HOW TO DISCOVERY A LOCAL IP ADDRESS BY F5 BIG IP (COOKIE DECODER)

First was tried looking for a f5 partner:
https://f5.com/partners/find-a-partner?res=1&country=Brazil

After that was looking for a customer that used f5 solution

First was choose a partner f5 after that was hunt a customer of this f5 partner for matche a f5 solution implemented in your environment

After found was just tried some tools how:

1) roots way:

Enable developer mode in your web browser and set application/Cokkie/ and looking for "BIGipServerpool_<site_domain_port>"
in my case was found:
BIGipServerpool_www.trusthub.com.br_8080 and in righ side: 1510385856.36895.0000

execute: ./BIGIP_decode_cookie.py BIGipServerpool_www.trusthub.com.br_8080=1510385856.36895.0000

source: https://github.com/psmet/BIGip-cookie-decoder

2) nutella way:


2.1) BIGIP COOKIE DECODER:

just install this plugin in your browser and try set this feature in your browser after access those sites:

source: https://chrome.google.com/webstore/detail/bigip-cookie-decoder/fgbahkaekodceioljkpefkclechnccpl

2.2) GITHUB BIG IP ECODER DECODER

source: http://cheungj.github.io/projects/big-ip-encoder-decoder/
just put the big ip cookie information

Obs, many customers arround the world have the same weakness discoverd

HOW TO INSTALL CISCO ANY CONNECT CLIENT IN UBUNTU

 sudo apt-get install openconnect network-manager-openconnect-gnome

source
https://answers.uillinois.edu/illinois/page.php?id=47640

HOW TO ADD PASS IN COMPRESS FILE USING ZIP

first: sudo apt install zip unzip

after: zip -re workshop_.zip
define pass for compress.

NMAP HTML REPORT

apt install xsltproc

sudo nmap -sV <YOUR_IP> -oX scan.xml && xsltproc scan.xml -o "`date +%m%d%y`_report.html"

HOW TO INSTALL VEGA SCANNER

On Ubuntu/Debian systems: sudo apt-get install libwebkitgtk-1.0
wget https://support.subgraph.com/downloads/VegaBuild-linux.gtk.x86_64.zip

unzip VegaBuild-linux.gtk.x86_64.zip

cd VegaBuild-linux.gtk.x86_64

./Vega

 

obs,

 During  review my post was observerd that in ubuntu 20. is complicate do run this app, the solution finded was install a java 8 version using this command:

sudo apt install openjdk-8-jdk

and for swith the java version for use some application you should set this command first:

 

sudo update-alternatives --config java

 

 

HOW TO INSTALL OSMEDEUS

apt-get update && apt-get upgrade
pip freeze or pip3 freeze
pip install dirhunt
pip install pycurl
apt install python3-pip
pip3 install --upgrade setuptools
pip3 install flask-mysqldb
pip install —upgrade setuptools
pip install gcloud
sudo apt install libcurl4-openssl-dev libssl-dev
pip install pycurl, sudo pip install pycurl, pip3 install pycurl, sudo pip3 install pycurl
git clone https://github.com/j3ssie/Osmedeus
cd Osmedeus
./install.sh

sudo apt-get install python-setuptools
sudo apt-get install python3-setuptools

after install, for execute scan in a specific domain you could do the following command:

./osmedeus.py -t example.com

source: https://github.com/j3ssie/Osmedeus
source for advanced commands: https://github.com/j3ssie/Osmedeus/wiki/Advanced-Usage

tested on  18.04.2 LTS bionic

How to Disable WPAD in Windows

To disable WPAD in Windows, you'll need to make an easy registry edit, as StackExchange user laktak points out:

Click the Start button, and in the search field, type in "regedit", then select "regedit.exe" from the list of results.
Navigate through the tree to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad.
Once you have the "Wpad" folder selected, right click in the right pane, and click on "New -> DWORD (32-Bit Value)".
Name this new value "WpadOverride".
Double click the new "WpadOverride" value to edit it.
In the "Value data" field, replace the "0" with a "1", then click "OK".
Reboot the computer.

HOW TO UPGRADE UBUNTU SERVER FROM 16.04 FOR 18.10

apt-get update && apt-get upgrade -y
apt-get dist-upgrade -y
do-release-upgrade

HOW TO INSTALL Deutsche Telekom AG Honeypot Project

How to install Tpot t-Mobile

Requirements:

Ubuntu 18 lts

Git hub installed

Step 1:

Git clone https://github.com/dtag-dev-sec/tpotce.git

Cd /tpot

Chmod 777 install.sh

./install.sh —type=user

Step 2:

Define user and password about the access the unit:

User: <USER>

Pass: <PASS>

Step 3: 

Allow the access by the ports:

Ssh in server: 64295

Web access: https://<your.ip>:64297

Obs, i`m recommend open all the ports

source: http://dtag-dev-sec.github.io/mediator/feature/2017/11/07/t-pot-17.10.html

for debian 9, I, recommend install before this tool:

apt install npm
apt install pip
apt install toilet

HOW TO CREATE A SCRIPT FOR CONNECT SSH AUTOMATICALY

First:
apt-get install sshpass
touch ssh_server.sh
vi ssh_server.sh

if is default port:

sshpass -p "YOURPASS" ssh -o StrictHostKeyChecking=no <YOUR_USER>@<YOUR_IP>

if is necessary set especif port:

sshpass -p "YOURPASS" ssh -o StrictHostKeyChecking=no <YOUR_USER>@<YOUR_IP> -p<YOUR_PORT>