Posts

Create and Extend XFS filesystem based on LVM

Create a partition using fdisk Run this command and set the options as below obviously changing the bits that are unique to your setup (i.e size): fdisk /dev/sdb [root@lab01 ~]# fdisk /dev/sdb Welcome to fdisk (util-linux 2.23.2). Changes will remain in memory only, until you decide to write them. Be careful before using the write command. Device does not contain a recognized partition table Building a new DOS disklabel with disk identifier 0x26d678c7. Command (m for help): n Partition type: p primary (0 primary, 0 extended, 4 free) e extended Select (default p): p Partition number (1-4, default 1): 1 First sector (2048-104857599, default 2048): Using default value 2048 Last sector, +sectors or +size{K,M,G} (2048-104857599, default 104857599): +40G Partition 1 of type Linux and of size 40 GiB is set Command (m for help): t Selected partition 1 Hex code (type L to list all codes): 8e Changed type of partition 'Linux' to 'Linux LVM' Command (m for help): w ...

Deauthentication Attack using Kali Linux

  This article will show you how to disconnect devices from a network with a deauth attack using Kali Linux and the aircrack-ng suite. NOTE: THIS IS FOR EDUCATIONAL PURPOSES ONLY. In short a deauth attach makes your wifi card in monitor mode spoof a MAC address of something already connected to the network, the router then says "Hey, there are two devices on here with the same MAC address" it then sends a command to all connected devices to re authenticate, kicking them off the network forcing them to re join. Obviously if you are continuing to run the attack this will happen over and over again meaning devices wont be able to connect to the wifi. The above is a simple explanation, if you want more technical detail.....Google it. Before we start my wifi adapter is wlan0 so you will need to adjust the commands if your adapter is a different name. 1. Down the wifi adapter sudo ifconfig wlan0 down 2. Kill airmon-ng if it's running sudo airmon-ng check kill 3. Put adapter in ...

Testing a windows user account password

  You may need to test a Windows user account when troubleshooting an issue but the account in questions may not have permissions to say remote desktop etc. To test the account, open a CMD Window and run the following: runas /u:domain.local\user1 notepad.exe You will then be prompted to enter a password. If the password is incorrect you will get the following: c:\>runas /u:domain.local\user1 notepad.exe Enter the password for domain.local\user1: Attempting to start notepad.exe as user "domain.local\user1" ... RUNAS ERROR: Unable to run - notepad.exe 1326: The user name or password is incorrect. If the password was correct Windows Notepad will open.

Check if multiple nics are set to register with DNS

  This checks all the nics on a server to see if multiple nics have the "Register this in DNS" which if multiple are selected it can cause connectivity issues. 1. Export a list of the servers you wish to check and save it as a txt file in the same location as the script called "computers.txt" as below: server01 server02 server03 server04 2. Copy and paste the below script in to Notepad and save it as a ps1 file: cls $servers = Get-Content computers.txt foreach($server in $servers) { $nics = Get-WmiObject Win32_NetworkAdapterConfiguration -ComputerName $server -ErrorAction Inquire | Where{$_.IPEnabled -eq "TRUE"} foreach($nic in $nics) { Write-Host $server "-" $nic.IPAddress "-" $nic.FullDNSRegistrationEnabled } } 3. Now run the script. Example output: server01 - 10.10.10.10 - True server01 - 192.168.0.1 - False server02 - 10.10.10.20 - True server03 - 10.16.10.30 - True

Fortigate cheat sheet and commands

  Command Cheat sheet Cheet sheet created by By Frederic Kasmirczak ( http://www.frederick.lu ), I just simply converted it to a wiki for copy and paste easiness. Main Command Structure Command Description show Display changes to the default configuration get List the configuration of the current object or table edit Create or edit a table in the current object edit 0 will use the next ID available in a sequence number set Set a filed / Reset a field to the default value end Save the current changes abort Exit commands without saving the fields delete Remove a table from the current object Basic Command Description get sys status Show status summary get sys perf stat Show Fortigate ressources summary execute ping Ping something execute shutdown Shutdown the device/reboot with reboot get sys arp Show the current arp table execute date/time Show the current date / time delete Remove a table from the current object Interface Command Description show sys int Show interfaces status Sh s...