Sysadmin Mega Thread

Mastic_Warrior · October 2, 2019, 1:01am

You can’t use su or su - to escalate as root? You need to know the root accounts password, but…

oO.o · October 2, 2019, 1:43am

I usually configure passwordless root, so I only have sudo.

Mastic_Warrior · October 2, 2019, 1:44am

Fair enough. You are a brave one.

oO.o · October 2, 2019, 1:47am

Not a production box so no harm done.

cotton · October 2, 2019, 10:44pm

Does anyone here use postman or other software to interact with API’s, or does everyone just use curl?

oO.o · October 4, 2019, 3:33am

Does anyone know basic webpage hacking (I do not)?

Need to log into a webgui and enable ssh via cli (curl) Web Development

Hey, so I’m trying to set up some scripts to automatically configure/rebuild my network from factory defaults. One of the very first obstacles is that my Edgerouter only has the webgui enabled by default. No ssh. So I’d like to log into the webgui and enable ssh, ideally with only curl. I understand how this should work in a very abstract way. I send the login info with curl, parse cookies or session data or whatever out of the response, then send the equivalent of a check under ssh > enable + save button on the dashboard page with the session credentials. From there, sending commands over ssh to configure the router is a piece of cake. Anyone know how to do this? I have only tried the most basic: curl -k -F "username=ubnt&password=ubnt" "https://192.168.1.1" to which I get a 417 - Expectation Failed error page. I have the headers of the legit response pulled up in Chrome Developer Tools, if any of that information helps…

SgtAwesomesauce · October 4, 2019, 3:37am

I might be able to help, but I’m out at the moment. I’ll have a look when I get back.

ibreakthings · October 4, 2019, 3:55am

Postman is great for testing when you’re developing. If you’re interacting with a completed API, use a programming language like Python or Go.

hp185688 · October 4, 2019, 5:42am

I’m not that into this, but I came across this video the other day. Narraror goes through login, parsing process, and running page operations from objects. Might be applicable…

oO.o · October 4, 2019, 5:52am

Thanks. I just got it working, but if I ever have to hack into web UIs again, I’ll take a look.

Dynamic_Gravity · October 4, 2019, 11:09am

Postman is pretty dope.

oO.o · October 4, 2019, 9:46pm

My CentOS 8 installation/config thread should land next week. I am putting off PAM hardening and auditd config.

Optimization · October 4, 2019, 11:55pm

But those are the best topics.

wendell · October 5, 2019, 12:14am

Michael Lucas’s books on this stuff are amazeballs. That is all.

sanfordvdev · October 5, 2019, 1:20am

Oh geez another book to read and try and implement

oO.o · October 5, 2019, 1:55am

wendell · October 5, 2019, 1:58am

oO.o · October 5, 2019, 2:09am

So sad that he wasn’t anywhere on my Google results, yet my Google News feed seems to know about every TV show that my girlfriend is watching.

oO.o · October 5, 2019, 2:14am

Did you have a specific one in mind? He has so many.

sanfordvdev · October 5, 2019, 2:17am

His zfs and ssh books are amazing. Apparently the PAm one is good to