My brain dumps about IT-security and systems administration
Just in case you need to generate a self signed certificate without any interaction
|
1 |
openssl req -subj '/O=My Company Name LTD./C=US/CN=domain.com' -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout server.key -out server.crt |
Private IP address (PrivateIpAddress) for instance with tag Name = hostname01
|
1 |
aws ec2 describe-instances --query 'Reservations[].Instances[].[PrivateIpAddress]' --output=text --filters "Name=tag:Name,Values=hostname01" |
Public IP address (PrivateIpAddress) for instance with tag Name = hostname01
|
1 |
aws ec2 describe-instances --query 'Reservations[].Instances[].[PublicIpAddress]' --output=text --filters "Name=tag:Name,Values=hostname01" |
Read More
Sometime it’s very annoying to leave the monitor console session locked after the machine has been remotely controlled using remote desktop (RDP). To switch back the current session to the monitor simply start a command prompt and execute the following command
|
1 |
%windir%\System32\tscon.exe 1 /dest:console |
If it does not work, try to use 0 (zero) instead of 1, or test with another number until it works or get the exact session id using…
Read MoreI just published a tool I have been working on to very easy send push notifications from Naemon, op5, Nagios or Icinga as a few examples to your Android, iPad, iPhone or desktop using Pushover You can find notify-via-pushover on my Github page: https://github.com/jryberg/notify-via-pushover Please feel free to give me feedback and feature request if you are missing something. — Johan Ryberg
Read MoreThis is a basic guide how to install Kippo SSH Honeypot on OpenBSD 5.5 using chroot. Please remember that this might be dangerous since the hacker depending of the skill set might find a way to escape from the honeypot or tries to find other service that are related to you. Only run a honeypot if you know what you are doing since the offender might retaliate More information about…
Read MoreThis is a guide how to install Naemon 0.8.0 on CentOS 6.5 64-bit system. 32-bit packages are also available, just change download links bellow. Download precompiled packages, you will find/verify the links from Naemon homepage: http://naemon.org This instructions are created with CentOS minimal installation in mind, some packages may already exist if you have any other kind of installation. Download wget
|
1 |
yum install wget |
Download packages
|
1 2 3 4 5 6 7 8 9 10 |
cd mkdir naemon-rpm cd naemon-rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-core-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-devel-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-livestatus-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-thruk-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-thruk-libs-0.8.0-1.rhel6.x86_64.rpm wget http://labs.consol.de/naemon/release/v0.8.0/rhel6/x86_64/naemon-thruk-reporting-0.8.0-1.rhel6.x86_64.rpm |
Enable epel repository, required for…
Read MoreIt’s quite straight forward to build Naemon from source with Ubuntu, all required softwares can be found as packages from the standard repository Install dependencies
|
1 |
sudo apt-get install bsd-mailx apache2 libapache2-mod-fcgid xvfb nagios-plugins git devscripts debhelper libmysqld-dev build-essential autoconf automake libtool dos2unix patch patchutils libmodule-install-perl gperf libgd2-xpm-dev yui-compressor |
Get latest version of Naemon
|
1 |
cd ~/ git clone --recursive https://github.com/naemon/naemon.git |
Update source (meta package may not be updated)
|
1 2 |
cd naemon make update |
Build Naemon
|
1 |
./configure |
Create DEB
|
1 |
make deb |
Install Naemon
|
1 2 |
cd .. sudo dpkg -i naemon-core_*.deb naemon-livestatus_*.deb naemon-thruk-libs_*.deb naemon-thruk_*.deb naemon_*.deb |
Restart Apache
|
1 |
sudo service apache2 restart |
