vlp's wiki - it

acces_non_root

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Give access to a non-root user to a root app: tcpdump exemple Add a capture group and add yourself to it: sudo groupadd pcap sudo usermod -a -G pcap $USER Next, change the group of tcpdump and set permissions: sudo chgrp pcap /usr/sbin/tcpdump sudo chmod 750 /usr/sbin/tcpdump

adminsys

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:21:49+00:00

Afficher info cpu lscpu Afficher info RAM free -m -m pour info en MB Vider le cache DNSMasq sudo kill -HUP $(pgrep dnsmasq) Espace disk df -h du -hd1 Lister composants PCI lspci Lancer une application sous un autre user: exemple avec etherpad

alacritty

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:22:06+00:00

error curl -sSL https://raw.githubusercontent.com/alacritty/alacritty/master/extra/alacritty.info | tic -x -

apparmor

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Shutdown VM protected * trouver PID en la destroy => erreur + PID * aa-status: UID visible avec (PIC) * aa-complain /etc/apparmor.d/libvirt/libvirt-UID

apt

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:14:53+00:00

Voir paquets installés: dpkg -l |grep matrix-synapse Voir paquet dépots apt show matrix-synapse-py3 détail du paquet apt policy matrix-synapse-py 3

bluetooth

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:15:21+00:00

Initialisation sudo apt-get -y install bluetooth bluez bluez-tools rfkill sudo usermod -aG lp $USER newgrp lp si erreur sap, modifier le service systemd: ExecStart=/usr/lib/bluetooth/bluetoothd --noplugin=sap relancer le daemon bluetooth

cron

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:20:54+00:00

Envoi email Config cron Dans /etc/default/cron ajouter: MAILTO="addresse@domain.tld" Puis relancer cron.service

ctag

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:21:15+00:00

Install sudo apt-get update && sudo apt-get install -y exuberant-ctags Init dans un folder ctags -R . Utilisation ctrl + ] pour aller au tag ctrl + t pour retourner à l' index

curl

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:21:28+00:00

Curl with auth curl --user daniel:secret http://example.com/

dd

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:23:21+00:00

Create bootable key dd if=/path/to/your/isofile of=/your/usb/disk bs=8M status=progress

drun

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Ajouter une apps dans drun Exemple avec thunderbird /usr/share/applications/ [Desktop Entry] Name=Thunderbird Exec=/home/vlp/tools/thunderbird/thunderbird Comment=Mailbox Terminal=false Icon=/home/vlp/tools/thunderbird/icons/thunderbird-desktop.png Type=Application

electrum

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Install Electrum CLI: sudo apt-get install build-essential automake pkg-config libtool libffi-dev libgmp-dev python-dev libsecp256k1-dev Launch: electrum daemon start Info: electrum help To get wallet info: electrum getaddressbalance #my wallet address#

git

Anonymous (anonymous@undisclosed.example.com) — 2025-11-02T08:44:35+00:00

Stash i.e. : éviter de laisser une pile de commit tig permet une visualisation plus esthetic de git show git rebase -i #####_git -1_du_premier_commit##### git push --force Sign commit git config user.signingkey vlp@fdn.fr git commit -S -m "update" git config --global commit.gpgsign true // alway sign

gpg

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo GPG Vocabulaire * Primary key vs. subkey - A PGP key certificate may contain other information in addition to the key itself. A subkey is a key that is stored as a sub-component of another key. The primary key is the top level key. It is often referred to elsewhere as the master key.

gps

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo lier un gps bluetooth à un tty (0 étant le channel: /dev/rfcomm0 ) sudo rfcomm connect 0 00:0B:0D:17:A5:98 si connexion impossible: check si connexion ouverte rfcomm -a check si channel use: sudo lsof | grep /dev/rfcomm0 puis fermer appli

john-the-ripper

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Brutforce john monfichier.passwd --wordlist=rockyou.txt

keyboard

Anonymous (anonymous@undisclosed.example.com) — 2025-02-11T19:28:21+00:00

Clavier Intl US w/ dead keys: setxkbmap -layout us -variant intl

khal

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

memo /usr/lib/python3.9/site-packages/khal/khalendar/khalendar.py:153: PytzUsageWarning: The localize method is no longer necessary, as this time zone supports the fold attribute (PEP 495). For more details on migrating to a PEP 495-compliant implementation, see https://pytz-deprecation-shim.readthedocs.io/en/latest/migration.html localized_events = self.get_localized(localize(start), localize(end))

kitten

Anonymous (anonymous@undisclosed.example.com) — 2024-07-14T20:54:11+00:00

Like in the original post, I’m also using kitty as my terminal emulator. There are some really cool features in this terminal emulator. However, using ssh to connect to a remote host, I find that some keys (backspace), and keyboard shortcuts are not working, and I get the following error from my remote debian host:

ldap

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo search ldapsearch -x -b "dc=00011100,dc=org" -H ldap://localhost -w vlp123 -D "cn=admin,dc=00011100,dc=org" "uid=adhacc-0002" memberof add ldapadd -cx-H ldaps://padme.fdn.fr -D cn=admin,dc=fdn,dc=fr -w vlp123 -f file.ldif modify ldapmodify -cx -H ldaps://padme.fdn.fr -D cn=admin,dc=fdn,dc=fr -w vlp123 -f file.ldif

luks

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

luks process En root apt install cryptsetup Copy your home directory to a temporary directory on a different partition: mkdir /homebackup cp -a /home/* /homebackup Encrypt your home partition: umount /home cryptsetup -h sha512 -c aes-xts-plain64 -s 512 luksFormat /dev/sda5 cryptsetup luksOpen /dev/sda5 chome mkfs.ext4 -m 0 /dev/mapper/chome

mariadb

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Ouverture vers l'ext si un user est validé sur % au lieu de localhost, il pourra accéder à la base en remote il faut cependant dire à mariadb d'écouter l'ext en éditant: sudo nano /etc/mysql/mariadb.conf.d/50-server.cnf bind-address = 0.0.0.0

matrix

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo clean media find /var/lib/matrix-synapse/media/local_content/* -mtime +30 -exec rm {} \;

mqtt

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Mémo publish mosquitto_pub -h mosquitto.00011100.org -t sensors/test -m 123 subscribe mosquitto_sub -h mosquitto.00011100.org -t shellies/shellyht-77C7BF/sensor/temperature

msmtp

Anonymous (anonymous@undisclosed.example.com) — 2026-04-28T15:10:53+00:00

memo check certif msmtp --serverinfo --host=mail.00011100.org --port=587 --tls=on send mail auto w/ ip curl https://api.ipify.org\?format\=json 2> /dev/null | jq --raw-output '"Subject: nuc ip\ntest\(.ip)"' | msmtp nick@dns.fr Incoming server: Incoming IMAP server mail.infomaniak.com IMAP port 993 SSL / TLS (recommended) SMTP sending server mail.infomaniak.com Outgoing SMTP port 587 STARTTLS (recommended)

netstat

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo netstat -ntpul

network

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Affichier interface physiques ou virtuelles sudo ip -4 addr show Afficher les toutes: ip route Activer passage internet: net.ipv4.ip_forward = 1 est bien activé dans /etc/sysctl.conf DNS FDN 80.67.169.12 80.67.169.40 Se connecter à une interface

nextcloud

Anonymous (anonymous@undisclosed.example.com) — 2026-02-17T21:01:47+00:00

Memo Update DB following file added manually: sudo -u www-data php /var/www/nuage/console.php files:scan --all log in too long: SOLVED with: DELETE FROM oc_bruteforce_attempts; Switch maintenance mode: sudo -u www-data php /var/www/nuage/occ maintenance:mode --[on|off}

nfc

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

acr122u installation Installing prerequisites on Ubuntu or Debian: sudo apt-get install pcsc-tools pcscd sudo apt-get install libpcsclite-dev sudo apt-get install libpcsclite1 sudo apt-get install libusb-dev Modify /etc/modprobe.d/blacklist-libnfc.conf

nfs

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Config NFS Config server dans /etc/export: # repertoire ip_client droits /repertoire/distant/à/partager ip.du.client.nfs(rw) Config client Manuel sudo mount -o nfsvers=3 -t nfs ip.du.server.nfs:/repertoire/distant/ /repertoire/local/ Automatique dans /etc/fstab

nftables

Anonymous (anonymous@undisclosed.example.com) — 2023-11-02T15:23:19+00:00

Memo Liste des regles: sudo nft list ruleset

nmap

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo sudo nmap 192.168.100.104 -p 587

ntp

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

ajouter son GPS comme source ntp check la mémoire partagée si gpsd fonctionne comme décrit ici, la mémoire partagée devrait être alimentée: ntpshmmon ajouter dans ntp.conf: restrict default kod nomodify notrap server 127.127.28.0 minpoll 4 maxpoll 4 prefer fudge 127.127.28.0 flag1 1 stratum 1 time1 0.113 refid GPS

openvpn

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo How do I enable IP forwarding? echo 1 > /proc/sys/net/ipv4/ip_forward si no tun mkdir -p /dev/net mknod /dev/net/tun c 10 200 chmod 600 /dev/net/tun

ovh_backup_disk

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Activer disk de backup sur 00011100: manuel sudo mount -t nfs serveur_ovh:/export/ftpbackup/repertoire_fourni_par_ovh /local/folder/ automatique en ajoutant dans /etc/fstab serveur_ovh:/export/ftpbackup/repertoire_fourni_par_ovh/ /local/folder/ nfs defaults 0 0

ovh_rescue_mode

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo * On repère le point de montage qui va bien : root@rescue-pro:~# df -h Filesystem Size Used Avail Use% Mounted on rootfs 9.9G 600M 8.8G 7% / udev 10M 0 10M 0% /dev tmpfs 388M 144K 388M 1% /run /dev/vda1 9.9G 600M 8.8G 7% / tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 775M 0 775M 0% /run/shm /dev/sdb1 20G 919M 18G 5% /mnt/sdb1

password_store

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

change gpg_key $ cp -r ~/.password-store ~/.password-store.backup $ cd ~/.password-store $ pass init Password store initialized for folder1/pass1: reencrypting to gpg: Note: secret key expired at Tue XX Jul 2021 XX:YY:ZZ AM EDT folder2/pass1: reencrypting to gpg: Note: secret key expired at Tue XX Jul 2021 XX:YY:ZZ AM EDT

password

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Generate password openssl openssl passwd -6 -salt xyz yourpass doveadm doveadm pw -s SHA512-CRYPT mkpasswd dans le paquet whois mkpasswd -m sha512crypt Python3 python3 -c 'import crypt,getpass; print(crypt.crypt(getpass.getpass(), crypt.METHOD_SHA512))'

pdf

Anonymous (anonymous@undisclosed.example.com) — 2026-02-10T10:49:42+00:00

Memo Reduce size gs -sDEVICE=pdfwrite -dCompatibilityLevel=1.4 -dPDFSETTINGS=/printer -dNOPAUSE -dQUIET -dBATCH -sOutputFile=output.pdf my_output.pdf all jpg into one pdf img2pdf *.jp* --output combined.pdf

pem_pkcs12_conversion

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo sudo openssl pkcs12 -export -out keyStore.p12 -inkey server.pem -in certserver.crt

pip

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Update all package pip3 list --outdated --format=freeze | grep -v '^\-e' | cut -d = -f 1 | xargs -n1 pip3 install - Create venv python3 -m venv envDeTest source envDeTest/bin/activate //install des paquets de base python3 -m pip install requests /home/vlp/test/bin/python3 -m pip install --upgrade pip deactivate

postfix

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo suivi de la queue postfix sudo pfqueue

redis

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Can't open PID file /run/redis/redis-server.pid (yet?) after start: Ajouter dans /etc/systemd/system/redis.service ExecStartPost=/bin/sh -c "echo $MAINPID > /var/run/redis/redis.pid"

rsync

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo rsync -r -t -x -v --progress --del /source /destination via ssh rsync -r -t -x -v --progress --del -e 'ssh -p port' user@IP.IP.IP.IP:/dossier/source /dossier/destination

screen

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Partager un écran avec Screen Check en amont: chmod u+s /usr/bin/screen chmod 755 /var/run/screen Côté host screen -d -m -S shared Côté invité screen -x vlp/shared

