tOS 7amd64Fully-supportedSee CentOS 7 NotesCentOS 8amd64 arm64Fully-supportedSee CentOS 8 NotesCentOS Stream 9amd64 arm64Fully-supportedWorks as-isRed Hat Enterprise Linux 7amd64Fully-supportedSee RHEL 7 NotesRed Hat Enterprise Linux 8amd64 arm64Fully-supportedSee RHEL 8 NotesRed Hat Enterprise Linux 9amd64 arm64Fully-supportedSee RHEL 9 NotesDebian 10amd64 arm64Fully-supportedSee Debian 10 NotesDebian 11amd64 arm64Fully-supportedWorks as-isFedora 33amd64 arm64Fully-supportedSee Fedora NotesFedora 34amd64 arm64Fully-supportedSee Fedora NotesFedora 35amd64 arm64Fully-supportedSee Fedora NotesUbuntu 18.04amd64 arm64Fully-supportedSee Ubuntu 18.04 NotesUbuntu 20.04amd64 arm64Fully-supportedWorks as-isUbuntu 22.04amd64 arm64Fully-supportedWorks as-isopenSUSE Leap 15.3amd64Fully-supportedSee openSUSE Notes
If your distro isn’t listed here please try using a package for the closest distro first. For example, since Raspberry Pi OS is based on Debian, try using the Debian Firezone package.

If that doesn’t work, please open an issue and let us know. New distros are being supported on a regular basis and there’s a good chance yours will be added soon.

Note that we only support RPM and DEB based packaging systems. Others, like Arch Linux are currently being investigated in this issue. AmazonLinux 2 Notes​Kernel upgrade required:

sudo amazon-linux-extras install -y kernel-5.10 CentOS 7 Notes​Kernel upgrade to 5.6+ required. To upgrade to the latest mainline kernel and select it as the default boot kernel:

sudo rpm –import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
sudo yum install -y https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
sudo yum install -y elrepo-release
sudo yum –enablerepo=elrepo-kernel install -y kernel-ml
sudo grub2-set-default 0
sudo grub2-mkconfig -o /boot/grub2/grub.cfg
sudo reboot CentOS 8 Notes​The WireGuard kernel module needs to be installed:

yum install elrepo-release epel-release
yum install kmod-wireguard RHEL 7 Notes​Red Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 7 should work just fine for RHEL 7. You’ll still need to upgrade your kernel to 5.6+ however. To do so, follow the steps for CentOS 7 Notes above. RHEL 8 Notes​Red Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 8 should work just fine for RHEL 8. You’ll still need to install the WireGuard kernel module, however. See CentOS 8 Notes above. RHEL 9 Notes​Use the package for CentOS 9. Fedora Notes​On fresh Fedora installations you’ll probably need to install a cron implementation to support the logrotate functionality, otherwise you may receive errors about a missing /etc/cron.hourlydirectory.

yum install cronie-anacron Ubuntu 18.04 Notes​Kernel upgrade to 5.4+ required:

sudo apt install linux-image-generic-hwe-18.04 Debian 10 Notes​Kernel upgrade to 5.6+ required. See this guide for an example. openSUSE Notes​Firezone requires the setcaputility, but some recent openSUSE releases may not have it installed by default. To fix, ensure libcap-progsis installed:

sudo zypper install libcap-progs PrerequisitesFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. Create a DNS record​Firezone requires a fully-qualified domain name (e.g. firezone.company.com) for production use. You’ll need to create the appropriate DNS record at your registrar to achieve this. Typically this is either an A, CNAME, or AAAA record depending on your requirements.[...]

Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

https://external-preview.redd.it/qvagQCUP1uPrszNRmMMFS-QsYIpdFQIQLltnB0dBptM.jpg?width=640&crop=smart&auto=webp&s=798167cd502ce748669e08a1242ff89d2671698c submitted by /u/cheeztoshobo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Brings Zero Trust to Hardware in Windows 11

A stacked combination of hardware and software protects the next version of Windows against the latest generation of firmware threats.

CodeRed's Pentesting and Privilege Escalation course
https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/

Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details. submitted by /u/iambarry345 (https://www.reddit.com/user/iambarry345)
[link] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/)

___________________________
@hacking_Attack
@Hacking_Video

Mass Assignment Leading to Pre Account Takeover
https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5

API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium » (https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5)

Hacking on Medium
Mass Assignment Leading to Pre Account Takeover

https://cdn-images-1.medium.com/max/1154/1*zl-PE5lbIZ0PASkSGoYgPg.png
API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…

Continue reading on Medium »

Hacking on Medium
The unlimited approval feature helps save time and money on gas, but it was abused in the LiFi hack

Users can facilitate a wide range of asset transfer and swapping options across a variety of major chains with LI.FI, an advanced bridge…

Continue reading on Medium »

Hacking on Medium
How to — Directory Enumeration

https://cdn-images-1.medium.com/max/1521/1*9q0LE2g04GVdEqi7fwWoog.png
Directory Enumeration is an important skill every penetration tester and hacker should have in their skill pouch. It is a technique to…

Continue reading on Medium »

Hacking on Medium
Uber Blames this Hacking Group for Recent Security Breach

https://cdn-images-1.medium.com/max/728/0*yaB8KR5Jyklmkn-g.gif
Uber on Monday disclosed more details related to the security incident that happened last week, pinning the attack on a threat actor it…

Continue reading on System Weakness »

Hacking on Medium
Russian Sandworm Hackers Impersonate Ukrainian Telecoms to?

https://cdn-images-1.medium.com/max/728/0*dLIiwWvr3rcTLCkL.jpg
A threat cluster linked to the Russian nation-state actor tracked as Sandworm has continued its targeting of Ukraine with commodity…

Continue reading on Medium »

Hacking on Medium
Ethical Hacking | Exploiting Apache Tomcat Port 8180

https://cdn-images-1.medium.com/max/1920/1*lCwCP1OH8HFwD8L0X67oAA.png
In this episode, we will exploit the apache tomcat version 5.5 service running on port 8180 to get a meterpreter session of the server…

Continue reading on Medium »

Attack Chain/Exploitation Path Diagram Generation Tools?
https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/

We all know that there is no better satisfaction than utterly owning a myriad of hosts after combining several misconfigurations to achieve the goal (and more) of an assessment. It's just as good when getting that into the report for the client and running them through what happened. The problem is, or the problem we're having, is being able to pictorially demonstrate the paths we took throughout the chain of attack. We've taken a look at AttackForge but it's pretty certain that it'll be brushed away due to costs (even if it would be great to manage tests). Right now the team is screenshotting each step with some contextual explanation, which is fine, but ideally I would like us to be able to graphically represent what exactly happened from initial exploitation to reaching the goal of the assessment; rather than have only the screenshots, we could have the attack path graphics along with ATTCK as part of the Summary. Hope that makes sense, and curious if the community knows of any alternative tools? submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/) [comments] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/)

___________________________
@hacking_Attack
@Hacking_Video