DHCP to Static addressing
  • Configure Linux client with static TCP/IP parameters for network communication
  • Configure Virtual (Sub) Ethernet Interfaces to faciliate multiple IP addresses
•  

• Implement Network Time Protocol (NTP) Client/Server
  • Configure Network Time Protocol (NTP) to perform client/server time synchronization
  • Identify NTP bounded UDP interfaces
  • Synchronize Debian GNU/Linux NTP with RedHat Linux Stratum 2 NTP server
  • Configure RedHat Linux NTP server to synchronize with Debian GNU/Linux server
•  

• Manage Users and Groups
  • User profile implementation logic and concepts - (Bash profile/etc/skel/aliases/PATH/etc.)
  • User and group creation & management concepts - passwd, shadow, group, gshadow files
  • Use useradd/adduser, groupadd/addgroup, usermod, etc.
  • Examine adduser configuration file
•  

• Explore System Logging via SYSLOG and Logrotate
  • Explanation of syslog facilities & levels
  • Demonstrate syslog administration
  • Demonstrate Cisco to Linux SYSLOG functionality
  • Explore automatic log rotation and customization via Logrotate
  • Configure Logrotate to rotate & compress sample log files
•  
•  

• Commonly-used Network Utilities
  • NETSTAT
  • Traceroute & MTR (PING & Traceroute functionality)
  • ARP
  • IFCONFIG
  • Route
  • DIG & NSLOOKUP
  • Whois
  • Implement Telnet Daemon for temporary clear-text shell communications
  • Examine Message of the day banners (MOTD), /etc/issue file (pre-login banner/display info.)
•  

• Dynamic Host Configuration Protocol (DHCP) services
  • Explain the various steps of the DHCP process
  • Configure global & scope-level DHCP options
  • Configure IP reservations based on layer 2 MAC addresses
  • Enable Linux DHCP services
  • Configure Windows/Linux clients to receive dynamic addresses from Linux
  • Examine evidence of clients requesting addresses from DHCPD
•  

• Very Secure VSFTPD File Transfer Protocol (FTP) services
  • Implement anonymous FTPD
  • Implement user-level FTPD access
  • Implement FTPD banners
  • Disable anonymous access
  • Configure VSFTPD to chroot jail users into their home directories
  • Implement bandwidth rate-limiting to control bandwidth usage
  • Implement & test banning of unwelcomed anonymous e-mail addresses
  • Implement VSFTPD user with redirect to a Samba share
•  

• Implement Linux & Windows Integration via Samba
  • Implement SMBFS integration with Debian GNU/Linux File System
  • Mount Windows shares seamlessly using Samba File System (SMBFS)
  • Configure FSTAB to support repetitive mounts
  • Implement secure SMBFS credentials for mounting
  • Install Samba Server support
  • Install Samba Web-based Administration Tool (SWAT)
  • Configure Samba file sharing
  • Configure Samba with multiple NETBIOS aliases
  • Configure Samba Windows Internet Name Server (WINS) support
  • Evaluate Windows XP client access to Debian GNU/Linux Samba server
•  

• Explore the CRON scheduling daemon & configuration
  • Identify key Cron configuration scopes (Global & User)
  • Explain Crontab file format and applicable options
  • Define custom cron jobs system-wide
  • Define custom cron jobs user-wide
  • Evaluate results of cron jobs
•  

• Implement the Berkeley Internet Daemon (BIND) Domain Name Server (DNS)
  • Implement BIND 9.x
  • Configure BIND as a caching-only DNS server
  • Test caching-only name resolution from Linux hosts
  • Configure Linux/Windows 2003 clients to use Linux BIND DNS server
  • Configure BIND as an Authoritative DNS server
  • Test primary name resolution from Windows & Linux hosts
  • Configure BIND as a secondary(slave) DNS server
  • Configure DNS zones on Linux BIND & Windows 2003 DNS - activate replication
  • Evaluate results of BIND configuration using DIG
  • Configure DNS zones
  • Configure zone transfers
  • Evaluate BIND's configuration files
•  

• Kernel Re-compilation & upgrade - Debian Style
  • Obtain latest Linux Kernel sources
  • Install requisite Debian GNU/Linux packages
  • Select hardware and software modules and support for new kernel
  • Compile new Linux kernel
  • Install new Linux kernel
  • Update boot loader
  • Reboot system and verify functionality
•  
•  

