Ubuntu 18x Administration

• Desktop | Upgrades
  • Identify current configuration
  • Discuss new features
  • Snapshot current configuration
  • Upgrade instance online
  • Confirm upgraded environment
•  

• SHELL Commands and Navigation
  • tty, pts, ll, la, l, ls, find
  • alias, cat, file, chmod, chown, history, dd, blkid
  • IO, Pipes, Redirection, Command Chaining
  • ps, top, /proc, /sys
  • head, tail, sudo, su
  • w, who, whoami, which, whereis
•  

• Common Network Clients
  • Identify important client utilities
  • Networking: ping, netstat, mtr, telnet
  • File Retrieval: wget, curl
  • Name Resolvers: host, nslookup, dig, /etc/hosts
•  

• OpenSSH | Parallel SSH
  • Identify Defaults
  • Discuss TTYs
  • Generate SSH PKI Usage Keys
  • Ensure Password-less AUTH
  • Non-interactively transport content with SCP
  • Interactively move content with SFTP
  • Install Parallel SSH clients
  • Carry out parallel executions
•  

• Screen | Persistent TTYs
  • Discuss caveats of default $SHELL access
  • Spawn 'screen' instances
  • Navigate 'screen' instances
  • Detatch | Re-attach | Share 'screen' resources
  • Spawn | Terminate 'screen' instances as desired
  • Oscillate as desired and confirm
•  

• LSOF
  • Use 'lsof' to expose file | socket usage
  • Use lsof to identify various resources
  • Discuss general usage | applicability
•  

• File Permissions | User Management
  • Explain standard Linux (DAC) permissions
  • Alter permissions as needed
  • Test access to content
  • SET[GU]ID Exploration
  • Discuss Stickyness
  • Discuss Symbolic Links
  • Implement Soft | Hard Links
  • Examine behavior
•  

• User | Group Management
  • Identify GUI | $SHELL User Management tools
  • Explore: /etc/{passwd,shadow,group}
  • Provision users | groups as needed
  • Test functionality
  • Modify accounts | groups as desired
  • Confirm configuration
•  

• Apt | Snap Packages
  • Explore package footprint
  • Peruse configuration
  • Manage packages via 'apt'
  • Discuss Snap Uni Packages
  • Manage packages with 'snap'
  • Confirm configuration
•  

• Server Installations
  • Fetch latest ISO and Confirm
  • Easy Hypervisor Install
  • Regular Installation
  • Custom Deployment
  • Contrast Deployment Types
•  

• Storage Management
  • Explore current storage configuration
  • Provision additional storage as needed
  • Online Resize as desirable
  • Mount | Test | Committ to: /etc/fstab
  • Sync live content area
  • Identify current SWAP environment
  • Allocate SWAP as needed
  • Enable | Committ to: /etc/fstab
  • Logical Volume Management (LVM)
  • Identify default configuration
  • Provision LVM-dedicated storage
  • Configure: PVs | VGs | LVs
  • Extend storage as needed
  • Reduce VG as needed
  • Evaluate results
•  

• AWS EBS Management
  • Provision instances
  • Allocate EBS Storage
  • Extend EBS Storage and Confirm
  • LVM-enable EBS-backed Storage

• SystemD Environment
  • Discuss Features
  • Expose managed resources
  • Manage Services
  • Contrast with SystemV | Upstart

• SYSLOG Configuration
  • Explore default configuration
  • Discuss Syslog Rules
  • Except facilities from catchall: /var/log/syslog
  • Explore key logs
  • Explore LOG Rotation
•  

• IP Administration
  • Expose Installed configuration
  • Identify available tools | configuration
  • Discuss Netplan.io Features
  • Create interface aliases (sub-interfaces)
  • Test communications | Ensure persistence
  • Add IP ROUTE to access remote subnet
  • Test routing
  • Confirm persistence
  • Oscillate between 'netplan.io', 'ip' and 'ifconfig' stances
•  

• Cron Scheduler
  • Explore default configuration
  • Discuss scheduling parameters
  • Write simple $HELL script
  • Schedule execution via Cron
  • Alter schedule as desired
  • Confirm expected behavior
•  

• SystemD TimeSyncD | Chrony
  • Expose default configuration
  • Confirm time accuracy
  • Install Chrony
  • Confirm configuration
•  

• DNS - Implementation
  • Discuss features and benefits
  • Explore Default Resolver: 'systemd-resolved'
  • Contrast with BIND
  • Implement DNS Caching-Only services
  • Explore default configuration
  • Resolve recursively as needed
  • Setup Primary DNS zone
  • Replicate to Secondary DNS server
  • Alter zone | Test replication
  • Confirm coexistence of Resolvers
•  

• Apache HTTPD Server
  • Identify key Apache features
  • Explore default environment
  • Examine Apache logs configuration
  • AWS Security Groups - Configure
  • Provision IP-based Virtual Hosts
  • Provision Name-based Virtual Hosts
  • Ensure distinct logs
  • Test Virtual Host connectivity
  • Implement Apache SSL
•  

• Apache SSL Configuration
  • Identify key Files and Tools
  • Invoke default SSL configuration and evaluate
  • Generate certificates for default instance
  • Generate certs for virtual hosts and apply
  • Test secure connectivity
•  

• MySQL | PHPMyAdmin
  • Confirm installation
  • Alter bindings to permit external connections
  • Explore terminal environment
  • Execute ad-hoc commands
  • Manage MySQL instance with the lovely: PHPMyAdmin
  • Discuss opportunities
•  

• Network Reconnaissance
  • Install NMap
  • Explore footprint
  • Perform local reconnaissance
  • Quickly identify available subnet-based nodes
  • Comprehensive scan of select targets
  • Explore scripts interface and discuss
  • Evaluate results
•  

• TCPDump | WireShark | Capture | Packets | Analyze | Discuss
  • Explore 'tcpdump' basics
  • Capture wide variety of packets
  • Use BPFs to reduce captured data
  • Replay captures with 'tcpdump'
  • Parse with BPFs as desired
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism