Preventing 2FA Crises So...you've heard about using two/multi factor authentication (or 2FA/MFA), and hopefully you've already started using it...😅 A recent podcast episode I listed to detailed the painful process of what could happen if you lose your 2FA codes, and I hope to address how to prevent this even
GitHub action security This is mainly a high level overview of some best practices I've been thinking about while contributing to an open source project recently, and mainly a note for me on how to use some of the cool features I've been playing with 😅. This is much more extensive documentation than my
Deleting versions from a Linode s3 bucket So...this wasn't as straight forward as I thought... Problem/story Enabling versioning for s3 buckets is standard practice for terraform's s3 backend, which Linode supports...kind of... While yes technically Linode supports the versioning, it doesn't support deleting the versions from the web-ui... 🤦. Alright, that's fine I've heard they
PikaPods tl;dr: PikaPods is an awesome + cost effective place to host your blog 🥳 quick side-note: first time I've seen a picture of a pika and they are so cute 😅 Uptime I've been hosting my blog on PikaPods for probably close to a month now, and I've loved it! I kept
Customizing the Casper theme So, I think I did this because I wanted to add analytics to my blog and I read somewhere that code injection could potentially be wiped out (which hasn't happened for my css modes yet). So, I forked the Casper theme GitHub (GH) repo and started making modifications to it.
BYOBin BYOBin Quick article on how to build self contained binaries for rust. This is mainly because I had to do this for a pentest recently, because the environment was a very minimal container which only had about 5 binaries in it including bash...so pretty locked down and was missing almost
vagrant Enabling clipboard support for vagrant-libvirt (vagrant-libvirt clipboard) So, I think I have mentioned how much I LOVE vagrant 😁 One of the things that I normally never do, is use the GUI of whatever VM I am using vagrant to control. Even if I am using the clipboard for vim or my web browser for my automated vagrant
containers packer build in a container...? 🛳️🤔 tl;dr: I was able to run a packer build command, for my packer-kali_linux project, inside of a Fedora toolbox container which I had installed HashiCorp's packer and qemu/kvm...and that is just the start of the inception... 🙃😅 So...I am a weird individual... 😅 my normal setup for
proxmox disaster recovery to Proxmox Just to clarify I am doing this as more of a retroactive post to show how I migrated from my xcp-ng server ( I had some weird network sh!t go down...and I honestly didn't probably need to migrate but it happened 😅 ) to proxmox. Just wanted to link to the
powershell PS for bash converts PowerShell for bash converts + pentesting goodies Note for the image... while it isn't directly correlated to the right kind of Windows, it is a peaceful picture. Normally I don't associate peacefulness with powershell, it is normally me fighting with the shell and it normally wins 🤕, so I am trying to
containers Prevent docker from using runc 🚧🚧🚧🚧 WARNING!!!! Do, NOT do this if you don't know what or why you would want to do this!!!! 🚧🚧🚧🚧🚧~~ I actually attempted this again, and everything seems be working now 😁 Checkout the update at the bottom. Feel free to read about it though 🙂 Preface... So...I don't know if I would
meta Projects This page is just a page of links, and possibly a small description/tweet talking about it, to things I am currently working on or have worked on that I want to bring attention to. Infrastructure Kali Linux automated installation GitHub Project: elreydetoda/packer-kali_linuxThis is a repository that will
networking DNS Rebind minimal bypass NOTE: this is not hacking, this is an infrastructure tip to allow public dns servers to server internal IPs tl;dr pfSense walk through & OPNsense walk through Why? So, I have used pfSense for a long time and recently have switched over to OPNsense ( mainly because of their WireGuard VPN
vagrant Vagrant-ception or ViV (Vagrant in Vagrant) Why? Jump down to the next section if you don't care why, and want to get into the details right away. 😁️ So, I run Linux as my main operating system and I enjoy using the native hypervisor stack of linux ( more info in a section below ), because I feel as
zfs (Open)ZFS tips and tricks I am still very new to zfs, but I wanted to compliment my Cool shell tricks post with zfs stuff so I don't lose commands that I like. I am not going to give more detail than a simple description, but you should always be able to post the commands
meta Analytics for this site tl;dr: here are all the analytics that get collected: https://plausible.io/blog.elreydetoda.site So, I ended up listening to a podcast episode on the changelog about a privacy respecting analytics company called Plausible, and thought I would check it out. I really like it because it is
RedOps Tracking #RedOps So, I have been following this space of red team automation for a while... and this post came out of a conversation I had with one of my co-workers about some videos I have been doing at work. So, I am going to try and keep this post up to
zfs zfs rollback script So, zfs is awesome (not going to get into that in this post)...and I love automation, so I set out to join the two together. 🙂️ I found the script below here: https://blog.woopi.org/wordpress/?p=60 elreydetoda/all-linux-tingsThis is a repo of all my configurations for different
docker random docker stuff First off if you don't understand any of the shell commands I use try and use this website to explain them: https://explainshell.com/ Docker namespace remapping Explaination So, I found this article, and it seems to have some pretty decent ideas for trying to harden docker. I was mainly
shell Featured Cool shell tricks Updated: This is an aggregation (so I don't loose them 😅️) of different shell tricks I have learned. Other resources Other resources - others Other resources - others - websites * Manipulating Strings - https://tldp.org/LDP/abs/html/string-manipulation.html Other resources - mine Other resources - mine - blogs
docker Terraforming with a whale (docker) Updated: 19 Nov 2020 tl;dr examples at the bottom: https://blog.elreydetoda.site/docker-terraform/#example-cmds Intro and Credits So, I have to thank one of my friends Mr. Jamie Bowman, because he did an initial blog post that helped me get my head around the concept of doing this.
shell curl | bad NOTE: the image for this blog post is because we are talking about something in the...shell... 😁️ I know that doing curl and directly pipe'ing into bash is considered a bad practice for security, and people discourage it. When it comes to automation though, sometimes there is no way to
networking Lost without routing Sense So, I was curious about how I could push down a static route from my pfSense router (and it looks to also work for OpnSense as well under Services --> DHCPv4) to my work vlan for another network (my work's lab network (i.e. where some machines that I have
ubuntu Ubuntu install Updated: 2020-04-24 This is a log of commands that I use for an ubuntu install that I will eventually convert into an ansible playbook, but for now I am just logging it here. DEs (Desktop Environments) * I normally use Ubuntu Mate * then install i3-gaps i3-gaps * will put my config up
vim Vim clipboard in vagrant over ssh? NOTE: if there are tools that you don't know how to use/install, and would need an explain/video on how to do it then checkout the resources for this blog at: https://elrey.casa/info I love to use vim (as my bio says, and I will link to
