applescript

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

AppleScript Cheatsheet * Get actual path of finder window if opened #!/usr/bin/env bash if ! osascript -s o <

arch

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Archlinux Mirror * Use best available mirror sudo reflector --latest 200 --protocol http --protocol https --sort rate --save /etc/pacman.d/mirrorlist Updates * Restart systemd with PID # 1 without rebooting Linux box systemctl daemon-reexec

audit

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Auditd Read date from one auditd log: date -d @1548947016.418

aws

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

AWS

bash

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Bash Startup [Startup] Des raccourcis utiles * Ctrl + a : Pour aller au début de la ligne * Ctrl + e : Pour aller à la fin de la ligne * Ctrl + b : Pour se déplacer d'un caractère vers l'arrière (flèche gauche) * Ctrl + f : Pour se déplacer d'un caractère vers l'avant (flèche droite)

bpf

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

BPF BPFtrace Get all ran bash command bpftrace -e 'uretprobe:/bin/bash:readline { time("%H:%M:%S "); printf("%-6d %s %5d (%s) -", pid, str(retval), uid, username); cat("/proc/%d/environ", pid) ; printf("\n")}'

chrome

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Google Chrome HSTS If you're blocked by HSTS on localhost dev servers got to chrome:net-internals/#hsts and remove localhost

compilation

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Compilation Steps Preprocessing --> Compilation --> Assembly --> Linking --> Loading

compression

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Compression Pigz tar --use-compress-program=pigz -cf - data | (pv -p --timer --rate --bytes > archive.tar.gz)

dns

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

DNS DKIM * check DKIM key dig google._domainkey.DOMAIN TXT

docker

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Docker Cheatsheet * Run container at boot docker run --restart=always * List image from rgistry: docker image ls | grep | awk '{print $1 ":" $2}' * docker docker build -t friendlyname . # Create image using this directory's Dockerfile docker run -p 4000:80 friendlyname # Run "friendlyname" mapping port 4000 to 80 docker run -d -p 4000:80 friendlyname # Same thing, but in detached mode docker exec -it [container-id] bash # E…

docker_swarm

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Docker Swarm * Deploy stack from compose file docker stack deploy --compose-file docker-compose.yml stackdemo * Delete stack docker stack rm stackdemo * Add a secret echo "This is an external secret" | docker secret create my_external_secret - # or docker secret create my_external_secret secret_file_path

filesystem

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Filesystem

firefox

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Données envoyées à Firefox Pour savoir si votre navigateur envoie des données à son « maître », vous disposez de plusieurs consoles : about:checkerboard about:crashes about:studies about:telemetry Utilisation du cache La console about:cache vous permettra de voir la consommation de votre cache.

firewalld

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Firewalld Listes des zones * Drop zone: Tous les paquets entrants sont drop. Seul le trafic sortant est autorisé * Block zone: Tous les paquets entrants sont rejetés avec un « icmp-host-prohibited ». Seules les connections établies sont autorisées.

fonts

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Fonts * find font name (the anme is the entry before :style= section) fc-list | grep -i

foreman

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Foreman API * Get hostgroups curl -u "admin" https:///api/hostgroups * Get hostgroups which match curl -u "admin" https:///api/hostgroups?search= * Create hostgroups pdt1 to pdt 10 inheriting from base/pdt

forensic

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Forensic [Forensic] Disk dump into virtual machine VboxManage convertfromraw img.raw output.vdi --format VDI Windows Windows Forensic

git

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Git Patch Create a patch from a branch git diff master Branch1 > ../patchfile Create a patch from commit git format-patch -1 Pull from original repo (fork) Do once $ git remote add upstream Do each time you want to update

google

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Google products

gpg

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

GPG * Key pair creation $ gpg --full-gen-key * List keys $ gpg --list-keys * List own keys $ gpg --list-secret-keys $ gpg -K * Import/export key into binary : # Import $ gpg --import # Export $ gpg --export --output

i3

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

I3 * To know what is the class name of an application launch the command and click on the target window xprop | grep WM_CLA

