Archive for August, 2020

Introduction to SELinux – How it works?

https://milestone-of-se.nesuke.com/en/sv-advanced/selinux/selinux-summary/

200K rules in SELINUX!!!

https://web.mit.edu/rhel-doc/5/RHEL-5-manual/Deployment_Guide-en-US/ch-selinux.html

https://www.ni.com/en-sg/support/documentation/supplemental/15/selinux—addressing-access-control-security-in-labview-rio-devi.html

https://www.computernetworkingnotes.com/rhce-study-guide/selinux-explained-with-examples-in-easy-language.html

https://www.debian.org/doc/manuals/debian-handbook/sect.selinux.vi.html

https://www.ibm.com/developerworks/library/l-secure-linux-ru/


http://aerostitch.github.io/linux_and_unix/RedHat/selinux.html


http://people.redhat.com/rsawhill/selinux/


https://linoxide.com/linux-command/use-semanage-command-selinux-policy/


https://www.redhat.com/sysadmin/semanage-keep-selinux-enforcing


https://www.tutorialspoint.com/unix_commands/semanage.htm

Attack and Defend: Linux Privilege Escalation Techniques of 2016

https://pen-testing.sans.org/resources/papers/gcih/attack-defend-linux-privilege-escalation-techniques-2016-152744

https://www.beyondtrust.com/blog/entry/how-a-linux-attacker-can-escalate-from-low-level-privileges-to-root

https://medium.com/schkn/linux-privilege-escalation-using-text-editors-and-files-part-1-a8373396708d

https://payatu.com/guide-linux-privilege-escalation

https://book.hacktricks.xyz/linux-unix/privilege-escalation

https://resources.infosecinstitute.com/privilege-escalation-linux-live-examples/

https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_-_linux.html

https://pen-testing.sans.org/resources/papers/gcih/attack-defend-linux-privilege-escalation-techniques-2016-152744

https://percussiveelbow.github.io/linux-privesc/

https://pentestlab.blog/category/privilege-escalation/

https://github.com/frizb/Linux-Privilege-Escalation

https://blog.pentesteracademy.com/breaking-out-of-a-restricted-shell-linux-privilege-escalation-3fb2700cb85e

https://myexperiments.io/linux-privilege-escalation.html

https://vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/privesc-linux

https://www.hackingarticles.in/linux-privilege-escalation-using-path-variable/

https://www.hackingarticles.in/linux-privilege-escalation-using-suid-binaries/

https://guif.re/linuxeop

https://docs.ansible.com/ansible/latest/user_guide/become.html

https://security.stackexchange.com/questions/222795/how-to-do-a-privileges-escalation-with-ping

https://packetstormsecurity.com/files/155498/Bash-5.0-Patch-11-Privilege-Escalation.html

https://www.offensive-security.com/metasploit-unleashed/privilege-escalation/

REST Api understanding and hacking: https://api.github.com/

REST API hacking? https://docs.github.com/en/rest/reference/git

First go to: https://api.github.com/users/tthtlc/followers

And I can get a snapshot all my followers and details. WOW…

Then how about another developer’s followers:

https://api.github.com/users/vlordier/followers

Selection_939

And generically what are all the API that github.com provides?

Pointing your browser to https://api.github.com/:Selection_941

Or shown as text below:

