Command Injection

Command Injection is a technique for gaining access, or getting a system to perform unauthorized actions. I've written up a tutorial/walk-through for a step by step lab on how to do this. It involves some setup with two virtual machines.

Command Injection Walk Through Document HERE.

Knowing a little bit about shells is also useful. Check out the blog post here for some resources on that.
Some slides on setting up a virtual machine can be found here if this topic is new to you.

Here is a video that covers what command injection is and how it works. at about the 9:30 minute mark the talk is done and the walk through begins.


Slides:

Comments

Post a Comment

Popular posts from this blog

Fail2ban Rules for Foundry VTT

Image
Leave a comment if you like, hate, or find something confusing. This guide covers the steps required to create your own fail2ban jails, using foundryvtt as an example. *Warning I take some playful liberty at the start of this post. Welcome fellow nerds, geeks, otaku, or whatever you smartypants call yourselves. I'm assuming you might fit one of the following categories probably because you either know what Fail2ban is you nerd, or you know what FoundryVTT is you DnD tabletop (but on computer) roleplaying geek . Now that i've gotten the tongue in cheek (insults/compliments) aside I have a confession to make. I know what both of those things are so does that make me like a Generked? Okay I just mixed the two words together, that might be good for a riddle or puzzle in some future game. Anyways enough blabbing, you are probably here for the technical content anyways. Everything that i'm writing is assuming you use an Ubuntu/Debian based Linux distribution. Most Linux distros ...
Read more

Fail2ban Behind Reverse Proxy

Image
Assumptions, Prerequisites, Prior Set Up This guide is for when the reverse proxy & FoundryVTT server are both on separate machines This guide builds upon the prior one and details how to setup fail2ban to block bad bots, automated login attempts, and repeated connection attempts that are likely malicious, when your server is behind a reverse proxy.  If you haven't taken a look already my prior post detailed how to go about setting up fail2ban rules. https://blog.iterlyze.com/2024/11/fail2ban-foundryvtt.html  This guide assumes you are using a Debian 12 server (or Ubuntu) and have a basic idea of how to use a Linux shell. Some other assumptions that won't affect setting up fail2ban include that you are using Nginx as the reverse proxy, nftables as your system's firewall frontend, and that you are forwarding traffic to a FoundryVTT server. Make sure the reverse proxy and the server it sends traffic to is working before trying to set up fail2ban. If you are setting up Fou...
Read more

Leadership Training 2

Image
Recently I was invited to conduct a leadership workshop at California State University of Monterey Bay for the Networking and Security Team. They wanted the training to focus in on getting things done, so I put together a few fun training activities that help with communication, self-direction, teamwork, and having more effective meetings. Activities build leaders faster than lectures in my experience. Check out the slides and try a few of the activities for yourself! When talking about leadership a general discussion about what a leader is, is in order. When asked many of the participants shared ideas such as "A leader is someone who gets things done", "Someone who steps up", "An active listener", "Leaders are people that others follow". We didn't get too deep into what a leader was in this training and focused more on a few of the skills. If you are interested in diving a little deeper into some of the details of leadership i've foun...
Read more