These instructions can be used to get the LibreNMS Docker container working with SSO (OpenID) using Authentik. It is assumed that you already have a working Authentik setup. You will need to have SSL for the LibreNMS interface and it is assumed below that LibreNMS is running on the hostname […]
Read moreThese steps can be used to crack IPMI passwords using hashcat and/or John the Ripper (John). For this guide, Metasploit will be used to connect to the IPMI interface and dump the hashes. There are a large number of IPMI interfaces that are exposed on the Internet for which the […]
Read moreUsing Traefik with Let’s Encrypt is very simple however when using Cloudflare with strict SSL mode to proxy traffic it becomes a bit more difficult. If the option is set in Cloudflare to redirect HTTP to HTTPS it also causes more problems with HTTP validation. The main issue with strict […]
Read moreI was looking for a backup solution for some personal servers; I had a few requirements in mind: Not agent based Lightweight Stores backups in a Dropbox application folder (so each server can have its own folder not accessible to the others) Encrypted storage of backups Only backup the data […]
Read moreThese are the steps for deployment of the Juniper vRR (virtual route reflector) on Proxmox VE. For those not unaware, the virtual route reflector gives you the full policy capability of JunOS for routes without the actual forwarding engine. The route reflectors can then be configured using existing configuration tools […]
Read moreAn often overlooked feature of the OpenSSH client is the ControlMaster feature. This feature allows multiple sessions to share a single TCP connection. This results in fast session startup and single sign on. There are many web pages which explain the feature in more detail which is not the point […]
Read moreDNSControl is a fantastic tool to manage DNS records, especially if there are multiple DNS zones being managed: DNS records in plain text files allowing them to be stored in a VCS of your choice Records are vendor agnostic; switch from one DNS provider to another without having to import/export […]
Read moreAfter making a change to a GitLab configuration file I ran the gitlab-ctl reconfigure command and got this error: GitLab is managing the SSL certificates from LetsEncrypt using ACME in this case. Checking the existing certificate I could see that it was working up until recently so it seems to […]
Read moreI had written a packet capture with tcpdump into a file for future analysis. The interface the capture was taken on had multiple VLAN’s trunked. When I got around to analyzing the file, I found I could read the it with no issues at all using no filter: However, the […]
Read moreOn my Linux desktop, I prefer to use KeePassXC with libsecret integration. After installing Skype and rebooting, I noticed KeePassXC secret service integration broke. One of the dependencies pulled in with Skype is gnome-keyring. When I checked in KeePassXC, the secret service integration page shows that another service is running […]
Read more