The Setup

• Parrot OS 5.0 (Electro Ara)
• SSLyze version 5.0.6

Installation

1. pip install --upgrade pip setuptools wheel

2. pip install --upgrade sslyze

3. python3 -m sslyze <target> By default it will check results against Mozilla's "intermediate" configuration. See https://ssl-config.mozilla.org/ for more details.

An excerpt of the scan results:

- FAILED - Not compliant.
* maximum_certificate_lifespan: Certificate life span is 396 days, should be less than 366.
* tls_versions: TLS versions {'TLSv1.1', 'TLSv1'} are supported, but should be rejected.
* ciphers: Cipher suites {'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256', 'TLS_RSA_WITH_AES_256_CBC_SHA', 'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA', 'TLS_RSA_WITH_AES_128_GCM_SHA256', 'TLS_DHE_RSA_WITH_AES_256_CBC_SHA', 'TLS_RSA_WITH_3DES_EDE_CBC_SHA', 'TLS_RSA_WITH_AES_128_CBC_SHA', 'TLS_RSA_WITH_AES_256_GCM_SHA384', 'TLS_RSA_WITH_AES_128_CBC_SHA256', 'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384', 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA', 'TLS_RSA_WITH_AES_256_CBC_SHA256', 'TLS_DHE_RSA_WITH_AES_128_CBC_SHA'} are supported, but should be rejected.

Check the version

Parrot OS: cat /etc/os-release

SSLyze: sslyze --help

1. Download the REMnux General OVA file here.
2. Check SHA-256 hash. Note that shasum default algorithm is SHA-1. Specify -a 256 to get the correct hash for comparison.

   shasum -a 256 rremnux-v7-focal.ova
   

3. Open VirtualBox. Go to File -> Import Appliance (cmd + I)
4. I used the default settings
5. Start. Try if peepdf is available.

Notes

• I used the General OVA file (remnux-v7-focal.ova). I got an error with the VirtualBox OVA (remnux-v7-focal-virtualbox.ova).

• The General OVA file size is slightly larger (5.29 GB).

• I mostly use VirusTotal to quickly check if a file hash has a known malicious fingerprint.

Reference

• REMnux Documentation: Get the Virtual Appliance

The main reason I'm creating the VM is to install and test DefectDojo in a Virtual Machine.

1. Open Virtual Box and click on New

2. Set the name of the VM

3. For RAM, I opted for 2GB.

4. Select Create a virtual hard disk now for the Ubuntu Server Image

5. Since, I only plan to use the image in Virtual Box, I selected VDI which is the default format used by Oracle.

   • Oracle: VDI
   • Microsoft: VHD
   • VMWare: VMDK

6. Select the Dynamically allocated option to avoid occupying unused virtual disk sectors.

7. I set the maximum virtual hard disk size to 10.00 GB

8. Start the VM.

9. Select the server install image file (ubuntu-16.04.7-server-amd64.iso) and click Start

10. Install Ubuntu Server

11. Login  🚀

To scroll using the keyboard in Mac:

• ⏫ Scroll Up: shift + fn + up arrow
• ⏬ Scroll Down: shift + fn + down arrow

Reference

• Oracle® VM VirtualBoxUser Manual for Release 6.0: 5.2. Disk Image Files (VDI, VMDK, VHD, HDD)

git : The term 'git' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of 
the name, or if a path was included, verify that the path is correct and try again.    
At line:1 char:1
+ git
+ ~~~
    + CategoryInfo          : ObjectNotFound: (git:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

In order to resolve this, we need to install git.

1. Download Git for Windows.
   At the time of writing, the latest version is (2.33.1) 64-bit version.
2. I followed the default settings in the installation setup.
3. To confirm if git has installed successfully.
   git --version

The plan was to push a repository for my notes in Github when I encountered the following error message. This was resolved by connecting with SSH.

remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.
remote: Please see https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/ for more information
fatal: Authentication failed for 'https://github.com/****

Connect with SSH

1. Generate new SSH key

   ssh-keygen -t ed25519 -C "your_email@example.com"
   

2. Copy the SSH key to clipboard

   pbcopy < ~/.ssh/id_ed25519.pub
   

3. Go to Github -> Settings -> SSH and GPG Keys -> New SSH Key
4. Set the Title and paste the SSH key
5. Add SSH key

Reference

Connecting to GitHub with SSH

I used to write my notes in markdown (Docsify and GitBook influenced) and upload to Gitlab (or Github). For this, I mainly used Visual Studio Code.

Then, I moved to Joplin. I can directly preview the markdown file, insert screenshots and sync to dropbox. But I know, there's so much to improve in the way I organize my notebooks, sub-notebooks, notes and my life in general. XD

Install Obsidian

Beta Version 0.11.3

Before I get overwhelmed by the amount of information, let me first install one of the recommended tools for personal knowledge management -- Obsidian

Newbie Perspective

Directory? Structure?

The next step is figuring out a system. Ah. This could get me stuck. And indeed, it did. I only have a rough idea about the Zettelkasten method and I have yet to explore Obsidian.

For the meantime, I decided to name the vault "Travelogue" and created two folders.

1. Slip Box
2. References

I also enabled the Zettelkasten prefixer in the Core plugins.

Just enough to get started. Let's course correct as we move along.

Permanent Note

Reference Note

1. Open Run. firefox -no-remote -profilemanager
2. Create profile.
3. Enter new profile name,
4. Start Firefox.
5. The profile settings can also be accessed by typing about:profiles in the address bar.

Browser Extensions

1. FoxyProxy to switch between Burp and Zap.
2. Wappalyzer to find out the technology stack.

I encountered error: specify a sequence to run while trying to install zenmap on Parrot OS (using alien version 8.95.3)

Workaround

1. Downgrade and install alien 8.90 instead. dpkg -i alien_8.90_all.deb alien zenmap-7.91-1.noarch.rpm

2. Install zenmap dpkg -i zenmap_7.91-2_all.deb

3. Open Zenmap

Open VirtualBox

Go to File -> Import Appliance

Appliance Settings

It will appear on the left side of VirtualBox

Start

Errors

1. Failed to open a session for the virtual machine Parrot Security.
2. Go to Settings -> Port -> USB
3. Uncheck Enable USB Controller

Installation

1. Download VirtualBox

2. Verify SHA256 checksum shasum -a 256 <file-path>

3. Install

4. Open Security Preferences

5. Allow Software from developer "Oracle America, Inc."

6. Open Virtual Box

TIL

A Hypervisor is also called Virtual Machine Monitor (VMM). It creates and runs Virtual Machines (VM).