dardan:cyberacademy:module-1-linux-operating-system
Table of Contents
general info
linuux kernel os boot post grub (master boot bla bla init (proces qe i inicon te gjitha serviset) shasum (validation hash) etc ne linux eshte si control panel ne windows leximi i file me cat; cat passwd kycja ne ftp: ftp ip add md5 per app per ti enkriptu pass ne database apache interpreton php iis interpreton asp, tomcat per java penetration server per web server rockyou.txt ##brutforce list worldlist ku ruhet wifi connection settings #/etc/networkmanager/system-connections
commands
ls - me listu ls -al # ti tregon hiden (ato qe jane me . perpara) cd - me ndrru direktoriumin (p.sh cd /root/desktop) cd /../ kthim pas ne direktorine paraardhese .. nje hap prapa cd ../../ (2 dir back cd ~dardan #te gjun direkt ne home pwd – tregon ku je touch - me kriju ni file cp - me kopju rm - me fshi ni file rm -rf - me fshi ni folder mv - move file,folder cat - me lexu ne file psh cat access.log cat .bash_history #me aktivitetin e userit mkdir - me kriju folder rmdir - me fshi ni folder wget - download from web grep - me marr ni string specific pasi qe ekzekutojm ni komand (p.sh cat file.txt | grep "hello") nano - text editor ctr + o to save the file, ctrl + x to exit. unzip - tool to unzip archives seq echo clear ose ctrl+l dhe ctrl+c stop route ifconfig netstat -l ( listening ports netstat -atpl netstat -antl netstat –a | more (port of active connection, virtual port of computer listening on) netstat –an | more (for number port 80) apt-get install apt-get update apt-get remove apt-get install lamp-server^ - (apache full package apt-get install openssh-server apt-get install zip apt-get install htop wget https://wordpress.org/latest.zip
services
reboot poweroff cal - calendar service apache2 status | start | stop /etc/init.d/apache2 stop /etc/init.d/apache2 start ps date uptime id #all who you are w #info kush, si kur etj u kyq update-rc.d -f apache2 disable | enable #init proceset, -boot proceset fdisk -l #check drives, -kontrolo disqet sda1 #disk sdb1 #usb
- managimi i resurseve
top htop #more visual ps -aux # display all procsesses ps -aux | grep htop kill (pid) pkill #by name
tasks
krijo user, #adduser dev shto si sudo, #adduser dev sudo konfirmo userat ne grup #cat /etc/group me gjet nje file #locate me gjet file sudo members #locate sudoers me indeksu systemin #updatedb me kriju file #touch select 172.16. from apache2 access.log, identify all 172.16. in apache2 access log, print veq ip
how to
- testo tcp serviset e hapura
telnet 172.16.60.111 80
host file #### $ cd /etc/ vi hosts ip hostname install debian based apps ### dpkg -i emrin_e _rogramit.deb system info ### $ uname -a ## kernel + info tjera $ uname -r ## veq kernell .c .pl .py . cpp .jar ##unusual for /tmp cat /etc/issue* ## os versioni ###apache logs ### /var/log/apache2 $cat access.log | grep 'get' | cut -d ' ' -f 1 | sort -u $cat access.log | grep 'get' | cut -d ' ' -f 1,4,7
- overflow nje log file
for i in ( )
mount a drive
fdisk -l root@cyberacad:/home/dardan# mount /dev/sda2 /mnt/d1 media dhe mnt jane destinacione ku startojn mounts
- termino port 1337
netstat -alntp fuser -k 1337/tcp ##kill ne port specifik
- reseto wordpress password###
admin se dim passin, kemi qasje ne database mysql> use dardi; mysql> select user from mysql.user;
* to see session and command executed my that session
ps -aux | grep "/bin/bash" ps -aux | grep "cat"
- ignore icmp
echo 1 >> /proc/sys/net/ipv4/icmp_echo_ignore_all ## to disable icmp echo 0 >> /proc/sys/net/ipv4/icmp_echo_ignore_all ## to enable icmp ping -c 1 ip
- make file global (bohet run prej kudo qe je)###
mv wp-auto.sh /usr/bin seq ### seq 1 100 for i in $(seq 1 10); mkdir $i; for i in $(seq 1 100);do echo 'hello' echo ### echo echo 'text' > text1.txt echo 'tex2t' >> text1.txt echo -n "username; " read i echo $i
- me gjet nje file,
locate ##me indeksu systemin
scripts
- bash
ssh cyberacademy@172.16.65.53 ls cd /var/www/html ls ping google.com ping –c 1 google.com ping –c 1 –w 2 172.16.65.31 for i in $(seq 1 254); do ping –c 1 172.16.1.$i; done for i in $(seq 1 254); do ping –c 1 –w 1 172.16.1.$i; done
nano theping #!/bin/bash ping –c 1 –w 1 $1 chmod a+x theping ./theping google.com sudo mv theping /usr/bin/
nano syt #!/bin/bash echo –n ‘target: ‘ read target whois $target chmod a+x syt ./syt google.com sudo mv syt /usr/bin/
- execute more complex bash
ls –al && pwd && service apache2 status for i in $(seq 1 1111) se1 1 1000>num.txt cat num.txt for i in $(cat num.txt); do ping –c 1 –w 1 172.16.1.$i;