"current_user_url": "https://api.github.com/user",
"current_user_authorizations_html_url": "https://github.com/settings/connections/applications{/client_id}",
"authorizations_url": "https://api.github.com/authorizations",
"code_search_url": "https://api.github.com/search/code?q={query}{&page,per_page,sort,order}",
"commit_search_url": "https://api.github.com/search/commits?q={query}{&page,per_page,sort,order}",
"emails_url": "https://api.github.com/user/emails",
"emojis_url": "https://api.github.com/emojis",
"events_url": "https://api.github.com/events",
"feeds_url": "https://api.github.com/feeds",
"followers_url": "https://api.github.com/user/followers",
"following_url": "https://api.github.com/user/following{/target}",
"gists_url": "https://api.github.com/gists{/gist_id}",
"hub_url": "https://api.github.com/hub",
"issue_search_url": "https://api.github.com/search/issues?q={query}{&page,per_page,sort,order}",
"issues_url": "https://api.github.com/issues",
"keys_url": "https://api.github.com/user/keys",
"label_search_url": "https://api.github.com/search/labels?q={query}&repository_id={repository_id}{&page,per_page}",
"notifications_url": "https://api.github.com/notifications",
"organization_url": "https://api.github.com/orgs/{org}",
"organization_repositories_url": "https://api.github.com/orgs/{org}/repos{?type,page,per_page,sort}",
"organization_teams_url": "https://api.github.com/orgs/{org}/teams",
"public_gists_url": "https://api.github.com/gists/public",
"rate_limit_url": "https://api.github.com/rate_limit",
"repository_url": "https://api.github.com/repos/{owner}/{repo}",
"repository_search_url": "https://api.github.com/search/repositories?q={query}{&page,per_page,sort,order}",
"current_user_repositories_url": "https://api.github.com/user/repos{?type,page,per_page,sort}",
"starred_url": "https://api.github.com/user/starred{/owner}{/repo}",
"starred_gists_url": "https://api.github.com/gists/starred",
"user_url": "https://api.github.com/users/{user}",
"user_organizations_url": "https://api.github.com/user/orgs",
"user_repositories_url": "https://api.github.com/users/{user}/repos{?type,page,per_page,sort}",
"user_search_url": "https://api.github.com/search/users?q={query}{&page,per_page,sort,order}"

and the link https://api.github.com/users/tthtlc/followers is just alisted among the URL above.

Nested Virtualization and How it Work?

Complete setup procedures:

https://stafwag.github.io/blog/blog/2018/06/04/nested-virtualization-in-kvm/

And its internals explained here:

https://hhb584520.github.io/kvm_blog/files/virt_others/NestedVirtualization.pdf

L0, L1 and L2 are explained inside:

https://www.kernel.org/doc/Documentation/virtual/kvm/nested-vmx.txt

Single-level virtualization has two levels – the host (KVM) and the guests.
In nested virtualization, we have three levels: The host (KVM), which we call
L0, the guest hypervisor, which we call L1, and its nested guest, which we
call L2.

And for VMCS you also have VMCS12:

and others like VMCS01, VMCS02 etc.

https://stackoverflow.com/questions/43942033/nested-virtualization-with-kvm-enable-kvm-in-qemu-in-nested-virtualization

To cater for the page table of the guest, we have “Extended Page Table”:

https://www.cse.iitb.ac.in/~cs695/notes/hwvirt.html

https://www.linux-kvm.org/page/Memory

https://royhunter.github.io/2014/06/18/KVM-EPT/

http://developer.amd.com/wordpress/media/2012/10/NPT-WP-1%201-final-TM.pdf

https://dl.acm.org/doi/10.1145/2676723.2677254

https://www.cse.iitk.ac.in/users/biswap/CS698E/memvirt.pdf

More references:

https://hhb584520.github.io/kvm_blog/files/virt_others/NestedVirtualization.pdf

https://stafwag.github.io/blog/blog/2018/06/04/nested-virtualization-in-kvm/
https://chhanz.github.io/linux/2019/12/30/enable-kvm-nested-virtualization/
https://kartikgopalan.github.io/publications/gopalan17multi.pdf
https://sdhuang32.github.io/enable-nested-virtualization-on-qts/
https://opengers.github.io/virtualization/kvm-nested-virtualization/
https://kartikgopalan.github.io/publications/bagdi17hyperfresh.pdf
https://kartikgopalan.github.io/publications/doddamani19fast.pdf
https://icicimov.github.io/blog/virtualization/Proxmox-clustering-and-nested-virtualization/
https://oscarlab.github.io/papers/jos-vm.pdf
https://kartikgopalan.github.io/publications/williams16enabling.pdf
https://oscarlab.github.io/papers/KavitaAgarwalMSThesisSubmission.pdf
https://martinpitt.github.io/cockpit-project.github.io/guide/latest/feature-virtualmachines.html
https://kartikgopalan.github.io/publications/gopalan17multi_slides.pdf
https://godleon.github.io/blog/KVM/QEMU-KVM-In-CentOS7-GettingStart/
https://hhb584520.github.io/kvm_blog/files/virt_mem/kvm-overview.pdf
https://juniper.github.io/contrail-windows-docs/Quick_start/hypervisors_configuration/
https://projectacrn.github.io/latest/tutorials/acrn_on_qemu.html
https://dshcherb.github.io/2017/12/04/qemu-kvm-virtual-machines-in-unprivileged-lxd.html
https://royhunter.github.io/2014/07/05/KVM-Introduce/
https://flyinggreenfrog.github.io/knowledgebase/virtualization.html
https://iranzo.github.io/blog/2015/07/17/rhev-m-with-nested-vm-for-osp/
https://hungpt7.github.io/en/note%20(124).html
https://stefano-garzarella.github.io/
https://elatov.github.io/2014/05/rhcsa-rhce-chapter-22-virtualization-with-kvm/
https://avdv.github.io/libvirt/formatdomain.html
https://royhunter.github.io/2020/07/12/index/
https://terenceli.github.io/%E6%8A%80%E6%9C%AF/2019/03/24/kvm-async-page-fault
https://kartikgopalan.github.io/publications/directvisor_vee.pdf
https://terenceli.github.io/%E6%8A%80%E6%9C%AF/2020/04/18/vsock-internals
https://asamy.github.io/ksm/
http://putztzu.github.io/opensuse_translate/doc.opensuse.org/documentation/htmlsingle/openSUSE/opensuse-kvm.html
https://opengers.github.io/categories/
https://xiaoxubeii.github.io/articles/aws-firecracker/
https://hungpt7.github.io/en/note%20(2298).html
https://sugeul.github.io/2020-06-21-MacOS-on-WSL2/
https://gzs715.github.io/pubs/VMOCITY_SRDS16.pdf
http://remimin.github.io/2018/09/10/kvm-vmx/
http://finallyjustice.github.io/xen-arch.pdf
https://ciao-project.github.io/kubicle.html

Learning about DPDK: IoT, Linux networking, NFV, VM virtualization

https://blog.selectel.com/introduction-dpdk-architecture-principles/

https://www.dpdk.org/wp-content/uploads/sites/35/2017/04/DPDK-India2017-RamiaJain-ArchitectureRoadmap.pdf

DPDK (Data Plane Development Kit) for Linux VMs now generally available

https://azure.microsoft.com/en-in/blog/dpdk-data-plane-development-kit-for-linux-vms-now-generally-available/

Design of high performance Automotive Network simulators — DPDK approach

https://medium.com/@revanursrinivas/design-of-high-performance-automotive-network-simulators-dpdk-approach-407c02a9e141

https://doc.dpdk.org/guides/prog_guide/kernel_nic_interface.html

https://doc.dpdk.org/guides/prog_guide/bpf_lib.html

https://doc.dpdk.org/guides/prog_guide/overview.html

https://doc.dpdk.org/guides/prog_guide/mempool_lib.html#mempool-library

https://doc.dpdk.org/guides/prog_guide/mbuf_lib.html#

https://doc.dpdk.org/guides/prog_guide/poll_mode_drv.html

https://doc.dpdk.org/guides/prog_guide/rte_flow.html

Vickblöm

Research scattered with thoughts, ideas, and dreams

Penetration Testing Lab

Offensive Techniques & Methodologies

Astr0baby's not so random thoughts _____ rand() % 100;

@astr0baby on Twitter for fresh randomness

The Data Explorer

playing around with open data to learn some cool stuff about data analysis and the world

Conorsblog

Data | ML | NLP | Python | R

quyv

Just a thought

IFT6266 - H2017 Deep Learning

A Graduate Course Offered at Université de Montréal

Deep Learning IFT6266-H2017 UdeM

Philippe Paradis - My solutions to the image inpainting problem

IFT6266 – H2017 DEEP LEARNING

Pulkit's thoughts on the course project

Thomas Dinsmore's Blog

No man but a blockhead ever wrote except for money -- Samuel Johnson

the morning paper

a random walk through Computer Science research, by Adrian Colyer

The Spectator

Shakir's Machine Learning Blog