Author Archives

Information Security Practitioner

• Replacing the Default Splunk Web SSL Certificate

  By tankmek on November 6, 2019 • ( 0 )

  

  This post  goes over how to sign a SplunkWeb Certificate Signing Request (CSR) using my Root CA in pfSense. I do not cover creating the Root CA. Step 1: Create the directory for the certificates

  splunk@siem:~$ mkdir /opt/splunk/etc/auth/certs

  1	splunk@siem:~$ mkdir /opt/splunk/etc/auth/certs

  Step 2: Generate the… Read More ›

• Working with Raw LVM Disk Images

  By tankmek on August 18, 2019 • ( 0 )

  

  Mounting disk images on Linux is fairly straight forward, however an image with a Logical Volume Manager (LVM) partition requires a little more attention. The first thing I do is find out some information about the image(s):

  root@box:# fdisk -l -o Device,Type,Size disk.img Device Type Size disk.img1 Linux 1G disk.img2 Linux LVM 952.9G

  1 2 3 4 5

  root@box:# fdisk -l -o Device,Type,Size disk.img   Device             Type    Size disk.img1 Linux            1G disk.img2 Linux    LVM     952.9G

  -l lists… Read More ›

• Slackware LVM over LUKS

  By tankmek on June 16, 2019 • ( 0 )

  

  This is mostly a post to document my process of setting up Full Disk Encryption (FDE) using the Linux Unified Key Setup (LUKS) and the Logical Volume Manager (LVM). Most major distributions already enable this process at installation, however Slackware… Read More ›

• Using NetworkManager with DNSMasq and Slackware

  By tankmek on June 2, 2019 • ( 0 )

  

  dnsmasq on Slackware 14.2 is compiled without D-Bus.

  lab$ dnsmasq -v | grep options Compile time options: IPv6 GNU-getopt no-DBus i18n no-IDN DHCP DHCPv6 <snip> ...

  1 2	lab$ dnsmasq -v | grep options Compile time options: IPv6 GNU-getopt no-DBus i18n no-IDN DHCP DHCPv6 <snip> ...

  The logs show NetworkManager trying to start dnsmasq, but failing:

  dnsmasq[4466]: DBus not available: set HAVE_DBUS in src/config.h dnsmasq[4466]: FAILED to start up NetworkManager[3101]: <warn> dnsmasq exited with error: Configuration problem (1)

  1 2 3

  dnsmasq[4466]: DBus not available: set HAVE_DBUS in src/config.h dnsmasq[4466]: FAILED to start up NetworkManager[3101]: <warn> dnsmasq exited with error: Configuration problem (1)

  After downloading the source files and SlackBuild resources from a Slackware Mirror, validate the GPG  signature using the provided .asc… Read More ›

• Migrating and Upgrading Apache Guacamole to Docker

  By tankmek on March 21, 2019 • ( 0 )

  

  UPDATED: I have created an all-in-one (AIO) version that includes nginx using TLS. Apache Guacamole is a client-less remote desktop gateway. I use it in order to access my lab when traditional methods are not available. Guacamole does not use… Read More ›

• AutoFS with DHCP Classless Static Route Option

  By tankmek on March 7, 2019 • ( 0 )

  

  My FreeNAS server is a virtual machine (VM) on my Dell r710 server. I mount my NFS and CIFS Shares using AutoFS and configure my static routes to the NAS using the DHCP Server on my pfSense Appliance. AutoFS is software… Read More ›

• Using Physical Security Keys with Slackware Linux

  By tankmek on October 30, 2018 • ( 0 )

  

  Most people are aware of the various computer data breach incidents and password dumps that have occurred over the last few years. You can even visit Have I Been Pwned (HIBP) to find out if your email address is included… Read More ›

• Using OpenSSL and pfSense to sign a Subordinate Windows Enterprise Certificate Authority

  By tankmek on October 18, 2018 • ( 0 )

  

  Disclaimer: A Root CA trusted by Active Directory should not be trivialized. Make sure you know what you are doing when working with PKI. Take the time to study the technology before implementing it in production environments. There hasn’t been any… Read More ›

• Handcrafting Linux Shellcode

  By tankmek on July 27, 2018 • ( 1 )

  

  Crafting your own shellcode requires getting muddy with low level programming. One does not simply write machine code from memory. This blog post is my attempt at providing a template and tutorial of the shellcode creation process for a 32-bit… Read More ›

• Mounting NFS Shares in Windows Using Identity Mapping

  By tankmek on June 16, 2018 • ( 6 )

  

  Before we begin let us enable Services for NFS and both Sub Features. The typical way you will see an NFS share mounted in Windows involves mounting the remote file system using the anonymous (anon) user:

  mount -o anon \\192.168.28.155\mnt\NAS0\media G:

  1	mount -o anon \\192.168.28.155\mnt\NAS0\media G:

  This will give… Read More ›