Hack The Sec-Leading Resource Of Linux Tutorial

Reverse SSH Tunneling

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="box-sizing: border-box; font-family: Raleway, Helvetica, Arial, sans-serif; font-size: 33px; line-height: 46px; margin: 0px 0px 8px;">
<u><span style="color: #990000;">Reverse SSH Tunneling</span></u></h1>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this tutorial we will covering how to bypass these restrictions using a technique called Rerverse SSH Tunneling.</span></span></div>
<div>
<span style="color: red; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Note: This tutorial assumes you are using <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu</a>. The steps however are expected to work for other Linux distribution.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3dFwWxIAlnnoDhDUBOag_ZQ0mYlSo6eEfDyfC6CSSbfYnV4vavMfV_dS1L6uUBQxUwyIVqx0i1e4LxGzT3iQcRrilQ_b4IjjV7pAxmi5soqSqVrL4KPZSCqWMH0ERC4mC2gXzXY2s6dFT/s1600/ssh-hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3dFwWxIAlnnoDhDUBOag_ZQ0mYlSo6eEfDyfC6CSSbfYnV4vavMfV_dS1L6uUBQxUwyIVqx0i1e4LxGzT3iQcRrilQ_b4IjjV7pAxmi5soqSqVrL4KPZSCqWMH0ERC4mC2gXzXY2s6dFT/s1600/ssh-hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: red; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><span style="color: #0b5394;"><u>Prerequisites:</u></span></b></div>
<div>
<ul style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px; text-align: left;">
<li>An Ubuntu server instance.</li>
<li>A SSH Client on your local machine.</li>
</ul>
<div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step 1: Configuring SSH daemon on your server:</span></u></b></span></div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;">By default, <a href="http://www.hackthesec.co.in/search/label/SSH">SSH </a>daemon is only listening on <span style="color: red;">127.0.0.1</span>, so we won’t be able to access to our forwarded ports from outside. To get it listen on the interface connected to Internet we must enable <span style="color: red;">GatewayPorts </span>option in <a href="http://www.hackthesec.co.in/search/label/SSH">SSH </a>server's configuration.</span></div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;"><br /></span></div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;">Open <b>/etc/ssh/sshd_config</b> using your favorite text editor.</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">nano /etc/ssh/sshd_config</span></span></pre>
</div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;">Then add <b><span style="color: red;">GatewayPorts yes</span></b> at the bottom of the file.</span></div>
<div style="font-family: verdana, geneva, sans-serif;">
<span style="font-size: 15px; line-height: 26px;">After saving the file, restart the SSH daemon:</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">service ssh restart</span></span></pre>
</div>
</div>
</div>
<div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 2: Tunneling:</u></b></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If your home computer runs Linux, you’ll need to use the ssh command as follows:</span></span></div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">ssh -R [Port to forward to on your VPS]:localhost:[Port to forward on your local machine] [VPS IP]</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Or if you have installed Microsoft Windows on your machine then you have to install <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html">plink</a> and connect as shows below:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">plink -R [Port to forward to on your VPS]:localhost:[Port to forward on your local machine] [VPS IP]</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this example, we’re forwarding port <b>19132</b> which is open on your at-home machine to port <b>80 </b>on your remote server (assuming your server's IP Address is <b>192.168.0.1</b>).</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">ssh -R 80:localhost:19132 192.168.0.1</span></span></pre>
</div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This will allow you to access your at-home machine from a remote location by connecting to <b>192.168.0.1:80</b></span></span></div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>

Reverse SSH Tunneling

Reverse SSH Tunneling In this tutorial we will covering how to bypass these restrictions using a technique called Rerverse SSH Tunneling...