• Web Application Services
  • Implement Apache Web Server
  • Examine httpd.conf file directives
  • Implement virtual directories using Apache and symbollic links
  • Implement Redirects using Locate and various Apache directives
  • Configure virtual hosts bound to the primary IP address and port
  • Configure virtual hosts bound to alternate virtual IP addresses and ports
  • Implement Apache logging system per virtual host
  • Configure basic authentication to virtual hosts containers via Directory directives
  • Configure digest authentication
  • Implementation of Webalizer Log Analysis software
  • Generate web reports using Webalizer
  • Implementation of PHP Dynamic Web Access Scripting Engine
  • Evaluate PHP Dynamic Web Access Scripting Engine installation results
  • Test basic PHP script-processing using sample scripts
•  

• MySQL Relational Database Management System
  • Install MySQL Relational Database Management System
  • Secure access to MySQL
  • Create sample MySQL databases
  • Install PHPMyAdmin for web-based management of MySQL instances
  • Explain & Secure access to PHPMyAdmin
  • Explore PHPMyAdmin's interface
•  

• Sendmail MTA Essentials
  • Introduction to Sendmail Message Transfer Agent (MTA)
  • Implementation of Sendmail
  • Identify default Debian GNU/Linux Sendmail logging
  • Use Mutt to demonstrate outbound mail handling using Sendmail
  • Attempt to relay messages from a remote Windows host
  • Identify failed relays fromt the remote Windows host
  • Configure Sendmail to relay messages for remote Windows host
  • Configure Sendmail to support virtual hosts/multiple domains
  • Evaluate results of routing messages to multiple domains using Sendmail
  • Redirect virtual SMTP addressess to Internet-based SMTP hosts
  • Verify message delivery using Mutt & SSH
•  

• Post Office Protocol Version 3 (POP3)
  • Explain POP3 concepts and applications
  • Implement POP3 daemon
  • Connect to POP3 daemon using Windows Outlook Express client
  • Reroute inbound messages using Sendmail to POP3 account for retrieval
  • Use Mutt to send SMTP-based messages to POP3 account
•  

• Internet Messaging Access Protocol (IMAP)
  • Explain IMAP concepts and applications in comparison to POP3
  • Implement IMAP services
  • Connect to IMAP services from remote Windows Outlook Express client
•  

• Web-based Mail Implementation using Squirrel-mail
  • Describe required squirrel mail components for web-mail integration
  • Install squirrel mail on Debian GNU/Linux system
  • Configure Apache virtual directory for squirrel mail integration
  • Configure Apache Virtual Host for squirrel mail integration
  • Configure BIND DNS services for squirrel mail integration
  • Explore squirrel mail's web-based interface
•  

• TCP Wrappers (hosts.allow/hosts.deny)
  • Discuss TCP Wrappers concepts & applications
  • Identify primary package and key TCP Wrappers configuration files
  • Demonstrate disabled TCP Wrappers configurations by attempting connectivity
  • Examine pre and post TCP Wrappers configuration effects
  • Implement TCP Wrappers for common services
  • Test local & remote access to TCP Wrappers-protected host & services
•  

• XINETD (Enhanced & Secure INETD Super Server Implementation)
  • Upgrade Debian GNU/Linux system from INETD to XINETD
  • Identify key XINETD configuration files
  • Explain the contents and structure of xinetd.conf
  • Restrict access to various daemons/services based on hosts & subnets
  • Compare & contrast TCP Wrappers and XINETD
  • Secure services with XINETD
  • Insert common global xinetd.conf daemon/service defaults
  • Configure XINETD to log via SYSLOG
  • Configure XINETD to restrict number of spawned instances of daemons/services
  • Configure port forwarding of daemons/services
  • Configure XINETD to bind daemons/services to specific sub-interfaces (Virtual IP addresses)
  • Explore additional XINETD features
•  

• IPTABLES (Netfilter Linux Kernel-based Firewall)
  • Discuss IPTABLES/Netfilter Concepts
  • Explain IPTABLES default chains/filters and policies
  • Examine TCP/ICMP communications pre-IPTABLES chains
  • Implement ICMP inbound filtration based on various hosts
  • Use Cisco PIX Firewall to verify ICMP debugging
  • Filter traffic based on Layer-4 TCP/UDP (Source/Destination Ports) information
  • Restrict access to various daemons (SSH/FTP/HTTP/etc.)
  • Test connectivity locally and remotely (RedHat/Windows/etc.)
•  

