Debian 8x implementation

• Perform Various Installations
  • Discuss important release features
  • Prepare virtual environment to support Debian
  • Install Debian with Desktop Environment
  • Evaluate updates | changes
  • Perform virtualized installation with VMWare
  • Confirm installation
  • Clone VMWare installation
  • Update cloned server deployment
  • Discuss relevant settings and configuration
  • Migrate to 'ifupdown' from Network Manager
  • Perform startup sanity checks
  • Upgrade distribution to latest stable version
  • Discuss various installation techniques | benefits
  • Enter Single-User mode and discuss typical usage
  • Provision post-startup script invocation
•  

• Basic Debian GNU/Linux Skills
• Explore usage of the following useful commands
  • ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami, tty
  • cat, file, chmod, chown, history
  • STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
  • ps, df, free, top, kill
  • less & more, head & tail, find
  • stat, which, w, who
  • dig, nslookup, host
  • Archival and compression utilities with tar|gzip|bzip2
  • Use checksum programs to confirm content integrity
  • Explore important SSH clients for secure access
  • Provision VNC GUI-enabled Remote access
  • Provision Users && Groups as needed
  • Evaluate effective permissions
•  
• Storage Management
  • Explain common Linux file permissions
  • Discuss various Linux file attributes | features
  • Explore available disks with 'fdisk'
  • Allocate new virtual storage for additional partitions
  • Provision EXT4 File Systems on new partitions using 'parted'
  • Examine default and Provision additional Swap storage
  • Allocate | De-allocate SWAP as needed
  • Ensure persistence across EXT4 and SWAP provisions
  • Use GNOME Disks to manage storage graphically
  • Explore Logical Volume Management (LVM) Configuration
  • Create volume sets using: Logical Volume Management (LVM)
•  
• Screen TTYs | PTYs
  • Discuss TTY | PTY limitations
  • Identify opportunites to benefit from Screen
  • Identify configuration environment
  • Invoke and use screen natively
  • Confirm persistence of TTYs | PTYs across sessions
  • Share Screen sessions
  • Confirm overall efficacy of Screen
•  
• Explore the CRON scheduling daemon & configuration
  • Identify key Cron configuration scopes (Global & User)
  • Explain Crontab file format and applicable options
  • Define global cron jobs
  • Define custom cron jobs user-wide
  • Evaluate results of cron jobs
•  
• SYSLOG | LOG Rotation
  • Explore default SYSLOG configuration
  • Expose 'rsyslog' configuration
  • Explore LOG Rotation configuration
  • Rotate LOGs as needed
  • Peruse various SYSLOG LOGs as needed
  • Discuss various configurations options
•  
• SYSTEMD | INIT | Service Management
  • Discuss traditional INIT model
  • Explain SysV-compatibility
  • Identify SysV-related scripts
  • Manipulate services | daemons with: 'systemctl'
  • Discuss time management via 'timedatectl' and SYSTEMD
•  
• Package Management
  • Explore default APT configuration
  • Identify commonly-used package management tools
  • Enumerate installed packages
  • Identify package owners based on system binaries
  • Discuss 'apt', 'aptitude' and 'dpkg' options
  • Discuss package mirrors
  • Install | Remove various packages
•  
• Debian Networking
  • Network Tools | IP Configuration
    • Use GUI to initiate common network queries
    • Discuss results of initiated queries
    • Examine default IP configuration
    • Extend IP configuration to facilitate additional addresses
    • Confirm communications
    • Extend multiple addresses on various servers
    • Ensure persistent IP configuration
    • Configure static routes and test packet flows
  • DNS Configuration
    • Confirm | Setup DNS services
    • Test Caching-Only server responses for upstream queries
    • Configure primary zone (domain) on primary DNS instance
    • Confirm primary DNS instance resolves queries for managed domain (zone)
    • Replicate DNS data via BIND and confirm results
    • Use various resolvers to confirm resoltution of managed zone (domain)
  •  
  • Interface Configuration
    • Explore network configuration tree
    • Alter settings and evaluate
    • Provision aliased interfaces as needed
    • Confirm communications via various interfaces
    • Committ configuration for persistence
    • Provision interface configuration on various nodes
    • Evaluate accordingly
  •  
  • Very Secure File Transfer Protocol Daemon (VSFTPD)
    • Explain features and applicability
    • Peruse default configuration
    • Test anonymous FTP connectivity
    • Secure configuration per general requirements
    • Use various FTP clients to communicate with VSFTPD
    • Enable local user access
    • Jail users to $HOME - added security
    • Evaluate results
  •  
•  
• Apache Web Service | HTTPD Server
  • Implement Apache Web Server
  • Explore configuration hierarchy
  • Discuss key directives
  • Peruse Apache logging templates and defaults
  • Vary logged information as needed
  • Provision IP-Based Virtual Hosts (VHosts)
  • Confirm distinct IP-Based connectivity to various sites
  • Contrast IP-Based sites with default sites
  • Conserve IP resources with Name-Based VHosts
  • Contrast various VHost types
  • Secure communications with Apache SSL | TLS
  • Test connectivity to various SSL|TLS-enabled sites
•  Debian Security
• GPG Security
  • Update and Upgrade install Packages
  • Identify changes across Nodes
  • Secure content with GNU Privacy Guard (GPG)
  • Explore benefits of various Secure Shell clients
  • Peruse Secure Shell Server security
  • Disable superfluous services
  • Explore and tighten System Policy
  • Login Definitions
  • Evaluate Results
•  
• NMap Security Scanner
  • Obtain, compile and install current version of NMAP
  • Identify commonly used NMAP options/switches/parameters
  • Perform default TCP SYN-based ethical scans of local and remote resources
  • Explain typical TCP handshake protocol while using NMAP
  • Perform default TCP Connect-based ethical scans of local and remote resources
  • Peform local ethical scans
  • Identifiy key NMAP configuration files
  • Use NMAP to perform operating system fingerprinting and versioning
  • Peform subnet-wide ethical scans
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism