anto.online

Goodbye WordPress: Why I Moved My Blog to a Static Site That AI Can Maintain

Sun, 15 Nov 2026 12:00:00 +1100

Since 2018, anto.online ran on WordPress. It did the job, but it also came with a job of its own: updating WordPress, updating plugins, updating the theme, keeping an eye on the database, and wondering whether this week’s plugin update would be the one that broke something or let someone in.

I’m a director at an enterprise software company and I’m busy 12 hours a day. I don’t have time to babysit a CMS. So I asked myself a simple question: if AI is going to help me run this site, what kind of site is AI actually good at running?

Say hello

Sun, 15 Nov 2026 09:00:00 +1100

Found a technical issue, a typo, or just want to say hi? I’d love to hear from you.

The best way to reach me is on LinkedIn: connect with me or send me a message.

If you’re reporting a problem with a guide, include the page title and what went wrong, and I’ll fix it and add a short corrections note to the post.

Cloudflare for Websites: A Comprehensive Guide

Fri, 08 Aug 2025 05:55:07 +1000

In today’s fast-paced digital world, having a website that is fast, secure, and always available is crucial for maintaining a strong online presence. Cloudflare provides a powerful suite of tools to help you achieve these goals, offering both content delivery network (CDN) services and robust security protections. For developers, designers, and tech-savvy users, understanding how to leverage Cloudflare’s full potential can significantly improve your website’s performance and safeguard it against cyber threats. This comprehensive guide will walk you through everything you need to know about Cloudflare, from setup and best practices to testing and continuous improvement.

MalCare Plugin for WordPress: A Security Implementation Guide for Developers and Site Owners

Thu, 07 Aug 2025 06:04:35 +1000

WordPress is a flexible and widely used CMS, but its popularity also makes it a high-value target for attackers. Whether you’re managing a business website, building client projects, or operating a content-heavy platform, securing your WordPress installation should be a top priority.

The MalCare Security plugin offers developers and tech-savvy users an efficient way to protect WordPress sites against malware, brute-force attacks, and plugin vulnerabilities. Unlike traditional security plugins that scan on the server and potentially slow down your site, MalCare performs scans on its own cloud infrastructure. This not only offloads the load but also increases the depth and accuracy of threat detection.

Accessibility Compliance (WCAG 2.1/2.2 AA): A Technical Brief

Wed, 06 Aug 2025 06:16:38 +1000

You’re a developer, architect, or engineer. You already know compliance isn’t about marketing fluff - it’s about meeting a standard that’s precise, testable, and enforceable. Here’s your deep dive on building and maintaining web assets that conform to WCAG at the AA level.

What Is WCAG AA?

WCAG (Web Content Accessibility Guidelines) is a W3C specification structured in Principles → Guidelines → Success Criteria (SC). AA is the mid-tier conformance level that’s referenced in accessibility laws, procurement contracts, and technical requirements.

Fixing Apt Update Issues Due to Unreachable Proxy on Ubuntu

Tue, 01 Jul 2025 06:26:31 +1000

If you’re anything like me - always tinkering, optimizing, and confidently declaring “I’ve got this” - chances are you once set up a local proxy like apt-cacher-ng to speed up updates. However, encountering an apt update proxy error on Ubuntu can sometimes put a dent in that efficiency. At the time, it felt brilliant. Blazing fast. Efficient. A true sysadmin masterstroke.

But eventually, it led to the dreaded apt update proxy error and some classic Ubuntu headaches.

Setup Greenbone Community Edition with Docker Compose

Sat, 17 Aug 2024 22:39:47 +1000

Greenbone Community Edition (GCE) is an open-source platform for managing and scanning network vulnerabilities. This guide assumes you have Docker and Docker Compose installed and are familiar with using Docker. If you haven’t set these up, please follow the official Docker and Docker Compose installation guides.

What is Greenbone Community Edition?

Greenbone Community Edition (GCE) is a comprehensive open-source vulnerability management solution. It integrates various tools, including the well-known OpenVAS (Open Vulnerability Assessment Scanner), to provide thorough vulnerability detection, management, and reporting capabilities. OpenVAS is the scanning engine, allowing GCE to identify potential security threats across networks and systems.

Guide to Setting Up and Running Tenable Nessus Essentials in Docker

Fri, 16 Aug 2024 19:51:54 +1000

Tenable Nessus Essentials is a popular tool for vulnerability scanning and management, and running it in Docker provides a streamlined and isolated environment. This guide will walk you through setting up the Nessus Essentials Docker image, obtaining an activation code, and performing a basic network scan.

About Nessus

Nessus is a widely used vulnerability assessment tool developed by Tenable. It is designed to help security professionals identify network vulnerabilities, misconfigurations, and compliance issues. Nessus is known for its extensive vulnerability database, customizable scanning capabilities, and detailed reporting features.

ProxySQL Configuration and Management Cheat Sheet

Wed, 24 Jul 2024 22:52:35 +1000

This cheat sheet provides tips for setting up and managing ProxySQL for database connections. ProxySQL is a high-performance MySQL proxy that provides connection pooling, load balancing, query routing, and caching functionalities.

Connection and Ports

Admin Interface: 6032
MySQL Default Port: 3306
MySQL Interface via ProxySQL: 6033

Connecting to ProxySQL Admin Interface

mysql -uadmin -padmin -h127.0.0.1 -P6032

General Configuration Settings

Set Connection Reuse

To enable connection reuse, use the following commands:

UPDATE global_variables SET variable_value='1' WHERE variable_name='mysql-connection_reuse';
LOAD MYSQL VARIABLES TO RUNTIME;
SAVE MYSQL VARIABLES TO DISK;

Set Max Connections

Configure the maximum number of connections ProxySQL will open to the backend database:

Delete Files from S3 Quickly with Python (asyncio)

Tue, 23 Jul 2024 19:49:09 +1000

Managing large amounts of data on AWS S3 can be challenging, especially when you need to delete massive files quickly. In my scenario, I had 13 TB of files to delete and needed to speed up the process. Python, along with the asyncio library, provided an efficient solution. Here’s a guide on how to leverage Python and asyncio to delete files from S3 quickly.

What is Python?

Python is a high-level, interpreted programming language known for its readability and versatility. It supports multiple programming paradigms, including procedural, object-oriented, and functional programming. Python’s extensive standard and community-driven libraries make it popular for various applications, from web development to data science and automation.

Unveiling Network Weaknesses: Penetration Testing vs. the Cyber Kill Chain

Mon, 24 Jun 2024 19:54:24 +1000

Imagine a red team simulating a cyberattack, meticulously probing your defences. Now, picture a framework dissecting the attacker’s every move. Both serve as valuable tools in your cybersecurity arsenal: penetration testing methodology and the Cyber Kill Chain (CKC).

Penetration Testing Methodology

Penetration testing, or pentesting, involves systematically assaulting a system or network to identify and exploit vulnerabilities. It mimics real-world attacks through various phases:

Reconnaissance & Information Gathering

The pentester gathers intel about the target, including infrastructure, employees, and security measures. Techniques range from passive information gathering (e.g., public records) to active probing (e.g., network scanning).

Prioritize Security Threats Effectively with CVSS (Common Vulnerability Scoring System)

Mon, 24 Jun 2024 19:37:21 +1000

The Forum of Incident Response and Security Teams (FIRST) developed the Common Vulnerability Scoring System (CVSS) to rate the severity of security vulnerabilities in software systems. Specifically, CVSS assigns a numerical score to each vulnerability, reflecting its severity. Consequently, this score empowers organizations to prioritize their response and remediation efforts effectively.

Why CVSS Matters

Today’s digital landscape exposes organizations to a growing number of cybersecurity threats. Software vulnerabilities can be exploited by attackers, leading to data breaches, system outages, and other security incidents. CVSS helps organizations assess the potential impact of these vulnerabilities and allocate resources effectively, allowing them to address the most critical issues first.

How to Defend Against Cyber Attacks Using MITRE ATT&CK

Mon, 24 Jun 2024 02:24:33 +1000

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a comprehensive framework that outlines various phases of threat actors’ attack lifecycles and their target platforms. This framework categorises malicious cyberattacks and provides specific strategies for defending against them. This guide will help you understand MITRE ATT&CK.

Structure of MITRE ATT&CK

The ATT&CK framework consists of tactics and techniques and their documented usage. Tactics refer to an attack’s short-term, premeditated objectives, while techniques describe the methods used to achieve these objectives.

Understanding OWASP: An Essential Guide for Developers

Sun, 23 Jun 2024 21:01:05 +1000

Building secure software is no longer optional. In today’s digital world, attackers primarily target web applications. The Open Web Application Security Project (OWASP) equips developers with essential resources to combat these threats.

What is OWASP?

OWASP is a non-profit organization dedicated to improving software security. It provides numerous free, open-source resources, including tools for identifying and fixing vulnerabilities in code, detailed documentation on various security topics, and forums for connecting with a global community of security professionals.

Building Trust with Cybersecurity Frameworks

Sun, 23 Jun 2024 20:29:29 +1000

Cybersecurity frameworks provide a common language for security professionals to assess their organization’s and vendors’ security postures. Following a framework, you can define clear processes to identify, monitor, and reduce cybersecurity risks.

Popular Cybersecurity Frameworks

NIST Cybersecurity Framework (CSF) 2.0

The NIST Cybersecurity Framework (CSF) 2.0 is a comprehensive framework that offers a structured approach to cybersecurity risk management. It includes six core functions:

Identify
Protect
Detect
Respond
Recover
Govern

NIST CSF 2.0 also provides valuable resources to help organizations get started, such as quick-start guides and success stories from organizations that have successfully implemented the framework.

Cloud 101: Understanding Key Cybersecurity Terms

Sat, 22 Jun 2024 21:02:00 +1000

Many cybersecurity terms can be confusing, but understanding them is essential for protecting yourself and your data in the cloud. This Cloud 101 guide will break down some key cybersecurity terms you’ll encounter and explain what they mean in the context of cloud security.

Attack Surface

Definition: The collective term for all possible entry points, vulnerabilities, and exploits that an attacker can use to compromise a system or network. Example: Open ports, unsecured APIs, and weak passwords.

HTTP Methods Cheat Sheet

Fri, 03 May 2024 22:27:29 +1000

This cheat sheet offers a detailed guide to commonly used HTTP methods, covering their functions, use cases, status codes, headers, payloads, authentication, and more. It serves as a helpful reference for both new and experienced developers, simplifying HTTP methods to enhance the development of robust, efficient web applications.

Here’s a quick reference for the commonly used HTTP methods:

GET

Description: Retrieve data from the server.
Example: Fetching a webpage, retrieving user information, querying for products.
Supports Query Strings: Yes
Expects Request Body: No
Safe: Yes (Does not modify resources on the server)
Idempotent: Yes (Multiple identical requests have the same effect as a single request)
Typical Success Status Code: 200 OK
Request Headers: Common headers: Accept, Authorization
Response Headers: Common headers: Content-Type
Request Payload Format: N/A
Response Body Format: Depends on the resource being retrieved
Authentication: May require authentication for protected resources
CORS: Typically allowed for public resources
Common Use Cases: Retrieving data, displaying information on webpages

POST

Description: Submit data to the server to create a new resource.
Example: Submitting a form, creating a new record in a database, adding a comment to a blog post.
Supports Query Strings: Yes
Expects Request Body: Yes
Safe: No (May cause changes on the server)
Idempotent: No (Multiple identical requests may result in different outcomes)
Typical Success Status Code: 201 Created
Request Headers: Common headers: Content-Type, Authorization
Response Headers: Common headers: Location, Content-Type
Request Payload Format: JSON, form-data, XML, etc.
Response Body Format: Typically JSON or XML
Authentication: Often required for creating new resources
CORS: May require preflight requests for non-simple requests
Common Use Cases: Form submissions, creating new records

PUT

Description: Update an existing resource on the server.
Example: Updating user information, uploading a file, replacing a resource.
Supports Query Strings: Yes
Expects Request Body: Yes
Safe: No
Idempotent: Yes (Repeated PUT requests have the same effect as a single request)
Typical Success Status Code: 200 OK
Request Headers: Common headers: Content-Type, Authorization
Response Headers: Common headers: Content-Type
Request Payload Format: JSON, XML, etc.
Response Body Format: Depends on the resource being updated
Authentication: Often required for updating resources
CORS: May require preflight requests for non-simple requests
Common Use Cases: Updating user profiles, replacing files

PATCH

Description: Partially update an existing resource on the server.
Example: Updating only specific user profile fields, modifying product attributes.
Supports Query Strings: Yes
Expects Request Body: Yes
Safe: No
Idempotent: No
Typical Success Status Code: 200 OK
Request Headers: Common headers: Content-Type, Authorization
Response Headers: Common headers: Content-Type
Request Payload Format: JSON, XML, etc.
Response Body Format: Depends on the resource being updated
Authentication: Often required for updating resources
CORS: May require preflight requests for non-simple requests
Common Use Cases: Partial updates to user profiles, modifying specific attributes

DELETE

Description: Remove a resource from the server.
Example: Deleting a user account, removing a file, cancelling a reservation.
Supports Query Strings: Yes
Expects Request Body: No
Safe: No
Idempotent: Yes (Multiple identical requests have the same effect as a single request)
Typical Success Status Code: 204 No Content
Request Headers: Common headers: Authorization
Response Headers: N/A (Often minimal or empty response)
Request Payload Format: N/A
Response Body Format: N/A
Authentication: Often required for deleting resources
CORS: May require preflight requests for non-simple requests
Common Use Cases: Removing records, cancelling subscriptions

OPTIONS

Description: Retrieve the supported HTTP methods for a resource.
Example: Checking allowed methods for a resource.
Supports Query Strings: Yes
Expects Request Body: No
Safe: Yes
Idempotent: Yes
Typical Success Status Code: 200 OK
Request Headers: Common headers: N/A
Response Headers: Common headers: Allow
Request Payload Format: N/A
Response Body Format: Depends on the server configuration
Authentication: Typically does not require authentication
CORS: Generally allowed for public resources
Common Use Cases: Checking supported methods for a resource

HEAD

Description: Retrieve the headers for a resource without the body.
Example: Checking if a resource has been modified since a certain date.
Supports Query Strings: Yes
Expects Request Body: No
Safe: Yes
Idempotent: Yes
Typical Success Status Code: 200 OK
Request Headers: Common headers: N/A
Response Headers: Headers corresponding to the requested resource
Request Payload Format: N/A
Response Body Format: N/A (Response body is typically empty)
Authentication: Typically does not require authentication
CORS: Generally allowed for public resources
Common Use Cases: Checking resource metadata, caching control

TRACE

Description: Echoes back the received request for diagnostic purposes.
Example: Testing or debugging purposes.
Supports Query Strings: Yes
Expects Request Body: No
Safe: Yes
Idempotent: Yes
Typical Success Status Code: 200 OK
Request Headers: Common headers: N/A
Response Headers: Headers echoing back the request headers
Request Payload Format: N/A
Response Body Format: Depends on the request headers being echoed back
Authentication: Typically does not require authentication
CORS: Generally allowed for debugging purposes
Common Use Cases: Debugging network requests, diagnosing issues

CONNECT

Description: Establish a tunnel to the server for secure communication.
Example: Used by proxies to establish a secure connection.
Supports Query Strings: No
Expects Request Body: No
Safe: No
Idempotent: No
Typical Success Status Code: 200 OK
Request Headers: Common headers: N/A
Response Headers: Headers indicating the success or failure of the tunnel establishment
Request Payload Format: N/A
Response Body Format: N/A
Authentication: Typically does not require authentication
CORS: Not applicable
Common Use Cases: Establishing secure connections for proxies

Wrapping Up

HTTP methods are crucial for client-server communication in web development, allowing developers to build user-friendly, efficient, and secure APIs. This cheat sheet covers common HTTP methods like GET, POST, PUT, PATCH, and DELETE, equipping developers with the tools for successful web development. This guide helps confidently address modern web development challenges and enhance user experiences.

A Guide to Ethical Footprinting in CyberSecurity

Sun, 21 Apr 2024 23:25:38 +1000

Footprinting, or reconnaissance, is a critical preliminary phase in cybersecurity in which security professionals gather and analyze information about a target system. This process enables them to understand potential vulnerabilities and threats in a network or system architecture.

Security professionals conduct ethical footprinting with the system owner’s permission to strengthen the security posture rather than exploit it. This guide outlines a structured approach to conducting an ethical footprinting assessment, ensuring they perform all activities legally and effectively.

How to Install Docker, Docker-Compose, and Portainer on Kali Linux

Sun, 21 Apr 2024 21:48:58 +1000

This step-by-step guide will teach you how to install Docker, Docker-Compose, and Portainer on a Kali Linux system. Docker is a powerful platform for developing, shipping, and running container applications. Docker Compose facilitates the management of multi-container Docker applications, while Portainer offers a user-friendly interface for managing your Docker environments. This setup is ideal for developers and testers who require a flexible yet manageable container ecosystem.

Prerequisites

Before beginning this tutorial, ensure your system meets the following requirements:

sqlmap Command-Line Cheat Sheet

Sat, 20 Apr 2024 22:35:15 +1000

This cheat sheet references some of the most commonly used sqlmap commands. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through sqlmap, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install sqlmap`
CentOS/Fedora/Red Hat	`sudo yum install sqlmap`
NixOS	`nix-env -iA nixos.sqlmap`

Usage

Task	Command
Basic SQL injection test	sqlmap -u http://example.com

sqlmap Command Switches

Switch	Description
`--url` or `-u`	Target URL to scan for SQL injection vulnerabilities.
`--data`	Retrieve the DBMS banner (version and other details).
`--cookie`	Use specified HTTP Cookie header value for the requests.
`--dbs`	Enumerate DBMS databases on the target.
`--tables`	Enumerate DBMS database tables from a specific database.
`--dump`	Dump the contents of a database table.
`--os-shell`	Prompt for an interactive operating system shell.
`--batch`	Never ask for user input, use default behavior.
`--banner`	Use the Tor anonymity network to make all HTTP requests.
`--tor`	Retrieve DBMS’s current user.
`--proxy`	Use a proxy to connect to the target URL.
`--random-agent`	Use a randomly selected HTTP User-Agent header value.
`--is-dba`	Detect whether the DBMS current user is DBA (Database Admin).
`--technique`	SQL injection techniques to use (e.g., B for Boolean-based).
`--threads`	Number of concurrent HTTP(s) requests.
`--level`	Level of tests to perform (1-5, default 1).
`--risk`	Risk of tests to perform (1-3, default 1).
`--current-user`	Retrieve DBMS’s current database.
`--current-db`	Dump all databases’ table entries.
`--count`	Retrieve the number of entries for tables.
`--dump-all`	Use the given script(s) for tampering injection data.
`--sql-shell`	Prompt for an interactive SQL shell.
`--sql-query`	Execute the given SQL statement against the database.
`--tamper`	Use given script(s) for tampering injection data.

Wrapping Up

This sqlmap cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering sqlmap can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

dirsearch Command-Line Cheat Sheet

Fri, 19 Apr 2024 03:53:34 +1000

This cheat sheet references some of the most commonly used dirsearch commands. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through dirsearch, you’ll find valuable insights and shortcuts here.

