TechTalkSecurity

 Zeek Network Security Monitor Complete Installation & Deployment Guide for Ubuntu 26.04 LTS 1. Add Zeek Repository & Install Binary Package Zeek maintains official pre-compiled packages via the OpenSUSE Build Service. Execute the following commands to add the repository and install Zeek: # A. Update package lists and install required repository tools sudo apt update && sudo apt install -y curl gnupg2 wget # B. Import the official Zeek repository GPG key curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_26.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null # C. Add the Zeek repository source list echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_26.04/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list # D. Update index and install Zeek sudo apt update sudo apt install -y zeek #Mail Server Configuration Prompt During installation, Postfix may prompt for mail s...

 Step1: Download DVWA https://github.com/digininja/DVWA/archive/master.zip Step2: Extract the downloaded file: DVWA-master Step3: Copy the extracted file " DVWA-master " (DVWA-master> DVWA-master ) to "C:\xampp\htdocs" Step4: Rename the file  "C:\xampp\htdocs\DVWA-master\config\config.inc.php.dist"  to  "C:\xampp\htdocs\DVWA-master\config\config.inc.php" Step 5: Launch XAMPP control panel as an administrator and click on MySQL > Admin : this will open the MySQL admin page  Step 6: Click on new and create a new database table with the name "dvwa" Step 7: Create a new user and password: username: 'dvwa'  password: 'p@ssw0rd' ###config from   "C:\xampp\htdocs\DVWA-master\config\config.inc.php" $_DVWA[ 'db_database' ] = getenv('DB_DATABASE') ?: 'dvwa'; $_DVWA[ 'db_user' ]     = getenv('DB_USER') ?: 'dvwa'; $_DVWA[ 'db_password' ] = getenv('DB_P...

1 Download Link: https://www.apachefriends.org/download.html 2. Configure Custom ports for HTTP/HTTPS: If you click Start on Apache right now and it turns red or immediately stops, you have a port conflict. Let's shift Apache over to custom alternative high-order ports. Part A: Changing the HTTP Port (80 ➔ 8080) > Open the XAMPP Control Panel. > Click the Config button right next to the Apache service, and select Apache (httpd.conf). > In the text file that opens, press Ctrl + F and search for Listen 80   Change that line to:   Apache   Listen 8080 > Next, search for ServerName localhost:80    Change it to:    Apache    ServerName localhost:8080 > Save and close the file (Ctrl + S). Part B: Changing the HTTPS/SSL Port (443 ➔ 4433) > In the XAMPP Control Panel, click the Config button next to Apache again, but this time select Apache (httpd-ssl.conf).   Search (Ctrl + F) for Listen 443.   Change it to: ...

1)  Find the UUID of your VM: xe vm-list name-label="Your_VM_Name" 2) Find the VIF UUIDs associated with that VM: xe vif-list vm-uuid=<VM_UUID> 4) Disable checksumming for each VIF (repeat for every VIF found): xe vif-param-set uuid=<VIF_UUID> other-config:ethtool-tx="off" 5) Restart the VM (a full shutdown and start is recommended) Note: We recommend changing the NIC type to "e1000"  xe vm-param-set platform:nic_type="e1000" uuid=<UUID of VM>

 

 

##################### HA #################################### >show high-availability state                            ##HA state/configuration/ Synchronization state >show high-availability state-synchronization            ##Synchronization status/ >show high-availability control-link statistics          ##control-link statistics  >show high-availability transitions                      ##Transition Statistics counters  >show high-availability interface ha1                    ##HA interface state/counters/rx/tx/drop >show high-availability ha2_keepalive                    ##HA2 Keep-Alive statistics >show high-availability flap-statistics            ...

  #########NAT Configuration######## >set security nat source rule-set NAT-IBN description source_nat >set security nat source rule-set NAT-IBN from zone untrust >set security nat source rule-set NAT-IBN to zone untrust >set security nat source rule-set NAT-IBN rule NAT-IBN-Rule description NAT_IBN_Rule >set security nat source rule-set NAT-IBN rule NAT-IBN-Rule match source-address 10.10.10.11/32 >set security nat source rule-set NAT-IBN rule NAT-IBN-Rule match destination-address 0.0.0.0/0 >set security nat source rule-set NAT-IBN rule NAT-IBN-Rule then source-nat interface #######Firewall Policy configuration######### >set security policies from-zone untrust to-zone untrust policy allow-win-server match source-address 10.10.10.11 >set security policies from-zone untrust to-zone untrust policy allow-win-server match destination-address any >set security policies from-zone untrust to-zone untrust policy allow-win-server match application any >set s...

  Import the CA certificate: openssl x509 -in pf-ca.pem -inform PEM -out pf-ca.crt sudo cp pf-ca.crt /usr/local/share/ca-certificates sudo update-ca-certificates Import the OpenVPN client configuration: sudo nmcli connection import type openvpn file [client].ovpn OpenVPN connection via cmd: sudo openvpn --config /path/to/config.ovpn

  Method 1: Rocky 8  (and newer),  Centos 7 (and newer) and Redhat 7 (and newer) Install yum-utils: yum install yum-utils Add repo sudo yum-config-manager --add-repo  https://repo.fortinet.com/repo/forticlient/7.4/centos/8/os/x86_64/fortinet.repo Install FortiClient sudo yum install forticlient Method 2: Direct RPM Download Link: Installation Download the FortiClient VPN RPM package from  https://links.fortinet.com/forticlient/rhel/vpnagent  - this will normally be downloaded to the  Downloads  folder in your user's home folder. In the file browser navigate to this folder and double click on the forticlient_vpn_X.XX.XXXX_x86_64.rpm file and click Install in the software install window. Configuration Launch FortiClient using the shield icon in the top bar and then click 'Configure VPN'. Ensure that SSL-VPN is selected, enter a connection name (e.g. FMRIB VPN) and then in the Remote Gateway box enter https://vpn.fmrib.ox.ac....

  Interface: config system interface     edit "port1"         set vdom "root"         set ip 192.168.0.108 255.255.255.0         set allowaccess ping https ssh http         set type physical         set netflow-sampler both         set alias "WAN1"         set lldp-reception enable         set role wan         set snmp-index 1         set secondary-IP enable         set mtu-override enable         set mtu 1000     next     edit "port4"         set vdom "root"         set ip 20.20.20.108 255.255.255.0         set allowaccess ping         set type physical         set alias "LAN"         set snmp-inde...

Interface:  config system interface     edit "port2"         set vdom "root"         set ip 14.140.40.108 255.255.255.0         set allowaccess ping https         set type physical         set alias "WAN2"         set role dmz         set snmp-index 2     next     edit "port4"         set vdom "root"         set ip 20.20.20.108 255.255.255.0         set allowaccess ping         set type physical         set alias "LAN"         set snmp-index 8     next     edit "test"         set vdom "root"         set type tunnel         set snmp-index 9         set interface "port2"     next end IKEv2 V...

  IPsec Tunnel Interface: config system interface     edit "tun1-isp1"         set vdom "root"         set ip 172.16.1.1 255.255.255.255         set allowaccess ping         set type tunnel         set remote-ip 172.16.1.2 255.255.255.0         set snmp-index 9         set interface "port1"     next end config system interface     edit "tun2-isp2"         set vdom "root"         set ip 172.16.2.1 255.255.255.255         set allowaccess ping         set type tunnel         set remote-ip 172.16.2.2 255.255.255.0         set snmp-index 11         set interface "port2"     next end config vpn ipsec phase1-interface     edit "tun1-isp1"       ...