Stuff I'm Up To
RSS FeedTechnical ramblings and things I've discovered and don't want to forget — mostly Debian/Linux-flavoured, always dated so you know how stale the advice is, and ad-free.
Recent Posts
LINPEAS, PEASS
Updated:How to get an elevated privileged shell the easy way. https://github.com/carlospolop/PEASS-ng
Fail2ban with Gitea
Updated:I noticed a bot had decided to target our Gitea service, so thought of putting it into fail2ban to lock it down. Turned out this wasn't as straight forward
Great Free and Open Source Software
Updated:Over time I've encountered some great pieces of Free and Open Source Software. I just wanted to list a few noteworthy products in a single place I can refe
SSSD and SUDOers
Updated:All our remote users are using LDAP cached credentials using SSSD. This works really well for users that transition online to offline, with one failing. Wh
IP Address RegEx
Searching for IP addresses in a file or files: grep -oE '((1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])\.){3}(1?[0-9][0-9]?|2[0-4][0-9]|25[0-5])' file
iptables - Part 1
Updated:My understanding of iptables is rudimentary, and I thought it's time to improve on it. I have an understanding of firewalls, NAT and packet filtering, but
ldapsearch and base64 decoding
Updated:I recently had to do an ldapsearch / ldbsearch that returned some base64 encoded results. $ sudo ldbsearch -H /var/lib/sss/db/cache_LDAP.ldb '(&(objectClas
Extracting Graphs from Grafana
Updated:The Grafana dashboards are a really nice interactive display of metrics. What we want to do is take those graphs from a dashboard and share them on a stati
Systemd Hardening
https://docs.arbitrary.ch/security/systemd.html
Ventoy - One Stick to Boot them All
Updated:I regularly end up writing a bootable USB to start a different version of Linux or different distro. Then I came across Ventoy . Once a USB stick is instal