Welcome to part II on Backups! We covered the following in part I: This lesson will cover sending backups offsite, retrieving the backups, and performing additional automation. Begin by switching to the backup user on Machine 1 (Ubuntu Desktop) sudo -i -u bkup Now create a file for your offsite backup script: touch ~/backup.offiste chmod…
This is the first post in a multi-part series explaining how to use Suricata to make an NDR (Network Detection and Response) program. But first: what is Suricata? It’s an IDS (Intrusion Detection System). This means it’s a tool that analyzes network traffic and determines if it’s malicious or suspicious. You may be thinking “why…
Let’s dive in! Fire up Kali and run all commands as root. In my previous posts, I’ve covered how ifconfig helps identify network information. Ubuntu, by default, controls network configurations with Netplan. Let’s install a better program called ifupdown. It’s much easier to use- all of the network information can be configured in one simple…
You might be thinking “Asher, I’m in cybersecurity. Isn’t it the Sysadmin’s job to handle backups?” Think back to the CIA triad: Confidentiality, Integrity, and Availability. Backups certainly fall under Availability. You should know how your organization’s data is backed up, so you can protect it. You should also know how the backups themselves work.…
Imagine this scenario: You’re an analyst for a large organization, and you suspect there’s an infected box. You decide to analyze the outbound network traffic. You SSH to the firewall and do a packet capture with tcpdump. This is a 10.0.0.0/24 network with 200 subnets traveling through the firewall. With a 24 bit subnet mask,…
This post will demonstrate how to capture packets with tcpdump and analyze them with Wireshark. I’m going to capture the traffic of me logging into the website http://testphp.vulnweb.com/login.php. It’s an unencrypted communication, so I’ll be able to capture the password. First, open a terminal in Kali Linux. You need to find the name of the…
Click here to view this project on Github. This is a web application using HTML, CSS, and Flask, a popular framework for Python web development. The web application, a portfolio, displays information about my work which is stored in a database. Skills demonstrated:
Click here to view this project on Github. This is a console application that loads an existing store’s inventory data from a CSV file into a SQLite database. The application will allow a user to interact with the records stored in the database to view existing records, add new items, and backup/export the existing state…
Click here to view this project on Github. This project uses Python and OOP (Object-Oriented Programming) to create a word-guessing game. A phrase is selected from random, hidden from the player. The player tries to guess the phrase by inputting individual characters- can they guess the phrase before they run out of attempts? Skills demonstrated:
Click here to view this project on GitHub. This script imports data about 18 basketball players, cleans the data, and distributes the players across 3 teams. Each team is balanced- no team has more or less players than the other two. Once the teams are balanced, the user can view any team’s stats. Skills demonstrated: