security
Agentless predictive asset scan on networks
This is an agent less solution to scan complete network and build an asset report. All you need is a Linux host with python3 and pythonping, nmap and ipaddress python modules along with nmap Linux package. Since we are not authenticating to hosts and just doing a predictive scan using underline nmap tool, so report […]
Secure Elasticsearch and Kibana access using Apache reverse proxy
Default ELK installation may not fulfill enterprise requirements as kibana, the visualizer, works on port 5601 without any authentication and elasticsearch listens only on loopback IP on port 9200 without any authentication. You may want to run kibana on standard http/https port ie 80/443 with authentication control. Similarly, you may want to allow elasticsearch access […]
Secure internet using DNS based traffic filter – pi-hole
Internet has grown as rapidly in last two decades. A number of resources on internet remain uncensored, uncontrolled because there is no central authority and method to monitor everything. There are “bad guys” across globe who plant malicious software, misleading ads on internet. Now, with internet ready handheld devices and smart TVs people use a […]
Playing with openwrt on TP-Link Archer C20 wifi router
I have been using dlink and tp-link wifi routers since long with their default firmware. These firmware do not provide enough flexibility and control on what you want to configure and see. So I decided to go for openwrt. Next big task was to find a cheap router with which I can play. I read […]