Enterprise Linux 7x

• Features | Installations
  • Discuss features of RedHat® | CentOS Enterprise Linux 7
  • Explore installation options
  • Perform GUI installation
  • Perform Text-Mode Installation
  • Provision Network Installation repository
  • Perform Network Installation
  • Perform Kickstart Installation
  • Peruse Rescue Mode
•  
• Basic $SHELL Tools
  • 'pwd', 'touch', 'stat', 'ls', 'id'
  • 'echo', 'cat', 'head', 'tail', 'more', 'less'
  • 'cp', 'mv' - transport content as needed
  • 'tty' - Discuss terminals
  • 'tar' - explore features and advantages of tarballs
  • 'gzip', 'bzip2', 'zip' - Compress content
  • Use checksums to validate data pre|post-transmissions
  • 'file' - discuss logic used to ascertain file type
  • 'dd' - generate content as desired
  • Use 'w' commands
  • 'ps' - explore process lists
  • free & top - explore process management with top
  • Process lines with: 'grep'
  • Process fields with: 'awk'
  • Explore 'sed' - streams processing
  • User and group management concepts
•  
• SystemD | System Control
  • Discuss new framework
  • Contrast with INITD
  • Identify FS footprint
  • Alter system run-states via system control
  • Manage services as needed
  • Peruse INITD support
•  
• Storage Administration | File System (FS) Semantics | Features | Usage
  • Discuss latest default FS implementation
  • Identify common FS object types
  • Discuss the benefits of Symbolic Links
  • Implement a variety of Soft Links and evaluate characteristics
  • Contrast Soft && Hard Links
  • Implement Hard Links and evaluate characteristics
  • Manipulate both Link forms and evaluate
  • Identify current virtual memory environment
  • Implement file-based additional virtual memory
  • Allocate partitions to virtual memory usage
  • Enable | Disable virtual memory as required
  • Explore default XFS implementation
  • Provision XFS storage blocks as needed
  • Expand XFS blocks as required
  • Explore default Logical Volume Management (LVM) Environment
  • Provision LVM storage components
  • Aggregate components into accessible blocks as desired
  • Manipulate LVM storage on-demand
•  
• CRON - System Scheduler
  • Peruse Cron Implementation
  • Examine schedule options
  • System-wide && User-wide Cron Jobs
  • Run jobs as needed
  • Check Cron status periodically
•  
• Syslog | Log Rotation Facilities
  • Explore LOG rules engine
    
  • Examine OS-provisioned LOG entries
  • Archive LOGs to remote system
    
  • Peruse Logrotate environment
  • Rotate LOGs as needed
  • Examine results
•  
• Common | Invaluable Network Tools
  • 'ping' - availability
  • 'mtr' - interhost paths and metrics
  • 'telnet' - TCP socket availability
  • 'netstat' - examine sockets
  • 'arp' - L2 broadcast domain (VLAN) neighbors
  • 'dig', 'nslookup', 'host' - name resolution tools
  • 'wget', 'curl' - content retrieval agents
•  

• Time Administration | ChronyD
  • Examine default environment
    
  • Contrast with prior versions
  • Explore 'chronyd' time service
    
  • Contrast 'chronyd' with 'ntpd'
  • Configure 'chronyd' to permit internal synching
  • Ensure synchronized time across nodes
•  
• YUM | Package Management
  • Discuss features
  • Contrast with 'rpm'
  • Compare with similar tools
  • Explore default environment with 'yum'
  • Install | Remove packages as needed
  • Apply updates where applicable
  • Provision internal PROD YUM Repository
  • Ensure functionality
  • Manage packages
•  
• IP Administration
  • Discuss features
  • Contrast with 'ifconfig' | alias method
  • Discuss 'NetworkManager' && 'ifcfg-*' scripts
  • Peruse appropriate config tree
  • Examine important directives
  • Add IP resources dynamically
  • Committ desired resources to persist
  • Test persistance of IP resources
•  
• DHCPD | BIND DNS | Services
  • Provision dedicated virtual DHCP subnet
  • Setup DHCPD with basic configuration
  • Ensure address assignation
  • Trace administered resources
  • Provision DNS Caching-Only service
  • Test relayed resolution of proxied requests
  • Setup Primary DNS service && Test
  • Replicate Primary DNS records to Secondary instance
  • Test replication and resolution across nodes
•  
• FTP Server
  • Identify && provision secure FTP server service
  • Explore default configuration
  • Alter configuration to suit hypothetical security policy
  • CHROOT user principles to heighten security
  • Test configuration
  • Move data
•  
• HTTPD Server
  • Discuss features
  • Implement HTTPD server
  • Explore default configuration
  • Identify important directories, files and directives
  • Configure IP-based Virtual Hosts && Test configuration
  • Update configuration to support Name-based Virtual Hosts
  • Contrast configurations
  • Use 'apachectl' to validate && effect configuration changes
•  
• MariaDB | RDBMS
  • Explain implementation - features | benefits
  • Implement on targets
  • Secure instances and test access
  • Explore defaults
  • Provision simple DB container with table and sample data
  • Test access
  • Purge sample DB container
•  
• NMAP | Reconnaissance
  • Discuss features
  • Install NMap
  • Explore footprint
  • Analyze locally-published resources
  • Contrast with routable resources
  • Explore broadcast domain
  • Perform a variety of scans to obtain more intel
  • LOG results for post-processing
•  
• Packet Capturing
  • Discuss sample use-cases
  • Capture default traffic set
  • LOG captured traffic for post-processing
  • Tune captures with BPF filters
  • Post-process with TCPDump && WireShark
•  
• FirewallD
  • Discuss implementation
  • Relate to IPTables
  • Install GUI management tool
  • Explore default policies
  • Contrast Run-Time && Permanent Policies
  • Enter 'Panic' mode in hypothetical situation
  • Resume normal communications
    
  • Define PROD service group for rules-aggregation
  • Apply PROD service group and test communications
    
•  
• MISC
  • Intro to SELinux Implementation
  • Examine default SSH behavior
  • Restrict SSH access to SFTP only connections
  • Enforce file nomenclature via SSH
  • Test functionality
    
•  

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism

zsync

• Discuss Features
• Prep Content
• Compression
• File Names