Installation

Clone dirsearch by using the following command:

git clone https://github.com/maurosoria/dirsearch.git --depth 1

dirsearch Cheat Sheet Commands

Task	Command
Basic scan	`dirsearch -u http://example.com`
Scan with specific extensions	`dirsearch -u http://example.com -e php,html,js`
Use a custom wordlist	`dirsearch -u http://example.com -w /path/to/wordlist.txt`
Recursive scan	`dirsearch -u http://example.com -r`
Save output to a file	`dirsearch -u http://example.com -o /path/to/output.txt`

Example output:

gobuster Command-Line Cheat Sheet

Fri, 19 Apr 2024 03:28:52 +1000

This cheat sheet references some of the most commonly used gobuster commands. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of web enumeration through Gobuster, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install gobuster`
CentOS/Fedora/RHEL	`sudo dnf install gobuster`
NixOs	`nix-env -iA nixos.gobuster`

gobuster Cheat Sheet Commands

Task	Command
Directory/File Enumeration	`gobuster dir -u <URL> -w <wordlist>`
DNS Subdomain Enumeration	`gobuster dns -d <domain> -w <wordlist>`
Virtual Host Discovery	`gobuster vhost -u <URL> -w <wordlist>`
HTTP Header Enumeration	`gobuster headers -u <URL> -w <wordlist>`
SSL Certificate Enumeration	`gobuster cert -u <URL> -w <wordlist>`

Example Output:

dirb Command-Line Cheat Sheet

Thu, 18 Apr 2024 22:20:30 +1000

This cheat sheet references some of the most commonly used dirb commands. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through dirb, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt install dirb`
CentOS/Fedora/Red Hat	`sudo yum install dirb`
NixOS	`nix-env -iA nixos.dirb`

dirb Cheat Sheet Commands

Task	Command
Basic scan	`dirb http://example.com`
Scan with wordlist	`dirb http://example.com /usr/share/dirb/wordlists/common.txt`
Ignore errors	`dirb http://example.com -S`
Use custom port	`dirb http://example.com -p 8080`

Example output:

ipcalc Command-Line Cheat Sheet

Thu, 18 Apr 2024 22:03:31 +1000

This cheat sheet references some of the most commonly used ipcalc commands. Whether you’re a seasoned professional looking to improve your command-line skills or a newcomer eager to explore networking possibilities through ipcalc, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt-get install ipcalc`
CentOS/Fedora/Red Hat	`sudo yum install ipcalc` or `sudo dnf install ipcalc`
NixOs	`nix-env -iA nixos.ipcalc`

ipcalc Cheat Sheet Commands:

Command	Description
`ipcalc 192.168.0.1/24`	Similar to the above, but for a `/17` subnet (`255.255.128.0`), covering a larger network.
`ipcalc 192.168.0.1/255.255.128.0`	Similar to the above but for a `/17` subnet (`255.255.128.0`), covering a larger network.
`ipcalc 192.168.0.1 255.255.128.0 255.255.192.0`	This computes the network details for `192.168.0.1` with subnet masks `255.255.128.0` and further refines with `255.255.192.0`.
`ipcalc 192.168.0.1 0.0.63.255`	This provides network information for using a wildcard mask 0.0.63.255, used in ACLs on Cisco routers.
`ipcalc <ADDRESS1> - <ADDRESS2> deaggregate`	Deaggregates a range of IP addresses into smaller network segments for detailed management.
`ipcalc <ADDRESS>/<NETMASK> --s a b c`	Splits the specified network into subnets for `a`, `b`, `c` hosts, aiding in network segmentation.

Example output:

Nikto Command-Line Cheat Sheet

Thu, 18 Apr 2024 19:47:21 +1000

This cheat sheet references some of the most commonly used Nikto commands. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Nikto, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt-get install nikto`
CentOS/Fedora/Red Hat	`sudo yum install nikto`
NixOS	`nix-env -i nikto`

Usage:

Task	Command
Basic Scan	nikto -h
Scan with SSL	nikto -h -ssl
Scan on specific port	`nikto -h <host> -p <port>`
Save scan report	nikto -h -o
Use specific tuning options	nikto -h -Tuning
Scan specific target IPs while ignoring some 404 codes	`nikto -h targetIP.txt -Tuning 5 -404code 302,301,404`

Example output:

HTTP Status Code Cheat Sheet

Tue, 16 Apr 2024 20:45:17 +1000

To further explore and understand HTTP status codes practically, consider using https://httpstat.us/. This tool provides a simple and accessible way to simulate any HTTP status code for testing and educational purposes.

1xx: Informational Responses

Code	Name
100	Continue
101	Switching Protocols
102	Processing
103	Early Hints

2xx: Successful Responses

Code	Name
200	OK
201	Created
202	Accepted
203	Non-Authoritative Information
204	No Content
205	Reset Content
206	Partial Content
207	Multi-Status
208	Already Reported
226	IM Used

3xx: Redirection Responses

Code	Name
300	Multiple Choices
301	Moved Permanently
302	Found
303	See Other
304	Not Modified
305	Use Proxy
306	(Unused)
307	Temporary Redirect
308	Permanent Redirect

4xx: Client Error Responses

Code	Name
400	Bad Request
401	Unauthorized
402	Payment Required
403	Forbidden
404	Not Found
405	Method Not Allowed
406	Not Acceptable
407	Proxy Authentication Required
408	Request Timeout
409	Conflict
410	Gone
411	Length Required
412	Precondition Failed
413	Payload Too Large
414	URI Too Long
415	Unsupported Media Type
416	Range Not Satisfiable
417	Expectation Failed
418	I’m a Teapot (Informal)
421	Misdirected Request
422	Unprocessable Entity
423	Locked
424	Failed Dependency
425	Too Early
426	Upgrade Required
428	Precondition Required
429	Too Many Requests
431	Request Header Fields Too Large
451	Unavailable For Legal Reasons

5xx: Server Error Responses

Code	Name
500	Internal Server Error
501	Not Implemented
502	Bad Gateway
503	Service Unavailable
504	Gateway Timeout
505	HTTP Version Not Supported
506	Variant Also Negotiates
507	Insufficient Storage
508	Loop Detected
510	Not Extended
511	Network Authentication Required

References

W3C - Status Codes in HTTP https://developer.mozilla.org/en-US/docs/Web/HTTP/Status

How to Perform DNS Spoofing Using Ettercap: A Step-by-Step Tutorial

Tue, 16 Apr 2024 19:33:00 +1000

DNS spoofing, or DNS cache poisoning, corrupts the DNS resolution process. This redirects users to malicious sites instead of their intended destinations, which can lead to stolen personal information, malware distribution, or disrupted services. Ettercap, a tool for man-in-the-middle attacks, enables effective DNS spoofing.

Ettercap intercepts network traffic, allowing attackers to eavesdrop or alter communications. It can generate fake DNS responses, inserting incorrect information into a DNS resolver’s cache. As a result, users seeking certain websites get redirected to alternative, harmful destinations.

IP Command-Line Cheat Sheet

Tue, 16 Apr 2024 18:31:58 +1000

This cheat sheet is designed to briefly reference some of the most commonly used IP commands. Whether you’re a seasoned professional looking to improve your command-line skills or a newcomer eager to explore networking possibilities through ip, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt install iproute2`
CentOS/Fedora/Red Hat	`sudo yum install iproute`
NixOS	`nix-env -iA nixos.iproute2`

Usage:

Task	Command
Display all interfaces	`ip addr show`
Display a specific interface	`ip addr show dev eth0`
Add an IP address	`ip addr add 192.168.1.1/24 dev eth0`
Delete an IP address	`ip addr del 192.168.1.1/24 dev eth0`
Enable an interface	`ip link set dev eth0 up`
Disable an interface	`ip link set dev eth0 down`
Add a route	`ip route add default via 192.168.1.1`
Delete a route	`ip route del default via 192.168.1.1`
Show routing table	`ip route show`
Monitor interface and traffic	`ip monitor`
Flush interface statistics	`ip -s -s flush all`

Wrapping Up

This ip cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering ip can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Switching from Ifconfig to ip Command: Mastering Modern Network Management

Tue, 16 Apr 2024 06:05:21 +1000

This guide explores the differences between the ifconfig and the ip command line tools. In addition, it outlines the advantages of switching to ip for better management of complex IP configurations.

The Old Guard: Understanding ifconfig

Ifconfig, short for “interface configurator,” has been essential for managing network interfaces in Unix-like systems for decades. It primarily handles configuration, management, and display of network interface parameters. Users use ifconfig to activate or deactivate interfaces, assign IP addresses, and adjust settings.

Projects

Mon, 15 Apr 2024 09:34:33 +1000

I’m a passionate technologist who loves exploring and experimenting with innovative concepts. My enthusiasm for technology has led me to embark on various exciting projects, each designed to address specific needs and make a positive impact.

These projects represent my dedication to innovation and problem-solving, and I’m thrilled to continue exploring new frontiers in technology. The future holds endless possibilities, and I’m eager to see what exciting ventures lie ahead.

What is Kubernetes, and what does it do?

Mon, 15 Apr 2024 09:14:49 +1000

Kubernetes, often abbreviated as K8s, is an open-source system for managing containerized applications across a cluster of machines. It automates the deployment, scaling, and operations of container applications. Google originally developed Kubernetes in 2014 based on its extensive experience running containers. Thanks to its robust feature set and community support, It has become the de facto standard for container orchestration.

Kubernetes excels in managing not just individual containers but entire fleets of containers, defining how they interact and are exposed to the outside world. It supports a range of container tools, with Docker being the most prominent.

Ubuntu Command-Line Cheat Sheet

Mon, 15 Apr 2024 08:53:03 +1000

This cheat sheet consolidates the most frequently used commands in Ubuntu, one of the most popular Linux distributions. Designed for new and experienced users, this guide offers quick references and examples to help you navigate Ubuntu’s command-line interface efficiently.

Installation Commands

Ubuntu’s package management is primarily handled through apt (Advanced Package Tool). The essential commands for installing, updating, and managing software packages are here.

Task	Command
Update package lists	`sudo apt update`
Upgrade all packages	`sudo apt upgrade`
Install a package	`sudo apt install [package_name]`
Remove a package	`sudo apt remove [package_name]`
Search for a package	`apt search [keyword]`
Display package details	`apt show [package_name]`

System Monitoring Commands

Monitoring system performance and resource usage is critical for maintaining an optimal operating environment. Use these commands to check system health and activity.

Guide to Using Slowloris for HTTP Denial of Service Attacks

Mon, 15 Apr 2024 08:07:10 +1000

Slowloris is a highly effective tool for conducting Denial of Service (DoS) attacks on web servers by exploiting how they handle HTTP connections. This guide provides a comprehensive overview of Slowloris, including what it is, why it’s important, how to install it, and how to use it responsibly and effectively.

What is Slowloris?

Slowloris is a tool developed to test the vulnerability of web servers to a specific type of DoS attack. Unlike many other DoS techniques, Slowloris is designed to use minimal bandwidth in its attacks, making it stealthy and difficult to detect. It works by opening multiple connections to the target server and keeping them open as long as possible by sending partial HTTP requests, which are periodically followed up with further HTTP headers.

aSYNcrone: The Ultimate Guide to Using the SYN Flood DDoS Tool

Mon, 15 Apr 2024 03:47:23 +1000

aSYNcrone is a specialized command-line tool designed to execute SYN flood attacks, such as a Distributed Denial of Service (DDoS) attack. This tool is developed in the C programming language, emphasizing its efficiency and speed in network testing scenarios. A SYN flood attack exploits part of the normal TCP three-way handshake to consume resources on the targeted server and render it unresponsive to legitimate traffic.

By intensively sending SYN packets to a target’s port without completing the handshake (i.e., not sending the final ACK), aSYNcrone can overwhelm the target, causing disruptions or complete denial of service as the server’s connection queues fill up. This makes aSYNcrone a powerful tool in the arsenal of network testers, security researchers, and cybersecurity professionals who must simulate attack scenarios to test network robustness, evaluate firewall rules, and implement effective network security measures.

aSYNcrone Command-Line Cheat Sheet

Mon, 15 Apr 2024 03:19:37 +1000

This cheat sheet briefly references some of the most commonly used aSYNcrone commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through aSYNcrone, you’ll find valuable insights and shortcuts here.

aSYNcrone Installation:

Distribution	Command
Debian/Ubuntu	`sudo git clone https://github.com/fatihsnsy/aSYNcrone.git` `cd aSYNcrone` `sudo gcc aSYNcrone.c -o aSYNcrone -lpthread`
CentOS/Fedora/Red Hat	`sudo yum install git` (if not installed) `sudo git clone https://github.com/fatihsnsy/aSYNcrone.git` `cd aSYNcrone` `sudo gcc aSYNcrone.c -o aSYNcrone -lpthread`

Usage:

Task	Command
Launch a SYN flood attack	`sudo ./aSYNcrone <source_port> <target_IP> <target port> <threads number>`
Check the help options	`./aSYNcrone -h`

Legal Warning for Using aSYNcrone

aSYNcrone is a powerful network tool designed to conduct SYN flood distributed denial of service (DDoS) attacks. While this tool can be invaluable for network testing and educational purposes, its misuse has significant legal and ethical implications. Understanding and complying with all applicable laws and regulations is crucial when using aSYNcrone or any other tool to exploit network vulnerabilities.

Mastering Hping3: The Ultimate Command-Line Guide for Network Testing

Mon, 15 Apr 2024 02:29:57 +1000

Hping3 is a powerful network tool that analyses, tests, and diagnoses network interfaces, servers, and firewalls. This Hping guide will show you how to use it. Built as a command-line utility, it is primarily used for crafting custom TCP/IP packets to perform network testing, port scanning, and network security audits. Hping3 is the successor to the earlier Hping and Hping2 tools and brings more functionality and flexibility to network probing and analysis.

Hping Command-Line Cheat Sheet

Mon, 15 Apr 2024 01:56:16 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Hping commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Hping, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt install hping3`
CentOS/Fedora/Red Hat	`sudo yum install hping3` (CentOS/Fedora) `sudo dnf install hping3` (Fedora 22+)
NixOS	`nix-env -iA nixpkgs.hping`

Hping Cheat Sheet Commands:

Task	Command
Ping using ICMP	`hping3 -1 example.com`
Traceroute using UDP	`hping3 --traceroute -V -1 example.com`
Perform SYN flooding attack	`hping3 -S --flood -V example.com`
Check firewall rules with ACK	`hping3 -A -p 80 example.com`
Port scanning	`hping3 -S example.com -p ++1`

Wrapping Up

This Hping cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Hping can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Mastering Netwag: The Ultimate Guide to Using the Netwag GUI

Sun, 14 Apr 2024 23:21:15 +1000

Netwag is a versatile graphical interface for network protocol analysis and configuration designed to simplify the complexities of network troubleshooting and security assessments. It provides a user-friendly front end to the powerful suite of tools available in Netwox, allowing you to perform advanced network diagnostics and operations without deep command-line expertise. Let this guide to using Netwag help you.

Why is Netwag Important?

Netwag is not just another tool in the network professional’s toolkit—it’s a versatile resource that enhances critical network tasks across various IT disciplines. Let’s explore why Netwag holds significant value in cybersecurity and system administration.

Netwag GUI Usage Cheat Sheet

Sun, 14 Apr 2024 22:56:57 +1000

This cheat sheet is designed to help users navigate Netwag’s graphical interface, a versatile tool for troubleshooting and analyzing network security. For example, Netwag’s GUI makes it accessible for those who may not be comfortable with command-line operations, providing a user-friendly way to perform complex network tasks. This guide will cover the basics of installing Netwag and provide an overview of its main features.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt-get install netwag`
CentOS/Fedora/Red Hat	`sudo yum install netwag` (CentOS/Fedora) `sudo dnf install netwag` (Fedora 22+)

Usage:

Netwag offers a graphical interface that simplifies the process of network troubleshooting and analysis. Here, for example, are some tips on how to navigate the GUI:

Mastering the Tshark Command Line: A Comprehensive How-To Guide

Sun, 14 Apr 2024 22:26:17 +1000

Tshark is the command-line version of Wireshark, the widely acclaimed network protocol analyzer. It allows you to monitor, analyze, and capture real-time network traffic directly from your terminal. It provides the powerful features of Wireshark in a lightweight and flexible format, which is ideal for automation scripts and remote sessions where a graphical user interface is unavailable.

Tshark excels in dissecting and displaying the packets of data flowing across a network, allowing you to see the granular details of network activities. It supports hundreds of protocols and media types, from the common ones like HTTP and TCP to the more esoteric ones like FCoE and SCTP. This capability makes it an indispensable tool for network administrators, security professionals, and anyone interested in network traffic analysis.

Tshark Command-Line Cheat Sheet

Sun, 14 Apr 2024 21:57:34 +1000

This Tshark cheat sheet is designed to briefly reference some of the most commonly used Tshark commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Tshark, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian/Ubuntu	`sudo apt install tshark`
CentOS/Fedora/Red Hat	`sudo yum install tshark` (CentOS/Fedora) `sudo dnf install tshark` (Fedora 22+)
NixOS	`nix-env -iA nixos.tshark`

Tshark Cheat Sheet Commands:

Task	Command
Capture packets on a specific interface	`tshark -i eth0`
Display filters while capturing	`tshark -i eth0 -Y 'http.request.method == "GET"'`
Save captured packets to a file	`tshark -i eth0 -w /path/to/save/output.pcap`
Read and analyze packets from a file	`tshark -r output.pcap`
List all available capture interfaces	`tshark -D`
Decode packets as HTTPS on a specific port	`tshark -d tcp.port==443,http`

Wrapping Up

This Tshark cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Tshark can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

SEToolkit: Master the Social-Engineer Toolkit Command Line

Sun, 14 Apr 2024 02:54:14 +1000

SEToolkit, or the Social-Engineer Toolkit, is an open-source software suite specifically designed for simulating social engineering attacks, such as phishing, spear phishing, credential harvesting, and more. Developed by TrustedSec, this tool is integral for security professionals looking to test and strengthen an organisation’s human aspect of security.

SEToolkit excels in creating deceptive attacks that mimic real-world threats. It enables you to craft various attack scenarios that can demonstrate the potential vulnerabilities within your company before malicious attackers exploit them. These scenarios include crafting emails that appear to come from within the organization, creating malicious websites identical to legitimate ones, or even duplicating access systems.

SEToolkit Command-Line Cheat Sheet

Sun, 14 Apr 2024 02:31:07 +1000

This cheat sheet is designed to briefly reference some of the most commonly used SEToolkit commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your social engineering skills or a newcomer eager to explore the possibilities of security testing through SEToolkit, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install setoolkit`
CentOS/Fedora/Red Hat	`sudo yum install setoolkit`

Usage

Task	Command
Launch SEToolkit	`setoolkit`
Clone a website for phishing	`1` for Social-Engineering Attacks -> `2` for Website Attack Vectors -> `3` for Credential Harvester Attack Method -> `2` for Site Cloner

Wrapping Up

This SEToolkit cheat sheet has highlighted the tool’s flexibility and power for everything from simple phishing attacks to advanced credential harvesting operations. Mastering SEToolkit can significantly boost your understanding of social engineering threats and improve defensive cybersecurity strategies. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Ultimate Guide to Mastering John the Ripper: Command-Line Techniques for Effective Password Cracking

Sun, 14 Apr 2024 01:37:55 +1000

John the Ripper is a renowned password-cracking tool in cybersecurity and forensics. This powerful command-line utility is known for detecting weak passwords by simulating various attack types on password hashes. The tool is versatile, supporting numerous hashing algorithms and is customizable for specific needs through its extensive configuration options.

Its modular approach sets John the Ripper apart, allowing users to add or refine attack vectors as needed. Whether you’re dealing with traditional DES-based crypt passwords, modern Windows NTLM hashes, or anything else, John can handle it effectively. It excels in environments where speed and efficiency are key, thanks to its support for parallel processing and its ability to be run on different platforms, including Windows, Linux, and macOS.

John the Ripper Cheat Sheet: Master Password Cracking

Sun, 14 Apr 2024 01:18:30 +1000

This cheat sheet briefly references some of the most commonly used John the Ripper commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your password-cracking skills or a newcomer eager to explore the possibilities of this powerful tool, you’ll find valuable insights and shortcuts here.

Installation

John the Ripper is included in many Linux distributions and can be installed easily. Here are commands for popular distributions:

Introduction to Crunch Wordlist Creator

Sun, 14 Apr 2024 01:03:48 +1000

Crunch is a highly flexible command-line tool designed to create custom wordlists for brute force attacks or password recovery. As a part of a security professional’s toolkit, Crunch allows you to specify a set of criteria that reflects the presumed parameters of the target’s password characteristics. These criteria can include the desired length, possible character combinations, fixed prefixes or suffixes, and patterns that mimic common password formulations.

By generating tailored wordlists, Crunch enables more efficient and focused attacks than random password generation. It reduces the number of potential passwords to those most likely to succeed based on known or hypothesized password policies. Whether you are a penetration tester seeking to expose vulnerabilities in network security or merely looking to recover access to accounts locked by lost passwords, Crunch provides a powerful means to produce the necessary tools for the job.

Crunch Wordlist Creator Command-Line Cheat Sheet

Sun, 14 Apr 2024 00:45:21 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Crunch commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of wordlist creation through Crunch, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install crunch`
CentOS/Fedora/Red Hat	`sudo yum install crunch`
NixOS	`nix-env -iA nixos.crunch`

Crunch Cheat Sheet Commands

Task	Command
Create a simple alphanumeric wordlist	`crunch 4 4 abcdef123456 -o wordlist.txt`
Generate a wordlist with a specific pattern	`crunch 10 10 -t @@[email protected]@%^%^ -o patternlist.txt`
Create a wordlist with incremental length	`crunch 1 5 abcd -o incrlenlist.txt`
Generate a wordlist using charset file	`crunch 6 6 -f /usr/share/rainbowcrack/charset.txt mixalpha -o charlist.txt`
Use Crunch with John the Ripper	`crunch 6 6

Wrapping Up

This Crunch Wordlist Creator cheat sheet highlights the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Crunch can significantly boost your networking skills. Keep practising, explore resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Medusa Login Brute Forcer Command-Line Cheat Sheet

Sun, 14 Apr 2024 00:11:40 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Medusa commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Medusa, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install medusa`
CentOS/Fedora/Red Hat	`sudo yum install medusa`
NixOS	`nix-env -iA nixos.medusa`

Medusa Cheat Sheet Commands

Task	Command
Brute force an RDP service	`medusa -h target_ip -u username -P password_file -M rdp`
Brute force SSH login	`medusa -h target_ip -u user -P passlist.txt -M ssh`
Check for Telnet service	`medusa -h target_ip -C userpasslist.txt -M telnet`
Brute force FTP login	`medusa -h target_ip -u user -P passlist.txt -M ftp`
Test SMTP authentication	`medusa -h target_ip -u user -P passlist.txt -M smtp`

Wrapping Up

This Medusa cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Medusa can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Master Medusa: a speedy, massively parallel, modular login brute-forcer

Sun, 14 Apr 2024 00:03:50 +1000

Medusa is a speedy, massively parallel, modular login brute-forcer for network services. This tool is crafted to support numerous protocols, including but not limited to SSH, FTP, HTTP, IMAP, RDP, and SMB, making it a versatile asset in a security professional’s toolkit. Medusa’s main aim is to support the rapid testing and validation of login credentials across varied network services and environments.

What sets Medusa apart is its ability to conduct brute force attacks in parallel, significantly speeding up the testing process compared to sequential testing. This feature allows you to manage multiple connections and tasks simultaneously, enhancing your ability to identify weak points in network security defences quickly.

Ncrack Command-Line Cheat Sheet

Sat, 13 Apr 2024 23:44:10 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Ncrack commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Ncrack, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install ncrack`
CentOS/Fedora/Red Hat	`sudo yum install ncrack`
NixOS	`nix-env -iA nixos.ncrack`

Usage

Task	Command
Brute force an RDP service	`ncrack -p 3389 -u username -P password_file rdp://target_ip`
Brute force SSH login	`ncrack -p 22 -u user -P passlist.txt ssh://target_ip`
Check for Telnet service	`ncrack -p 23 -u user -P passlist.txt telnet://target_ip`
Brute force FTP login	`ncrack -p 21 -u user -P passlist.txt ftp://target_ip`
Test SMTP authentication	`ncrack -p 25 -u user -P passlist.txt smtp://target_ip`

Wrapping Up

This Ncrack cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Ncrack can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Unlock the power of Ncrack network authentication cracking!

Sat, 13 Apr 2024 23:32:20 +1000

Introduction to Ncrack

Ncrack is a high-speed network authentication cracking tool designed to help security professionals test network-based services against brute force attacks. Unlike other brute force tools, which focus on one specific protocol, Ncrack supports many protocols, including SSH, HTTP(S), SMB, POP3(S), VNC, FTP, and Telnet. This versatility makes it a versatile tool for conducting security audits across different network services.

The tool’s strength lies in its ability to rapidly perform authentication tests using a combination of dictionary attacks and advanced algorithms to guess correct usernames and passwords efficiently. If you aim to assess the resilience of network protocols within your systems, Ncrack can execute simultaneous attacks on multiple services, dramatically increasing the effectiveness of your security assessments. Next, we’ll explore how you can set up Ncrack and start using it to fortify your network defences.

Metasploit Command-Line Cheat Sheet

Sat, 13 Apr 2024 21:56:29 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Metasploit commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Metasploit, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt install metasploit-framework`
CentOS/Fedora/Red Hat	`sudo yum install metasploit-framework`
NixOS	`nix-env -iA nixos.metasploit`

Usage

Task	Command
Start Metasploit console	`msfconsole`
Search for modules	`search [module type/name]`
Use a specific module	`use [module path]`
Set module options	`set [option] [value]`
Start a module	`run` or `exploit`
Save commands for later use	`save`
Display information about module	`info [module path]`
Update Metasploit	`msfupdate`
Connect to a database	`db_connect [user]:[password]@[host]/[database]`
Import scan results	`db_import [filename.xml]`

This Metasploit cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Metasploit can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Hydra Brute Force Command-Line Cheat Sheet

Sat, 13 Apr 2024 21:49:56 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Hydra brute force commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Hydra, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Docker	`docker pull vanhauser/hydra`
	`docker run -it vanhauser/hydra [options]`

Usage

Task	Command
Brute force FTP login	`hydra -l user -P passlist.txt ftp://IP`
Brute force SSH login	`hydra -l user -P passlist.txt ssh://IP`
Brute force HTTP login	`hydra -l user -P passlist.txt http-post-form "http://IP/login:username=^USER^&password=^PASS^:F=error"`
Brute force HTTPS login	`hydra -l user -P passlist.txt https-get://IP`
Use a specific port	`hydra -s 2121 -l user -P passlist.txt ftp://IP`
Use verbose mode	`hydra -v -l user -P passlist.txt ftp://IP`
Save output to a file	`hydra -o results.txt -l user -P passlist.txt ftp://IP`

This Hydra cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Hydra can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Hydra: Ethical Brute-Force for Security Testing

Sat, 13 Apr 2024 21:35:18 +1000

Introduction to Hydra

Hydra, often called “Hydra the Brute Force Tool,” is a powerful command-line utility renowned for its proficiency in network authentication services. This tool is designed to assist security professionals in testing and discovering vulnerabilities within network protocols through brute-force attacks. Hydra supports a variety of protocols, including, but not limited to, SSH, FTP, HTTP, and SMB.

Furthermore, Hydra’s flexibility and efficiency stem from its ability to rapidly guess multiple combinations of usernames and passwords, facilitating the identification of weak authentication methods. Whether you are a seasoned security expert or a newcomer to cybersecurity, Hydra offers a valuable toolkit to enhance your security audits. Next, we will delve into setting up Hydra and preparing for its effective utilization.

Mastering Metasploit for Comprehensive Penetration Testing

Sat, 13 Apr 2024 20:50:08 +1000

What is Metasploit?

Metasploit stands out as a formidable tool in cybersecurity, empowering professionals to develop, test, and execute exploits against remote targets. As an open-source project, it offers public access to a detailed database of security vulnerabilities, enabling users to validate security issues in their systems, conduct comprehensive penetration tests, and implement defensive measures effectively.

Metasploit’s modular design facilitates the enhancement of the framework with custom tools and features. With strong support from a vibrant community and management by Rapid7, this tool is indispensable for any security professional’s toolkit and is adaptable from basic to complex applications.

NMAP Command-Line Cheat Sheet

Sun, 07 Apr 2024 19:04:47 +1000

This command-line cheat sheet is designed to briefly reference some of the most commonly used NMAP commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through NMAP, you’ll find valuable insights and shortcuts here.

Installation

Distribution	Command
Debian/Ubuntu	`sudo apt-get install nmap`
CentOS/Fedora/Red Hat	`sudo yum install nmap` or `sudo dnf install nmap`
NixOS	`nix-env -iA nixos.nmap`

Usage

Basic Scans

Task	Command
Scan a single IP	`nmap 192.168.1.1`
Scan a range of IPs	`nmap 192.168.1.1-20`
Scan all ports	`nmap -p "-" 192.168.1.1`
Avoid DNS resolution	`nmap -n 192.168.1.1`

Port Specification and Scans

Switch	Example	Description
`-p`	`nmap 192.168.1.1 -p 21`	Port scan for port x
`-p`	`nmap 192.168.1.1 -p 21-100`	Port range
`-p`	`nmap 192.168.1.1 -p U:53,T:21-25,80`	Port scan multiple TCP and UDP ports
`-p`	`nmap 192.168.1.1 -p-`	Port scan all ports
`-p`	`nmap 192.168.1.1 -p http,https`	Port scan from service name
`-F`	`nmap 192.168.1.1 -F`	Fast port scan (100 ports)
`--top-ports`	`nmap 192.168.1.1 --top-ports 2000`	Port scan the top x ports
`-p`	`nmap -p T:80,T:8080,U:80,U:8080 192.168.1.1`	Scan specific TCP and UDP ports

Advanced Scans

Task	Command
OS detection	`nmap -O 192.168.1.1`
Service version detection	`nmap -sV 192.168.1.1`
Aggressive scan	`nmap -A 192.168.1.1`

Service and Version Detection

Switch	Example	Description
`-sV`	`nmap 192.168.1.1 -sV`	Enable intensity level 9. There is a higher possibility of correctness. Slower
`-sV -version-intensity`	`nmap 192.168.1.1 -sV -version-intensity 8`	Intensity level 0 to 9. A higher number increases the possibility of correctness
`-sV -version-light`	`nmap 192.168.1.1 -sV -version-light`	Enable light mode. Lower possibility of correctness. Faster
`-sV -version-all`	`nmap 192.168.1.1 -sV -version-all`	Enable intensity level 9. Higher possibility of correctness. Slower

OS Detection

Switch	Example	Description
`-O`	`nmap 192.168.1.1 -O`	Remote OS detection using TCP/IP stack fingerprinting
`-O -osscan-limit`	`nmap 192.168.1.1 -O -osscan-limit`	Limits OS detection to hosts with at least one open and one closed port
`-O -osscan-guess`	`nmap 192.168.1.1 -O -osscan-guess`	Makes Nmap guess more aggressively about OS
`-O -max-os-tries`	`nmap 192.168.1.1 -O -max-os-tries 1`	Set the maximum number of OS detection tries against a target

Timing and Performance

Switch	Example	Description
`-T0` to `-T5`	`nmap 192.168.1.1 -T0` … `nmap 192.168.1.1 -T5`	Varies from paranoid (IDS evasion) to insane speeds
`--host-timeout`	`nmap --host-timeout 1s 192.168.1.1`	Give up on target after this long

NSE Scripts and Their Uses

Command	Description
`nmap -Pn -script=http-sitemap-generator scanme.nmap.org`	HTTP site map generator
`nmap -n -Pn -p 80 -open -sV -vvv -script banner,http-title -iR 1000`	Fast search for random web servers
`nmap -Pn -script=dns-brute domain.com`	Brute forces DNS hostnames guessing subdomains

Firewall / IDS Evasion and Spoofing

Switch	Example	Description
`-f`	`nmap 192.168.1.1 -f`	Use tiny fragmented IP packets to evade filters
`-mtu`	`nmap 192.168.1.1 -mtu 32`	Set your own offset size
`-D`	`nmap -D 192.168.1.101,... 192.168.1.1`	Send scans from spoofed IPs

Script Installation

nmap-vulners

git clone https://github.com/vulnersCom/nmap-vulners.git

scipag_vulscan

git clone https://github.com/scipag/vulscan scipag_vulscan
ln -s pwd/scipag_vulscan /usr/share/nmap/scripts/vulscan

Wrapping Up

This NMAP Command-Line Cheat Sheet concisely references the most commonly used commands in the powerful NMAP suite. Designed for beginners and experienced network administrators, it includes essential commands for various tasks—from simple IP scans to detailed service detection and security auditing.

SSH Error: No Matching Host Key Type Found (SOLVED!)

Sat, 23 Mar 2024 19:48:47 +1000

This guide shows you how to overcome the no-matching host key type error sometimes encountered when using SSH.

Secure Shell (SSH) is a cornerstone of remote server management and secure file transfers. It’s the go-to method for securely accessing and managing servers over an insecure network.

Example of the error:

Unable to negotiate with 10.0.2.5 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss.

Understanding the Problem

The error message occurs when an SSH client attempts to connect to a server that only supports older, less secure host key algorithms, such as ssh-rsa or ssh-dss. Due to security vulnerabilities, modern SSH clients, in their default configuration, may no longer support these legacy algorithms. As a result, the connection attempt fails because the client and server cannot agree on a common set of cryptographic algorithms.

Netcat Command-Line Cheat Sheet

Fri, 22 Mar 2024 19:57:32 +1000

This cheat sheet is designed to briefly reference some of the most commonly used Netcat commands, along with a brief description and practical examples to illustrate their use. Whether you’re a seasoned professional looking to brush up on your command-line skills or a newcomer eager to explore the possibilities of networking through Netcat, you’ll find valuable insights and shortcuts here.

Installation:

Distribution	Command
Debian, Ubuntu	`sudo apt-get install netcat`
CentOS/Fedora/Red Hat	`sudo dnf install nc`
NixOS	`nix-shell -p netcat-gnu` for a temporary installation environment.

Usage:

Task	Command
Listen on a port	`nc -l 1234`
Connect to a port	`nc example.com 1234`
Transfer files (Receiver)	`nc -l 1234 > file.txt`
Transfer files (Sender)	`nc example.com 1234 < file.txt`
Chat server	`nc -l 1234`
Chat client	`nc example.com 1234`
Port scanning	`nc -zv example.com 20-30`
File transfer with tar (Sender)	`tar cf - .
File transfer with tar (Receiver)	`nc -l 1234
Execute command upon connection	`nc -l 1234 -e /bin/bash`
Connect via UDP	`nc -u example.com 1234`
Verbose output	`nc -v example.com 1234`
Listen with specific source IP	`nc -l 1234 -s 10.0.0.1`
Send a text message to a port	`nc -lk 1234`
Use with IPv6	`nc -6 example.com 1234`
Bind to a specific local port (client)	`nc -p 8080 example.com 1234`
Transfer directory with tar and netcat (Sender)	`tar czf - directory/
Transfer directory with tar and netcat (Receiver)	`nc -l 1234
Test if the port is open	`echo “Hello World”
Receive file and print on console	`nc -l 1234 > /dev/stdout`
Test if port is open	`echo -n
Use custom timeout	`nc -w 10 example.com 1234`
Proxy with Netcat	`nc -l 1234
Create a simple HTTP server	`echo -e “HTTP/1.1 200 OK\r\n\r\nHello World”
Send file with UDP (Sender)	`nc -u example.com 1234 < file.txt`
Receive file with UDP (Receiver)	`nc -ul 1234 > file.txt`
Check mail server (SMTP) interaction	`nc -C example.com 25`
Echo service emulation	`nc -l 1234 -c 'xargs -n1 echo'`
Listen on multiple ports (using -k for persistent listening and a loop)	`echo -n “example.com”
Test if the port is open	`while true; do nc -lk 1234; done`

This Netcat cheat sheet has highlighted the tool’s flexibility and power for everything from simple tasks to advanced operations. Mastering Netcat can significantly boost your networking skills. Keep practising, exploring further resources, and share your findings to deepen your understanding and contribute to the community’s collective knowledge.

Guide to Netcat: An Essential Tool for DevOps, Cybersecurity, and Sysadmins

Fri, 22 Mar 2024 19:53:47 +1000

Welcome to this comprehensive guide on Netcat, an indispensable tool for anyone in DevOps, cybersecurity, or system administration. Whether you’re preparing for an interview or exam or just looking to broaden your technical toolkit, this guide has you covered.

A Brief Overview of Netcat and its Significance

Netcat, often called the “Swiss Army knife” of networking, is a versatile utility that reads and writes data across network connections using the TCP/IP protocol. It’s designed to be a reliable back-end tool that other programs and scripts can use directly or easily.

Fix Metasploitable Kernel Panic Error (NOAPIC) in VirtualBox

Sat, 16 Mar 2024 21:57:35 +1000

Are you stuck with a frustrating “kernel panic NOAPIC” error during your Metasploitable boot in VirtualBox? Don’t worry—this guide will help you troubleshoot and fix the issue using the “noapic” option. We’ll also delve into relevant concepts like ACPI, GRUB, and kernel boot options for a deeper understanding.

About Legacy GRUB and Metasploit 2

Legacy GRUB, or GRUB 0.97, once served as the bootloader of choice for numerous Linux distributions, paving the way for the selection and booting of operating systems on a computer. Metasploit 2, the predecessor of the now-renowned penetration testing framework, relied on Legacy GRUB to boot its virtual machine (VM) images efficiently.

Conquer Security Audits: Your Essential Lynis Command Cheat Sheet

Sat, 24 Feb 2024 18:15:51 +1000

This cheat sheet equips you with essential Lynis commands to navigate your system’s security landscape. Quickly learn how to launch basic and advanced scans, filter results by severity or category, and delve deeper into specific tests for comprehensive analysis. With this guide at your fingertips, you’ll be well-positioned to identify vulnerabilities, harden your system, and ensure its ongoing security posture.

This guide is related to Boost Linux Security with Lynis.

Installation:

System	Command
Debian/Ubuntu	`sudo apt-get install lynis`
CentOS/Fedora/Red Hat	`sudo dnf install lynis`
NixOS	nix-shell -p lynis for a temporary installation environment.

Usage:

Task	Command
Perform an Audit	`sudo lynis audit system`
Perform an Audit for Dockerfiles	`lynis audit dockerfile /path/to/your/Dockerfile`
Perform an Audit and Output to File	`sudo lynis audit system --output-file=/path/to/output/file`
Custom Profiles	`sudo lynis audit system --profile=/path/to/custom/profile`
Suppress Warnings/Notifications	`sudo lynis audit system --no-logs`
Generate Report in Text Format	`sudo lynis audit system --report-file=/path/to/report/file.txt`
Generate Report in HTML Format	`sudo lynis audit system --report-file=/path/to/report/file.html`
Generate Report in JSON Format	`sudo lynis audit system --report-file=/path/to/report/file.json`
Automate Auditing (Cron)	Edit crontab: `sudo crontab -e` Add: `0 3 * * * /usr/bin/lynis --cronjob --auditor "Your Name" --no-colors --quiet`
Update Lynis Definitions	`sudo lynis update info`
Get Help and Usage Information	`lynis --help`
Check System Hardening	`sudo lynis audit system --tests-category hardening`
Check for Security Updates	`sudo lynis audit system --tests-category updates`

Incorporating these Lynis commands into your security routine gives you a powerful ally in safeguarding your system. Security is an ongoing process, so leverage this cheat sheet to assess your system’s health regularly and proactively address potential threats. With vigilance and these valuable commands, you can confidently maintain a robust security posture and navigate the ever-evolving digital landscape.

Boost Linux Security with Lynis

Sat, 24 Feb 2024 02:45:24 +1000

Remember that time a major company breach exposed millions of user records? Scary, right? While most attacks target big businesses, your personal Linux system isn’t immune. Tools like Lynis can help you identify and fix security weaknesses before attackers exploit them.

What is Lynus?

Lynis is a powerful, open-source security auditing tool for Linux and Unix systems. It goes beyond basic scans, analyzing your system’s configuration, software, and defences to provide detailed insights and actionable recommendations. Whether you’re a seasoned user or just getting started with security, Lynis empowers you to take control and proactively safeguard your system.

Establishing Passwordless SSH Access between Servers Using Key Pairs

Sat, 03 Feb 2024 22:13:28 +1000

Setting up SSH access between servers using key pairs is a secure and efficient way to manage remote connections. This guide will walk you through generating SSH keys on your local machine and then using them to enable passwordless login to the destination server using ssh-copy-id.

Let’s Get Started

Step 1: Generate SSH Key Pair on Your Local Machine

On your local machine, open a terminal and use ssh-keygen to generate a new SSH key pair. This command will prompt you for a location to save the key and an optional passphrase for added security.

Updating pfSense via Command Line: A Step-by-Step Guide

Sat, 20 Jan 2024 20:13:50 +1000

Ensuring your pfSense firewall is up-to-date is crucial for maintaining security and performance. While the graphical user interface (GUI) is the preferred method for most updates, sometimes issues arise, such as upgrading from version 2.7.0 to 2.7.1. This guide will walk you through updating pfSense via the command line to address specific errors and ensure a seamless upgrade.

About pfSense

pfSense is an open-source firewall and router platform based on FreeBSD. Additionally, pfSense is known for its robust security features and flexibility and is widely used to protect networks of various sizes.

Setup SSH access to your pfSense

Sat, 20 Jan 2024 18:47:22 +1000

Welcome to this guide about pfSense SSH configuration! This tutorial will walk you through enabling SSH on your pfSense, adding authorized keys, and securing your private key.

About pfSense

pfSense, based on version CE 2.7.0, is a robust open-source firewall and routing software designed to provide security, reliability, and advanced features. One of its powerful capabilities is SSH access, allowing users to manage their firewall remotely with enhanced security measures.

Restoring MS SQL Server .bak from S3 to AWS RDS

Tue, 16 Jan 2024 02:39:23 +1000

This guide will teach you how to seamlessly restore an MS SQL Server database (.bak file) from an AWS S3 bucket to an AWS RDS instance.

Let’s Get Started

Step 1 - Upload .bak file to S3

Begin by uploading your .bak file to an S3 bucket using the AWS CLI. Open your terminal and run the following command:

aws s3 cp mydb.bak s3://your-bucket-name/

Step 2 - Create an IAM Role

Navigate to AWS IAM and create a new role with the following permissions:

Automating URL Testing in Jenkins Pipeline Script

Mon, 16 Oct 2023 17:59:51 +1000

Jenkins, a popular open-source automation server, is a powerful tool for automating various tasks in the software development and delivery process. One common use case is automating URL testing, and in this blog post, we’ll explore a Jenkins Pipeline script designed to iteratively test a series of web pages by incrementing page numbers in the URL until it encounters an HTTP 404 error.

High-Level Purpose

The purpose of the provided Jenkins Pipeline script is to automate URL testing by iteratively checking a series of web pages identified by incrementing page numbers in the URL. The script continues this process until it encounters an HTTP 404 error, at which point it gracefully exits. The primary goal is to ensure that the build does not fail due to HTTP 404 errors while providing visibility into other unknown issues through appropriate logging.

Let's fix the WordPress loopback request error: 3-Step Guide

Sun, 15 Oct 2023 18:19:08 +1000

WordPress, a versatile content management system, empowers millions of websites worldwide. However, it can present unexpected challenges. The “Loopback Request Error” is one such obstacle that can disrupt crucial site functionalities. This guide aims to equip you with the knowledge and strategies to effectively resolve this error and restore your WordPress site to its optimal performance.

Understanding Loopback Requests

Loopback requests are internal communication attempts made by WordPress. They are a crucial communication channel for WordPress to execute scheduled tasks, manage background processes, and maintain overall site health. A WordPress loopback request error signifies a disruption in WordPress’s ability to communicate with itself, leading to the error message you’re encountering.

Scan Your Docker Images and Containers with VirusTotal: A Step-by-Step Guide

Mon, 01 May 2023 08:22:14 +1000

Introduction

Docker has become a popular tool for deploying applications and managing containers. However, as the number of Docker images and containers grows, so does the need to ensure their security. One way to achieve this is by scanning your Docker images and containers with VirusTotal.

This guide will walk you through a step-by-step guide on using a script that automates scanning your Docker images and containers with VirusTotal.

What is VirusTotal?

VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans, and other malicious content. It uses multiple antivirus engines, including those from popular vendors like Kaspersky, McAfee, and Symantec, to detect threats. VirusTotal also provides an API that allows developers to integrate its scanning capabilities into their applications and workflows.

Need Help?

Sat, 29 Apr 2023 19:02:32 +1000

Are you seeking help with WordPress, Ubuntu, Python, PHP, Ansible, Jenkins, Bash scripting, or AWS? Look no further! I am here to provide expert assistance and guidance in all these areas, ensuring your projects run smoothly and efficiently.

In addition to technical support, I also offer top-notch spelling and grammar review services. Whether you need assistance with your blog, website content, or any other written material, I am happy to help you perfect your writing.

Bitbucket for Newbies: Mastering Basic Commands and Collaborating on Code

Thu, 30 Mar 2023 18:52:23 +1000

As a newbie to Bitbucket, navigating the platform and using its basic commands can be overwhelming. However, with some guidance, you can quickly become proficient in using Bitbucket. In this post, we will review some of the basic commands and features of Bitbucket that you need to know as a newbie.

What is Bitbucket?

Bitbucket is a web-based hosting service for version control repositories that use either Mercurial or Git. Bitbucket provides a user-friendly interface that allows teams to collaborate on projects, manage code, and track changes made to code. With Bitbucket, you can create and manage repositories, collaborate with team members, and review code changes.

Accelerate Your Performance Testing on Ubuntu with k6 and Postman-to-k6

Tue, 28 Mar 2023 20:29:43 +1000

Performance testing is crucial to software development. It ensures your application can handle high traffic and usage without crashing or slowing down. Many tools are available for performance testing, but two popular ones are k6 and Postman. This guide will show you how to do performance testing on Ubuntu using K6 and Postman-to-k6.

Explanation of k6 and its features

K6 is a popular open-source tool for performance and load-testing web applications, built on top of the Go programming language, with developer-friendly features. For example, it offers real-time test performance feedback, easy integration with CI/CD pipelines, and a cloud-based testing service to simulate concurrent users. In addition, K6’s large open-source community contributes to its development and supports developers worldwide. Overall, K6 is a powerful and flexible tool that is an excellent choice for optimizing application performance.

Solve the "Cannot read properties of undefined (reading 'type')" error with these simple fixes

Mon, 19 Dec 2022 02:44:38 +1000

If you’ve encountered the “jquery.min.js:2 Uncaught TypeError: Cannot read properties of undefined (reading ’type’)” error, you’re likely trying to access a property of an object that is undefined. This error occurs when you try to access a property of an object that is undefined or null.

This guide will discuss some steps that will help you debug and fix this error.

Let’s get started!

Here are some steps you can take to troubleshoot and fix this error:

Solving the 'tail: inotify resources exhausted' Error on Ubuntu

Sun, 18 Dec 2022 22:40:21 +1000

The “tail: inotify resources exhausted” error usually occurs when you are using the tail command to follow a file that is being actively written to, and the inotify watch limit has been reached.

To fix this issue, you can try increasing the inotify watch limit by modifying the /proc/sys/fs/inotify/max_user_watches file. This guide will show you how and explain what inotify is and what it does.

Let’s get started!

Here’s how you can do it:

Let's learn about Snap!

Tue, 13 Dec 2022 04:39:32 +1000

Ubuntu Snap is an application framework that makes installing and managing software on your system easier. Not only does this provide the easiest way to access your favourite open-source applications, but it also ensures you have the latest version at all times. With Ubuntu Snap, even those new to Linux can rapidly get set up and running with their desired applications without having to search for compatibility issues or downloads every time. This guide looks at what Ubuntu Snap offers a user and how easy it is to get started!

Update Ubuntu using Apt & Cron

Tue, 11 Oct 2022 23:43:43 +1000

There are several methods to update Ubuntu. These methods include package updates via the desktop, the unattended upgrade script, and good old Apt. As the title suggests, this post explores the last option using Cron.

Using the Apt command via Cron is mainly intended if you have installed a cut-down, customised or server version of Ubuntu. Conversely, Desktop users using the full install do not need to worry since the GUI automatically handles updates.

How to get started with Nano on Windows

Sat, 18 Jun 2022 00:14:57 +1000

GNU nano is a great text editor for developers who work on Linux, but did you know it can run on Windows too? This guide will show you how to install GNU nano on Windows to make your text editing experience seamless.

Let’s get started!

To install nano on Linux, use apt-get, which will get everything up and running in no time. Installing it on Windows isn’t as straightforward, however.

To install nano on Windows:

Set up CrowdSec to protect your WordPress site

Fri, 10 Jun 2022 22:19:50 +1000

Let’s find out how you can protect your Docker WordPress site using CrowdSec. You can now protect your WordPress site like a pro in a few simple steps! This guide assumes that you are running a WordPress Docker container that exists behind a reverse proxy. You need to skip one step if you are not using a reverse proxy.

About CrowdSec

CrowdSec Logo

CrowdSec is an open-source, collaborative IP security solution that analyses behaviors and shares signals across the community. It’s like Fail2Ban, but you can share your ban with other users. Sharing bans helps you preemptively block malicious hosts before they cause any damage.

How to set up CORS for an AWS Lambda Proxy REST API resource

Fri, 13 May 2022 20:50:35 +1000

Let’s see how you set up CORS using a Lambda Proxy API and AWS SAM. Heads up! This guide will also help fix a CORS error that fails in the browser but works in CURL.

About CORS

Cross-Origin Resource Sharing (CORS) is a way to tell browsers which domain, HTTP methods, and HTTP header(s) to trust. Therefore, this mechanism allows a server to indicate any origins (domain, scheme, or port) (and more) other than its own from which a browser should permit loading resources.

How to choose the right tool for your web scraping project?

Thu, 07 Apr 2022 19:34:39 +1000

Many people in different fields have employed Python to do web scraping. The most common purposes for this are data science and mining large amounts of structured or unstructured information from the Internet, which can be difficult without appropriate software tools.

Python is excellent for web scraping because Python allows programmers to write a simple scraping script containing 1000 or more lines of code in 10 to 15 minutes. So you do not need to be a super experienced developer to do this. If you don’t know Python, read this guide to see why you should!

Entering the Job Market? Here Are the Most In-Demand Programming Languages for 2022

Mon, 17 Jan 2022 19:43:07 +1000

As we enter 2022, you might be looking for a new job. The Great Resignation proves beneficial to job hunters or switchers, as employers are willing to provide higher pay and more benefits to stem labor shortages.

Now is an excellent time for anyone wanting to launch, boost, and even future-proof their career. If you’re looking to snag a job that is and will stay in demand, the World Economic Forum recently listed their top 10 jobs of the future.

OpenFaaS: Classic and of-watchdog templates

Fri, 26 Nov 2021 19:56:22 +1000

OpenFaaS (Function as a Service) is a popular serverless framework. However, unlike other serverless function providers, OpenFaaS has very few restrictions on providing and receiving data. This guide will show you the primary differences between the Classic and of-watchdog templates.

psst

You may also want to read: OpenFaaS: Getting Started on Kubernetes.

Watch the video on YouTube

Let’s get started!

OpenFaaS provides two types of templates: Classic Watchdog and of-watchdog.

Classic Watchdog templates:

OpenFaaS: How to Add Python Requirements and Dependencies

Wed, 17 Nov 2021 19:21:55 +1000

This guide will show you how to add requirements and dependencies for a Python project using OpenFaaS.

Python dependencies are software components that your project needs for it to work. You can manually use PyPI (the Python Package Index) to provide packages that you need, but OpenFaaS can automate this for you.

Watch the video on YouTube

Let’s Get Started!

First, let’s use the faas-cli new command to create a new python3 function from the templates.

AWS SAM: Tutorial

Fri, 12 Nov 2021 23:53:07 +1000

This tutorial will show you how to use AWS SAM. You will see how to initialize a sample Python project, build it and deploy your code as an AWS Lambda function.

As a side note - you are not limited to Python. The reason is that AWS SAM can use any runtime supported by AWS Lambda. Also, SAM is an extension of AWS CloudFormation. So, you get all the benefits and capabilities of AWS CloudFormation.

PHP: How to fix the "Call to undefined function curl_init()" error

Wed, 10 Nov 2021 19:48:15 +1000

Are you using PHP’s curl_exec() function and getting a “call to undefined function curl_init()” error? If so, then let’s fix the undefined curl_init() function error for you on Linux.

What is cURL?

cURL is a library (known as libcurl) that lets you communicate with other computers in PHP. In other words, PHP uses the libcurl extension to transfer data to or from a remote computer. libcurl currently supports HTTP/HTTPS, FTP, and many other protocols. You can also POST, GET and do other methods.

NextCloud: Enable video previews

Sun, 07 Nov 2021 07:54:20 +1000

This guide will show you how to enable video previews on NextCloud hosted on Debian/Ubuntu. You can apply the same steps if you are running the Docker version of NextCloud or different distribution.

What is NextCloud?

NextCloud allows you to share files in a similar way to Dropbox and Google Drive. It is, however, more than a file share! You can use it as a collaboration platform and customize it with a wide selection of useful apps.

OpenFaaS: Getting Started on Kubernetes

Sat, 06 Nov 2021 21:49:30 +1000

OpenFaaS (Function as a Service) is a popular serverless framework that provides an easy way to create portable functions, microservices and APIs using Kubernetes and Docker. This tutorial guide will serve as your OpenFaaS introduction to get you up and running quickly.

psst

You may also want to read: How to install using MicroK8s on Ubuntu.

Watch the video on YouTube

Install/enable OpenFaaS

There are a variety of methods to install or enable OpenFaas on your Kubernetes. Use the install method that you prefer.

Kubernetes: How to install arkade

Thu, 28 Oct 2021 19:02:28 +1000

This guide will show you how to install arkade on Ubuntu. arkade was built initially by the OpenFaaS community to install OpenFaaS on Kubernetes. But, it now supports over 40 Helm Charts. Essentially, arkade makes it easy to install and manage Kubernetes apps.

About arkade

arkade (ark for short) is an open-source CLI for downloading and installing Helm Charts with a single command. It makes it easy to install Kubernetes apps such as OpenFaaS, PostgreSQL, cert-manager, MongoDB, and more. Also, at the time of writing, it has over 40 Helm Charts and apps available for Kubernetes. Helm Charts are great, but the sheer number of settings for Helm Charts can be confusing. arkade simplifies all of this, making it a breeze to add new apps to Kubernetes.

Kubernetes: Install using MicroK8s on Ubuntu

Thu, 28 Oct 2021 09:00:36 +1000

This guide will show you how to install Kubernetes using MicroK8s on Ubuntu. MicroK8s make it super easy to get going with Kubernetes. Also, MicroK8s is bundled with tools such as Prometheus. So you enable a feature if you need it.

About MicroK8s

Canonical is the publisher of MicroK8s, and you can install it on Linux, macOS, and Windows. As per Canonical, MicroK8s is a: low-ops, minimal production Kubernetes for devs, cloud, clusters, workstations, Edge, and IoT.

How to run a speed test using the Linux command line

Sun, 24 Oct 2021 07:48:13 +1000

This guide will show you how to run an Internet speed test from the Linux command-line interface (CLI) and cron. You will also see a sample Jenkinsfile if you want to use a Jenkins for the automation instead of cron.

Speed test command-line options

Several services offer a speed test service via the CLI. Arguably, the most notable of these are speedtest.net by Ookla. You could also use fast.com by Netflix. This guide will show you how to use the speed test CLI service provided by Ookla. So visit https://github.com/sindresorhus/fast-cli for details on using the CLI for Fast.

Jenkins: Freestyle vs pipeline jobs

Fri, 22 Oct 2021 23:37:07 +1000

Let’s look at some of the differences between Jenkins freestyle and pipeline jobs.

Freestyle Jobs

You configure a freestyle job in Jenkins using the GUI by adding steps to the build. Freestyle jobs give you a lot of flexibility. But, you will struggle to configure complex continuous delivery scenarios.

Pipeline Jobs

Pipeline jobs allow you to create a set of instructions using code. You can also easily visualize different stages in one place. Most importantly, you can keep all the code stored in a code repository. This will, in turn, allow you to version, audit, and keep track of changes.

Jenkins: Create a freestyle job

Fri, 22 Oct 2021 20:20:38 +1000

This guide will show you how to set up your first freestyle job in Jenkins. You will use Jenkins to download Java source code from GitHub, compile the code using Maven, and view the build output.

What is a Jenkins freestyle job?

A Jenkins freestyle job is the most flexible type of job that you can do. A Freestyle job allows you to build any project. For example, you can do a Maven build, run a script, and so much more. Jenkins provides the freestyle job option by default without the need to install more plugins.

Jenkins: How to create a node agent

Fri, 22 Oct 2021 07:49:28 +1000

A Jenkins node agent is essentially a worker node that performs operations requested by Jenkins. Jenkins will manage the node agent as well as the required tools. This guide will show you how to create an agent node in Jenkins.

Important concepts

Before we get started, let’s review some terminology related to nodes.

Master - (Or controller node) This is is where Jenkins is installed.
Agent - (Or node) This the machine where the controller node connects too to execute jobs.
Executor - This is the service that runs on the node which executes the job on the node.

Networking-wise, the controller and node should be able to communicate with each other.

How to Install Apache Maven on Ubuntu

Thu, 21 Oct 2021 20:55:42 +1000

This guide will show you how to install Apache Maven on Ubuntu. You will also see how to verify the install and set up a basic project for testing purposes.

About Apache Maven

Apache Maven (also known as MVN) is a build automation tool used by many Java projects.

As per Apache:

Maven’s primary goal is to allow a developer to comprehend the complete state of a development effort in the shortest period of time. In order to attain this goal, Maven deals with several areas of concern:

How to Install Java on Ubuntu

Thu, 21 Oct 2021 20:21:37 +1000

This guide will show you how to install Java on Ubuntu. Java is everywhere, on your laptop, phone, server, and even some smart appliances. So, you should know how to install it. This guide will also show you how to remove Java and even change the default version of Java.

Something to note

There are many different implementations of Java. But, Oracle Java and OpenJDK are the two main implementations of Java. Amazon Web Services users can choose Amazon Corretto as an alternative.

Jenkins: How to add a JDK version

Wed, 20 Oct 2021 21:18:52 +1000

This guide will show you how to add a JDK version to Jenkins. If you plan to run a Java build requiring a specific version of the Java Development Kit, you need to do this.

What is a JDK?

JDK is short for Java Development Kit, and it is a core technology packages used in Java programming. The JDK allows developers to create Java programs. Once compiled, the Java code can then be executed and run by the Java virtual machine and the Java runtime environment.

Jenkins: An introduction to jobs and projects

Wed, 20 Oct 2021 18:50:58 +1000

This guide will explain what a Jenkins job (or project) is and discuss the different types you may encounter. There are many types available, and it depends on the plugins that you have installed. First, however, this guide will discuss the main types that you will encounter.

What is a Jenkins job or project?

A Jenkins job is a sequential set of tasks that a user defines. For example, a job can fetch source code from version control, compile the code, run unit tests, and more.

Jenkins: Basic security settings

Tue, 19 Oct 2021 21:06:45 +1000

Jenkins contains sensitive information. Thus it must be secured, like any other sensitive platform. Thankfully Jenkins provides you with many security options. This guide will show you all the essential bits that you need to know.

You access these features on the Configure Global Security page under manage Jenkins.

Let’s look at some of the security features:

Authentication

This feature allows you to disable the Jenkins “Remember Me Cookie” for added security.

Jenkins: How to manage plugins

Tue, 19 Oct 2021 07:34:07 +1000

Jenkins uses plugins extensively. Most Jenkins features are all implemented as plugins. Jenkins plugins provide features to support building, deploying, and automating any project. Believe it or not, but there are over 1800+ community-contributed Jenkins plugins available. This guide will show you how to manage Jenkins plugins.

Jenkins plugins are Java Archive (JAR) files with either an .hpi or .jpi extension. The jpi plugin gets precedence over the hpi plugin in case both are present.

Jenkins: Set up and install

Mon, 18 Oct 2021 21:58:30 +1000

Jenkins is an open-source automation server that enables developers to build, test, and deploy software. Additionally, you can install it on various operating systems such as Linux, Windows, macOS, etc. This guide will show you the various options to set up and install Jenkins.

Watch the video on YouTube

Prerequisites for installing Jenkins

You need to ensure that your system supports Java 8 or Java 11. However, sizing a Jenkins environment depends on several factors. Generally, Jenkins requires a minimum of 200MB of RAM, but this depends on the size of the builds. Also, most modem browsers are supported. The browsers include Google Chrome, Mozilla Firefox, Microsoft Internet Explorer, Apple Safari.

Ansible: To use the ssh connection type with passwords, you must install the sshpass program

Mon, 18 Oct 2021 00:40:25 +1000

This guide will show you how to fix the following error when running your Ansible Playbook: “to use the ssh connection type with passwords, you must install the sshpass program”.

The error may look something like this:

TASK [Gathering Facts] ******************************************************************************************************************************************************************
fatal: [albus.local]: FAILED! => {"msg": "to use the 'ssh' connection type with passwords, you must install the sshpass program"}

What is sshpass?

sshpass is a command-line tool that allows you to do non-interactive ssh login.

How to enable and disable systemd-resolved in Ubuntu

Sat, 16 Oct 2021 22:14:26 +1000

This guide will show you how to enable and disable the systemd-resolved service in Ubuntu.

What is systemd-resolved?

systemd-resolved is a systemd service that provides network name resolution to local applications. Additionally, systemd-resolved is installed by default as part of the systemd package.

systemd-resolved provides the following resolver services:

Domain Name System (DNS, DNSSEC and DNS over TLS)
Multicast DNS
Link-Local Multicast Name Resolution

Watch the video on YouTube

Why would you disable it?

You may want to disable systemd-resolved so that you can use another resolver on the same host. For example, you must do this before installing PiHole as the alternative DNS server.

How to install Snap on your Raspberry Pi

Fri, 15 Oct 2021 21:31:59 +1000

Follow this guide if you want all the benefits Snaps has to offer. This guide will show you how to install Snap on your Raspberry Pi.

What is Snap?

Canonical developed Snap, and it is a software packaging and deployment system developed for operating systems that use the Linux kernel. Snap is essentially a new package manager for Linux. In other words, it is an alternative to apt, yum, etc. In addition, snaps are distribution-independent, meaning they can run on many distributions ranging from Ubuntu to Raspberry Pi and much more.

Privacy Policy

Sat, 25 Sep 2021 06:08:02 +1000

Last updated: 15 November 2026

This policy explains what information is collected when you visit anto.online, who collects it, and the choices you have. The site is run by Anthony (Anto) Mastoroudes in Sydney, Australia.

The short version

anto.online has no accounts, no comments and no contact forms. I don’t ask you for personal information.
The site shows ads from Google AdSense and measures traffic with Google Analytics. Both use cookies.
If you’re in the European Economic Area, the UK or Switzerland, you’ll be asked for consent before personalised ads are shown.
You can block or delete cookies at any time in your browser.

Information collected automatically

When you visit a page, some technical information is collected by the services that run the site:

How to solve the undefined variable/index/offset PHP error

Sat, 18 Sep 2021 21:48:45 +1000

This guide will you how to solve the notice undefined variable, index, or offset error that you are experiencing in PHP. This error is easy to spot in the warning and error message logs. Consequently, you will typically see a descriptive error message like this:

Notice: Undefined variable
Notice: Undefined index
Notice: Undefined offset

Watch the video on YouTube

Issue description

The notice undefined variable, index, and offset errors are very common in PHP. So, let’s look at some code examples that will output these errors.

Ansible: Popular Alternatives

Mon, 16 Aug 2021 06:24:50 +1000

Ansible enables automation at scale and is a vendor-agnostic open-source software. Additionally, it allows you to work with a wide variety of operating systems, devices, and platforms. But, there is usually more than one way. This post will look at some of the popular Ansible alternatives.

psst

Click here to see our Ansible Infographic for a quick summary.

Infrastructure as code

Firstly, let’s begin with the concept of “Infrastructure as Code”. Infrastructure as Code is an approach to manage your entire IT infrastructure. You do this using a single set of instructions in the form of code. Infrastructure as Code is also referred to as a declarative state of infrastructure. In other words, you declare how your infrastructure is supposed to be by design.

Ansible: How to work with inventory, variables, and facts

Tue, 27 Jul 2021 19:32:44 +1000

This guide will show you how to work with the inventory file, variables, and facts in Ansible. Understanding these concepts in Ansible is critical. Generally, Ansible uses the information provided in the inventory and variables to discover information about your remote systems. And, the information gathered is then stored as facts.

Let’s discuss each of these items in more detail and learn how to use them.

Inventory file

The inventory file in Ansible stores information about physical and virtual servers, network devices, cloud instances, and much more. In fact, any device that provides SSH access can be added to the inventory file.

Ansible: YAML Basics

Tue, 27 Jul 2021 19:00:26 +1000

Understanding YAML is essential as it is a popular markup language. In addition, you need to get familiar with the basics of the YAML syntax to master the art of writing playbooks in Ansible.

YAML is often called “Yet Another Markup Language” because it appeared in the era of other markup languages such as (HTML, XML, etc.). However, later its reference changed to “YAML Ain’t Markup Language” to emphasize its data-oriented purpose. Indeed, it is used for configuration files and other declarations. For example, in the case of Ansible, you may think of a playbook written in YAML as a declaration of configuration procedures and processes.

Ansible: Basic concepts (playbooks, modules, collections)

Tue, 27 Jul 2021 18:54:52 +1000

Let’s look at playbooks, modules, and collections in Ansible. These are basic concepts, but you must know this to get started with Ansible. This guide will describe their roles in the automation process.

Playbooks

A playbook is an essential basic concept of the Ansible architecture. Moreover, playbooks lie at the core of automation.
The chances are that you will spend writing playbooks. A Playbook is a script containing the automation tasks, their order, and behavior.

Ansible: Writing your first playbook

Tue, 27 Jul 2021 18:46:04 +1000

Let’s try to automate something and write our Ansible playbook. For our first example playbook, we’ll configure a server to run a web server using Nginx.

Inventory

To begin with, we would like to create an inventory and specify the hosts that we want to configure as web servers. Inventory files are in the .ini file format. Next, edit your playbooks/hosts file. And then put a [webservers] line above the dev-server and prod-server. This change indicates that dev-server and prod-server are in the webservers group.

Ansible: Introduction

Mon, 19 Jul 2021 19:37:30 +1000

The rise of cloud technologies and DevOps culture has resulted in the proliferation of various automation tools. The automation tools, in turn, increased the speed of development and service delivery. One of the tools which have found a large adoption is Ansible. This Ansible introduction will uncover the fundamental concepts.

psst

You may also want to read: Cloud 101 – Ansible Automation.

What is Ansible?

Ansible is often defined as an infrastructure configuration and orchestration tool. Ansible allows automating tasks, streamline service provisioning, and enabling infrastructure as a code. There are many examples of what you can do with Ansible. This Ansible introduction will look at a few of these.

How to create database migration in Laravel

Mon, 19 Jul 2021 19:00:03 +1000

Laravel migrations allow you to change your database via PHP code. Having a database as code allows you to do version control your database with ease. This guide will show you how to create a Laravel database migration.

Why use Laravel Migrations?

A Laravel database migration:

It eliminates the need for users to go back and forth between app and database to configure and test their apps.
It allows for rapid deployment of Laravel apps. As a result, the user only needs to run one command to deploy their apps onto production.

Cloud 101 - Jenkins Automation

Mon, 19 Jul 2021 18:20:04 +1000

Jenkins is an open-source automation server to build, test, automate and deploy projects like Ansible. It is a continuous integration and continuous delivery server. It is Java-based and has the support of more than 1700 plugins to extend its functionality. But, first, you must create pipelines to operate Jenkins.

Watch the video on YouTube

Key concepts

Jenkins pipeline

Jenkins Pipeline is a collection of plugins to build continuous delivery (CD) pipelines. And a CD pipeline is the process of presenting your software to your users and customers. Furthermore, the Jenkins Pipelines give us the tools to model pipelines as code.

How to Install a Laravel Project

Fri, 16 Jul 2021 10:39:18 +1000

In web development, a robust framework is where most developers go. As a result, Laravel is quite popular and loved by many developers. This post will teach you how to install Laravel and set up a basic project.

psst

You may also want to read: Getting Started with Laravel Artisan CLI.

Watch the video on YouTube

Install Laravel using Composer

You can download and install Laravel using the files. However, it is much more convenient to install a Laravel project using Composer. You can install Composer via this link: https://getcomposer.org/download/. Once installed, open your command-line interface.

Ansible: Infographic

Wed, 14 Jul 2021 09:29:00 +1000

Ansible is an open-source, simple, and robust IT automation tool, much like Chef. It helps automate repetitive tasks that save time, such as setting up AWS S3 buckets and much more. Ansible can also do configuration management, and it is super easy to use. This Ansible infographic will help you understand the fundamental concepts.

Ansible works by connecting several nodes/machines over SSH. SSH is a secure program that connects to a remote machine and runs commands on that machine. Furthermore, it encrypts all the communication between these machines.

Cloud 101 – Puppet Automation

Tue, 13 Jul 2021 20:33:41 +1000

Puppet is an open-source automation tool for the configuration and management of servers, much like Ansible. It works by defining the desired state of the systems in your infrastructure. Therefore, you do not have to describe any steps required. Instead, the domain-specific language called Puppet Code helps define your desired state.

Watch the video on YouTube

Key concepts

The Puppet platform

Puppet consists of many packages that together form the Puppet platform. You use these packages to manage, run and store the Puppet code. These packages are Puppet Server, Puppet DB, and Puppet Agent. Puppet Agent also contains Facter and Hiera.

Cloud 101 – Chef Automation

Mon, 05 Jul 2021 20:22:55 +1000

Chef is an open-source IT automation tool for configuration management, much like Ansible. It acts as infrastructure as code and follows the client-server architecture. To write configurations, it uses Ruby, a domain-specific language (DSL). It can use both physical and virtual machines to manage infrastructure.

Watch the video on YouTube

Key concepts

Chef Infra

Chef Infra helps transform infrastructure into code. It does this regardless of the size of infrastructure and environment where you run it.

Cloud 101 – Ansible Automation

Tue, 29 Jun 2021 22:18:39 +1000

Watch the video on YouTube

Key concepts

SSH (Secure Shell)

Getting Started with Laravel Artisan CLI

Mon, 28 Jun 2021 23:32:27 +1000

There are many PHP frameworks to choose from! Laravel is one such framework, and it has been around for more than a decade. Laravel increased in popularity following the release of version three in February 2012. This is because of the usefulness of the Laravel Artisan Command Line Interface (CLI).

Artisan helps the Laravel app development process through a handy CLI tool. It will give you the ability to perform database and file operations all from one place.

Cloud 101 - DigitalOcean Spaces Object Storage

Wed, 16 Jun 2021 19:33:01 +1000

DigitalOcean Spaces is AWS S3 compatible object storage service. It allows us to store data of any size at a low cost. And, it is ideal for static and unstructured data like audio, video, images, or text. You can store files in any space or bucket, and it also provides free CDN.

Watch the video on YouTube

Key concepts

Space or Bucket

A DigitalOcean Space is a bucket or container for you to store objects or files.

Cloud 101 - Linode Object Storage

Fri, 11 Jun 2021 20:43:17 +1000

Linode Object Storage, as its name indicates, is object storage for the cloud. You can store and fetch data of any size and format, including unstructured data. It can handle any data-intensive storage related to machine learning or artificial intelligence. It is also compatible with AWS S3 Storage.

Watch the video on YouTube

Key concepts

Access keys

If you want to enable Object Storage in Linode, you need to create a bucket or access key. The access keys help us access objects that have private read permissions. We also create a secret key when we create an access key. Both secret keys and access keys help us authenticate different object storage tools.

How to be fast in the Linux command line

Mon, 07 Jun 2021 10:26:44 +1000

The Linux command-line should not be tedious. Thankfully, Linux ships with many GNU utilities to make the command-line easy. These tips will help you be fast on the Linux command line. Mastering the command line will make you fast, efficient, and love Linux even more.

psst

You may also be interested in: Most Used Linux/GNU Commands.

Watch the video on YouTube

Tip 1 - Use tab for auto-completion

This is one of the most basic yet valuable tips. Pressing the TABkey will allow you to see all possible options that relate to your command.

Cloud 101 - Wasabi Hot Cloud Storage

Thu, 03 Jun 2021 10:54:04 +1000

Wasabi Hot Cloud Storage is object-based cloud storage, and it can store data of any size at a low cost. Wasabi provides a single storage class to store any data. Using Wasabi Storage, you can upload and download data fast. It is also compatible with AWS S3.

Watch the video on YouTube

Key concepts

Bucket

A bucket is a container to store data. Buckets contain data in the form of objects.

Cloud 101 - Google Cloud Storage

Fri, 28 May 2021 11:20:29 +1000

Google Cloud Storage (or GCC) is object storage for the cloud. It lets you store data of any size in the form of objects. An object is a file that can be in any format. It uses containers or buckets to store objects. Further, each bucket links with a project.

Watch the video on YouTube

Key concepts

Project

GCC stores all the data in a project. You can create one or more projects depending on your scenario. A project contains users, APIs, billing information, authentications, settings, and others.

Cloud 101 - Microsoft Azure Blob Storage

Thu, 13 May 2021 04:38:00 +1000

Azure Blob Storage is object storage for the cloud, and it can store unstructured data of any size. Blob is an acronym for Binary Large Object. Blobs can consist of images, audio, video, and other multimedia files.

Watch the video on YouTube

Key concepts

Storage account

A Storage Account gives you a unique namespace to store your data. Objects stored in Azure have unique account names in their address. Both account name and Blob Storage form the object address in Storage Account.

Cloud 101 - Amazon Web Services (AWS) Simple Storage Service (S3)

Tue, 11 May 2021 20:35:33 +1000

Amazon Web Services (AWS) S3 is a simple storage service that allows us to store and fetch data of any size from anywhere on the web. It is a fast, reliable, durable, secure, low-cost, and very scalable storage infrastructure.

Watch the video on YouTube

Key concepts

Buckets

A bucket is a container to store objects. You create a bucket whenever you want to store an object in AWS S3. After creating the bucket, you upload objects to the bucket. After uploading the objects, you can open, download or move them.

Fix the “no module named” error in Python

Wed, 28 Apr 2021 23:42:05 +1000

This post will show you how to fix the “ModuleNotFoundError: No module” error. This example will focus on no module named setuptools_rust on Python error. We will also look at a cryptography module error that sometimes also occurs.

psst

You may also be interested in: How to Setup Docker on Ubuntu.

When does the error occur?

This error occurs when you install a Python module, and a dependent module is not installed. For example, the Python 3 modules mentioned below must be the setuptools-rust plugin.

Alpine Linux vs. Ubuntu Comparison

Wed, 21 Apr 2021 09:28:06 +1000

Should you switch to Alpine Linux? If so, why? Let’s forget the hype and do a detailed Alpine Linux vs. Ubuntu comparison. This post is not intended to be a “which is better” guide; it is a comparison of Alpine Linux vs. Ubuntu. Both operating systems are great, and each one has its own pros and cons. Also, we will look at using Alpine Linux as a host operating system and as a container base image.

How to set up Docker on Alpine Linux

Sat, 17 Apr 2021 02:01:16 +1000

This post will show you how to set up Docker on Alpine Linux. You will also see how to: add Portainer to make Container management a breeze and use Docker to start and stop containers.

Watch the video on YouTube

psst

Heads up! This content was tested on Alpine Linux v3.13.

What is Alpine Linux?

Alpine Linux is a lightweight Linux distribution primarily made to run applications on Linux distributions. It is simple, secure, and resource-efficient. In fact, it is so efficient that it can run directly from RAM! In addition, Alpine Linux provides a full-fledged Linux environment built around BusyBox and musl libc, making it smaller and more efficient than traditional GNU / LINUX-based operating systems Ubuntu.

Backup with rclone and Cron from your Synology NAS

Mon, 22 Mar 2021 18:56:37 +1000

The Synology NAS DiskStation provides a wide variety of tools in its package center. These tools are useful but can sometimes be restrictive. Luckily, the Synology NAS DiskStation is highly configurable! Let’s see how you can backup data using Rclone from your Synology NAS with an automatic Cron script.

We will do this by using SSH on the Synology NAS to install Rclone. We will then configure our Synology NAS to run a Cron job (or a task using a user-defined script).

Tips to avoid sending emails to the wrong person

Thu, 11 Mar 2021 19:02:02 +1000

Let’s face it! It’s far too easy to send an email to an unintended person. Not only can this cause a compliance breach, but it will also impact your reputation. This post will give you tips on how to avoid sending emails to the wrong person.

You cannot solely rely on “recall” in Outlook. Recall only works if the original message was unread and the organization allows recalls. If the message has been viewed, the recipient will receive a request to recall the message. It will then be up to the recipient to delete the original themselves.

How to use VIM Editor

Fri, 26 Feb 2021 22:46:56 +1000

This post will show you how to use VIM! Vim is a text editor that edits all kinds of text files. For instance, the text file may be a shell script with a .sh extension or a text file with a .txt extension.

Watch the video on YouTube

psst

You may also want to see the VI Editor Cheat Sheet / Survival Guide.

Linux Installation

You can use the following command to check its installation in your system:

How to use cURL

Thu, 18 Feb 2021 07:26:05 +1000

cURL is used to send data or fetch data to/from a server. This data is transferred using the following protocols: FTP, HTTP, HTTPS, IMAP, POP3, SCP, SFTP, SMTP, TELNET, TFTP, and many more. cURL does not involve any user interaction. You can also use this tool when testing RESTful API and much more.

It also offers the following useful services:

User Authentication
FTP Upload
HTTP Post
Cookies
SSL Connections
and many more

Watch the video on YouTube

Install cURL on Linux

First, update your system by using the update command before installing it to any distribution of Linux.

How to use Cron jobs

Mon, 15 Feb 2021 08:29:57 +1000

A Cron job is a job that runs automatically after a fixed interval of time. A Cron job can either be a command or a shell script that you want to run periodically at a specified time.

Once you schedule it, it will run automatically at a specified time, day, and month.

psst

Read this post if you want to prevent Cron from running PHP code more than once.

Watch the video on YouTube

How does the Cron job work?

To add any job to your system, you can use the Crontab. Crontab stands for Cron tables.

How to test PHP code using PHPUnit

Sun, 24 Jan 2021 05:05:10 +1000

PHPUnit automatically executable tests that verify your application’s behavior. Thus - you can ensure that your changes don’t break existing functionality. This post will show you how to test your PHP code using PHPUnit.

Watch the video on YouTube

psst

You can learn more about coding here. We discuss PHP, Bash, and more.

Setup PHPUnit

You can setup PHPUnit using the following terminal command after navigating to the project directory:

composer require --dev phpunit/phpunit ^9

As a result, the command will add the requirement of PHPUnit to your composer.json file. Composer will then install the dependencies. With that, you are all set and ready to go!

How to use NMAP

Mon, 18 Jan 2021 07:29:05 +1000

Nmap (or Nmapper) is a free and open-source network scanner used for analysis, security audits, and network exploration. You use it to discover hosts and services on a computer network by sending packets and analyzing the responses in an easy-to-use manner. First, let us take a look at how to use Nmap.

The Nmap port scanner can primarily determine:

Available hosts on the network
The operating system running on the hosts
Name and version of applications running on the hosts
Type of firewalls being used on the hosts
And much more

Watch the video on YouTube

psst

You may also want to read: Tools to scan for website problems.

How to install Nmap

Linux Installation

Run the following command to install it on Debian-based Linux distributions like Ubuntu, Linux Mint, and Kali Linux:

How To Customize Your WordPress Login Page

Tue, 12 Jan 2021 22:51:53 +1000

Let’s face it! The default WordPress login page is quite bland. If you have some impressive stuff on your site, showing the WordPress form is a bad first impression. The login form should at least reflect the greatness that the users are about to experience. So let us take a look at how you can customize the WordPress login page!

Besides, using the default WordPress login page shows that you are lazy or ordinary. This is a bad sign, especially when you want people to trust you. The good news is that customizing the login page is easy since you can do it with the help of the plugin.

How to Upload a File using PHP & Ajax

Wed, 06 Jan 2021 08:39:45 +1000

This post will show you how to upload a file using PHP & Ajax. File handling can sometimes require unique solutions. The conventional way of file upload is using a <form> tag. This solution works for many cases. But you might need to add some innovation when you need to upload without the form tag to avoid submitting the form.

Practically speaking -

There are some points where submitting a form might not be useful. For example, you can be working on a products page. And, you want to give the user the option to upload and delete the product images. So, in this case, you do not want the form to submit. But, at the same time, you would want to update the images.

How to Restrict WordPress Site Access

Mon, 30 Nov 2020 19:21:11 +1000

A lot of the time, you need to restrict access to various users on your website. Whether you’re cordoning premium content, sensitive pages, or content targeted to specific individuals, there are various ways you can restrict user access easily and effectively on your WordPress website.

The easiest method is using plugins that you can download and link with your website. If you have coding skills, you can also edit various functions to achieve the same thing.

How to add a WordPress user sign up

Tue, 24 Nov 2020 07:39:50 +1000

Adding an external user sign-up page on a website allows users to register for different roles. Once registered, they can perform tasks such as adding new articles, new comments and even performing other actions such as designing.

Allowing a user to sign up is a common thing for bloggers and companies that accept guest posts. However, you can also use this feature to offer premium content for your members. But, this may require more custom fields and branding. The default WordPress sign-up page contains fixed fields and a WordPress logo.

Editing Custom Fields Using REST API in WordPress

Sun, 08 Nov 2020 08:50:07 +1000

On December 6, 2016, the WordPress team announced the JSON REST API. The original API came with an endpoint for posts, comments, terms, users, meta, and settings. By now, the REST API includes much more functionality like plugins access, custom post and taxonomy types, authorization, and searches. In this post, you will be learning how the posts endpoint works and how you can use that to edit WordPress custom fields. But first, let us start with the basics of using the REST API in WordPress.

How To Create Membership Pricing Tables In WordPress

Sun, 08 Nov 2020 08:24:55 +1000

Selling products and services is the best way to earn money with a WordPress website. But many people don’t know how to set up custom packages for their users. So they end up spending money on hiring developers to set these pages for them.

Creating custom plans can be done using plugins and templates. There are so many premia and paid options that you can choose from depending on your website theme. Furthermore, they integrate with other platforms that offer payment gateways and email services, such as PayPal and Aweber, respectively.

How to handle errors in Bash

Tue, 03 Nov 2020 20:06:25 +1000

There are different techniques that we can use to handle errors in bash/shell scripting. Let us see each of these techniques one by one.

The easiest way to prevent errors is first to run your command in the terminal. And, if the command in the terminal runs as expected, you should add it to your script. Let’s look at the different ways you can debug and handle errors in Bash.

How To Use Dockerfiles In Docker

Wed, 28 Oct 2020 19:37:55 +1000

This post will explain how to use Dockerfiles in Docker. You will see a brief introduction to each of the Dockerfile components. You will also see the complete process of installing and setting up WordPress with Dockerfile.

The Dockerfile is a simple text file that contains various instructions for building Docker images. It allows you to pull a basic Docker image and then effectively customize your Docker Image with all the bits that you need.

A Practical Guide to Using Git

Sun, 20 Sep 2020 12:01:19 +1000

This guide will show you how to use Git using some practical examples. Git is a very commonly used tool, and you should know how to use it. But, don’t worry; Git is super easy to use!

This post will highlight a few practical examples when using Git. But first, let’s get into the basics of Git before we look into the practical examples.

Watch the video on YouTube

psst

By the way! Don’t confuse GitHub with git. GitHub is a website for hosting projects that use git. In comparison, git is a version control system.

What is Git?

Git is a Distributed Version Control System (VCS) that allows you to track changes on code, supports many developers working on the same code simultaneously, and enables code to be merged easily.

How to code a basic WordPress plugin

Sat, 19 Sep 2020 12:42:59 +1000

This post will teach you how you can code a WordPress plugin. First, we’ll start with a simple plugin to check posts for specific words and filter them. The next step will be to add a menu and integrate it with the plugin.

With over 7 million downloads for WordPress 5.3 alone, WordPress has become one of the most influential CMS of all time. Over 30% of the websites on the internet run on WordPress. The success of WordPress is due to the thousands of developers who work day and night to improve WordPress. WordPress is most famous for its over 55,000 plugins. Some powerful plugins include woo-commerce, Elementor, BuddyPress, LearnPress, Yoast SEO. As a result, WordPress has become a platform for online shopping, learning, socializing, and much more.

Handy .htaccess file examples

Sun, 13 Sep 2020 06:56:40 +1000

In this post, we will cover some fundamentals of the .htaccess file. But, first, we’ll learn about the .htaccess file in general and look at some practical .htaccess examples.

Watch the video on YouTube

What is the .htaccess?

You use the .htaccess configuration file on Apache web servers. This file controls how a web server responds to different requests. The .htaccess file allows you to take directives that would typically be put in Apache’s main configuration files and a directory-specific configuration file instead. The Apache server loads the .htaccess file from the directory placed in by detecting and executing the file. It is a server configuration file, and you use it to manipulate features directly. It is also less resource intensive as compared to a plugin.

How to Hire a Freelancer

Sun, 13 Sep 2020 06:20:32 +1000

When you start looking for help and run into freelancers, you do get spoilt for choice. There are so many options to choose from. Freelancer platforms like Fiverr have over 830,000 freelancers. So how do you decipher the good from the bad? Who do you entrust your work to? How do you choose which Freelancer to hire?

When you are pressed for time or want extra help to get more done, you often turn to freelancers. Of course, it sounds convenient, but it rarely is. Unless you are thorough in your vetting process, you might come back disappointed. Hiring a freelancer for point tasks helps save time and money. One needs to be aware of some ground rules to ensure success. It is not as easy as throwing your requirements over the wall and expecting everything designed to perfection. There are some must-dos to ensure an optimum experience.

How to submit an associative array with HTML & PHP

Mon, 07 Sep 2020 11:01:17 +1000

This post will show you how to submit an associative array with HTML and PHP. This concept is quite useful when you need to submit array-type data such as shopping cart information.

Feel free to skip to ‘HTML forms and input’ or to ‘Submitting Array data through HTML’ if you’re quite familiar with the syntax of PHP’s array() function.

Watch the video on YouTube

Associative arrays in PHP

One of the best things about PHP is its dictionary-like arrays. The associative array data structure allows the user to create multi-dimensional arrays with many different data types. It is quite similar to an object but created at runtime. The values in associative arrays exist in key-value pairs.

How to use functions in Bash Scripting

Mon, 07 Sep 2020 10:37:12 +1000

This post will look at how you can use functions in Bash Scripting. Head ups! You may want to read the bash scripting basics post if you are new to Bash scripting.

Watch the video on YouTube

Basics of a Bash function

A function is a set of commands used to perform a particular task. There are many benefits to using functions. For instance, you can use them to avoid code repetition, decrease the error chances, and increase the program’s readability.

How to Set Up Docker on Ubuntu

Mon, 07 Sep 2020 10:12:30 +1000

This guide will show you how to set up Docker in Ubuntu. Not only that! You will also see some useful examples and commands.

Watch the video on YouTube

What is Docker?

Docker uses virtualization technology which in turn makes developing and deploying containerized applications a breeze! Virtualization allows the container to be deployed on any machine without any compatibility issues. So it makes your software simple to develop, deploy, use and maintain.

How to get your website noticed

Wed, 02 Sep 2020 19:51:28 +1000

This guide will show you how to get your website noticed. Attention is a limited commodity. We tend to “hover” over a website for a few moments and decide whether we want to spend time on it or not. Similarly, we don’t read; we screen and glean the current attention deficit; it’s more challenging to keep a visitor longer than a few moments.

In the Attention Economy, “digital products are competing for users limited attention. As a result, the modern economy increasingly revolves around the human attention span and how products capture that attention.” Nielsen Norman Group defines the current dilemma digital marketers face. It summarizes and coins the term “Attention Economy” in the 21st century’s lexicon, which belongs to the internet.

5 Ways to Earn Your Customers Trust!

Wed, 02 Sep 2020 19:05:37 +1000

Why is customer trust important? How can you gain customer confidence and loyalty? Organizations big and small grapple with these questions daily. Is there a secret recipe for customer loyalty? Let’s unravel the facets of customer psychology and a business’s ability to earn and retain trust.

Sorry to disappoint you; there is no “secret recipe” to build customer loyalty. When I mentioned a secret recipe, I meant there is “no hack” to attract customers and keep them. There is no scheme which allows you to do that. Even though there may not be a complex algorithm to retain customers, but it’s still possible to win trust. How does one do it? you may ask?

Best Plugins to Aid Your WordPress SEO

Wed, 02 Sep 2020 06:59:20 +1000

SEO is so relevant in this era that no website can afford to ignore it. One of the best ways to put this technique into practice is using plugins on WordPress. They make work more accessible, especially when optimizing the content. But, there has been a significant increase in SEO plugins.

As such, it makes it difficult for people to find the best. This is why we have decided to develop a list of plugins that will boost your rankings. Always test new plugins and see how to affect you as well as your SEO strategy.

How to rename a file in Linux

Wed, 02 Sep 2020 05:53:09 +1000

This post will discuss everything you need to know to rename a file in Linux. Heads up! You may want to read our handy Most Used Linux Commands post before continuing further.

Watch the video on YouTube

Overview

As you may know, a filename extension helps identify the type of file we are dealing with. For instance, a file may have its name as automation.sh. Here, ‘sh’ is an extension that stands for the shell. It means that this is a shell script that contains a set of commands.

SEO blueprint to get massive organic traffic

Mon, 31 Aug 2020 06:47:11 +1000

Setting up a website is easy but getting organic traffic is not. And, only a few sites are lucky enough to be on Google’s first page. This page is mostly filled with sponsored content from Google AdWords, and the rest are high authority websites. This guide will show you how to get on Google’s first page using our SEO blueprint.

Your page can rank higher, but if it doesn’t land on the 1st page, then you will receive little or no traffic at all. SEOs will say that “the best place to hide a dead body is on the 2nd page of the search results. So your target should always be landing on the first page.

5 Reasons Why You Should Consider a Cloud Certification!

Fri, 28 Aug 2020 06:14:53 +1000

There has been a massive increase in overall cloud consumption. Enterprise and SMB’s are increasingly moving their workload to the public cloud. It’s no longer a question of if but when you move your critical business workloads to the cloud. Let’s understand why it makes sense to level up your understanding of the cloud and get a Cloud certification.

The overall spend on cloud is expected to touch USD 216B by 2022, according to Statista. The bulk of this spends results from continuous cloud adoption by almost every industry. The clamor is not just about workload migration, whether it is high tech, finance, health care, public sector, or education. There is an increasing trend of having more applications that are custom-built for the cloud. In addition, the application development landscape is changing rapidly, with more apps written to run in containers. If you are a budding Cloud enthusiast or a seasoned veteran in IT, getting a Cloud certification makes sense, especially if you try to differentiate yourself from the crowd.

How to use the Bash History command

Thu, 27 Aug 2020 21:05:43 +1000

Do you have a hard time finding a previously used Bash command? If so, then you are in the right place.

Finding that command is straightforward when you use the Bash history! So what is this command, and what are its uses? First, let’s discuss this in more detail.

Watch the video on YouTube

What is the Bash History Command?

The Bash History command stores all typed and executed commands. It is a GNU command and is very popular. Any user that runs a command will have their command saved in the .bash_history file.

How to use Bash Operators

Thu, 27 Aug 2020 06:27:08 +1000

Let’s look at Bash Operators and see how you can use them in your Bash scripts. This post will focus on arithmetic operators to help you do mathematical operations in Bash. We will also look into relational operators allowing us to compare values.

Watch the video on YouTube

Arithmetic Bash Operators:

We use these operators to perform mathematical operations like addition, subtraction, and others. They work in the same both in the terminal as well as in scripts. You can do these mathematical operations using the expr (evaluate expressions) command or via double braces. Let us see some examples for each of these below.

Top 12 Must-Do SEO Tasks (2020 Tips)

Fri, 21 Aug 2020 07:12:17 +1000

If you want a successful website, then there are some SEO tasks that you need to consider. But most site owners tend to overlook them and focus on tasks that add little or no value. Others have no idea what it takes to outrank others in the search engine results.

There are more than 200 million websites active right now. These SEO tasks will help you get on top! We have compiled a list of 12 essential SEO tasks that will make your site a success.

How to use Tar and ZipHow to Use Tar, Zip, Gzip, and Other Compression Formats

Fri, 21 Aug 2020 06:10:28 +1000

Compression and archiving are essential for managing large files and directories in a more manageable format. Whether you’re a Linux or Windows user, understanding how to use different formats can optimize your workflow. This guide will cover the .tar, .zip, .gz, and other popular formats, highlighting their differences and usage scenarios.

Introduction to File Compression and Archiving

The .zip format is familiar to many as it is widely used across various operating systems, including Windows. However, in the Unix and Linux ecosystems, .tar and .tar.gz are more prevalent due to their robustness and compatibility with Unix attributes.

Variables in Bash/Shell Scripting

Wed, 19 Aug 2020 06:44:55 +1000

Let’s take a look at defining and using a variable in Bash. We will even look at some unique variables that you will find very handy. Heads up! This post is a continuation of the Bash Scripting Basics post we did earlier. Be sure to check it out!

Watch the video on YouTube

What is a Variable?

A variable is a symbolic name that has a value associated with it. Its name is variable because its value varies. We use variables to store values for future use.

Basics of Using chown and chmod Commands

Sat, 15 Aug 2020 10:31:27 +1000

This post will discuss the chown and chmod commands in Linux! They can be daunting for a new Linux user, but you’re in the right place to learn about them. Also note, you may also want to read our most used Linux commands post to learn the basics about these commands. That post also discussed the chown and chmod command, but it shows how you can copy permissions.

Watch the video on YouTube

What is the chown (Change Owner) command?