Setup SFTP-only User Accounts on CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="box-sizing: border-box; font-family: Raleway, Helvetica, Arial, sans-serif; line-height: 46px; margin: 0px 0px 8px;">
<span style="color: #990000; font-size: large;"><u>Setup SFTP-only User Accounts on CentOS</u></span></h1>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">The SSH File Transfer Protocol (also Secure File Transfer Protocol, or SFTP) is a network protocol that provides file access, file transfer, and file management over any reliable data stream. It was designed by the Internet Engineering Task Force (IETF) as an extension of the Secure Shell protocol (<a href="http://www.hackthesec.co.in/search/label/SSH">SSH</a>) version 2.0 to provide secure file </span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0UoU738wfzIiGQcNwEh7rGJzNHBJmmJiBCvuVQpMOAdQltLab9w4pAzEuFpSuexA7trPxiLLFCLlTR2TJ-Iuw-Tz4zF2QdvvYDZr5vwxR2dW0WcSbp6qnjOAC6quoc-tRpzxf6KI3tkgX/s1600/sftp-software-hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0UoU738wfzIiGQcNwEh7rGJzNHBJmmJiBCvuVQpMOAdQltLab9w4pAzEuFpSuexA7trPxiLLFCLlTR2TJ-Iuw-Tz4zF2QdvvYDZr5vwxR2dW0WcSbp6qnjOAC6quoc-tRpzxf6KI3tkgX/s1600/sftp-software-hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">transfer capabilities. The IETF Internet Draft states that, even though this protocol is described in the context of the SSH-2 protocol, it could be used in a number of different applications, such as secure file transfer over Transport Layer Security (TLS) and transfer of management information in <a href="http://www.hackthesec.co.in/search/label/VPN">VPN </a>applications.</span></span></div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 1: Create a dedicated sFTP group and a dedicated sFTP user</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: white;">groupadd sftpusers
</span><span style="color: orange;">useradd -G sftpusers -s /sbin/nologin user1
</span><span style="color: white;">passwd user1</span></span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Here, the group <b>sftpusers </b>is a dedicated sFTP group, the user <b>user1 </b>is a dedicated sFTP user which is forbidden to log in using SSH.</span></span></div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 2: Modify the configuration of the sshd service</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Open the configuration file of the sshd service:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">vi /etc/ssh/sshd_config</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Find the line:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: orange; font-size: large;"><span style="line-height: 20.8px;">Subsystem sftp /usr/libexec/openssh/sftp-server</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Replace it with:</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: white;">Subsystem </span><span style="color: orange;">sftp internal-sftp</span></span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Append the following lines to the end of the file. The group name <b>sftpusers </b>should be the same as the one you specified earlier.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: white;">Match Group sftpusers
X11Forwarding no
AllowTcpForwarding no
</span><span style="color: orange;">ChrootDirectory %h
</span><span style="color: white;">ForceCommand internal-sftp</span></span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Save and quit: use :wq</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Restart the sshd service to put your changes into effect.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: white;">systemctl </span><span style="color: orange;">restart sshd.service</span></span></span></pre>
</div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Step 3: Create a dedicated directory for the sFTP-only user</span></u></b></div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You need to specify a directory for the sFTP-only user and make sure that this user can only play around in this directory:</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: white;">chown -R root /home/user1
chmod -R 755 /home/user1
</span><span style="color: orange;">mkdir /home/user1/files
</span><span style="color: white;">chown user1. /home/user1/files</span></span></span></pre>
</div>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now, the user <b>user1 </b>can only upload and/or download files in the directory <b>/home/user1/files</b>, he or she can never touch other users' files.</span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><div>
<b><u><span style="color: #0b5394;">Step 4: Create more sFTP-only users</span></u></b></div>
<div style="color: #333333;">
If you need more sFTP-only users, you can create them in the same fashion:</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="line-height: 20.8px;"><span style="color: orange;">useradd -G sftpusers -s /sbin/nologin user2
passwd user2</span><span style="color: white;">
chown -R root /home/user2
chmod -R 755 /home/user2
mkdir /home/user2/files
chown user2. /home/user2/files</span></span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">That's it. Each user account created in this fashion will be denied if you use it to log in the system. These user accounts can be used only in sFTP programs.</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></div>
</div>

Setup SFTP-only User Accounts on CentOS 7

Setup SFTP-only User Accounts on CentOS The SSH File Transfer Protocol (also Secure File Transfer Protocol, or SFTP) is a network protoc...

How to install squid proxy on centos

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="clear: both; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 30px; height: auto; line-height: 31px; margin: 0px; padding: 0px; width: 614px;">
<u><span style="color: #990000;">Install squid proxy on centos</span></u></h1>
<div>
<span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server by caching repeated requests; to caching web, <a href="http://www.hackthesec.co.in/search/label/DNS">DNS</a> and other computer network lookups for a group of people sharing network resources; to aiding security by filtering traffic. Although primarily used for HTTP and <a href="http://www.hackthesec.co.in/search/label/ftp">FTP</a>, Squid includes limited support for several other protocols including TLS, SSL, Internet Gopher and HTTPS</span></span><span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtuLbkofJ_zaadojyg-kg2TTym3Z1SblRiTiwNCaRRxvNfwE7UGzMyriv33EkqCKKK-PNDNIrXMTxl633f8uUdiToe_67H4UK77mB5VOLK7hTbxGaSICl3pNA6navN1-2mqAmMYhmcMrOT/s1600/squid_www.hackthesec.co.in.png" /></a></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;"><br /></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Update yum repositories and packages by typing the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum update</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 1:- Install squid package and dependencies using the below command</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# yum install squid</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">By default squid configuration file "<b>/etc/squid/squid.conf</b>" will contains recommended minimum configuration  and squid caching feature will work without making any changes . Recommended minimum configuration will looks like the below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7       # RFC 4193 local private network range
acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
http_port 3128

# We recommend you to use at least the following line.
hierarchy_stoplist cgi-bin ?

# Uncomment and adjust the following to add a disk cache directory.
#cache_dir ufs /var/spool/squid 100 16 256

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|?) 0     0%      0
refresh_pattern .               0       20%     4320</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Now start squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid start</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and type this below command to start squid service automatically while booting.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# chkconfig --levels 235 squid on</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Setup your web browser to access Internet through proxy server on port 3128</span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
<br /></div>
<div>
IE : Tools » Internet options »Connections » LAN settings » Choose "Use a proxy server for your LAN" » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Firefox : Options / Preferences » Advanced » Network » Settings » Choose "Manual proxy configuration " » Type your Proxy server ip (192.168.1.11 ) and port no 3128</div>
<div>
<br /></div>
<div>
Step 4:- Browse some sites and check the access log file on proxy server</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[root@hackthesec ~]# cat /var/log/squid/access.log
1343759484.645    265 192.168.1.15 TCP_MISS/304 477 GET http://platform.twitter.com/widgets.js - DIRECT/23.64.79.144 application/javascript
1343759484.681    309 192.168.1.15 TCP_MISS/304 839 GET http://apis.google.com/js/plusone.js - DIRECT/173.194.36.36 -
1343759485.005    178 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/74.125.236.142 image/gif
1343759502.763  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759502.765  20292 192.168.1.15 TCP_MISS/200 1898 CONNECT s-static.ak.facebook.com:443 - DIRECT/23.64.66.110 -
1343759723.040 240567 192.168.1.15 TCP_MISS/200 2904 CONNECT plusone.google.com:443 - DIRECT/173.194.36.41 -
1343759934.518    459 192.168.1.15 TCP_MISS/200 495 GET http://www.google-analytics.com/__utm.gif? - DIRECT/173.194.36.8 image/gif
1343759943.131   2186 192.168.1.15 TCP_MISS/200 8343 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759943.266  10616 192.168.1.15 TCP_MISS/200 2790 CONNECT apis.google.com:443 - DIRECT/74.125.236.128 -
1343759943.267  10615 192.168.1.15 TCP_MISS/200 2228 CONNECT ssl.gstatic.com:443 - DIRECT/74.125.236.143 -
1343759950.875   2596 192.168.1.15 TCP_MISS/200 32219 CONNECT www.facebook.com:443 - DIRECT/66.220.146.94 -
1343759961.388  20443 192.168.1.15 TCP_MISS/200 1911 CONNECT s-static.ak.fbcdn.net:443 - DIRECT/23.64.77.177 -</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Troubleshooting :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
If you not able to browse using proxy settings , Disable the firewall ( iptables ) and selinux service on your squid proxy server .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b>Disable firewall ( Iptables ) :-</b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service iptables stop
[root@hackthesec ~]# chkconfig iptables off</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white;"></span><br />
<div>
<span style="background-color: white;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><span style="font-size: 15px; line-height: 26px;">Disable Selinux :- open the file /etc/selinux/config and find the line</span></span></span></div>
<span style="background-color: white;">
</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=enforcing</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">SELINUX=disabled</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">now reboot the server and try step 4.</span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Configure squid proxy as web filter:</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can restrict user access to particular websites or keywords using access control lists (ACLs) .</div>
<div>
<b><span style="color: #0b5394;"><u>Restricting Access to specific web sites :</u></span></b></div>
<div style="color: #333333;">
For example , we can see how to block facebook.com and gmail.com .</div>
<div style="color: #333333;">
Step 1:- create a file ( <b>/etc/squid/blockedsites.squid</b> ) and add the site names one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockedsites.squid
#blocked sites
www.facebook.com
www.gmail.com</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl " blocksites" and acl type "dstdomain" in the acl section like the below .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "<b>http_access deny blocksites</b>" to http_section to deny the access to the acl "<b>blocksites</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- Now restart squid service</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# service squid restart</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4:- Try to access facebook.com in your browser . you could see the blocked page as below .</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsQRp6xcr5AmcJgrWIHEyVE274ObQfkcEWpNTBGqT_25fkxX_ryBbASwHU-G3Iwsye8ZiK2CDfkIEo6AU3h-ZmCZtF4of10Dt34mqj-ryTojXljt7XEsIrjcl-LADcICkQ61A8Yl4cXKE/s1600/squid_proxy_server_block_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"><br /></span></span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and check the log file you can see the facebook request is denied .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"> [root@hackthesec ~]# tail -f /var/log/squid/access.log
.................................................................................
1343820985.542      1 192.168.1.15 TCP_DENIED/403 4255 GET http://www.facebook.com/ - NONE/- text/html
1343820986.998   1411 192.168.1.15 TCP_MISS/200 13152 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/198.186.193.234 image/png
1343820987.004      0 192.168.1.15 TCP_DENIED/403 4178 GET http://www.facebook.com/favicon.ico - NONE/- text/html</pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Access to specific keywords :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- create a file (<b> /etc/squid/blockkeywords.squid</b> ) and add the keywords one per line.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockkeywords.squid
#blocked keywords
sex
porn
