CompTIA Linux+ Powered by Linux Professional Institute Study Guide - Third Edition
EXAMS LX0-103, LX0-104
by Christine Breshahan and Richard Blum
Sybex 2015
ISBN: 978-1-119-02121-6
I used the TOC and skimmed this book quickly to add a lot of basic topics to my notes. It is also good to revisit old “basic” material every once and a while as your understanding of the topics can change quite a bit over time, or be completely lost. I also used this as an opportunity to brainstorm other ideas for notes I’d like to add. As such, this is just a list of keywords and ideas and not an index of the book.
Notes |
---|
Command Line Basics |
exploring shell options |
using a shell |
configuring a shell |
environment variables: HOME, PATH, SHELL |
getting help |
attackers gaining shells |
streams, redirection, and pipes |
file descriptors |
i/o redirection |
piping data between programs |
generating command lines |
grep |
sed and awk |
RPM, rpm command |
package systems |
yum |
file command, libmagic |
filesystem |
cat, tac |
tr |
diff |
cut |
Debian, Debian-like, Ubuntu distributions |
CentOS, Fedora, RedHat, … |
Alpine, OpenWRT, specialty distributions |
Slackware; slackpkg, slapt-get |
pfSense, opnsense |
dpkg, apt, apt-get, apt-cache |
dselect |
aptitude |
Synaptic |
converting between package formats |
startup script |
package dependencies |
Linux from Scratch |
find command |
locate, updatedb |
processes |
netlink |
inotify |
fanotify |
sort, sort -n |
uniq, uniq -V |
wc |
shutdown, reboot, halt |
nohup |
socat |
screen, tmux |
surfraw |
passwd and shadow files |
host, nslookup, dig |
whois |
finger |
adding and removing users |
adduser, useradd |
chsh |
uuencode, uudecode |
uucp |
rsync |
init |
background and foreground |
process priority |
limits.conf |
firmware |
IRQ |
I/O addresses |
DMA addresses |
geometry (disks) |
coldplug/hotplug |
PCI cards |
loading and unloading LKMs |
USB |
partition |
LVM |
mount point |
mount command |
common partition and filesystem layouts |
fdisk |
cfdisk |
tuning filesystems |
journaling |
monitoring disk usage |
naming files |
wildcard expansion |
archiving files |
ownership/group membership |
ls, cp, rm, mv, ln |
shred |
file permissions |
chmod |
chown, chgrp |
sudo, sudoers, .d folder |
sudo vulnerabilities |
symbolic link |
hard link |
inode |
users |
groups |
log files - where are they? third party software and logs. |
syslogd |
syslog |
log rotation |
centralized/remote logging |
maintaining time |
NTP, ntpd, ntpdate, UTC, timezone |
date command |
scheduled jobs |
cron, crontab, crontab -l, denying a user from using cron, cron logs |
anacron, vixie cron |
Paul Vixie |
Dan Kaminsky |
TCP/IP |
NIC |
packet |
protocol |
RFC |
TCP, UDP, ICMP, ARP, DHCP, SMTP, Telnet, SSH, HTTP, HTTPS, DNS, FTP, |
POP3, IMAP, BGP, IGMP |
Apache, mod_backdoor |
Nginx |
ports - source and destination |
IP address |
RFC1918 |
ip command, ifconfig command |
netstat, ss |
top, htop |
ps |
kill command |
route command |
default gateway |
netmask |
subnet |
raw sockets |
libpcap |
sockets |
traceroute |
ping |
ssh command |
scp |
sftp |
email: pine, mutt, mail command |
Wireshark |
tcpdump |
hping3 |
nmap, NSE |
OpenVAS, Greenbone |
SQL; mysql, postgres, sqlite3, database |
sendmail |
postfix |
LaTeX |
vi; vim, elvis, others. |
Midnight Commander |
ripgrep, rg |
bzip2, gzip, xz, pigz |
writing scripts: shebang, permission, running a script, command line arguments, |
environment variables, conditional expressions, using commmands in scripts, functions, loops |
curl portscanner |
shellcheck |
tee |
xargs |
pv |
uname |
uptime, uptime command, negative connotation, used to be cool |
password |
public key infrastructure |
diffie hellman key exchange |
PAM; backdooring, google authenticator, writing modules |
MFA |
OpenSSH |
PuTTY, plink.exe |
gpg |
root user |
common users: adm, admin, bin, www, nobody, mail, daemon, … |
X windows |
X11 |
KDE |
GNOME |
fvwm2 |
quotas/limits.conf |
umask |
Fail2Ban, sshguard |
fingerd |
identd |
iptables |
ipchains |
pf |
OpenBSD, FreeBSD, NetBSD, OpenSolaris, Minix |
living off the land |
glob |
Emacs; flyspell, flyspell adding a word, location of words, FAQ, |
magit, yara mode, TRAMP |
Capture the Flag (CTF), PvJ, attack and defend, CCDC, |
Red Team, Blue Team, Gold Team, Purple Team |
git, new repo, commit, push, status, .gitignore |
IRC, EFnet Dalnet Undernet IRCnet |
irc clients mIRC, irssi, bitchx, epic, ircii, jircii, XiRCON, pidgin |
irc scripts, scripting |
bloom filters, algorithms |
Nirsoft |
Didier Stevens |
file carving, foremost, binwalk |
hex editor, 101 editor, Emacs as a hex editor, vim as a hex editor with xxd, xxd as a hex dumper |
containers; Docker, Kubernetes, Dockerfile, others |
search engine |
firewalld |
netfilter/ipset |
IPFILTER |