We use the chown command to change the owner of the files and directories. And you quite often use the ls -l command to check the owner and group of a particular file.

How to move your SMB to the Public Cloud?

Wed, 12 Aug 2020 18:14:45 +1000

As a small, medium business owner, getting stuck with technology constraints should be your least concern. But, with the world moving to the Cloud, are you taking the right steps to take your businesses to the next level and break away from the shackles of technology restrictions? Let’s take a look at how you can move your small to medium business to the Cloud!

Carey quietly sat on the edge of a weathered bench on the pier near the Sydney harbor. Deep in her thoughts, her unique ideas were jostling for her attention. With her dreamy but determined eyes set on the horizon, she looked at a patch of clouds slowly moving away. Carey, a budding entrepreneur, thought about how moving to the Cloud can give her business the impetus she has been searching for. The intuit study predicts that around 80% of small businesses would be in the Cloud by 2020, up from only 37% in 2014. The study says the Cloud is the future for small businesses.

Most Used Linux Commands

Sat, 08 Aug 2020 11:03:20 +1000

Learn to navigate Linux like a pro using these commands! Linux isn’t just for seasoned sysadmins, and it is not as scary as it seems. You may already know that Linux has many commands. You do, however, only need to know a few commands to get along.

Linux is an entire family of Unix operating systems based on the Linux Kernel. You will find that these operating systems are also known as distributions (or distros). And, you will undoubtedly know one of these popular distros: Ubuntu, Debian, Arch, Fedora, and Mint, to name just a few.

Bash Scripting Basics

Sat, 08 Aug 2020 07:16:39 +1000

Bash is fundamental to Linux, and every Linux user uses it at some point or another. This post will help you understand bash scripting basics and provide some pro-tips!

Bash is an acronym for “Bourne-Again SHell” and a command language interpreter interprets our commands. Bash is a default interpreter on most of the GNU/Linux-based systems. We can check the default interpreter in our system by the following command:

echo $SHELL

Watch the video on YouTube

What is a bash script?

A Bash script is just a set of commands we regularly use in a terminal, written in a sequence. You can use Bash scripts in many different ways. For instance, you can run multiple commands together and automate tasks.

8 Ways to reduce your Cloud spend

Wed, 29 Jul 2020 20:19:20 +1000

Entrepreneurs and small businesses are increasingly opting to migrate their critical applications to the cloud. The benefits of doing so are quite evident; but, if you are not keeping a watchful eye, the cost of moving to the cloud can come with a hefty price tag. So, let’s dive into learning pragmatic ways to reduce your cloud spend.

With every passing year, the rate of cloud adoption is increasing. More businesses are looking at moving over to the cloud. Gartner points out, “Through 2022, Gartner projects the market size and growth of the cloud services industry at three times the growth of overall IT services.” There can be many advantages to move to the cloud. Some of the important ones are adaptability, better-coordinated work, flexibility, redundancy, and cost. As per Intuit, 80% of small businesses will move to the cloud in 2020, and there is a good reason for it. Of all the reasons to move to the cloud, the most prominent is potential cost savings. Small businesses are usually on a tight budget, so moving to the cloud makes sense. The cloud gives the ability to turn CapEx into OpEx and the flexibility to spend based on their need. Unfortunately, most businesses experience the opposite of cost savings. This dichotomy occurs due to their slight lack of experience in a new domain (cloud hosting). That said, there are ways in which you can curtail your expense.

The Ultimate Guide on How to Secure WordPress

Wed, 22 Jul 2020 22:09:21 +1000

So you are thinking about using WordPress. Congratulations! You are in good company. WordPress powers over 25% of the entire web and holds almost 60% of the global market share for content management systems. With WordPress powering such an important part of your business, it needs to be stable and secure. Below, we’ll outline a series of best practices that any serious WordPress installation should include. This covers the WordPress software itself, associated plugins you’ll need, and the Linux host that your WordPress installation lives on.

How to enable ZipArchive for PHP

Sat, 06 Jun 2020 10:15:10 +1000

Is your PHP saying that it cannot find the ZipArchive class? Then, this post will show you how to enable the ZipArchive module.

Watch the video on YouTube

psst

You may also want to read about: Laravel for Web Artisans.

You should see the following error:

PHP Fatal error: Uncaught Error: Class 'ZipArchive' not found

Also, below is an example of the code you may be using:

$zip = new \ZipArchive();
$x = $zip->open($target_path);
if ($x === true) {
 $zip->extractTo($target_dir . $name[0]);
 $zip->close();
}

What does this error mean?

This error means that PHP could not find the ZipArchive class. Therefore, PHP needs to have the zip extension installed for the ZipArchive Class to be present.

Terms and Conditions

Mon, 01 Jun 2020 11:52:03 +1000

These terms and conditions (“Terms”, “Agreement”) are an agreement between Website Operator (“Website Operator”, “us”, “we” or “our”) and you (“User”, “you” or “your”). This Agreement sets forth the general terms and conditions of your use of the anto.online website and any of its products or services (collectively, “Website” or “Services”).

User content

We do not own any data, information or material (“Content”) that you submit on the Website in the course of using the Service. You shall have sole responsibility for the accuracy, quality, integrity, legality, reliability, appropriateness, and intellectual property ownership or right to use of all submitted Content. We may monitor and review Content on the Website submitted or created using our Services by you. Unless specifically permitted by you, your use of the Website does not grant us the license to use, reproduce, adapt, modify, publish or distribute the Content created by you or stored in your user account for commercial, marketing or any similar purpose. But you grant us permission to access, copy, distribute, store, transmit, reformat, display and perform the Content of your user account solely as required for the purpose of providing the Services to you. Without limiting any of those representations or warranties, we have the right, though not the obligation, to, in our own sole discretion, refuse or remove any Content that, in our reasonable opinion, violates any of our policies or is in any way harmful or objectionable.

Acceptable Use Policy

Mon, 01 Jun 2020 11:51:21 +1000

These acceptable use policy (“Acceptable Use Policy”, “AUP”, “Policy”) is an agreement between Website Operator (“Website Operator”, “us”, “we” or “our”) and you (“User”, “you” or “your”). This Policy sets forth the general guidelines and acceptable and prohibited uses of the anto.online website and any of its products or services (collectively, “Website” or “Services”).

Prohibited activities and uses

You may not use the Services to publish content or engage in activity that is illegal under applicable law, that is harmful to others, or that would subject us to liability, including, without limitation, in connection with any of the following, each of which is prohibited under this Policy:

Disclaimer

Mon, 01 Jun 2020 11:51:08 +1000

This disclaimer (“Disclaimer”, “Agreement”) is an agreement between Website Operator (“Website Operator”, “us”, “we” or “our”) and you (“User”, “you” or “your”). This Disclaimer sets forth the general guidelines, terms and conditions of your use of the anto.online website and any of its products or services (collectively, “Website” or “Services”).

Representation

Any views or opinions represented on the Website belong solely to the Content creators and do not represent those of people, institutions or organizations that Website Operator or creators may or may not be associated with in professional or personal capacity unless explicitly stated. Any views or opinions are not intended to malign any religion, ethnic group, club, organization, company, or individual.

How to install and use the Windows 10 SSH feature

Sat, 30 May 2020 09:04:38 +1000

Linux offers SSH directly via the Bash interface, and now you can do the same for Windows 10! Why do this? Putty makes it hard to initiate new server connections via the CLI and thus limits automation capability. Having SSH installed on Windows makes this task super straightforward. This post will show you how to install and use the Windows 10 SSH feature.

Watch the video on YouTube

How to install the Windows 10 SSH feature

You can install the SSH feature using the Optional Features in Windows Settings or Windows PowerShell. However, either of these options will require elevated Administrator permissions.

Tools to scan for website problems

Thu, 28 May 2020 10:22:39 +1000

This post lists useful tools that will help you identify and troubleshoot website problems. These tools are easy to use and will undoubtedly help your site be secure, fast, and, of course, found. All components of a site are equally important. Therefore you need to check your website for security, coding, SEO, CDN, hosting, and network issues with equal importance.

For the most part, enter your site URL and click submit! It does not take long to bring up your results. Anto does not doubt that these tools to scan for website problems will keep you busy for a while.

PHP code examples for AWS

Fri, 24 Apr 2020 16:34:58 +1000

Here are some useful PHP code examples to help you along with Amazon Web Services (AWS). This post is updated frequently, so bookmark this page! Also, feel free to suggest an example code that others may find useful.

Pro tip!

Some of the AWS APIs provide a lot of data back in the form of associative arrays. Unfortunately, traversing these arrays can be painful without a little help. Thank goodness for JMESPath! JMESPath lets extract elements from a JSON document in a declarative manner.

Wasabi S3 speed test results from Sydney/Australia

Fri, 24 Apr 2020 13:53:06 +1000

This post shares the Wasabi S3 speed test results from Sydney/Australia. Read this post in conjunction with “How to install NextCloud using Wasabi S3 as primary storage” if you plan to use Wasabi S3 for NextCloud.

psst

This post was updated on 2022-05-06, thanks to the folks at whirlpool.net.au. What changed? Wasabi S3 now has a data center in Sydney, Australia, to help reduce latency.

About Wasabi S3

Wasabi S3 is a company that provides cloud storage services. It offers its services through a globally distributed network of data centers. The company was founded in 2015 and is headquartered in Boston, Massachusetts. Wasabi is a relative newcomer to the cloud storage market, but it has quickly gained popularity due to its low prices and high speeds. In addition, Wasabi offers a unique pricing model that allows customers to pay for only the storage they use without any monthly fees or minimums. As a result, Wasabi has become an attractive option for businesses and individuals looking for an affordable and reliable way to store their data.

How to fix the "Cannot autolaunch D-Bus without X11 $DISPLAY" error

Sat, 29 Feb 2020 04:36:09 +1000

Are you using the “aws ecr get-login-password” with the “docker login” command? If so, let’s fix the “Cannot autolaunch D-Bus without X11 $DISPLAY” error.

The error you are getting should look something like this:

Error saving credentials: error storing credentials - err: exit status 1, out: Cannot autolaunch D-Bus without X11 $DISPLAY

What do these commands do?

aws ecr get-login-password - The “get-login-password” command fetches and displays a password that you can use to authenticate against an AWS ECR registry.

How to install NextCloud using Wasabi S3 as primary storage

Fri, 07 Feb 2020 13:59:50 +1000

Let’s look at how to install NextCloud using Wasabi S3 as primary storage.

This post assumes that you have some experience with Docker and setting up NextCloud. Therefore, we will not discuss configuring proxies, HTTPS, and more. Instead, we will explore how you can set up a fresh NextCloud base install with Wasabi as the S3 primary storage on Docker. You can then follow your own steps to customize your NextCloud install further as needed. Read our how-to setup Docker guide if you need some help.

How to Mount an NFS Share Into a Container

Thu, 09 Jan 2020 09:07:50 +1000

This post will show you how to mount an NFS share into a container. Then, we will explore mounting an NFS to the container via Portainer and Docker Compose. It is truly super easy to do!

Off course! You can mount your NFS to the host and then mount the host’s NFS folder into the container. But, you can avoid this method. Mounting the NFS directly to the container avoids a manual NFS mount on the host and/or using the /etc/fstab.

How to Install Nano on Your Synology NAS

Thu, 09 Jan 2020 06:11:20 +1000

This post will show you how to install Nano on your Synology NAS. Many people prefer Nano since Nano is easier to use than VIM. Luckily the Synology NAS allows you to add additional software repositories and install Nano easily.

Enable SSH Access

You must enable SSH access to use Nano on your Synology NAS.

Click on the ‘Control Panel’ icon and then click on ‘Terminal & SNMP’. Finally, tick the option called ‘Enable SSH Service’ and click ‘apply’.

How to install Windows Subsystem for Linux

Fri, 20 Dec 2019 20:49:05 +1000

The Windows Subsystem for Linux is a compatibility layer that enables you to run Linux applications natively on Windows 10 and Windows Server 2019. Well done, Microsoft!

You can choose any of the following distributions to run, including Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, OpenSUSE Leap 15, OpenSUSE Leap 42, SUSE Linux Enterprise, Server 12, SUSE Linux Enterprise Server 15, Kali Linux, Debian GNU/Linux, and more.

Watch the video on YouTube

How do you enable Windows Subsystem for Linux?

You can enable Windows Subsystem for Linux using the Windows Control Panel or use Windows PowerShell. Either of these options will require elevated Administrator permissions. It will also possibly need you to restart your computer.

How to disable ModSecurity rules that cause 403 errors

Tue, 08 Oct 2019 02:21:52 +1000

Read this post if you want to disable ModSecurity rules that cause 403 errors. But before you do this! First, let’s see what ModSecurity is and why we use it. Then, this post will focus on an example 403 error using WordPress since this seems to be a common issue.

Heads up!

You will need SSH and root user access to apply the necessary fixes.
You can no longer (in most cases) use your .htaccess file to disable ModSecurity rules.

Watch the video on YouTube

What is ModSecurity?

ModSecurity is an open-source ‘Web Application Firewall’ that inspects all HTTP requests and responses. ModSecurity tries to prevent malicious requests and avoid possible code leakages.

Router Emulators, Saves the day!

Wed, 21 Aug 2019 10:17:42 +1000

Imagine this! You get a phone call from a family member at home. And you are far away. The phone call goes something like this: “The Internet is down!”. What do you do? The family member tried the trusted “reboot”, but nothing works. You even tried to use screen share. And, still, the Internet is doomed. Eventually, you guide the family member to the router’s login page. The big question is, can you remember where to click? Likely not, especially when you set up your router ages ago!

How to set up MFA for your AWS account

Sat, 29 Jun 2019 21:22:28 +1000

This guide will help you set up a virtual MFA device for your AWS account in less than 5 minutes!

Watch the video on YouTube

What is MFA?

MFA stands for multi-factor authentication. It is a simple way to add an extra layer of protection on top of your user name and password.

In other words:

MFA requires that a user signs in with their user name and password (the first factor) and a token MFA token (the second factor—what they have). Together, these multiple factors provide increased security for your AWS account settings and resources.

Bash Script to Bulk Delete AWS CloudWatch Log Groups

Wed, 29 May 2019 22:01:42 +1000

The AWS Management Console does not allow you to bulk delete multiple AWS CloudWatch Log Groups. Instead, use this bash script to bulk delete AWS CloudWatch log groups.

The bash script will do the following:

Ask the AWS region you want to access.
Confirm the Cloud Watch Log Groups that it found in the specified AWS region.
Ask if it should delete the mentioned Cloud Watch Log Groups.
Delete each Cloud Watch Log Group, if you enter yes.

Watch the video on YouTube

How to run the code

First, download the ‘Bash Script to Bulk Delete AWS CloudWatch Log Groups’ script using the following command:

Determine the cause of too many connections in MySQL/MariaDB

Thu, 23 May 2019 03:05:36 +1000

Read this post if you want to determine the cause of too many connections in MySQL and MariaDB. Too many database connections will, as a result, cause an “error establishing a connection to database” response.

What does too many database connections mean?

It means that all the available database connections have been used. Thus, too many clients are currently connected. Or, in other words, it is when the number of threads connected exceeds the server variable defining the maximum number of connections. Therefore, you can only accept new database connections once any of the existing database connections are closed.

Prevent CRON from running PHP code more than once

Tue, 21 May 2019 22:33:30 +1000

Prevent CRON from running your PHP code more than once by using this simple Bash hack!

Watch the video on YouTube

CRON will execute your PHP code regardless of its success or failure. Slow running PHP code could eventually result in many simultaneous processes running the same PHP code. This Bash script will only run the PHP code if it is not running, thus avoiding a race condition.

The Bash script:

Tips to help any AWS Innovator

Thu, 02 May 2019 11:00:42 +1000

Innovation never ends, and it is genuinely always Day 1. What was good yesterday is no longer good going forward. This post will highlight a few tips that will help any AWS innovator. Which of these tips are relevant to you? At least 49% of us must implement one of these tips. Read on to see why.

Watch the video on YouTube

Tip 1 - Change your account access keys

It is not safe to keep account access keys unchanged for long periods. Change all your passwords, credentials, and API access keys frequently! Read further below to see a nifty AWS tool that can help you change your account keys.

Three AWSome learnings from fellow innovators

Tue, 30 Apr 2019 11:17:38 +1000

There is no better place to get inspired than at the AWS Innovation Day 2019 event in Sydney! This post mentions some of the advice provided by fellow innovators.

Watch the video on YouTube

Did you know Content Delivery Networks are not only for static sites?

You probably know that you can speed up static web content delivery using a content delivery network (or CDN). But, in case you don’t know - a CDNs stores your static web content closer to your customer so that your content loads faster. But did you know that a CDN can also speed up dynamic content?

AWS SNS Invalid parameter TopicArn Error

Mon, 15 Apr 2019 21:08:47 +1000

Read this post if you want to solve the AWS SNS Invalid parameter TopicArn error. First off! This AWS SNS Topic ARN message is quite misleading. Read below to see why.

You should see an error similar to this one:

An error occurred (InvalidParameter) when calling the Publish operation: Invalid parameter: TopicArn

Watch the video on YouTube

How to find the error

This error will display one of the following messages:

Bash Script to Create a Swap File in Linux

Mon, 15 Apr 2019 11:50:44 +1000

The Setup Swap Bash script will create a swap file on your Linux instance.

The intention is that you can remove and then re-create an existing swap file. This script is handy when you adjust your AWS Linux instance type. Use this script to create a swap that best suits your new AWS Linux instance type.

The Setup Swap Bash script does the following:

Remove the existing swap file (if it exists).
Determine the available memory on the Linux instance and calculate the correct swap size.
Create the new swap file.

The Setup Swap Bash script is based on the advice provided by AWS. Read “How do I allocate memory to work as swap space in an Amazon EC2 instance by using a swap file?” for more information.

Apache unable to fork new process - Cannot allocate memory

Fri, 12 Apr 2019 20:58:41 +1000

Read this post if you need to fix the “Apache unable to fork new process - Cannot allocate memory” error.

Watch the video on YouTube

How to find the error

The error is available in the Apache error log on your Linux platform.

You can find the error in the Apache log at:

For Debian/Ubuntu: /var/log/apache2/error.log.
For CentOS/RHEL: /var/log/httpd/error_log.

Error message:

Apache unable to fork new process - Cannot allocate memory.

Error log example:

PHP CLI Tips and Tricks

Thu, 11 Apr 2019 04:31:38 +1000

Read this post if you want some excellent PHP CLI tips and tricks. Why will this post help you? Well, identifying PHP CLI script problems can be difficult because the errors are not immediately visible. Therefore, you will save yourself lots of time and effort by using these PHP CLI tips and tricks!

Watch the video on YouTube

Tip 1 - PHP scripts via CRON

Specify the full path to the PHP CLI executable and PHP script. CRON does not know the full path to the PHP executable.

Configure PSAD to ignore certain IP ranges

Tue, 12 Mar 2019 19:18:44 +1000

This post will show you how to configure Port Scan Attack Detector (or PSAD) to ignore specific IP ranges.

Watch the video on YouTube

What is PSAD?

