Freaks City

Overview When configuring passwordless SSH login via a bastion host to a target server (e.g., 10.30.3.232), several key step are required. This guide walks through the necessary proces using secure shell (SSH) key-based authentication. Step 1: Check for Existing SSH Keys Log in to the bastion host and switch to the desired user account. Check i ...

Understanding Oracle AuditingOracle auditing monitors user database operations, storing records either in data dictionary tables (specifically SYS.AUD$ within the SYSTEM tablespace, viewable via DBA_AUDIT_TRAIL) or in operating system audit files (typically located at $ORACLE_BASE/admin/$ORACLE_SID/adump/). Standard audit trails reside in the A ...

Setting Up Policy Files to Grant Required Permissions Create a policy file named exampleraypolicy using the Policy Tool to grant permissions to code from signed JAR files. The JAR must be signed with the private key corresponding to the public key imported into Ray's keystore (exampleraystore) under the alias susan. This grants code permission ...

JCEKS (Java Cryptography Extension KeyStore) provides an enhanced keystore format for Java applications requiring secure storage of cryptographic keys. Unlike standard JKS, JCEEKS supports storing symmetric keys with stronger protection mechanisms. Key Storage in JCEKS The following example demonstrates generating and storing a secret key in a ...

JSON Web Tokens (JWT) are a compact, URL-safe means of representing claims to be transferred between two parties. By employing digital signatures, JWTs ensure that data remains tamper-proof during transit. Structure of a JWT A JWT is composed of three distinct segments separated by periods: Header: Specifies the algorithm and token type. Paylo ...

To obtain the International Mobile Equipment Identity (IMEI) on modern Android vertions, developers must configure manifest declarations and handle runtime permissions carefully due to increased privacy restrictions. Menifest Configuration First, declare the necessary privilege in the project configuration file. Without this permission, the sys ...

Installing MySQL Server Execute these commands to instal MySQL on Ubuntu 20.04: sudo apt update sudo apt install mysql-server Verify the installation and check the service status: mysql --version sudo systemctl status mysql Securing MySQL Installation Run the security script to configure basic security settings: sudo mysql_secure_installation ...

Overview All API objects in Kubernetes are persisted in etcd, but every operation on these objects must go through the kube-apiserver. The API server acts as the gatekeeper for authorization, and Kubernetes uses RBAC (Role-Based Access Control) as its authorization mechanism. Core RBAC Concepts Three fundamental conecpts form the foundation of ...

Effective exploitation via Java deserialization often hinges on bypassing access controls and instantiating objects without invoking standard constructors. The ysoserial toolkit addresses these challenges through specialized utility classes, primarily located in the payloads.util package. Two critical components facilitate these operations: Ref ...

Creating Personal Access Tokens Personal access tokens (PATs) serve as an alternative to passwords when authenticating with GitHub through the command line or API. Note: If you authenticate to GitHub using the GitHub CLI, you can skip generating a PAT and authenticate through your web browser instead. PATs can be used with the GitHub API or com ...