xxx</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the <b>/etc/squid/squid.conf</b> and create a new acl "blockkeywords" and acl type "url_regex" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockkeywords" to http_section to deny the access to the acl "<b>blockkeywords</b>" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><span style="color: #0b5394;"><u>Restricting Access to specific Ipaddress :</u></span></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
Step 1:- create a file ( /etc/squid/blockip.squid ) and add the ip adresses one per line.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# cat /etc/squid/blockip.squid
#blocked ips
192.168.1.20
192.168.1.21</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Open the /etc/squid/squid.conf and create a new acl "blockip" and acl type "src" in the acl section</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
# ACL blocksites 
acl blocksites dstdomain "/etc/squid/blockedsites.squid"
# ACL blockkeywords
acl blockkeywords url_regex -i "/etc/squid/blockkeywords.squid"
# ACL blockip
acl blockip src "/etc/squid/blockip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the following line "http_access deny blockip" to http_section to deny the access to the acl "blockip" .</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites
# Deny access to blockkeywords ACL
http_access deny blockkeywords</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Allow Full access to specific Ipaddress :</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can allow specific ip address to gain full access without blocking sites and keywords . just create a file "/etc/squid/allowip.squid" and add the ip address one per line and create an acl "allowip"  and acl type "src" in the acl section</div>
</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># ACL allowip
acl allowip src "/etc/squid/allowip.squid"</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the "allowip" in the http_access as below</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
# Deny access to blockip ACL
http_access deny blockip
# Deny access to blocksites ACL
http_access deny blocksites !allowip
# Deny access to blockkeywords ACL
http_access deny blockkeywords !allowip</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;"><b><u><span style="color: #0b5394;">Changing squid proxy port number:</span></u></b></span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="font-family: "verdana" , "geneva" , sans-serif;">
<div style="color: #333333;">
You can change squid proxy port number , by default it uses 3128 port .</div>
<div style="color: #333333;">
Just find the below line in "/etc/squid/squid.conf"</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 3128</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">http_port 8000 # whatever port number you want</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Restricting Download size :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can restrict download file size  using reply_body_max_size .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Add the below line at the bottom of the http_access section</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB all</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 15px; line-height: 26px;">or</span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">#Restrict download size
reply_body_max_size 10 MB !allowip</span></span></pre>
</div>
<div>
<span style="background-color: white;"></span><br />
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<span style="background-color: white;"><b><u><span style="color: #0b5394;">Configuring Squid as Transparent Proxy :</span></u></b></span></div>
<span style="background-color: white;">
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
You can configure squid as transparent proxy .</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step 1:- just find the below line</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128</span></span></pre>
</div>
</span></div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and replace with</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># Squid normally listens to port 3128
http_port 3128 intercept</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 2:- Create a file "/root/squidfw.sh" and add the following firewall script ( modify as per your interface configuration ).</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#!/bin/sh
# squid server IP
SQUID_SERVER="192.168.1.11"
# Interface connected to Internet
INTERNET="eth0"
# Interface connected to LAN
LAN_IN="eth1"
# Squid port
SQUID_PORT="3128"
# DO NOT MODIFY BELOW
# Clean old firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
# Load IPTABLES modules for NAT and IP conntrack support
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# For win xp ftp client
#modprobe ip_nat_ftp
echo 1 > /proc/sys/net/ipv4/ip_forward
# Setting default filter policy
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Unlimited access to loop back
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Allow UDP, DNS and Passive FTP
iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT
# set this system as a router for Rest of LAN
iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE
iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT
# unlimited access to LAN
iptables -A INPUT -i $LAN_IN -j ACCEPT
iptables -A OUTPUT -o $LAN_IN -j ACCEPT
# DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT
# if it is same system
iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT
# DROP everything and Log it
iptables -A INPUT -j LOG
iptables -A INPUT -j DROP</pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 3:- just run the script</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">[root@hackthesec ~]# sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">and add the below line to "/etc/rc.local" to run the script during startup</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">sh /root/squidfw.sh</span></span></pre>
</div>
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;"></span></span><br />
<div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">Step 4 (Updated):- Change default gateway ip to squid server ip on the user machines </span></span></div>
<span style="background-color: white; font-size: 15px; line-height: 26px;"><span style="color: #333333; font-family: "verdana" , "geneva" , sans-serif;">
<div>
Now users can access Internet without setting proxy in the browser settings.</div>
</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></pre>
</div>
</div>

How to install squid proxy on centos

Install squid proxy on centos Squid is a caching and forwarding web proxy. It has a wide variety of uses, from speeding up a web server ...

Linux/x86_x64 - execve(/bin/sh) - 26 bytes

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Noto Sans', sans-serif; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; text-align: center;">
Linux/x86_x64 - execve(/bin/sh) - 26 bytes</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" /></a></div>
<div>
<br /></div>
<div>
<table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 564px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"></td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/39617" style="background-color: transparent; box-sizing: border-box; color: #337ab7; outline: 0px; text-decoration: none; transition-duration: 0.3s; transition-property: background-color, box-shadow, border, color, opacity;"><span class="fa fa-file-code-o" style="-webkit-font-smoothing: antialiased; box-sizing: border-box; display: inline-block; font-family: FontAwesome; font-size: inherit; font-stretch: normal; line-height: 1; text-rendering: auto;"></span> Source</a></td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Author:</strong> Ajith Kp</td><td style="box-sizing: border-box; padding: 5px 10px;"></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><br /><br /><br /><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></td><td colspan="2" style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
</tbody></table>
</div>
</div>

Linux/x86_x64 - execve(/bin/sh) - 26 bytes

Linux/x86_x64 - execve(/bin/sh) - 26 bytes Download Exploit: Source Author: Ajith Kp www.hackthesec.co.in

Linux/x86_x64 - execve(/bin/sh) - 25 bytes

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Noto Sans', sans-serif; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; text-align: center;">
Linux/x86_x64 - execve(/bin/sh) - 25 bytes</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" /></a></div>
<div>
<br /></div>
<div>
<div class="exploit-meta clearfix" style="background-color: white; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px;">
<div class="info" style="box-sizing: border-box; float: left;">
<table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 564px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"></td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="background: rgb(225, 225, 225); box-sizing: border-box; padding: 5px 10px;"><b>Download Exploit: </b> <a href="https://www.exploit-db.com/download/39624">Source </a></td><td style="background: rgb(225, 225, 225); box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Author:</strong> Ajith Kp</td><td style="background: rgb(225, 225, 225); box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><br /><br /><br /><br /><br /><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></td><td colspan="2" style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
</tbody></table>
</div>
</div>
<div class="clearfix" style="background-color: white; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px;">
<br /></div>
</div>
</div>

Linux/x86_x64 - execve(/bin/sh) - 25 bytes

Linux/x86_x64 - execve(/bin/sh) - 25 bytes Download Exploit: Source Author: Ajith Kp www.hackthesec.co.in

Linux/x86_x64 - execve(/bin/bash) - 33 bytes

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Noto Sans', sans-serif; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; text-align: center;">
Linux/x86_x64 - execve(/bin/bash) - 33 bytes</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNGd2dSE36EwqPaCLsFMlVvPBw4MFsIMMFoNRrktPQPkfwZYRyGljUGP89grcSgWlXsib9j_gzMc5JUKhZw_ouL0R5u4bbHt5OClOwfj7BVXNKPpV37ZMjFfB6I7qdMUlHYIwaVk4gk010/s1600/linux-command_www.hackthesec.co.in.jpg" /></a></div>
<div>
<br /></div>
<div>
<div class="exploit-meta clearfix" style="background-color: white; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px;">
<div class="info" style="box-sizing: border-box; float: left;">
<table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 564px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/39625" style="background-color: transparent; box-sizing: border-box; color: #337ab7; outline: 0px; text-decoration: none; transition-duration: 0.3s; transition-property: background-color, box-shadow, border, color, opacity;"><span class="fa fa-file-code-o" style="box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1;"></span> Source</a> <span class="fa fa-times" style="box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1;"></span></td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Author:</strong> Ajith Kp</td><td style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><br />
<br />
<br />
<br />
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></td><td colspan="2" style="box-sizing: border-box; padding: 5px 10px;"><br /></td></tr>
</tbody></table>
</div>
</div>
</div>
</div>

Linux/x86_x64 - execve(/bin/bash) - 33 bytes

Linux/x86_x64 - execve(/bin/bash) - 33 bytes Download Exploit: Source Author: Ajith Kp www.hackthesec.co.in

