The Rabbit Hole

GitHub action security

This is mainly a high level overview of some best practices I've been thinking about while contributing to an open source project recently, and mainly a note for me on how to use some of the cool features I've been playing with 😅.  This is much more extensive documentation than my

Deleting versions from a Linode s3 bucket

So...this wasn't as straight forward as I thought... Problem/story Enabling versioning for s3 buckets is standard practice for terraform's s3 backend, which Linode supports...kind of... While yes technically Linode supports the versioning, it doesn't support deleting the versions from the web-ui... 🤦. Alright, that's fine I've heard they

PikaPods

tl;dr: PikaPods is an awesome + cost effective place to host your blog 🥳 quick side-note: first time I've seen a picture of a pika and they are so cute 😅 Uptime I've been hosting my blog on PikaPods for probably close to a month now, and I've loved it! I kept

Customizing the Casper theme

So, I think I did this because I wanted to add analytics to my blog and I read somewhere that code injection could potentially be wiped out (which hasn't happened for my css modes yet).  So, I forked the Casper theme GitHub (GH) repo and started making modifications to it.

BYOBin

BYOBin

Quick article on how to build self contained binaries for rust. This is mainly because I had to do this for a pentest recently, because the environment was a very minimal container which only had about 5 binaries in it including bash...so pretty locked down and was missing almost

vagrant

Enabling clipboard support for vagrant-libvirt (vagrant-libvirt clipboard)

So, I think I have mentioned how much I LOVE vagrant 😁 One of the things that I normally never do, is use the GUI of whatever VM I am using vagrant to control. Even if I am using the clipboard for vim or my web browser for my automated vagrant

containers

packer build in a container...? 🛳️🤔

tl;dr: I was able to run a packer build command, for my packer-kali_linux project, inside of a Fedora toolbox container which I had installed HashiCorp's packer and qemu/kvm...and that is just the start of the inception... 🙃😅 So...I am a weird individual... 😅 my normal setup for

proxmox

disaster recovery to Proxmox

Just to clarify I am doing this as more of a retroactive post to show how I migrated from my xcp-ng server ( I had some weird network sh!t go down...and I honestly didn't probably need to migrate but it happened 😅 ) to proxmox. Just wanted to link to the

powershell

PS for bash converts

PowerShell for bash converts + pentesting goodies Note for the image... while it isn't directly correlated to the right kind of Windows, it is a peaceful picture. Normally I don't associate peacefulness with powershell, it is normally me fighting with the shell and it normally wins 🤕, so I am trying to

containers

Prevent docker from using runc

🚧🚧🚧🚧 WARNING!!!! Do, NOT do this if you don't know what or why you would want to do this!!!! 🚧🚧🚧🚧🚧~~ I actually attempted this again, and everything seems be working now 😁 Checkout the update at the bottom. Feel free to read about it though 🙂 Preface... So...I don't know if I would

meta

Projects

This page is just a page of links, and possibly a small description/tweet talking about it, to things I am currently working on or have worked on that I want to bring attention to. Infrastructure Kali Linux automated installation GitHub Project: elreydetoda/packer-kali_linuxThis is a repository that will

networking

DNS Rebind minimal bypass

NOTE: this is not hacking, this is an infrastructure tip to allow public dns servers to server internal IPs tl;dr pfSense walk through & OPNsense walk through Why? So, I have used pfSense for a long time and recently have switched over to OPNsense ( mainly because of their WireGuard VPN

vagrant

Vagrant-ception or ViV (Vagrant in Vagrant)

Why? Jump down to the next section if you don't care why, and want to get into the details right away. 😁️ So, I run Linux as my main operating system and I enjoy using the native hypervisor stack of linux ( more info in a section below ), because I feel as

zfs

(Open)ZFS tips and tricks

I am still very new to zfs, but I wanted to compliment my Cool shell tricks post with zfs stuff so I don't lose commands that I like. I am not going to give more detail than a simple description, but you should always be able to post the commands

meta

Analytics for this site

tl;dr: here are all the analytics that get collected: https://plausible.io/blog.elreydetoda.site So, I ended up listening to a podcast episode on the changelog about a privacy respecting analytics company called Plausible, and thought I would check it out. I really like it because it is

RedOps

Tracking #RedOps

So, I have been following this space of red team automation for a while... and this post came out of a conversation I had with one of my co-workers about some videos I have been doing at work. So, I am going to try and keep this post up to

zfs

zfs rollback script

So, zfs is awesome (not going to get into that in this post)...and I love automation, so I set out to join the two together. 🙂️ I found the script below here: https://blog.woopi.org/wordpress/?p=60 elreydetoda/all-linux-tingsThis is a repo of all my configurations for different

docker

random docker stuff

First off if you don't understand any of the shell commands I use try and use this website to explain them: https://explainshell.com/ Docker namespace remapping Explaination So, I found this article, and it seems to have some pretty decent ideas for trying to harden docker. I was mainly

shell Featured

Cool shell tricks

Updated: This is an aggregation (so I don't loose them 😅️) of different shell tricks I have learned. Other resources Other resources - others Other resources - others - websites * Manipulating Strings - https://tldp.org/LDP/abs/html/string-manipulation.html Other resources - mine Other resources - mine - blogs

docker

Terraforming with a whale (docker)

Updated: 19 Nov 2020 tl;dr examples at the bottom: https://blog.elreydetoda.site/docker-terraform/#example-cmds Intro and Credits So, I have to thank one of my friends Mr. Jamie Bowman, because he did an initial blog post that helped me get my head around the concept of doing this.

shell

curl | bad

NOTE: the image for this blog post is because we are talking about something in the...shell... 😁️ I know that doing curl and directly pipe'ing into bash is considered a bad practice for security, and people discourage it. When it comes to automation though, sometimes there is no way to

networking

Lost without routing Sense

So, I was curious about how I could push down a static route from my pfSense router (and it looks to also work for OpnSense as well under Services --> DHCPv4) to my work vlan for another network (my work's lab network (i.e. where some machines that I have

ubuntu

Ubuntu install

Updated: 2020-04-24 This is a log of commands that I use for an ubuntu install that I will eventually convert into an ansible playbook, but for now I am just logging it here. DEs (Desktop Environments) * I normally use Ubuntu Mate * then install i3-gaps i3-gaps * will put my config up

vim

Vim clipboard in vagrant over ssh?

NOTE: if there are tools that you don't know how to use/install, and would need an explain/video on how to do it then checkout the resources for this blog at: https://elrey.casa/info I love to use vim (as my bio says, and I will link to

i3-wm

minimal i3-gaps install ubuntu

I love using i3-gaps, especially for my work machine with x2go-server. This is a short guide on, what I think is, the most efficient, minimal, and "official" method of installing i3-gaps till it becomes official. 1. install Regolith Linux's PPA: sudo add-apt-repository -y ppa:regolith-linux/stable 2. install i3-gaps: sudo