irc

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

IRC CheatSheet Main Action command Comment Joining a server server irc.freenode.net Joining a channel join #channel Setting yourself away away Removing your away status back Leaving a channel part Quitting IRC quit

kernel

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Kernel Traitements sur initrd On peut maintenant faire en sorte, en une seule opération, de décompresser l’initrd du répertoire /boot, dans le répertoire de travail précédemment préparé tout en développant l’archive cpio : gunzip –c /boot/initrds-$(uname –r).img | cpio –i

linux

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Linux

luks

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

LUKS USB device cipher $ sudo fdisk /dev/sdf Commande (m pour l'aide): o Création d'une nouvelle étiquette DOS avec id de disque 0xc01b95b4. Les modifications restent en mémoire jusqu'à ce que vous les écriviez. Après quoi, bien sûr, le contenu précédent sera irrécupérable. Commande (m pour l'aide): w La table de partitions a été altérée. Commande (m pour l'aide): n Partition type: p primary (0 primary, 0 extended, 4 free) e extended Select (default p): Utiliser la réponse par défaut…

mac

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

MacOS Useful commands * List open listening ports netstat -pant | grep LISTEN # to also have the program name sudo lsof -i -P | grep -i "listen" Remove quarantine attr xattr -d com.apple.quarantine /path/to/file WIFI Get last connected wifi:

magic

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Magic keys Configuration Pour savoir si la fonctionnalité est disponible sur le système (c'est le cas sur la plupart des distributions Linux actuelles), vérifier si le fichier /proc/sys/kernel/sysrq contient 1. cat /proc/sys/kernel/sysrq Si la valeur n'est pas 1, c'est sûrement une valeur de cette liste :

man

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Man NAME The name of the command or function, followed by a one-line description of what it does. SYNOPSIS In the case of a command, you get a formal description of how to run it and what command line options it takes. DESCRIPTION A textual description of the functioning of the command or function. EXAMPLES Some examples of common usage. SEE ALSO A list of related commands or functions. BUGS List known bugs. AUTHOR Specify your contact information. COPYRIGHT Spec…

multipass

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Multipass Launch an instance (by default you get the current Ubuntu LTS) multipass launch --name foo Run commands in that instance, try running bash (logout or ctrl-d to quit) multipass exec foo -- lsb_release -a Pass a cloud-init metadata file to an instance on launch. See using cloud-init with multipass for more details

network

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Network Bond nmcli device status nmcli connection add type bond ifname bond0 con-name bond-home nmcli connection add type ethernet ifname ens1 master bond0 con-name bond-ethernet nmcli connection add type wifi ifname wlp0s20f3 master bond0 ssid 'ASUS_54' con-name bond-wifi nmcli connection modify bond-wifi wifi-sec.key-mgmt wpa-psk nmcli connection edit bond-wifi nmcli connection modify bond0 +bond.options "mode=active-backup,primary=wlp0s20f3" nmcli connection up bond-home nmcli connection u…

nextcloud

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Netxcloud Run occ command in docker docker-compose exec -u www-data web_cloud php occ

nmap

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Nmap

permissions

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Permissions ACL Posix * See acl of a file/folder getfacl file/folder * Provide RWX to user on file setfacl -R -m u:user:rwx file/folder * Set default ACL for other on folder setfacl -m d:o:r folder

process

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Process * Disown process without killing them disown -h

proxmox

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Proxmox Create our own LXC container template * Download the base image pveam update pveam download centos-7-default_20170504_amd64.tar.xz mkdir ~/Workdir && cd ~/Workdir tar -xJvf /mnt/pve//template/cache/centos-7-default_20170504_amd64.tar.xz chroot .