• Network Mapper (NMAP)
  • Obtain, compile and install current version of NMAP
  • Identify commonly used NMAP options/switches/parameters
  • Perform default TCP SYN-based ethical scans of local and remote resources
  • Explain typical TCP handshake protocol while using NMAP
  • Examine the results of scans on remote Cisco firewall with debugging mode enabled
  • Perform default TCP Connect-based ethical scans of local and remote resources
  • Examine the results of scans on remote Cisco PIX Firewall with debugging mode enabled
  • Use NMAP to scan using aliased and spoofed IP addresses
  • Peform local ethical scans
  • Identifiy key NMAP configuration files
  • Use NMAP to perform operating system fingerprinting
  • Peform subnet-wide ethical scans
•  

• Nessus Vulnerability Scanner
  • Download, compile, and prepare Nessus vulnerability scanner for deployment
  • Implement Nessus client/server Security vulnerability scanner in SSL-mode
  • Identify Nessus's key features and explore its graphical interface
  • Ethical scan of the local system for vulnerabilities
  • Examine scan results via the reporting engine
  • Discuss mitigation techniques for suggested vulnerabilities
  • Ethical scan of a fraction of the class C subnet by using CIDR
  • Examine the scan results and discuss
  • Ethical scan of the entire class C subnet
  • Examine Nessus process utilization while vulnerability scans are in progress
•  

• Lockdown (Debian GNU/Linux System Lockdown)
  • Explain potential network-based entry points to the system
  • Identify superfluous daemons/services using NETSTAT & NMAP
  • Disable superfluous daemons/services using update-rc.d and proper scripts
  • Identify changes in the system as a result of performing the lockdown
  • Disable superfluous daemons/services using XINETD
  • Restrict source address access to daemons/services using XINETD
  • Restrict bind address for daemons/services using XINETD
  • Discuss application-layer security for added protection (MySQL/Apache/Sendmail/SSH/Nessus)
  • Force SSHD to bind to desired layer-3 IP address for controlled security
  • Secure the system using IPTABLES & TCP Wrappers for added security
•  

• Snort 2.1x Intrusion Detection System (IDS)
  • Obtain, and install Snort pre-requisites (libpcap/libpcre/etc.)
  • Obtain, compile and install the Snort Intrusion Detection System (IDS)
  • Identify and explain key operating modes (Sniffer/Logger/IDS)
  • Run Snort in all three modes and examine the results
  • Output Snort logs to ASCII text format and examine the results
  • Output Snort logs to binary format and examine the results
  • Use Snort with Berkeley Packet Filter (BPF) to parse logs
  • Implement Snort with BPF to filter real-time traffic
  • Obtain and install requisite MySQL libraries for Snort
  • Recompile Snort IDS with MySQL support
  • Implement Snort IDS with MySQL integration for real-time reporting
  • Implement ACID web-based front-end for examining Snort logs
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

Basic Linux Skills

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

File System Permissions | Ownership

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

Storage Management

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

ZSHELL

• Features
• Install
• Defaults
• General Usage
• Update Accounts

User | Group Management

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

CRON - Scheduler

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

SYSLOG | Log Rotation

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

Package Management

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

IP Administration

• Default CONF
• Add | Confirm IPs as needed

NginX - Web Services

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

Security

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

Installations

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

$SHELL BASICS

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

Secure Communications

• Explore SSH defaults
• Use SSH to connect to targets
• Transfer data with: scp | sftp | rsync

Files | Permissions

• Explain common Linux file permissions
• chmod | chgrp | chown
• Discuss various Linux file attributes | features
• SETUID | SETGID | STICKY Bit
• SymLinks: Hard | Soft

User Management

• Features
• useradd | adduser | usermod | userdel
• groupadd | groupmod | groupdel
• Create $USERs in Parallel
• $USER Passwords | mkpasswd | python3
• Generate Random Passwords
• Store Randomly-generated Passwords for Reference
• Encrypted Pass - Unique Users
• Default SHELL
• NO TTY Access
• Disable SSH Access

Storage Management

• Features
• Installation Defaults: File System Table
• Provision Storage
• GPT Label | Create Partition(s) | File System | Mount | Persistence
• Duplicate Drives
• Duplicate Varied Sizes
• Online Resizing (Up-Sizing)
• Provision SWAP
• Logical Volume Management (LVM)
• LVM Features
• Allocate Storage to LVM
• LVM | VG Resizing
• Fix sudo PATH
• Point-Release Upgrade

