Posts

How to Install and Set Up OPNsense with IDS in Virt-Manager What is OPNsense? OPNsense is an open-source, easy-to-use, and powerful firewall and routing platform. It is based on FreeBSD and designed to offer enterprise-grade features with a user-friendly interface. OPNsense supports features like VPN, intrusion detection, traffic shaping, and advanced routing options. It’s widely used for securing network environments in both small businesses and enterprise networks. What is an Intrusion Detection System (IDS)? An Intrusion Detection System (IDS) is a security tool that monitors network or system activities for malicious activities or policy violations. The primary function of an IDS is to detect attacks and unauthorized access attempts by analyzing traffic patterns, logs, and system behavior. If suspicious activity is detected, the IDS generates alerts to notify the network administrator. IDS systems can be signature-based, anomaly-based, or a combination of both. ...

Cicada HTB Walkthrough Step 1: Initial Enumeration with Nmap The first step in attacking Cicada HTB is performing an Nmap scan to identify open ports and running services. sudo nmap -sV -sC -oA nmap/cicada 10.10.11.35 Nmap Results The scan revealed several open ports, including: LDAP (389, 636, 3268, 3269) SMB (445) Kerberos (88) MSRPC (135, 593) DNS (53) This indicates an Active Directory (AD) environment, which suggests possible attacks related to SMB, Kerberos, and LDAP. ...

How to Set Up FOG Server for Windows 10 Imaging and Deployment This guide walks you through installing and configuring a FOG (Free Open-source Ghost) server to capture and deploy Windows 10 images across networked machines. Prerequisites Before starting, ensure you have the following: Windows Server 2019 with the DHCP Server role enabled. Ubuntu Server (20.04 LTS or later) for hosting FOG. Two Windows 10 Client Machines: Reference Machine: To capture the base Windows 10 image. Target Machine: To deploy the captured image. All devices must be on the same network. Step 1: Install FOG on Ubuntu Server 1. Install Git Open a terminal on your Ubuntu server and run: ...

What is BitLocker? BitLocker is a tool used to encrypt Windows computers. It can use a password, PIN, or/and TPM in your computer. This is useful in case your computer gets stolen or someone tries to boot from another drive. It ensures that if someone inserts a USB flash drive with Linux on it, the attacker can’t read the files on the Windows drive or, more importantly, access the SAM file (where password hashes are stored). ...

What is the goal? The goal is to set up basic firewall rules to stop networks from communicating with each other and, more importantly, to stop IoT devices from talking to other devices. The reason we want to do this is because IoT devices are horrible for security. This is because vendors don’t update the devices or don’t update them often. If something has technology in it, it CAN AND WILL be hacked. It is a question of when and not if. So to stop other devices from being affected, just cut them off from the network. ...