proxy

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Proxy Cipher proxy passphrase Use openssl to encrypt your plain text proxy password into a file, with e.g. AES256 encryption: openssl enc -aes-256-cbc -in pw.txt -out pw.bin * Use a (different) password for protecting the encoded file * Remove plain text pw.txt

python

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Python Links * Pyenv * Create a virtual env pyenv virtualenv * Activate the versions pyenv local * Install a version with headers #On MacOS PYTHON_CONFIGURE_OPTS="--enable-framework" pyenv install VERSION #On Linux PYTHON_CONFIGURE_OPTS="--enable-shared" pyenv install 3.6.15

qnap

Anonymous (anonymous@undisclosed.example.com) — 2024-10-26T14:04:06+00:00

Cron You must be able to connect to you QNAP NAS using SSH and know how to edit a file using a text editor such as vi before starting it. The crontab can be used to execute tasks based on a recurring schedule. To view the contents of your crontab, please logon to your NAS via SSH and type crontab -l.

raspberrypi

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

regex

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Regex URL (?:(?:https?|ftp):\/\/|\b(?:[a-z\d]+\.))(?:(?:[^\s()<>]+|$(?:[^\s()<>]+|(?:\([^\s()<>]+$))?\))+(?:$(?:[^\s()<>]+|(?:\(?:[^\s()<>]+$))?\)|[^\s`!()\[\]{};:'".,<>?«»“”‘’]))?

scep

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

How to get certificate using SCEP protocol Install dependencies sudo apt install libnss3-tools certmonger Add a SCEP CA sudo getcert add-scep-ca -c CA_IDENTIFIER -u SCEP_URL -R CA_PEM_FORMAT List CA sudo getcert list-cas if the CA setup worked, you should have something like

screen

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Créer un screen Pour créer un nouveau terminal saisir: screen -S Détacher un screen Une fois dans notre session, si on souhaite laisser tourner un programme dedans, en tâche de fond et avoir la main sur la console, on détache le terminal via la commande de touches : Ctrl+A puis D

seccomp

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Seccomp Sandboxing with libseccomp # gcc -o myos myos_libseccomp.c -lseccomp #define _GNU_SOURCE #include #include #include #include #include static void sandbox(void) { /* allow all syscalls by default */ scmp_filter_ctx seccomp_ctx = seccomp_init(SCMP_ACT_ALLOW); if (!seccomp_ctx) err(1, "seccomp_init failed"); /* kill the process, if it tries to use "uname" syscall */ if (seccomp_rule_add_exact(seccomp_c…

selinux

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Selinux audit2allow If we switch SELinux into Permissive mode and run our mail server for a set period of time, we can log SELinux issues whilst still permitting access (as mentioned in Gathering Audit Logs in Permissive Mode). Checking our logs, we see the following SELinux AVC messages:

snmp

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

SNMP SNMP Walk v3 snmpwalk -v3 -l authPriv -u -a SHA -A -x AES -X IP SNMP GET v3 snmpget -v3 -l authPriv -u -a SHA -A -x AES -X IP

ssh

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

SSH SSHFS * command sshfs phil@192.168.1.100:/home/phil /usr/share/phil * fstab phil@192.168.1.100:/home/phil /usr/share/phil fuse.sshfs defaults 0 0 Tunneling Syntax ssh -L localport:host:hostport user@ssh_server -N where: -L - port forwarding parameters (see below) localport - local port (chose a port that is not in use by other service) host - server that has the port (hostport) that you want to forward hostport - remote port -N - do not execute a remote command, (you wi…

ssl

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

SSL Display cert from pkcs12 openssl pkcs12 -in -nodes -nokeys -passin pass:"" | openssl x509 -info Self signed cert openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout server.key -out server.crt Add trusted CA CentOS 7

systemd

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Systemd Systemd Service Commands CommandDescriptionsystemctl stop service-namesystemd stop running servicesystemctl start service-namesystemctl start servicesystemctl restart service-namesystemd restart running servicesystemctl reload service-namereloads all config files for service

systemdnspawn

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Systemd-nspawn En premier lieu on créer un fichier de configuration de dépôt pour CentOS, par exemple dans ~/centos7.repo : [centos7-base] name=CentOS-7-Base baseurl=http://mirror.centos.org/centos/7/os/x86_64 gpgcheck=0 Ensuite on créer un dossier dans lequel dnf va installer tout ce qui est nécessaire, disons dans ~/centos :