Cron | SystemD | Logs

• Cron Features
• Cron Job Execution
• Journal Control Features
• Booted Kernels
• SystemD Features

Package Management

• Explore default APT configuration
• Identify commonly-used package management tools
• Enumerate installed packages
• Identify package owners based on system binaries
• Discuss 'apt' and 'dpkg' options
• Install | Remove various packages

Networking

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

SFTP-Only Access

• Features
• Restrict $USER to SFTP Access
• Confirm limited $SHELL
• SFTP-Only Group
• SFTP-Only Password AUTH

NMap Reconnaissance

• Identifiy key NMAP configuration files
• Identify commonly used NMAP options/switches/parameters
• Scan Server resource
• Perform default TCP Connect-based ethical scans of local and remote resources

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

Features

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

Single Instance

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

Volume Sizing

• Features
• Provision Storage
• Partition | FS | Mount | Brick
• Extend Volume
• Monitor IO Distribution
• Shrink Volume
• Confirm Reallocation
• Remove Bricks

Brick Matters

• Add | Replace Bricks
• Confirm Data Transfer
• UUID Mounts
• Migrate Mounts

Distributed Volume

• Features
• Probe Storage Instances
• Provision Storage
• Extend Shared Volume
• Mount any Server
• List Storage Spread
• Dismantle Volume
• Confirm Data-Availability
• Volume Reconstruction

Replica Volume

• Features
• Existing Bricks
• Re-Use Allocated Storage
• Define New Bricks
• Create Volume
• Generate | Monitor IO
• Fail NODEs
• Evaluate

Shared Web Instances

• Features
• Explore Environment
• Create New Replica Volume
• Mount on Web Servers
• Ensure Persistence
• Update NginX Web Server Config
• Fetch Content
• Down Storage NODE | Test
• Restore NODE | Confirm Content

OpenPGP with GPG

Features

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

Symmetric - Encryption

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

Compression

• Features
• Vary Algos
• Compare Results

CLI PassPhrase

• Caveats
• Random PassPhrases
• Store PassPhrases
• Encrypt | Decrypt | Confirm

PKI Keypairs

• Use Case
• Generate Keypairs
• Export | Import
• Share
• Sign
• URI Import

Asymmetric - Encryption

• Features
• Identify Public Keys
• Encrypt to Recipients
• Vary Key Identifcation
• Share Content
• Confirm Decryption
• Confirm Invalid Recipient

Sign | Verify

• Features
• Encryption | Decryption Distinction
• Sign | Share Content
• Confirm Signatures
• Missing Public Key
• Sign | Encrypt | Decrypt | Verify
• Encrypt | Sign | Verify | Decrypt

SSL-TLS with OpenSSL

Features

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

Secure Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

Download | Read Certificate

• Fetch Certificate
• x509 Query Fields
• Fingerprints
• One-Liner
• Export Public Key from Certificate
• Dump Public Key

Random Values

• Generate Random Bytes
• Yield various Formats
• Create Random Files on Target
• Define Random $USERs
• Track defined $USERs

Message Digests

• Features
• Generate Digests
• Install SHA3-SUM
• Vary Content
• Compare Digests
• Remote Digests
• Store Digests

PKI - Public | Private Key Pairs

• Features
• Common Algorithms
• Generate Multiple Private Keys
• Export Public Keys
• Confirm Keys
• Remove and Re-Export Public Keys
• Generate Non-Default RSA Keys
• Password-Protected Keys
• Share PRIV_KEY and Confirm

Encryption | Decryption

• Features
• Base64 Encode | Decode
• AES-256 Encryption | Decryption
• Base64 Representation
• Decode | Decrypt
• Deterministic Examples
• Asymmetric Encrypts | Decrypts

Sign | Verify

• Features
• "pkeyutl" Sub-Command
• RSA Signatures
• ED(448|25519) Signatures
• RSA-PSS Signatures
• Eliptical Curve Signatures
• "-rawin" effect
• Encrypt | Sign | Verify | Decrypt
• Sign | Encrypt | Decrypt | Verify

Certificate Signing Request (CSR)

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

Self-Signed Certs

• Generate
• CA Store
• Root CA
• Various ALGOs
• Internal Domain
• SYMLINK Keys
• Password-Protected PRIV_KEY

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism