FreeBSD Unix Version 8x

• Installation
  • Explore features of FreeBSD
  • Perform standard installation
  • Execute custom installation
  • Install with multiple disks
  • Commence FTP, network-based installation
  • Explore nuances and caveats
  • Evaluate results
•  

• Post-Installation Initialization and Exploration
  • Configure X
  • Install and configure GNOME Desktop
  • Explore the boot process
  • Demonstrate usage of the following useful commands & concepts
    • Install BASH $SHELL
    • ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
    • alias, cat, file, chmod, chown, history
    • Standard in/out, UNIX Pipes, Redirection, Command Chaining
    • ps, df, top, kill
    • less & more, head & tail, find, which & whereis, w, who
    • tar, gzip, bzip2, zip
    • checksums
    • Tweak run-time kernel parameters with 'sysctl'
    • Use 'screen' to maintain persistent TTYs
    • Explore user management tools
    • Peruse Unix permissions
    • Implement symbolic links
•  

• Storage Management
  • Migrate file system to new file system
  • Appropriate SWAP as needed
  • Configure CCD storage manager with RAID
  • Explore GVinum storage manager
  • Take file system snapshots
  • Implement quotas
  • Evaluate results
•  

• Kernel Compilation
  • Discuss applicability
  • Explore kernel environment
  • Compile new kernel with desired features
  • Retain original kernel
  • Evaluate results
•  

• Log Management
  • Peruse model
  • Configure Syslog
  • Capture logs from remote sources
  • Rotate logs
  • Evaluate results
•  

• Cron Scheduler
  • Explore defaults
  • Define and schedule tasks
  • Monitor behavior
  • Alter configuration accordingly
  • Pinpoint nuances and caveats
  • Evaluate results
•  

• Common Network Tools
  • PING
  • TELNET
  • NETSTAT
  • DIG
  • NSLOOKUP
  • HOST
  • WHOIS
•  
•  

• Core Network Services & Configuration | BSD Service | Daemon Management
  • Peruse model
  • Contrast with System V
  • Explore defaults
  • Tweak configuration
  • Enable | Disable Services as needed
  • Evaluate results
•  

• Sysctl
  • Explore run-time kernel directives
  • Identify key configuration files
  • Alter directives to improve performance
  • Ensure persistence
  • Evaluate results
•  

• IPv[4|6] Configuration
  • Identify key files and tools
  • Explore initial configuration
  • Alter configuration to reflect current events
  • Evaluate results
•  

• Package Management
  • Discuss model
  • Explore Ports
  • Install various packages from source using Ports
  • Update Ports collection
  • Install pre-compiled, binary packages
  • Compare and contrast approaches
  • Evaluate results
•  

• Commonly-used Network Utilities
  • Discuss and explore critical network client utilities
  • LFTP
  • CURL
  • Wget
  • RSYNC
•  

• Network Time Protocol (NTP) Client/Server
  • Discuss features and benefits
  • Explore configuration
  • Configure Network Time Protocol (NTP) to perform client/server time synchronization
  • Perform one-off synchronizations
  • Evaluate results
•  

• INETD - TELNETD | TFTPD | FTPD
  • Discuss features and benefits
  • Enable TELNETD daemon
  • Use for terminal emulation
  • Enable TFTPD daemon
  • Use for quick file transfers
  • Implement FTP Server
  • Evaluate FTP client access
  • Evaluate results
•  

• BIND DNS
  • Implement BIND
  • Explore caching-only configuration
  • Resolve upstream hosts via caching-only instance
  • Implement primary DNS server
  • Configure secondary zone services
  • Synchronize content with remote BIND host
  • Setup reverse DNS
  • Apply to IPv[4|6] accordingly
  • Evaluate resuls
•  
•  

• Dynamic Host Configuration Protocol (DHCP) services
  • Explain the various steps of the DHCP process
  • Configure global & scope-level DHCP options
  • Configure IP reservations based on layer 2 MAC addresses
  • Enable DHCP services
  • Evaluate client access
•  

• SAMBA
  • Discuss features and benefits
  • Install and configure
  • Implement SWAT
  • Evaluate disparate client access
  • Ensure persistent configuration
  • Evaluate results
•  

• NFS
  • Discuss features and benefits
  • Implement exports
  • Attach remotely
  • Configure persistence
  • Evaluate results
•  

• Application Services - Unix|Apache|MySQL|PHP (UAMP) - Web Application Services
  • Implement Apache Web Server
  • Examine httpd.conf file directives
  • Implement virtual directories using Apache and symbollic links
  • Implement Redirects using Locate and various Apache directives
  • Configure virtual hosts bound to the primary IP address and port
  • Configure virtual hosts bound to alternate virtual IP addresses and ports
  • Implement Apache logging system per virtual host
•  

• MySQL Relational Database Management System
  • Install MySQL Relational Database Management System
  • Secure access to MySQL
  • Explore MySQL Terminal Monitor Client
  • Create sample MySQL database
  • Install PHPMyAdmin for web-based management of MySQL instances
  • Explain & Secure access to PHPMyAdmin
  • Explore PHPMyAdmin's interface
•  

• PHP Implementation
  • Discuss features and benefits
  • Write scripts to enumerate useful PHP | Apache data
  • Integrate PHP with MySQL
  • Evaluate results
•  

• Postfix MTA
  • Install Postfix MTA
  • Introduction to Postfix Message Transfer Agent (MTA)
  • Use Mutt to demonstrate outbound mail handling using Postfix
  • Explore Postfix Configuration
•  

• Post Office Protocol Version 3 (POP3)
  • Explain POP3 concepts and applications
  • Implement POP3 daemon
  • Connect to POP3 daemon using Windows client
  • Use Mutt to send SMTP-based messages to POP3 account
•  

• Internet Messaging Access Protocol (IMAP)
  • Explain IMAP concepts and applications in comparison to POP3
  • Implement IMAP services
  • Connect to IMAP services from remote Windows client
•  
•  

• Security Implementation Techniques - GNU Privacy Guard (GPG)
  • Discuss features and benefits
  • Use GPG to secure communications
  • Generate usage keys
  • Exchange keys and encrypted data with remote user
  • Evaluate Results
•  

• Secure Shell (SSH) Usage
  • Discuss features and benefits
  • Identify key SSH clients
  • Use SSH clients accordingly to secure communications
  • Explore SSH server configuration
  • Evaluate Results
•  

• Network Mapper (NMAP)
  • Install current version of NMAP
  • Identify commonly used NMAP options/switches/parameters
  • Perform default TCP SYN-based ethical scans of local and remote resources
  • Explain typical TCP handshake protocol while using NMAP
  • Perform default TCP Connect-based ethical scans of local and remote resources
  • Peform local ethical scans
  • Identifiy key NMAP configuration files
  • Use NMAP to perform operating system fingerprinting and versioning
  • Peform subnet-wide ethical scans
•  

• System Lockdown
  • Discuss typical company policy
  • Identify superfluous services | daemons
  • Execute lockdown accordingly
  • Generate security baseline with NMap
  • Ensure lockdown persistence
  • Evaluate results
•  

• TCPDump
  • Explain features and benefits
  • Capture myriad traffic
  • Archive traffic for post-mortem analyses
  • Apply BPFs as needed
  • Evaluate results
•  

• WireShark - Packet Capture and Analysis Tool
  • Discuss features and benefits
  • Explore interface
  • Capture arbitrary packets and examine
  • Peruse tcpdump captures
  • Archive interesting packet streams
  • Evaluate results
•  

• Packet Filter (PF) Firewall
  • Discuss features and benefits
  • Intro to PF concepts and structure
  • Define PF firewall rules based on lockdown policy
  • Enable PF logging and peruse captures
  • Ensure persistence
  • Evaluate results
•  

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

Installations

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

$SHELL BASICS

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

Secure Communications

• Explore SSH defaults
• Use SSH to connect to targets
• Transfer data with: scp | sftp | rsync

Files | Permissions

• Explain common Linux file permissions
• chmod | chgrp | chown
• Discuss various Linux file attributes | features
• SETUID | SETGID | STICKY Bit
• SymLinks: Hard | Soft

User Management

• Features
• useradd | adduser | usermod | userdel
• groupadd | groupmod | groupdel
• Create $USERs in Parallel
• $USER Passwords | mkpasswd | python3
• Generate Random Passwords
• Store Randomly-generated Passwords for Reference
• Encrypted Pass - Unique Users
• Default SHELL
• NO TTY Access
• Disable SSH Access

Storage Management

• Features
• Installation Defaults: File System Table
• Provision Storage
• GPT Label | Create Partition(s) | File System | Mount | Persistence
• Duplicate Drives
• Duplicate Varied Sizes
• Online Resizing (Up-Sizing)
• Provision SWAP
• Logical Volume Management (LVM)
• LVM Features
• Allocate Storage to LVM
• LVM | VG Resizing
• Fix sudo PATH
• Point-Release Upgrade

Cron | SystemD | Logs

• Cron Features
• Cron Job Execution
• Journal Control Features
• Booted Kernels
• SystemD Features

Package Management

• Explore default APT configuration
• Identify commonly-used package management tools
• Enumerate installed packages
• Identify package owners based on system binaries
• Discuss 'apt' and 'dpkg' options
• Install | Remove various packages

Networking

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

SFTP-Only Access

• Features
• Restrict $USER to SFTP Access
• Confirm limited $SHELL
• SFTP-Only Group
• SFTP-Only Password AUTH

NMap Reconnaissance

• Identifiy key NMAP configuration files
• Identify commonly used NMAP options/switches/parameters
• Scan Server resource
• Perform default TCP Connect-based ethical scans of local and remote resources

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

Features

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

Single Instance

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

Volume Sizing

• Features
• Provision Storage
• Partition | FS | Mount | Brick
• Extend Volume
• Monitor IO Distribution
• Shrink Volume
• Confirm Reallocation
• Remove Bricks

Brick Matters

• Add | Replace Bricks
• Confirm Data Transfer
• UUID Mounts
• Migrate Mounts

Distributed Volume

• Features
• Probe Storage Instances
• Provision Storage
• Extend Shared Volume
• Mount any Server
• List Storage Spread
• Dismantle Volume
• Confirm Data-Availability
• Volume Reconstruction

Replica Volume

• Features
• Existing Bricks
• Re-Use Allocated Storage
• Define New Bricks
• Create Volume
• Generate | Monitor IO
• Fail NODEs
• Evaluate

Shared Web Instances

• Features
• Explore Environment
• Create New Replica Volume
• Mount on Web Servers
• Ensure Persistence
• Update NginX Web Server Config
• Fetch Content
• Down Storage NODE | Test
• Restore NODE | Confirm Content

OpenPGP with GPG

Features

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

Symmetric - Encryption

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

Compression

• Features
• Vary Algos
• Compare Results

CLI PassPhrase

• Caveats
• Random PassPhrases
• Store PassPhrases
• Encrypt | Decrypt | Confirm

PKI Keypairs

• Use Case
• Generate Keypairs
• Export | Import
• Share
• Sign
• URI Import

Asymmetric - Encryption

• Features
• Identify Public Keys
• Encrypt to Recipients
• Vary Key Identifcation
• Share Content
• Confirm Decryption
• Confirm Invalid Recipient

Sign | Verify

• Features
• Encryption | Decryption Distinction
• Sign | Share Content
• Confirm Signatures
• Missing Public Key
• Sign | Encrypt | Decrypt | Verify
• Encrypt | Sign | Verify | Decrypt

SSL-TLS with OpenSSL

Features

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

Secure Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

Download | Read Certificate

• Fetch Certificate
• x509 Query Fields
• Fingerprints
• One-Liner
• Export Public Key from Certificate
• Dump Public Key

Random Values

• Generate Random Bytes
• Yield various Formats
• Create Random Files on Target
• Define Random $USERs
• Track defined $USERs

Message Digests

• Features
• Generate Digests
• Install SHA3-SUM
• Vary Content
• Compare Digests
• Remote Digests
• Store Digests

PKI - Public | Private Key Pairs

• Features
• Common Algorithms
• Generate Multiple Private Keys
• Export Public Keys
• Confirm Keys
• Remove and Re-Export Public Keys
• Generate Non-Default RSA Keys
• Password-Protected Keys
• Share PRIV_KEY and Confirm

Encryption | Decryption

• Features
• Base64 Encode | Decode
• AES-256 Encryption | Decryption
• Base64 Representation
• Decode | Decrypt
• Deterministic Examples
• Asymmetric Encrypts | Decrypts

Sign | Verify

• Features
• "pkeyutl" Sub-Command
• RSA Signatures
• ED(448|25519) Signatures
• RSA-PSS Signatures
• Eliptical Curve Signatures
• "-rawin" effect
• Encrypt | Sign | Verify | Decrypt
• Sign | Encrypt | Decrypt | Verify

Certificate Signing Request (CSR)

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

Self-Signed Certs

• Generate
• CA Store
• Root CA
• Various ALGOs
• Internal Domain
• SYMLINK Keys
• Password-Protected PRIV_KEY

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism

zsync

• Discuss Features
• Prep Content
• Compression
• File Names

‘7Zip’

• Features
• Archive Creation
• Inclusions | Exclusions
• FQ Paths
• Content Deletion | Extractions
• Content Exchange
• ‘tar’ with 7z
• Passwords
• Hashes
• Various Formats