PSAD is a collection of lightweight system daemons that run on Linux. To detect port scans and other suspicious traffic, you use PSAD to analyze the ‘iptables’ log messages. Visit http://cipherdyne.org/psad/ for more information about PSAD.

Examples of PSAD Alerts

Here are some examples of PSAD email alerts:

Common Issues When Running the AWS CLI using CRON & Bash

Tue, 12 Mar 2019 02:39:12 +1000

This post will show some common issues experienced when running the AWS CLI via Bash using CRON on Linux. The issues are typically related to either a Bash script error, AWS CLI command error, or AWS CLI credentials/config error.

Why would you run the AWS CLI via Bash using CRON?

There are quite a few reasons! First, the AWS CLI complements your CRON jobs allowing you to do some amazing things. For example, your Bash scripts can AWS SNS notifications. Second, you can download your latest maintenance scripts from AWS S3. Finally, perhaps you want to determine the status of another AWS EC2 instance? The opportunities are endless.

How to determine the IP ranges of AWS services for security groups

Tue, 19 Feb 2019 19:24:25 +1000

This post will show you how to determine the IP address ranges of Amazon Web Services (or AWS) services. Knowing the IP address range will enable you to allow/deny access to these AWS services by using (amongst other) security groups. Setting the permitted IP ranges for a security group is an essential part of tightening security.

Watch the video on YouTube

What are the AWS security groups?

AWS Security groups are virtual firewalls that help to control network traffic. For example, you could have a security group that only allow traffic into the group from a specific IP address. Use Anto’s Public IP tool to determine your current IP. You could also deny traffic to a range of IP addresses.

How to code a basic AWS EC2 instance dashboard

Fri, 15 Feb 2019 04:55:27 +1000

This post will show you how to code a basic AWS EC2 instance dashboard using PHP. The purpose of this dashboard is to show the status of your AWS EC2 instances.

Why do this? Well, it is a great way to learn how to use the AWS API. Plus, it’s “kinda cool” to develop a custom dashboard that controls “dem dev servers” destiny. So let’s code an AWS instance status Dashboard!

Is WordPress not saving your changes?

Mon, 11 Feb 2019 03:29:15 +1000

Are you having trouble with WordPress not saving your changes? Well, I have, and it isn’t enjoyable! This post will demonstrate what you can do to prevent this. I have only noticed the saving issue since switching to the Gutenberg editor in WordPress 5+. Of course, you can use WordPress plugins to switch back to the Classic editor, but I prefer keeping up with change.

It seems the browser cache is affecting the ability to save. Not always, but certainly when it matters! So, to side-step this issue, I temporarily disabled the cache in my browser.

How to Block an IP address in WordPress

Wed, 06 Feb 2019 02:38:42 +1000

This post shows you how to block an IP address in WordPress. Why would you need to do this? Well, it turns out that there are many reasons! First, this post discussed blocking a specific spammer’s IP.

Recently, my WordPress blog (https://anto.online) got spammed daily. Of course, I expect an occasional WordPress spam comment, but thousands of spam comments in one day is quite annoying! Fortunately - the spammers were unsuccessful due to the spam filtering features implemented in WordPress. But, unfortunately, this created more traffic, used more bandwidth, consumed more space, and wasted my time.

How to install htop on RHEL

Tue, 05 Feb 2019 00:51:30 +1000

Performance monitoring is an essential skill for any Linux user. All Linux platforms provide a tool called ’top’ for this task. I prefer using ‘htop’, which provides more features. Unfortunately, htop is not available by default on RHEL (or Redhat Enterprise Linux). This post shows you how to install htop for performance monitoring on RHEL.

This article shows an easy way to add htop to your RHEL instance. There are other ways, which include downloading htop and then compiling it on your RHEL instance. This post only discusses adding the repository so that you can download and install htop - the easy way!

Install/Uninstall Eclipse

Wed, 31 Oct 2018 19:25:07 +1000

Eclipse is a Java Integrated Development Environment (IDE), but it also supports other development languages such as PHP and JavaScript. You can also access other advanced tools such as report building and integrate directly with code repositories such as GIT. This post shows how you can install and uninstall Eclipse.

Installing Eclipse takes a few steps since it requires a few dependencies, such as Java and Yatta Installer. Visit this great article on how to install Eclipse!

Call to Undefined Function idn_to_ascii()

Sun, 21 Oct 2018 01:43:05 +1000

The “Call to Undefined Function idn_to_ascii()” error in PHP can be confusing. Many people assume this function is part of PHP, and it is, but not always!

It turns out that the idn_to_ascii() function is only available in the internationalization module (or intl module). The int module provides Unicode and Globalization support for PHP. It also provides many functions that are useful for date and time formatting. The idn_to_ascii() function is one of these functions. It is used to convert a Unicode domain name to an IDNA ASCII-compatible format.

PHP-FPM Reached Max Children

Sun, 21 Oct 2018 01:15:47 +1000

Recently my PHP scripts became unresponsive, and the browser just kept on trying to load the page. This was odd since the script works on my local machine but not the development server. Unfortunately, there was no apparent reason for this issue.

I then discovered that the PHP-FPM log showed the following message: “WARNING: [pool www] server reached pm.max_children setting (5), consider raising it”. This log is located under /var/log/php7.2-fpm.log. Note that you may be running a different version of PHP.

How to remove the base path from a file path in PHP

Sat, 20 Oct 2018 18:28:20 +1000

Removing the file path from a filename in PHP is be easy!

The basename() function will remove the file’s path from your string and leave only the filename. So, for example, it means that if your file path string is: ‘/home/anto.online/apac/basepath/test.php’, then using basename($path) will return only the filename. The result will thus be: ’test.php’.

Functions used in conjunction

The basename() function is often used with these PHP functions:

realpath() - Returns the full absolute path, including the filename.

How to install Notepad ++

Fri, 19 Oct 2018 20:00:42 +1000

Installing or uninstalling Notepad ++ from Ubuntu is pretty easy!

Notepad ++ is a Snap package, so these instructions should work across many distributions. For example, you can use Snap with Ubuntu, Linux Mint, Debian, and Fedora.

Snap likes to bundle the dependencies and config. This idea of bundling dependencies simplifies the installs to a single, standard command. If you need to, see the installing snap for info on installing it.

Notepad ++ is actually a Windows app developed in C++. Snap will automatically install Notepad ++ as well as Wine to enable it to run on Linux platforms.

Performance Monitoring, Made Easy!

Thu, 11 Oct 2018 02:33:11 +1000

I am announcing the slickest and easiest performance monitoring tool for cloud computing ever! There are many tools out there to achieve this goal, but my favorite is My-Netdata.

My-Netdata is a simple, effective, and excellent performance monitoring tool that is easy to install, mostly self-configures, is cloud-based, runs on Ubuntu, and has super sexy dashboards.

Just look how cool it looks below!!! Or click here to try their demo.

How to install Microsoft Teams on Ubuntu!

Tue, 24 Jul 2018 09:09:01 +1000

Many companies use MS Teams as their primary communication tool. Mine is no exception! Unfortunately, Microsoft has no version available that runs on Linux. Which, quite frankly, sucks! It runs on Android, which is a Linux distro. So why not Ubuntu?!?!

You can run Microsoft Teams via your browser, but the voice and audio features will not work. It works well if you need to use the text chat features, though.

How to install Kali Linux using VirtualBox on Ubuntu

Mon, 09 Jul 2018 02:12:14 +1000

Herewith are the steps I followed to install Kali Linux on Ubuntu using Virtual Box. The process is quite easy, but you must also enable USB devices to allow external devices such as the Atheros or Ralink wireless adapters.

Kali Linux installation steps

Step 1 - Download Virtual Box

Download and install the latest version of Virtual Box for Ubuntu via the download page.

Step 2 - Download the Virtual Box extension pack

The Virtual Box extension pack will enable USB 2.0 and USB 3.0 devices, VirtualBox RDP, disk encryption, NVMe, and PXE boot for Intel cards. Download the extension pack and install it via Virtual Box. Note: You must enable USB 3.0 since some USB wireless devices require the USB 3.0 standard.

How to fix the 'could not get lock' error in Ubuntu

Mon, 09 Jul 2018 01:37:19 +1000

This post will show you how to fix the “Could not get lock” or “unable to lock” error in Ubuntu.

Here is an example of this error when Ubuntu could not get a lock on the “/var/lib/dpkg/lock” resource:

E: Could not get lock /var/lib/dpkg/lock - open (11 Resource temporarily unavailable)

In this example, the error states that Ubuntu is unable to lock the administration directory:

E: Unable to lock the administration directory (/var/lib/dpkg/) is another process using it?

The last example shows Ubuntu is unable to get a lock on the “/var/lib/apt/lists/” directory:

How to define your own PHP configuration

Sat, 23 Jun 2018 01:37:54 +1000

This post will show how you can define a custom PHP configuration for your website. A Custom PHP configuration will allow you to change server default configurations. This post mentions two options for adjusting configuration: user.ini and .htaccess.

The default server configuration (set using the php.ini file) will prevent your website from displaying errors. This setting in the php.ini is excellent in production environments but is cumbersome in a development environment.

Watch the video on YouTube

What is the php.ini config file?

The php.ini file is a file that controls PHP settings on the server in the form of “directives”. PHP reads the php.ini file during startup and then configures the PHP environment accordingly. Some changes to the php.ini file will require a PHP restart.

How to run a PHP script as root

Fri, 22 Jun 2018 23:42:42 +1000

This post shows how to execute PHP scripts as a root user on Ubuntu/Linux using visudo.

What do you need to run PHP as root?

You will need to use visudo and edit the sudoers file.

The visudo command is available on all UNIX and Linux systems. It provides a safe of editing the /etc/sudoers file. The sudoers file determines exactly ‘who’ can run commands. It also controls what commands a user can run. Most notably for our purpose, it identifies whether you need a password for particular commands.

How to view shell_exec() errors in PHP

Fri, 22 Jun 2018 23:06:26 +1000

Let’s say you execute shell commands via a PHP script using the shell_exec() method, but you do not see any error messages related to the executed shell command.

This behavior can be changed by adding “ 2>&1 ” to your shell command. The additional characters inform the shell to pipe all responses back to the shell_exec() method.

This behavior by the shell_exec() method is expected because the response string can be NULL when an error occurs or if the command produces no output. The PHP exec() method should be used when access to the program exit code is required.

How to execute shell commands via PHP

Fri, 22 Jun 2018 22:36:10 +1000

This post discusses how to execute shell commands via PHP. The ability to execute shell commands is a powerful feature and should be used carefully. As such, not all hosting providers will allow you to execute shell commands.

psst

Did you know that you can disable PHP functions in the php.ini file using the disable_functions directive? A disabled function will return an error like this: “Fatal error: Uncaught Error: Call to undefined function shell_exec()”.

The PHP functions to execute shell command are: shell_exec(), exec() or system(). These functions are remarkably similar but have slight differences. Let’s take a look.

How to test your PHP code as the www-data user

Tue, 19 Jun 2018 02:37:28 +1000

Apart from running web applications, PHP can execute commands via a shell. But testing your shell script can be tricky, especially when running it as a different user. This post will look at how you can sudo or su as the www-data user to test your PHP code.

Why the user important

For example, running an Apache user will produce different results from the root user. Note that the Apache user is also known as the www-data user. And, the www-data user does not have the same privileges as the root user.

Solved: cannot lock /etc/passwd; try again later

Tue, 19 Jun 2018 01:55:10 +1000

I encountered a “cannot lock /etc/passwd; try again later” issue whilst trying to create a new user on my Ubuntu 18.x server.

The root cause eludes me, but I did find that the following helped to resolve the issue.

Step 1 - Remount the file system

Remount the file system in read-write (rw) mode:

sudo mount -o rw,remount /

Step 2 - Remove lock files

Under the /etc folder remove any of the following files: passwd, shadow, group and gshadow -.lock.

About me

Fri, 01 Jun 2018 09:00:00 +1000

me and Frugley

G’day, I’m Anto

By day I’m a director at an enterprise software company, leading delivery teams. By night (and some early mornings) I’m the person behind anto.online, writing practical guides for people who run their own servers.

How it started: the smell of a server room

Some of my best childhood memories are of visiting my dad at work. His office had a gigantic server room: rows of tape drives, and disk packs the size of a cake tin that you’d lower into a drive as big as a washing machine. I was hooked. To this day I love the smell of a data centre.

Basic Vi (Vim) editor commands

Thu, 03 May 2018 23:47:35 +1000

The Vi text editor can be intimidating. But you, too, can survive Vi using this cheat sheet. While Vi and Vim isn’t technically the same thing, these commands will work in both.

psst

See our handy Vim Editor guide or FAQ further below for more information.

Moving around Vi cheat sheet:

Moving Around	Command
Move the end of the file	G
Move left	Left Arrow Key
Move right	Right Arrow Key
Move up	Up Arrow Key
Move down	Down Arrow Key
	Note: - You can also use: ‘j’ for down, ‘k’ for up, ‘h’ for left, and ’l’ for right.

Vi save and exit controls cheat sheet:

General Save & Exit Controls	Command
Save	:w
Save & Exit	:x
Exit, No changes	:q
Exit, Ignore changes	:q!
	Note: - Both ‘:w’ and ‘:x’ require you to have write permissions.

Insert text and lines cheat sheet for Vi:

Insert Text & Lines	Command
Insert at the cursor	i
Insert before the line	I
Append text after the cursor	a
Append text after the line	A
Create a new line	o
	Note: - Each of these commands puts the vi into insert mode. - Press the key to put vi back into command mode. - The ‘i’, ‘a’ and ‘o’ command supports undo if you press the * key.

Vi cheat sheet to delete text and lines:

Delete Text and Lines	Command
Delete the remainder of the line from the cursor	D
Delete the current line	dd
	Note: - The command ‘dd’ supports undo if you press the * key.

VI command cheat sheet examples

Insert data into a new or existing file

When you run the command vim filename, an editor window will open.

How to install AWS EFS on RHEL (Updated 2021)

Thu, 03 May 2018 23:42:06 +1000

This guide will show you how to install AWS EFS using EFS-Helper on RHEL. Additionally, you will see how to use the AWS EC2 user data field to auto-configure your RHEL instance.

Watch the video on YouTube

Let’s get started!

You will need to modify the script below and replace fs-MY_EFS_ID with your EFS storage id. The script also assumes your security groups are correctly configured, allowing inbound traffic.

Lastly, Stunnel may be updated when you run this script. Therefore, the script may not work if you download a version that is no longer available. Visit Stunnel downloads to confirm the latest version and then update the script accordingly.

How to fix your "PKIX path building failed" error

Thu, 03 May 2018 02:35:15 +1000

Let’s see how you can fix your “PKIX path building failed” error. This error occurs when you try to connect via HTTPS between two applications via a self-signed certificate.

The error will look something like this:

Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.
ValidatorException: PKIX path building failed: sun.security.provider.certpath.
SunCertPathBuilderException: unable to find valid certification path to requested target

psst

In case you did not know. The acronym PKIX stands for Public Infrastructure X509.

Issue description

A Successful connection between two SSL-based connections is only possible if the certificates are valid and trusted. Luckily, there is nothing to worry about if you are facing the issue. It is a well-known error message reported by the Java Virtual Machine. This error message is displayed when the Java environment does not have the information about the HTTPS server to verify that it is a trusted website.

Run your PHP code using the PHP webserver

Fri, 13 Apr 2018 03:11:40 +1000

You can run PHP scripts on Windows without needing to install WAMP or Apache webserver. This is great if you don’t need all the features that these tools provide. The PHP built-in web server is not intended for production use but is great for developing and testing.

Lets get started!

You will need to download and install PHP to use the built-in PHP web server. Click here to visit the PHP download site.

How this site works

Mon, 01 Jan 0001 00:00:00 +0000

I have a busy day job, so I can’t hand-write and hand-test every guide on this site. Instead, I use AI to help, and I’d rather tell you exactly how than pretend otherwise.

How a guide gets made

Research. Each guide starts from the official documentation, release notes and changelogs for the tool it covers. Sources are linked at the bottom of every post.
Draft. AI (Claude, made by Anthropic) writes the first draft from that research.
Run the commands. Where a guide uses Linux commands, they’re run automatically on a fresh test machine. If they fail, the guide doesn’t go out until it’s fixed.
I review it. I read every post before it’s published. Nothing goes live without that.

What the labels mean

Every guide has a small card at the top that tells you how far it’s been checked.

anto.online

Goodbye WordPress: Why I Moved My Blog to a Static Site That AI Can Maintain

Say hello

Cloudflare for Websites: A Comprehensive Guide

MalCare Plugin for WordPress: A Security Implementation Guide for Developers and Site Owners

Accessibility Compliance (WCAG 2.1/2.2 AA): A Technical Brief

What Is WCAG AA?

Fixing Apt Update Issues Due to Unreachable Proxy on Ubuntu

Setup Greenbone Community Edition with Docker Compose

What is Greenbone Community Edition?

Guide to Setting Up and Running Tenable Nessus Essentials in Docker

About Nessus

ProxySQL Configuration and Management Cheat Sheet

Connection and Ports

Connecting to ProxySQL Admin Interface

General Configuration Settings

Set Connection Reuse

Set Max Connections

Delete Files from S3 Quickly with Python (asyncio)

What is Python?

Unveiling Network Weaknesses: Penetration Testing vs. the Cyber Kill Chain

Penetration Testing Methodology

Reconnaissance & Information Gathering

Prioritize Security Threats Effectively with CVSS (Common Vulnerability Scoring System)

Why CVSS Matters

How to Defend Against Cyber Attacks Using MITRE ATT&CK

Structure of MITRE ATT&CK

Understanding OWASP: An Essential Guide for Developers

What is OWASP?

Building Trust with Cybersecurity Frameworks

Popular Cybersecurity Frameworks

NIST Cybersecurity Framework (CSF) 2.0

Cloud 101: Understanding Key Cybersecurity Terms

Attack Surface

HTTP Methods Cheat Sheet

GET

POST

PUT

PATCH

DELETE

OPTIONS

HEAD

TRACE

CONNECT

Wrapping Up

A Guide to Ethical Footprinting in CyberSecurity

How to Install Docker, Docker-Compose, and Portainer on Kali Linux

Prerequisites

sqlmap Command-Line Cheat Sheet

Installation

Usage

sqlmap Command Switches

Wrapping Up

dirsearch Command-Line Cheat Sheet

Installation

dirsearch Cheat Sheet Commands

gobuster Command-Line Cheat Sheet

Installation

gobuster Cheat Sheet Commands

dirb Command-Line Cheat Sheet

Installation

dirb Cheat Sheet Commands

ipcalc Command-Line Cheat Sheet

Installation:

ipcalc Cheat Sheet Commands:

Nikto Command-Line Cheat Sheet

Installation:

Usage:

HTTP Status Code Cheat Sheet

1xx: Informational Responses

2xx: Successful Responses

3xx: Redirection Responses

4xx: Client Error Responses

5xx: Server Error Responses

You may Also Be Interested In

References

How to Perform DNS Spoofing Using Ettercap: A Step-by-Step Tutorial

IP Command-Line Cheat Sheet

Installation:

Usage: