Skip to main content

Posts

Showing posts from February, 2023

Installing Checksec

$ CHECKSEC_STABLE=$(curl -s https://api.github.com/repos/slimm609/checksec.sh/releases/latest | awk '/"tag_name"/{ print $2 }' | sed 's/"//g;s/,//') $ curl -s -o checksec https://raw.githubusercontent.com/slimm609/checksec.sh/${CHECKSEC_STABLE}/checksec $ curl -s -o checksec.sig https://raw.githubusercontent.com/slimm609/checksec.sh/${CHECKSEC_STABLE}/checksec.sig $ curl -s -o checksec.pub https://raw.githubusercontent.com/slimm609/checksec.sh/${CHECKSEC_STABLE}/checksec.pub $ openssl dgst -sha256 -verify checksec.pub -signature checksec.sig checksec Verified OK $ chmod u+x checksec checksec --file=vuln checksec --file=/bin/sh

Casandra DB Pentest - Port 9042

  Install Cqlsh sudo apt update sudo apt install openjdk-8-jdk sudo apt install apt-transport-https wget -q -O - https :// www.apache.org / dist / cassandra / KEYS | sudo apt-key add - sudo sh -c 'echo "deb http://www.apache.org/dist/cassandra/debian 311x main" > /etc/apt/sources.list.d/cassandra.list' sudo apt update sudo apt install cassandra Commands to Get Data sudo cqlsh 10.10.10.10 #List DB SELECT keyspace_name FROM system.schema_keyspaces ; SELECT * FROM system.schema_keyspaces ; #select DB use DB_NAME ; use system_auth ; #list tables from databsae/keyspace system SELECT columnfamily_name FROM system.schema_columnfamilies WHERE keyspace_name ='system'; #list tables and columns SELECT column_name, type, validator FROM system.schema_columns WHERE keyspace_name = 'system_auth' AND columnfamily_name = 'roles' ; #list DB hashes SELECT * from system_auth.roles Ref: Configuring firewall port access | Apache Cassandra 3.