How to convert rpm file into deb file

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" itemprop="headline" style="background-color: white; box-sizing: border-box; font-family: Raleway, sans-serif; font-size: 36px; line-height: 1; margin: 0px 0px 16px;">
<u><span style="color: #990000;">Convert rpm file into deb file</span></u></h1>
<div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this tutorial we learn, how to convert rpm file into deb file.In Debian based OS like ubuntu the package file extension is .deb file. For installing the package in <a href="http://www.hackthesec.co.in/search/label/Debian">debian </a>based OS we use the command dpkg -i package-name.deb .</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB7uUiV6jzefwqMcPz0MUyAi_okEQsb5plM-46VPbqsa7ueQHaz3As03adZGEcImsjli2pEjoBCeVLur2trbNsyYVPcCX0NKcCBAERZ_Qq0TZxiHJTyYjbSye0DuHhhYucpBM1mizzJiak/s1600/Convert-RPM-to-DEB-and-DEB-to-RPM_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB7uUiV6jzefwqMcPz0MUyAi_okEQsb5plM-46VPbqsa7ueQHaz3As03adZGEcImsjli2pEjoBCeVLur2trbNsyYVPcCX0NKcCBAERZ_Qq0TZxiHJTyYjbSye0DuHhhYucpBM1mizzJiak/s1600/Convert-RPM-to-DEB-and-DEB-to-RPM_hackthesec.co.in.png" /></a></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In <a href="http://www.hackthesec.co.in/search/label/RHEL">Red Hat based linux</a> the package file extension comes in .rpm format .(RPM means Red Hat Package Manager).Sometimes there are some package which are available in rpm file. Hence for installing these package in Debain based OS we have to convert rpm file into deb file.</span></span></div>
</div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Follow the given below steps, to convert rpm file into deb file.</span></u></b></div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Login into Debian based OS (<a href="http://www.hackthesec.co.in/search/label/Ubuntu">ubuntu</a>/debian/<a href="http://www.hackthesec.co.in/search/label/Linux%20Tutorial">linux </a>mint etc). </div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step1 : Install alien package in Ubuntu</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">sudo apt-get install alien</span></span></pre>
</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Step 2 : Check if alien is installed or not</span></u></b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">dpkg -l|grep alien</span></span></pre>
</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Step 3: Download any rpm file</span></u></b><span style="color: #0b5394;">.</span></div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
For example i just download the rpm vsftpd pakage.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">wget ftp://centos.arcticnetwork.ca/pub/centos/6.4/os/x86_64/Packages/vsftpd-2.2.2-11.el6_3.1.x86_64.rpm</span></span></pre>
</div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 4 : run the command , sudo alien package_name.rpm</u></b></span></span></div>
</div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="font-size: 12px; line-height: 18.5714px;">[linux@linux:~/Desktop]$ sudo alien vsftpd-2.2.2-11.el6_3.1.x86_64.rpm 
[sudo] password for linux:
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
Warning: Skipping conversion of scripts in package vsftpd: postinst prerm
Warning: Use the –scripts parameter to include the scripts.
warning: vsftpd-2.2.2-11.el6_3.1.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY
vsftpd_2.2.2-12_amd64.deb generated
linux@linux:~/Desktop$ ls
vsftpd-2.2.2-11.el6_3.1.x86_64.rpm vsftpd_2.2.2-12_amd64.deb
linux@</span></span><span style="color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 12px; line-height: 18.5714px;">linux</span><span style="color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 12px; line-height: 18.5714px;">:~/Desktop$</span></pre>
</div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><span style="color: red;">Now you can see vsftpd_2.2.2-12_amd64.deb file is created</span></b></div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<br /></div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u><span style="color: #0b5394;">Step 6: Now you can install the .deb package with command, dpkg -i packag-name.deb</span></u></b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">dpkg -i vsftpd_2.2.2-12_amd64.deb</span></span></pre>
</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Either creating the deb from rpm file .You can directly install the rpm with alien command also.</div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<br /></div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Use the command, <b>alien -i package-name.rpm</b></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">sudo alien -i vsftpd-2.2.2-11.el6_3.1.x86_64.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></span></pre>
</div>
</div>
</div>

How to convert rpm file into deb file

Convert rpm file into deb file In this tutorial we learn, how to convert rpm file into deb file.In Debian based OS like ubuntu the pack...