sudo su nano /etc/sudoers
nano num.txt
echo ‘this’ | sudo su su –s su –l sudo –h echo ‘afafafg’ | sudo –i echo ‘p@ssword’ | base64 –d echo ‘p@ssword’ | base64
for i in $(cat num.txt); do echo $i | base64 ; done
commands
ls - me listu ls -al # ti tregon hiden (ato qe jane me . perpara) cd - me ndrru direktoriumin (p.sh cd /root/desktop) cd /../ kthim pas ne direktorine paraardhese .. nje hap prapa cd ../../ (2 dir back cd ~dardan #te gjun direkt ne home pwd – tregon ku je touch - me kriju ni file cp - me kopju rm - me fshi ni file rm -rf - me fshi ni folder mv - move file,folder cat - me lexu ne file psh cat access.log cat .bash_history #me aktivitetin e userit mkdir - me kriju folder rmdir - me fshi ni folder wget - download from web grep - me marr ni string specific pasi qe ekzekutojm ni komand (p.sh cat file.txt | grep "hello") nano - text editor ctr + o to save the file, ctrl + x to exit. unzip - tool to unzip archives seq echo clear ose ctrl+l dhe ctrl+c stop route ifconfig netstat -l ( listening ports netstat -atpl netstat -antl netstat –a | more (port of active connection, virtual port of computer listening on) netstat –an | more (for number port 80) apt-get install apt-get update apt-get remove apt-get install lamp-server^ - (apache full package apt-get install openssh-server apt-get install zip apt-get install htop wget https://wordpress.org/latest.zip
services
reboot poweroff cal - calendar service apache2 status | start | stop /etc/init.d/apache2 stop /etc/init.d/apache2 start ps date uptime id #all who you are w #info kush, si kur etj u kyq update-rc.d -f apache2 disable | enable #init proceset, -boot proceset fdisk -l #check drives, -kontrolo disqet sda1 #disk sdb1 #usb
- managimi i resurseve
top htop #more visual ps -aux # display all procsesses ps -aux | grep htop kill (pid) pkill #by name
tasks
krijo user, #adduser dev shto si sudo, #adduser dev sudo konfirmo userat ne grup #cat /etc/group me gjet nje file #locate me gjet file sudo members #locate sudoers me indeksu systemin #updatedb me kriju file #touch select 172.16. from apache2 access.log, identify all 172.16. in apache2 access log, print veq ip
how to
- testo tcp serviset e hapura
telnet 172.16.60.111 80
host file #### $ cd /etc/ vi hosts ip hostname install debian based apps ### dpkg -i emrin_e _rogramit.deb system info ### $ uname -a ## kernel + info tjera $ uname -r ## veq kernell .c .pl .py . cpp .jar ##unusual for /tmp cat /etc/issue* ## os versioni ###apache logs ### /var/log/apache2 $cat access.log | grep 'get' | cut -d ' ' -f 1 | sort -u $cat access.log | grep 'get' | cut -d ' ' -f 1,4,7
- overflow nje log file
for i in ( )
mount a drive
fdisk -l root@cyberacad:/home/dardan# mount /dev/sda2 /mnt/d1 media dhe mnt jane destinacione ku startojn mounts
- termino port 1337
netstat -alntp fuser -k 1337/tcp ##kill ne port specifik
- reseto wordpress password###
admin se dim passin, kemi qasje ne database mysql> use dardi; mysql> select user from mysql.user;
* to see session and command executed my that session
ps -aux | grep "/bin/bash" ps -aux | grep "cat"
- ignore icmp
echo 1 >> /proc/sys/net/ipv4/icmp_echo_ignore_all ## to disable icmp echo 0 >> /proc/sys/net/ipv4/icmp_echo_ignore_all ## to enable icmp ping -c 1 ip
- make file global (bohet run prej kudo qe je)###
mv wp-auto.sh /usr/bin seq ### seq 1 100 for i in $(seq 1 10); mkdir $i; for i in $(seq 1 100);do echo 'hello' echo ### echo echo 'text' > text1.txt echo 'tex2t' >> text1.txt echo -n "username; " read i echo $i
- me gjet nje file,
locate ##me indeksu systemin
scripts
- bash
ssh cyberacademy@172.16.65.53 ls cd /var/www/html ls ping google.com ping –c 1 google.com ping –c 1 –w 2 172.16.65.31 for i in $(seq 1 254); do ping –c 1 172.16.1.$i; done for i in $(seq 1 254); do ping –c 1 –w 1 172.16.1.$i; done
nano theping #!/bin/bash ping –c 1 –w 1 $1 chmod a+x theping ./theping google.com sudo mv theping /usr/bin/
nano syt #!/bin/bash echo –n ‘target: ‘ read target whois $target chmod a+x syt ./syt google.com sudo mv syt /usr/bin/
- execute more complex bash
ls –al && pwd && service apache2 status for i in $(seq 1 1111) se1 1 1000>num.txt cat num.txt for i in $(cat num.txt); do ping –c 1 –w 1 172.16.1.$i;
sudo su nano /etc/sudoers
nano num.txt
echo ‘this’ | sudo su su –s su –l sudo –h echo ‘afafafg’ | sudo –i echo ‘p@ssword’ | base64 –d echo ‘p@ssword’ | base64
for i in $(cat num.txt); do echo $i | base64 ; done
dardan/cyberacademy/module-1-linux-operating-system.txt · Last modified: 2018/08/21 19:19 by burim