Una funcionalidad “moderna” de Netbox es definir servicios que esperamos que estén ejecutando en nuestros equipos
Esta instancia de Netbox la tengo ejecutando en Digital Ocean
Si vos querés crear la tuya, dale con este link de referido que te van a dar $200 en crédito para usar en lo que quieras
https://m.do.co/c/47b87a73eb62
YouTube https://www.youtube.com/@cceste
Instagram https://www.instagram.com/ccesteok
Facebook https://www.facebook.com/ccesteok
Discord https://discord.gg/ZWQVg7cgdR
No podemos dejar el servicio expuesto en HTTP, hay info sensible que se intercambia, como credenciales y datos de infraestructura de red
Vamos a usar un contenedor de ayuda que nos va a gestionar la terminación SSL de nuestro Netbox
Yo uso Digital Ocean, si vos querés usarlo también dale con este link de referido que te sirve a vos y a mi
A vos te van a dar $200 en crédito pasa usar así podés probarlo
https://m.do.co/c/47b87a73eb62
El repo del proyecto lo encontrás en
https://github.com/nginx-proxy/acme-companion
YouTube https://www.youtube.com/@cceste
Instagram https://www.instagram.com/ccesteok
Facebook https://www.facebook.com/ccesteok
Discord https://discord.gg/ZWQVg7cgdR
Level: Medium
Type: Hack
Description: A developer put an important password on his webserver localhost:5000 . However, he can’t find a way to recover it. This scenario is easy to to once you realize the one “trick”.
Personalmente me pareció medio choto este escenario, salgo que me haya pasado de largo la manera de verificar el user agent…
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Medium
Type: Fix
Description: There’s an etcd server running on https://localhost:2379 , get the value for the key “foo”, ie etcdctl get foo or curl https://localhost:2379/v2/keys/foo
Segundo intento con lo ya aprendido, ahora si salió todo bien!
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Medium
Type: Fix
Access: Public
Description: Your objective is to be able to insert a row in an existing Postgres database. The issue is not specific to Postgres and you don’t need to know details about it (although it may help).
Helpful Postgres information: it’s a service that listens to a port (:5432) and writes to disk in a data directory, the location of which is defined in the data_directory parameter of the configuration file /etc/postgresql/14/main/postgresql.conf. In our case Postgres is managed by systemd as a unit with name postgresql.
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Type: Do
Access: Email
Description: There’s a file /home/admin/scores.txt with two columns (imagine the first number is a counter and the second one is a test score for example).
Find the average (more precisely; the arithmetic mean: sum of numbers divided by how many numbers are there) of the numbers in the second column (find the average score).
Use exaclty two digits to the right of the decimal point. i. e., use exaclty two “decimal digits” without any rounding. Eg: if average = 21.349 , the solution is 21.34. If average = 33.1 , the solution is 33.10.
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Easy
Type: Hack
Description: There is a web server on port :80 protected with Port Knocking. Find the one “knock” needed (sending a SYN to a single port, not a sequence) so you can curl localhost.
Test: Executing curl localhost returns a message with md5sum fe474f8e1c29e9f412ed3b726369ab65. (Note: the resulting md5sum includes the new line terminator: echo $(curl localhost))
La versión del Pelado Nerd la encontrás acá https://www.youtube.com/watch?v=45E_RChOfz0
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Easy
Description: This is the Command Line Murders with a small twist as in the solution is different
Enter the name of the murderer in the file /home/admin/mysolution
Anteriormente intenté resolverlo sin éxito, te lo dejo acá para que lo veas
https://youtu.be/IM8A8nifWjg
Este es el segundo intento, ya con alguna idea de como encarar el desafío
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Easy
Description: This is the Command Line Murders with a small twist as in the solution is different
Enter the name of the murderer in the file /home/admin/mysolution
Honestamente no sabía ni por donde arrancar, pero creo que nos quedaron algunos buenos indicios para un segundo intento
Recuerden que nadie nació sabiendo, lo importante es aprender en el camino 😊
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR
Level: Easy
Type: Do
Description: Alice the spy has hidden a secret number combination, find it using these instructions:
1) Find the number of lines with occurrences of the string Alice (case sensitive) in the *.txt files in the /home/admin directory
2) There’s a file where Alice appears exactly once. In that file, in the line after that “Alice” occurrence there’s a number.
Write both numbers consecutively as one (no new line or spaces) to the solution file.
– YouTube https://www.youtube.com/@cceste
– Instagram https://www.instagram.com/ccesteok
– Facebook https://www.facebook.com/ccesteok
– Discord https://discord.gg/ZWQVg7cgdR