Change path to Nagios-plugins for Naemon
|
1 |
sudo vi /etc/naemon/resource.cfg |
Find row: $USER1$=/usr/lib/naemon/plugins Change to: $USER1$=/usr/lib/nagios/plugins Reload config for Naemon…
Read MoreCentOS are a bit of tricky since a lot of packages are not available from standard repository. We needs to download a lot of components and build from source. Build Naemon Install dependencies for Naemon
|
1 |
yum install xorg-x11-server-Xvfb dejavu-fonts-common svn httpd-devel rpm-build doxygen wget httpd mod_fcgid perl-YAML git autoconf automake libtool rpmlint gperf mysql-devel gcc-c++ perl-Module-Install perl-CPAN gd-devel expat-devel dos2unix patch patchutils |
Enable epel repository, we need this for nagios-plugins and mod_fcgid
|
1 |
rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm |
Install nagios-plugins and mod_fcgid
|
1 |
yum install nagios-plugins nagios-plugins-all nagios-plugins-nrpe nrpe mod_fcgid |
Get latest version of Naemon
|
1 2 |
cd /usr/local/src/ git clone --recursive https://github.com/naemon/naemon.git |
Ignore yui-compressor, are not available as a package
|
1 |
export THRUK_SKIP_COMPRESS=1 |
Update source (meta…
Read MoreThis is a quick guide how to build monitoring-plugins (formerly known as nagios-plugins) on CentOS 6.5 (64-bit) for Naemon
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 |
cd ~/ # Get monitoring-plugins source wget https://www.monitoring-plugins.org/download/nagios-plugins-1.5.tar.gz tar -xzvf nagios-plugins-1.5.tar.gz -C /usr/local/src/ rm -rf nagios-plugins-1.5.tar.gz # Get qstat precompiled package, can't find source code to build from source wget http://pkgs.repoforge.org/qstat/qstat-2.11-1.el6.rf.`uname -p`.rpm rpm -i --nosignature qstat-2.11-1.el6.rf.*.rpm rm -rf qstat-2.11-1.el6.rf.*.rpm # Get fping source wget http://fping.org/dist/fping-3.8.tar.gz tar -xzvf fping-3.8.tar.gz -C /usr/local/src/ rm -rf fping-3.8.tar.gz # Get radiusclient-ng source wget http://downloads.sourceforge.net/project/radiusclient-ng.berlios/radiusclient-ng-0.5.6.tar.gz tar -xzvf radiusclient-ng-0.5.6.tar.gz -C /usr/local/src/ rm -rf radiusclient-ng-0.5.6.tar.gz # Get lmutil, this is a tricky one. lmstat is the component that are required but it's # not longer available. All little tools have been incorporated within lmutil but # we can create a substitute that will work wget http://www.globes.com/products/utilities/v11.12/lmutil-x64_lsb-11.12.0.0v6.tar.gz tar -xzvf lmutil-x64_lsb-11.12.0.0v6.tar.gz -C /usr/local/bin/ rm -rf lmutil-x64_lsb-11.12.0.0v6.tar.gz chmod +x /usr/local/bin/lmutil echo #!/bin/bash > /usr/local/bin/lmstat echo /usr/local/bin/lmutil lmstat "$@" >> /usr/local/bin/lmstat chmod +x /usr/local/bin/lmstat # Build and install radiusclient-nt cd /usr/local/src/radiusclient-ng-0.5.6 ./configure make make install # Build and install fping cd /usr/local/src/fping-3.8/ ./configure make make install # Install dependencies yum install net-snmp-utils postgresql-devel libdbi-devel bind-utils samba-client # Install perl modules PERL_MM_USE_DEFAULT=1 perl -MCPAN -e 'install Net::SNMP' # Build and install nagios-plugins cd /usr/local/src/nagios-plugins-1.5 ./configure --with-nagios-user=naemon --with-nagios-group=naemon --libexec=/usr/lib64/naemon/plugins/ make make install |
Read More
sendmail is in my opinion unessisary advanced and compicated for the most installations and there are a more simpler solution already in base for OpenBSD which is smtpd. This daemon is not active by default but it’s simple to change. Stop sendmail pkill sendmail Edit /etc/mailer.conf and change to the following sendmail /usr/sbin/smtpctl send-mail /usr/sbin/smtpctl mailq /usr/sbin/smtpctl makemap /usr/libexec/smtpd/makemap newaliases /usr/libexec/smtpd/makemap hoststat /usr/libexec/sendmail/sendmail purgestat /usr/libexec/sendmail/sendmail Rebuild aliases database newaliases Make…
Read More