@techfitdad — 7x breakout selling The RHEL Compliance Lab

@techfitdad — 7x breakout selling The RHEL Compliance Lab | Overshot

On-screen text

FREE CYBERSECURITY LAB Need Cyber Security Labs, but don't Don't worry, I got you, FOR FREE. Here, my name is Nate, the best sm- IT and cyber security professional, AND I HELP PEOPLE BREAK INTO THE INDUSTRY. SO IF THAT INTERESTS YOU, MAKE SURE YOU DROP A FOLLOW. TODAY WE'RE GONNA DO A SUPER SIMPLE CYBER SUPER SIMPLE CYBER THAT YOU CAN JUST DO WITH 2 ISO FILES. YOU'RE GONNA NEED FIRST PARROT OS. AND THEN UBUNTU SERVER. AFTER THAT, I WILL SHOW YOU WHAT YOU NEED TO DO STEP BY STEP, KEEP THIS SUPER QUICK. INTO THIS, JUST A QUICK DISCLAIMER. THIS IS FOR EDUCATIONAL PURPOSES ONLY. IF YOU DO THIS ON DEVICES THAT ARE NOT YOURS, THIS WILL BE CONSIDERED ILLEGAL ACTIVITY, AND YOU WILL GO TO JAIL. SO DON'T DO THAT. ONCE AGAIN, EDUCATIONAL PURPOSES ONLY. DO THIS ON THE SYSTEMS THAT YOUR OWN LAB ENVIRONMENT. NOW, AS YOU I HAVE BOTH MACHINES LOADED UP RIGHT HERE. UH, AND WE'LL BE USING ONE TO ATTACK AND ONE TO DEFEND. SO WITH OUR MACHINE, OFF THE RECON BUT FIRST, WE OUT THE IP ADDRESS FOR OUR UBUNTU SERVER, YOU HOW TO DO THAT. FIRST STEP, WHAT YOU'RE GONNA DO IS TYPE IP A, HIT ENTER, AND THEN THAT IS OUR IP. ADDRESS INSIDE PARROT WEST. DO IS TYPE SUDO NMAP TAGSS 2 DOT 1 6 DOT 8 DOT 1 DOT 1 WHAT THIS IS IS IT'S GOING IP. ADDRESS OF OUR RECON SERVER AND ANY OPEN SERVICES AVAILABLE TO US. IT'S GONNA START THE SCAN. ALRIGHT. OUR SCAN ACTUALLY CAME BACK WITH A RESULTS 22, PORT FOR S SH IS OPEN. INFORMATION, WE COULD THEN TRY TO ATTACK H FUNCTION. WHAT WE'RE GONNA BACK TO THE DEFENSIVE SIDE REAL AND GO BACK TO THE SERVER, WHAT WE WANT TO DO IS INSTALL SOMETHING CALLED THE UNIVERSAL FIREWALL. THIS IS UBUNTU KINDA LIKE FIREWALL THAT YOU CAN BLOCK AND ALLOW RULES. SO REAL QUICK, WE'RE GONNA CHECK ON OUR FIREWALL, OPEN AND WHAT WE HAVE CLOSED. GO SUDO UFW STATUS. THIS WILL LIST OUT EVERYTHING. SO AS WE HERE WE HAVE PORT 22 TCP P ON ALLOW FROM ANYWHERE. WE DON'T WANT THAT. WILL DO IS GO SUDO UNIVERSAL FIREWALL 9:22 OVER FIREWALL 9:22 OVER TCP. THAT OUR RULE HAD BEEN UPDATED. WE CAN CLEAR AND JUST TAB UP AND LOOK AT THE STATUS NOW EVERYTHING IS DENY, DENY, DENY. SO LET'S GO SCAN WITH OUR ATTACK MACHINE AND SEE IF THAT IS ACTUALLY TRUE. ATTACK MACHINE, HIT THE UP ARROW KEY UNTIL IN MAP. SCAN AGAIN, HIT ENTER, AND THIS TIME IT SHOULD REVEAL THAT OUR PORT IF WE DID EVERYTHING CORRECTLY. SEE, IT ACTUALLY WORKED. SCAN COMPLETED, AND THOUSAND PORTS, AND NOTHING WAS OPEN. BEFORE WE ATTEMPTED TO SEE IF OUR FIREWALL IS WORKING WITH OUR I WENT AHEAD AND ALLOWED THE 22 OVER T AGAIN. AND WE'RE GONNA LISTEN A FAILED ATTEMPT LOG LOOKS LIKE ON OUR FIREWALL. HAVE IT START LISTENING IN REAL AND THEN BRING UP OUR ATTACK AND WHAT WE'LL SSH, WE'LL SAY, TECH BIT DAD AT 192, 2, DOT, 16, 8, DOT, 1 DOT, 19, 1. OKAY? AND WE'LL HIT IMMEDIATELY PROMPT US WITH A PASSWORD, AND WE'LL JUST RANDOM PASSWORD, AND IT'S PROBABLY GONNA SAY, PERMISSION DENIED. PLEASE TRY AGAIN. SO WE'LL GO RIGHT BACK. UH, PSEUDO UNIVERSAL FIREWALL DENY 22 OVER TCP. NOW, IN OUR ATTACK VM. IS LITERALLY NOTHING. IT SHOULD NOT EVEN ALLOW A CONNECTION IF THIS ALL WORKED PROPERLY. CAN DO IS WE'LL JUST HIT UP ARROW AGAIN, AND WE'LL HIT SSH, TRY TO CONNECT. GONNA SIT HERE AND WAIT. OKAY? IT'S. THERE'S LIKE, BEEN FIVE MINUTES SO I'M JUST GONNA HIT CONTROL C BECAUSE IT'S NOT WORKING. AND THAT MEANS OUR BLOCK WAS SUCCESSFUL. SO CONGRATULATIONS, YOU FIRST LINUX CYBER FIRST LINUX CYBER SECURITY LAB. ON YOUR RESUME AND TALK ABOUT OVER SERVER HARDENING, OVER ATTACK METHODS, HOW YOU WENT OVER PORT SCANNING, OVER A FIREWALL BLOCKING ALLOW LISTS. THERE'S MANY WAYS YOU CAN SPICE IT'S PRACTICAL. AND IT TAKES LIKE SET UP, AND MOST OF BECAUSE OF THE INSTALLATION. IF YOU GUYS LABS, COMMENT DOWN BELOW. WHAT TYPE OF TO SEE, HAPPY TO DO LIKE ALWAYS, GUYS, AND I'LL SEE NEXT ONE. PEACE.

Transcript

Need cybersecurity labs, but don't know where to start? Don't worry, I got you. I'm gonna give you one for free. Here, my name is Nate, the best sm- IT and cybersecurity professional, and I help people break into the industry. So if that interests you, make sure you drop a follow. Today we're gonna do a super simple cyber, super simple cybersecurity lab that you can just do with 2 ISO files. You're gonna need first Parrot OS and then Ubuntu server. After that, I will show you what you need to do step by step, and we'll keep this super quick. Before we get into this, just a quick disclaimer. This is for educational purposes only. If you do this on devices that are not yours, this will be considered illegal activity, and you will go to jail. So don't do that. Once again, educational purposes only. Do this on the systems that you own in your own lab environment. Now, as you can see, I have both machines loaded up right here. Uh, and we'll be using one to attack and one to defend. So with our Parrot OS machine, we're gonna kick off the recon stage. But first, we need to figure out the IP address for our Ubuntu server. I'll show you how to do that. First step, what you're gonna do is type 'ip a' and hit enter, and then that is going to pop up our IP address inside Parrot OS. What we're gonna do is type 'sudo nmap -sS 192.168.1.168' and then '1.1'. What this is, is it's going to scan the IP address of our recon server and see any open services available to us. It's gonna start the scan. Alright, and so as we can see, our scan actually came back with a results 22, port for SSH is open. So using this information, we could then try to attack the SSH function. What we're gonna do is step back to the defensive side real quick and go back to the server. Now with our server, what you want to do is install something called the Universal Firewall. This is Bluetooth, kinda like firewall that you can set up block and allow rules. So real quick, we're gonna check on our firewall, open and what we have closed. So we'll go 'sudo ufw status'. This will list out everything. So as we can see here, we have port 22 TCP on allow from anywhere. We don't want that. What we will do is go 'sudo ufw deny 22 over TCP'. That our rule had been updated. We can clear out of this and just tab up and look at the status one more time. Now everything is deny, deny, deny. So let's go scan with our attack machine and see if that is actually true. Attack machine, hit the up arrow key until we find in map. Scan again, hit enter, and this time it should reveal that our port if we did everything correctly. As we can see, it actually worked. Scan completed, and it scanned a thousand ports, and nothing was open. Before we attempted to see if our firewall is working with our deny list, I went ahead and allowed the 22 over TCP again. And we're gonna listen and see what a failed attempt log looks like on our firewall. Have it start listening in real time and then bring up our attack VM. And what we'll do here is SSH, we'll say, tech bit dad at 192.168.1.168. Okay? And we'll hit enter. It's gonna immediately prompt us with a password, and we'll just type in a random password, and it's probably gonna say, permission denied. Please try again. So we'll go right back. Uh, pseudo universal firewall pseudo ufw deny 22 over TCP. Now, in our attack VM, it's literally nothing. It should not even allow a handshake or connection if this all worked properly. So all we can do is we'll just hit up arrow again, and we'll hit SSH, try to connect. I'm just gonna sit here and wait. Okay, it's like, been five minutes, so I'm just gonna hit control C because it's not working. And that means our block was successful. So congratulations, you just completed your first Linux cyber security lab. You could even put that on your resume and talk about how you went over server hardening, over attack methods, how you went over port scanning, how you went over a firewall blocking allow lists. There's many ways you can spice this up. It's practical. And honestly, it takes like, 30 minutes to set up, and most of that time is because of the installation. If you guys want any more labs, comment down below. What type of labs you'd like to see, I'd be happy to do like always, guys, and I'll see you in the next one. Peace.

FREE CYBERSECURITY LAB

Promoted product

Why it worked

Original caption

More from @techfitdad

Summary

Structure

Product placement

Call to action

On-screen text