service

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Ajouter service Exemple avec maison contenu dans /etc/systemd/system/maison.service [Unit] Description=maison After=syslog.target After=network.target [Service] RestartSec=2s Type=simple User=maison Group=maison ExecStart=nodejs /srv/maison/server.js Restart=always [Install] WantedBy=multi-user.target

shadow

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Mémo sudo apt install intel-media-va-driver-non-free libva-glx2 && LIBVA_DRIVER_NAME=iHD Add Switch pro controller Download mapping tool on https://generalarcade.com/gamepadtool/ Download appimage tool: wget https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage --no-check-certificate -O ./appimagetool.AppImage chmod +x ./appimagetool.AppImage

spf

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo SPF * + (Passer) * - (Échouer) * ~ (SoftFail) * ? (Neutre)

ssh

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo générer une clef: ssh-keygen -t ed25519 -a 256 copier une clef ssh-copy-id -i ~/.ssh/id_rsa.pub vlp@00011100.org -p utiliser GPG pour l'auth SSH required: sub key d'auth ajouter dans .gnupg/gpg-agent.conf enable-ssh-support obtenir le keygrip de la clef d'auth avec la commande ci dessous et cle copier dans: ~/.gnupg/sshcontrol

sslh

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Install sudo apt-get install sslh Config: sudo emacs /etc/default/sslh RUN=YES DAEMON=/usr/sbin/sslh DAEMON_OPTS="--user sslh -t2 --on-timeout ssl --listen 0.0.0.0:34654 --ssh 127.0.0.1:47983 --openvpn 127.0.0.1:23987 --ssl 127.0.0.1:36782 --pidfile /var/run/sslh/sslh.pid"v

stunnel

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo On Ubuntu you can use the netstat utility to see open ports: $ netstat -tulpn You can also verify that stunnel is running using nmap to check if the stunnel port is open: $ sudo nmap localhost Generate 2048 key: openssl genrsa -out cleserveur.key 2048

sudo

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Install apt install sudo adduser vlp sudo Commandes lance une commande pour le user: user sudo -u user -g group -i ls /home/vlp/command lance un shell pour le user: user sudo -u user -g group -s ERROR Error message 'sudo: unable to resolve host

terminal

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo si [^M] en appuyant sur "Enter": stty sane

tor

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Bug Debian 7.5 $ cd ~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser $ ./start-tor-browser

tunnel_ssh

Anonymous (anonymous@undisclosed.example.com) — 2024-10-15T20:05:51+00:00

Tunnel ssh pour naviguer en local commande depuis term ssh maison.vlp.fdn.fr -ND 2222 -p [port] Dans FF Aller dans Settings Rechercher: socks - Mettre en manuel - SOCKS Host : localhost - Port : 2222

vlc

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo lancer media en cli: cvlc media.avi > /dev/null 2>&1 stream webcam cvlc v4l2:///dev/video0:chroma=mp2v --v4l2-width 1280 --v4l2-height 720 --sout '#transcode{vcodec=mp2v,acodec=mpga,fps=30}:std{access=http,mux=ogg,dst=127.0.0.1:1339}'

vnc

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

How to Install and Configure VNC on Debian 10 Process VNC KVM * lancer vnc_gate depuis laptop pour la redirection flux ssh * lancer le script fw_host_open.ntf sur l'host * VNC sur ws depuis laptop * VNC sur host depuis ws avec ip host et port VM SERVER

wget

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Aspirer website wget -r -k -np AdresseDeLaPage -r signifie que le téléchargement sera récursif (il télécharge aussi les liens de la page) -k permet de reconstituer le site localement (les liens sont modifié pour pointer localement) -np empêche de remonter dans le répertoire parent.

wifi

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

Memo Process connexion au net // Allume le device ip link set wlan1 up // Se connecte à 00011100 iwctl station wlan1 connect 00011100 // accroche une ip ip addr add 192.168.100.111/24 dev wlan1 // accroche une gatewau ip route add default via 192.168.100.1

yubikey

Anonymous (anonymous@undisclosed.example.com) — 2023-02-15T08:29:40+00:00

memo scdaemon ne veut pas être utilisé en // par root et un user donc il faut kill le scdaemon de root pour que vlp puisse y accéder.