systemdtimer

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Timers Create a service [Unit] Description=IPv6 monitoring [Service] User=root ExecStart=/usr/local/bin/test-ip6 [Install] WantedBy=basic.target Create a timer with the same name but suffixed with .timer [Unit] Description=Run test-ip6 every 10 minutes [Timer] OnBootSec=10min OnUnitActiveSec=10min Unit=test.service [Install] WantedBy=timers.target

tcpdump

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

TCPDump First The Basics The following command uses common parameters often seen when wielding the tcpdump scalpel. :~$ sudo tcpdump -i eth0 -nn -s0 -v port 80 -i : Select interface that the capture is to take place on, this will often be an ethernet card or wireless adapter but could also be a vlan or something more unusual. Not always required if there is only one network adapter. -nn : A single (n) will not resolve hostnames. A double (nn) will not resolve hostnames or ports. This is han…

tcp_ip

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Tweak retries * SYN-SENT: The duration of this state can be controlled by TCP_SYNCNT or tcp_syn_retries. * SYN-RECV: It's usually hidden from application. It is tuned by tcp_synack_retries. * Idling ESTABLISHED connection, will never notice any issues. A solution is to use TCP keepalives.

ulimit

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Ulimit Les différents paramètres J’ai parlé ci-dessus de CPU et de RAM, cependant ulimit permet de définir bien d’autres limites que celle-ci. D’ailleurs, on entend souvent parler de la limite des max open files qui nécessite d’être augmentée pour le bon fonctionnement de certains logiciels (mongoDB par exemple). Sans surprise, la commande qui vous permet de controller tout ça s’appelle ulimit. L’option -a permet d’afficher les réglages pour l’utilisateur courant.

vim

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Vim GODLIKE Cheatsheet [Vim Cheatsheet] Tips If you want to add execute rights on the file in your current buffer without leaving Vim, you could simply run :!chmod u+x % You can use system cli to modify the current buffer. :%! Two examples: :%!sort -k3 - sort the buffer based on column 3 :%!column -t - format the text in columns (useful when working with tabular data)

virtualbox

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

VirtualBox Change the serial number of a VM: VBoxManage setextradata "VM name" VBoxInternal/Devices/pcbios/0/Config/DmiSystemSerial string:serialnumber

vmware

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

VMware Core configuration

wifi

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

WiFi Save a networkmanager secret in the keyring echo -n "$passphrase" | /usr/bin/secret-tool store --label=${ssid}/802-1x/private-key-password xdg:schema org.freedesktop.NetworkManager.Connection setting-name 802-1x connection-uuid ${uuid} setting-key private-key-password

windows

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Windows Licence Get OEM licence cat /sys/firmware/acpi/tables/MSDM

xrandr

Anonymous (anonymous@undisclosed.example.com) — 2024-10-14T20:59:56+00:00

Xrandr Display management xrandr --listactivemonitors # Examples xrandr --output DP2 --auto --left-of eDP1 xrandr --output eDP1 --auto --off xrandr --output DP-0 --auto -r 144 --rotate right --pos 0x0 xrandr --output DVI-D-0 -r 144 --right-of DP-0 --pos 1080x840

Tuxtrooper Wiki - cheatsheet

ansible

applescript

arch

audit

aws

bash

bpf

chrome

compilation

compression

dns

docker

docker_swarm

filesystem

firefox

firewalld

fonts

foreman

forensic

git

google

gpg

i3

irc

kernel

linux

luks

mac

magic

man

multipass

network

nextcloud

nmap

permissions

process

proxmox

proxy

python

qnap

raspberrypi

regex

scep

screen

seccomp

selinux

snmp

ssh

ssl

systemd

systemdnspawn

systemdtimer

tcpdump

tcp_ip

ulimit

vim

virtualbox

vmware

wifi

windows

xrandr