PIRATESSHIELD

success story ON !!

       Usually, all DevOps trainers advise you to set up the LAB environment on cloud platforms (AWS, Azure, GCP, etc). But if you understand the technologies you can set it up easily on your super PC.   PC REQUIREMENTS : (WARNING!) Processor      :  > = i3 (10th or 11th Gen)  RAM              :  8GB (minimum) Storage          :  SSD preferred TIPS: If you using win11 or win10 and performance is very slow means use the below script. Windows 11 only:  https://github.com/builtbybel/ThisIsWin11 Windows 10 only:  https://github.com/builtbybel/bloatbox The LAB mainly depends on the docker platform. So First, start learning the basics of Docker. Docker Basics:  https://www.tutorialspoint.com/docker/index.htm KNOWLEDGE REQUIRED - Linux Knowledge (5/10) (installation of apps, editing scripts, user privileges, and troubleshooting)  - Web Development...

  What is AquaSec?      The Aqua Platform is the leading Cloud Native Application Protection Platform (CNAPP) and provides prevention, detection, and response automation across the entire application lifecycle to secure the supply chain, secure cloud infrastructure, and secure running workloads wherever they are deployed.    Solutions : Cloud Native Security Platform CSPM Cloud Security Container Security Kubernetes Security Serverless Security Cloud VM Security Dynamic Threat Analysis (DTA) Container Vulnerability Scanning Aquasec offers a 14days trial to learn the container security / Automated DevSecOps. Use this link to get free trail  Sign In | Aqua (aquasec.com)   How to start with AquaSec? Once login into the portal click the nine dots in the left-side top > Aqua Hub  Then click the "Integrations" The Integration page has a lot of options to connect your container Platform Choosing your platform provides the required key to int...

  type of source code management? local repo remote repo architecture of scm? distributed  architecture ( all users will have a local repo in their local pc  and one as centrala  repo othe n cloud (github,GitLab, bitbucket ) how to install git in Linux ? redhat/cent os /aws linx yum install git -y ubuntu : apt-get install git -y how to configure the git profile? git config --global user.name "coss" git config --global user.email "coss@gmail.com" how to create a git repository for a regular folder ? git init <-- it will create .git folder to track create/modify activity in the folder stages of git repo ? 3 stages  working area stage area local repository DB Git Status Terminology : untrack files : ( working area) to be committed (  staging area ) how to check stages? git status  how to add files from wthe orking area to staging area? git add  . or git add file1 how to commit (save) to git repo db ? git commit -m "first" how to check git repo com...

  Hi folks, here I am going to share the tools list that I am using in my daily life cycle. NMAP  Nmap (“Network Mapper”) is a free and open-source (license) utility for network discovery and security auditing. Basically, I will use it to discover the open ports and closed ports where I did Port Mapping in firewalls. We can use this in the local network as well as in the WAN network. Also with help of the NSE script, we do multiple things like vulnerability check, exploitation, etc., Ref: http://www.piratesshield.com/2017/11/nmap-network-mapper-securtiy-scanner.html CURL and WGET curl   is a tool to transfer data from or to a server, using one of the supported protocols (HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, DICT, TELNET, LDAP or FILE). Normally using this tool to analyze the website headers when my web security device blocking some dynamic content websites and to create the Application signature in IPS. Wget   using to download files directly instead...

  What is IP  Obfuscation?     Which is a method to hide or convert a doted format IP address  (e.g. 192.168.192.2)   into an Integer or Hexadecimal value or Octal form by using some mathematical formula. It’s a kind of method to spoof the human eyes and web security services. dot format to Decimal Conversion   piratesshield.com 👉  [172.67.129.3] to translate (172 x256 3 )+(67×256 2 )+(129×256 1 )+(3×256 0 ) =  2890105091 Now you can use  https://2890105091  to access piratesshield.com This is one of the ways to do IP  Obfuscation.  The tool  ‘ Cuteit ‘ is  A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command-line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. HOW TO USE CUTEIT ? Download & Install Cuteit from the below link git :   git clone https://git...

      The Telegram-Scraper tool developed in python used to fetch all information about group members. This working on Telegram API. Follow the below procedures to install the tool. Telegram API Setup Go to http://my.telegram.org and log in Click on API development tools and fill in the required fields. put app name you want & select other in platform Example : copy “api_id” & “api_hash” after clicking create an app ( will be used in setup.py ) How To Install and Use $ pkg install -y git python$ git clone https://github.com/th3unkn0n/TeleGram-Scraper.git$ cd TeleGram-Scraper Application dependencies   $ python3 setup.py -i setup configuration file ( apiID, apiHASH ) $ python3 setup.py -c To Generate User Data (You will get OTP on Telegram) $ python3 scraper.py   (  members.csv is the default if you changed the name to use it ) Send Bulk SMS To Collected Data $ python3 smsbot.py members.csv   Update Tool $ python3 setup.py -u Installation Error ...

  Since my office blocked my admin privileges to install multiple software. By this Friday I did not get any support from the Desktop team to install the 7zip software and its urgent work.  Suddenly I got an idea, "Why can't use my Python"?  he he he......... Installed on my PC! So, immediately enter into StackOverflow, searched "how to unzip using python" and got the precious codes that I pasted below. Yup ! finally unzipped the P1r@ted study document, and kept it inside my "STUDY MATERIAL" folder as a hidden file. # importing the "compressed file" module import tarfile # open file file = tarfile.open('studymaterial.tar') # uncompress file file.extractall('./folderpath') file.close()

   In this article, we going to share the KB about How to kill the issues when you managing Fortigate Firewall from our real-time experience. Troubleshooting based on firmware version  FortiOS 6 + INTERNET NOT WORKING     1)  Check the routing table in Fortigate ISP route is updated or not.      In GUI   goto  Monitor > Routing Table >  and check WAN’s static-route is available or not.                       If it is available, check IPv4 policy available for  LAN to WAN flow with NAT enabled.         If the static route is not available mean cross verify your routes written under  NETWORK > STATIC ROUTE.    if route also correct do source ping from WAN interface IP.( run the below-mentioned command as per the example) Ex:  WAN Interface IP: 122.122.122.121 | ISP Gateway IP 122.122.122.122       # ...

 I am writing the techniques based on my experience. In this globe right now below mentioned two techniques used to block the advance malicious links. SSL INSPECTION DNS sinkhole Use UDP connection SSL INSPECTION SSL inspection is a technique to decrypt all SSL/TLS connections in the perimeter device (Firewall, Web Security Device) and matching the inside web content like HTTP headers, HTML codes with the existing malware database. How to check environment using SSL INSPCTION ? load https://google.com, then click the lock icon at the top left side of the URL bar. 2. In the SSL Certificate the organization name mentioned as  “ISSUED BY” , you can ensure that SSL Inspection enabled in Firewall/WebSecurity devices. If not, you are free to use an HTTPS connection with your Malicious link. you would not get the block. DNS sinkhole Still the malicious link is blocking by firewall check the system DNS . If system DNS using local IP address/ In house DNS server, replace with Global DN...

Hello Everyone, in this article I am sharing some valuable open-source and free cybersecurity tools to use in an enterprise environment. Some tools required a license to activate advanced features. Most of the tools I personally implemented and used in medium-level business infrastructure. Which tools required Linux and little programming knowledge to handle and maintain. Because sometimes tools will get crash due to some open/known bugs. PfSense Firewall The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third-party free software packages for additional functionality. pfSense software, with the help of the package system, can provide the same functionality or more as common commercial firewalls, without any of the artificial limitations. It has successfully replaced every big-name commercial firewall you can imagine in numerous installations around the world, including Check Point, Cisco PIX, Cisco ASA,...

If in your office USB port is blocked from file transfer, even you can transfer the files to another computer on the same network. Add the below Plugin/extension to your edge of Chrome Browser.  You are required to authenticate via a Gmail account while downloading the extension. If Gmail.com, google.com/mail, and mail.google.com are blocked in your organization try to log in via account.google.com Once added open it  by load this URL chrome://apps/   Now choose the folder that contains the files. and configure the app as per the image given below. "TURN OFF"  then "TURN ON"  server once. Then share and load the IP addresses (last one is my LAN IP , run the ipconfig command in CMD to find the right IP address) mentioned in the image on your friend's laptop. you will the magic. Do not use 127.0.0.1 .

  This article is only for Beginners – A basic guide What is DNS? Being a human we can not memorize billions of IP addresses ( ex: 125.98.200.85 ). So, to make it simple DNS was introduced. DNS converts a name ( ex:piratesshield.com ) to a number ( 104.21.2.85 ). DNS has a big computerized register to maintain DNS records for each server. The Domain name service work on port 53/UDP. The latest technologies DNS over HTTPS (DOH) work on port443/TCP and DNS over TLS (DOT) works on port 853/TCP There are four types of DNS available on the Earth, Root Server Top Level Domain (TLD) server  Authoritative  DNS Recursive DNS  Authoritative  Vs  Recursive Which Domain Name server, I am storing and maintaining my own and original DNS record for my website is called the  Authoritative Name server . The  Recursive DNS Server , Which doses not aware of my website DNS record, Sends DNS queries and cached them for some time. A  Recursive  server co...

       The TeleGram-Scraper tool developed in python used to fetch all information about group members. This working on Telegram API. Follow the below procedures to install the tool. Telegram API Setup Go to http://my.telegram.org and log in Click on API development tools and fill in the required fields. put app name you want & select other in platform Example : copy "api_id" & "api_hash" after clicking create an app ( will be used in setup.py ) How To Install and Use $ pkg install -y git python $ git clone https://github.com/th3unkn0n/TeleGram-Scraper.git $ cd TeleGram-Scraper Application dependencies $ python3 setup.py -i setup configuration file ( apiID, apiHASH ) $ python3 setup.py -c To Generate User Data (You will get OTP on Telegram) $ python3 scraper.py (  members.csv is the default if you changed the name to use it ) Send Bulk SMS To Collected Data $ python3 smsbot.py members.csv Update Tool $ python3 setup.py -u ISSUES on Installation : Most...

  What is IP  Obfuscation?      Which is a method to hide or convert a doted format IP address (e.g. 192.168.192.2)  into an Integer or Hexadecimal value or Octal form by using some mathematical formula. It's a kind of method to spoof the human eyes and web-security services. dot format to Decimal Conversion piratesshield.com 👉  [172.67.129.3] to translate  (172 x256 3 )+(67x256 2 )+(129x256 1 )+(3x256 0 ) =  2890105091 Now you can use https://2890105091 to access piratesshield.com  This is one of the ways to do IP  Obfuscation.  The tool ' Cuteit ' A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command-line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. HOW TO USE CUTEIT ? Download & Install Cuteit from the below link  git : git clone https://github.com/D4Vinci/Cuteit.git Direct link...

       In this article simply explained how to install ansible in an easy way. Ansible can only run on the Linux platform. Which is not available for windows 10 but you can install on Windows's WSL for practicing. Link:   What is Ansible? Prerequisite for Ansible Linux Operating System Python 3.x.x  Run the below codes to install the global  version of Ansible Gnome Terminal [anand@linux-pc ~]:$ sudo python get-pip.py [anand@linux-pc ~]:$ sudo python -m pip install ansible If you have Python 2.x and Python 3.x both versions try the below commands avoid misconfiguration Gnome Terminal [anand@linux-pc ~]:$ sudo python3 get-pip.py [anand@linux-pc ~]:$ sudo python3 -m pip install ansible On...

  Below given codes will display the Public IP address of the site visitor or who wants to know the public IP of them.  Here I am using ipapi 's free API plan to grab the IP address and further information on Geolocation. Download Script Once you input this code below output you able to see on the webpage. We can add multiple elements by Filtering the original output of how I did in the above script.  Modify the Attributes by following the below section of code. // Setting text of element P with id ipp  $("# ipp ").html(data. ip ); $("# ipversion ").html(data. version );  $("# ccity ").html(data. city );  $("# cregion ").html(data. region );  $("# country ").html(data. country_name );  })  </script>  <center>   <h1><b><p id=" ipp " ></p></b></h1>   <h4>IP Version:<p id="ipversion" ></p></h4> ...