How Install OpenXenManager on Ubuntu 14.04 LTS

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" itemprop="headline" style="background-color: white; box-sizing: border-box; font-family: Raleway, sans-serif; font-size: 36px; line-height: 1; margin: 0px 0px 16px;">
<u><span style="color: #990000;">OpenXenManager on Ubuntu</span></u></h1>
<div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">OpenXenManager is a graphical interface to manage XenServer / Xen Cloud Platform (XCP) hosts through the network. <b>OpenXenManager </b>is an open-source multiplatform clone of <b>XenCenter </b>(Citrix).</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Features</u></b></span></span></div>
<div>
<ul style="text-align: left;">
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xen console linux</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xencenter linux</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">openxencenter</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xencenter macosx</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xcp gui</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xcp frontend</span></li>
<li><span style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">xenserver frontend</span></li>
</ul>
<div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<b><u>Requirements For OpenXenManager</u></b></div>
<div style="color: #333333; font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Following packages are required to run awesome OpenXenManager in your system. Keep make a note also, its script name is "<b>openxenmanager</b>" by which you will open the OpenXenManager in your system.</div>
<div style="font-family: verdana, geneva, sans-serif;">
<ul style="color: #333333; font-size: 15px; line-height: 26px; text-align: left;">
<li>Python 2.7</li>
<li>pyGTK 2.16</li>
<li>ConfigObj</li>
<li>GTK-VNC (<a href="http://www.hackthesec.co.in/search/label/Linux%20Tutorial">Linux </a>only)</li>
</ul>
<div>
<div style="color: #333333;">
<span style="font-size: 15px; line-height: 26px;"><b><u>Install OpenXenManager on Ubuntu 14.04 LTS</u></b></span></div>
<div style="color: #333333;">
<span style="font-size: 15px; line-height: 26px;">In this section we will do the installation of OpenXenManager on <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu</a> 14.04 LTS. Follow the given below steps –</span></div>
<div>
<span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">1. Update the repo</span></u></b></span></div>
</div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">sudo apt-get update</span></span></pre>
</div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>2. Install Git</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">sudo apt-get install git</span></span></pre>
</div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>3. Install package dependences</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">sudo apt-get install python-gtk2 glade python-gtk-vnc python-glade2 python-configobj</span></span></pre>
</div>
<div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>4. Clone the repo from GitHub and install</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Clone the git repo by given below command</span></span></div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 15px; line-height: 20.8px;">git clone https://github.com/OpenXenManager/openxenmanager.git</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now change to cloned repo directory</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 15px; line-height: 20.8px;">cd openxenmanager</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now install the package by running below given command. This will install the OpenXenManager in your system.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 15px; line-height: 20.8px;">sudo python setup.py install</span></span></pre>
</div>
<div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>5. Run the OpenXenManager</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">To open the GUI of OpenXenManager, simply run the command</span></span></div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white;"><span style="font-size: 15px; line-height: 20.8px;">openxenmanager</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">The OpenXenManager GUI will open. And now you can start working on. Connect with XenServer with the help of <b>OpenXenManager</b>.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR5Vup3fr7YZVCUT3-VhJ7Bj6wjLL2HpM3clqqo2JAVpwl2fxErEPes9I9Qgd8xz4UEdQY6uGDghwye8JT-Js8F5mwczY2rb-eFkWQUgdsz_ACpjr9vwxAefTNLcEFvfoUOVAAv3yfB6Ar/s1600/openxenmanager_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR5Vup3fr7YZVCUT3-VhJ7Bj6wjLL2HpM3clqqo2JAVpwl2fxErEPes9I9Qgd8xz4UEdQY6uGDghwye8JT-Js8F5mwczY2rb-eFkWQUgdsz_ACpjr9vwxAefTNLcEFvfoUOVAAv3yfB6Ar/s1600/openxenmanager_www.hackthesec.co.in.png" /></a></div>
<div>
<br /></div>
</div>
</div>
</div>
<div>
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How Install OpenXenManager on Ubuntu 14.04 LTS

OpenXenManager on Ubuntu OpenXenManager is a graphical interface to manage XenServer / Xen Cloud Platform (XCP) hosts through the netwo...

How to install and configure rsnapshot on RHEL/Centos 6/7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Open Sans'; font-size: 24px; line-height: 30px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<u><span style="color: #990000;">Install and configure rsnapshot on RHEL/Centos 6/7</span></u></h2>
<div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This tutorial will describe how to set up and use <b>rsnapshot</b>, a remote backup solution based on rsync. Rsnapshot leverages the power of <a href="http://www.hackthesec.co.in/search/label/rsync">rsync </a>to create scheduled, <a href="http://www.hackthesec.co.in/search/label/backup_scripting">incremental backups</a>.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWfsEhOQkTxLGP5TwWgjpX1PaZxwMFo8N3RjRTzvxoWizg5eM5IgLqOB-v1CyRZbY7np70uK0ZkpFC-RseMrGOugIYBWGOv2-H06ocpFnaqBb3Itz1pJcTneFlRhBNqBAm0PBrmMqRAtU1/s1600/How+To+Install+Rsnapshot_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWfsEhOQkTxLGP5TwWgjpX1PaZxwMFo8N3RjRTzvxoWizg5eM5IgLqOB-v1CyRZbY7np70uK0ZkpFC-RseMrGOugIYBWGOv2-H06ocpFnaqBb3Itz1pJcTneFlRhBNqBAm0PBrmMqRAtU1/s1600/How+To+Install+Rsnapshot_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This procedure will demonstrate how to create local backups, as well as how to use another cloud server or your home computer as backup space. To complete the procedures in this tutorial, you will need to be logged in as root or preface all commands with "sudo".</span></span></div>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">To install rsnapshot through yum we need to install and enable third-party repository called <a href="http://www.hackthesec.co.in/search/label/EPEL">EPEL</a>.</span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 7 64 Bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-7-5.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 6 32 bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-6-8.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>RHEL/CentOS 6 64-Bit</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># rpm -ivh epel-release-6-8.noarch.rpm</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">After installation EPEL Repository use the following yum command to install rsnapshot.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># yum install rsnapshot</span></span></pre>
</div>
<div>
<span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Configuring Rsnapshot</u></b></span></span></div>
<div>
<span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Now open <b>rsnapshot.conf</b> file with vi or nano editor.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;"># vi /etc/rsnapshot.conf</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Next create a backup directory, where you want to store backup of your important data. In my case I will create my backup directory called <b>"/home/backup/"</b>. Search following line in <b>/etc/rsnapshot.conf</b> and add following parameter to set where you want to store all your important data as backup.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">snapshot_root                           /home/backup/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Also uncomment the"<b>cmd_ssh</b>" line to allow to take remote backups over SSH.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">cmd_ssh                                  /usr/bin/ssh</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Next step is that, you need to decide how many old backups you would like to keep.This will take backup every six hours on a day but you can set your own schedule as per your requirements such as hourly, daily, weekly and monthly basis.</span></span></div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="color: #333333; font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="line-height: 18.5714px;">#           BACKUP INTERVALS            #

# Must be unique and in ascending order #

# i.e. hourly, daily, weekly, etc.      #

#########################################

interval        hourly  6

interval        daily   7

interval        weekly  4

interval        monthly 3</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Backup Local Directories</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If you want backup your directories locally to the same machine then follow the steps.  If you want take a backup from windows client then first you need to mount directory in Linux machine.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">backup             /hackthesec/                    localhost/

backup             /etc/                           localhost/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Backup Remote Directories</u></b></span></span></div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If you want to backup up remote server directories then you need to follow the easy steps. I am taking a backup of my remote server "/home" directory under "/home/backup" directory on rsnapshot server.</span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium;"><span style="line-height: 20.8px;">backup        root@example.com:/home/             /home/backup/</span></span></pre>
</div>
<div>
<span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Verify Rsnapshot Configuration</u></b></span></span></div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: medium; line-height: 20.8px;"># rsnapshot configtest
# rsnapshot -t hourly</span><span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px; white-space: normal;"><b><u>
</u></b></span></span></pre>
</div>
<div>
<span style="color: #333333;"><div style="font-family: verdana, geneva, sans-serif; font-size: 15px; font-weight: bold; line-height: 26px; text-decoration: underline;">
Automating the Process</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Now i will show you how to schedule our backup process. In Linux we use cron jobs in order to schedule task. By default, rsnapshot comes with <a href="http://www.hackthesec.co.in/search/label/cron">cron </a>file under "/etc/cron.d/rsnapshot", if it’s doesn’t exists create one and add the following lines to it. If rules already exist then you need to remove the "#" from of the scheduling section to enable these values.</div>
<div>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><span style="font-family: Menlo, Monaco, Consolas, Courier New, monospace;"><span style="font-size: 15px; line-height: 18.5714px;"># This is a sample cron file for rsnapshot.
# The values used correspond to the examples in /etc/rsnapshot.conf.
# There you can also set the backup points and many other things.
#
# To activate this cron file you have to uncomment the lines below.
# Feel free to adapt it to your needs.
0 */4 * * * root /usr/bin/rsnapshot hourly
 
30 3 * * * root /usr/bin/rsnapshot daily
 
0 3 * * 1 root /usr/bin/rsnapshot weekly
 
30 2 1 * * root /usr/bin/rsnapshot monthly</span></span></pre>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></pre>
</div>
</span></div>
</div>

How to install and configure rsnapshot on RHEL/Centos 6/7

Install and configure rsnapshot on RHEL/Centos 6/7 This tutorial will describe how to set up and use rsnapshot , a remote backup soluti...