49.6 Quick Combined Revision Card
Ek dense card – situation bagha, tool recall, Blue control. Print kara. Samjla ka?
| Situation | Linux / MySQL / Nmap / MSF recall | Blue control |
|---|---|---|
| Need listening ports on OWN host | Linux: ss -tulpn | Close unexpected; firewalld/SG |
| Patch Amazon Linux | sudo yum update -y | Schedule; reboot if kernel needs |
| Restart httpd after config test | sudo apachectl configtest then sudo service httpd restart | Never reload blind |
| SSH harden | Keys; PasswordAuthentication no; sudo service sshd restart | fail2ban; restrict SG source |
| MySQL only local | bind-address=127.0.0.1; app user GRANT minimal | Deny 3306 from internet |
| Avoid wipe UPDATE | SET SQL_SAFE_UPDATES=1; + WHERE on key | Backups; change tickets |
| SQLi in PHP form | (App) prepared statements – ch29 | Least DB priv; input allow-lists |
| Map OWN lab host ports | sudo nmap -sS -T2 -p 22,80,443,3306 192.168.56.20 -oN … | Alert mindset for mass SYN |
| Version banners on OWN VM | nmap -sV -T2 … | Patch old banners first |
| Understand attacker module flow | MSF: search → use → set RHOSTS/LHOST → check → exploit (Metasploitable only) | Patch; disable service; re-scan |
| Lab evidence pack | nmap -oA; tar -czvf; note hashes | Keep under ~/labs/; no real org names |
| Disk full / logs gone | df -h; du -sh; rotate logs | Alert on disk; immutable log mindset ch31 |
| Red team (attacker) does | Blue team (defender) detects / stops |
|---|---|
| Revises only Red flags from this card | Revises situation + Blue column aloud weekly |
| Mixes cafe IP into Nmap/MSF lines | Hard-codes host-only examples in notebook |
Ravindra Bagale's Tip
Stick the combined card on the wall – but highlight the Blue column. In exams and interviews, “situation → control” is stronger than a “tool dump”. A blank Blue column = incomplete. This wins. Remember this.
Ravindra Bagale's Tip – मराठी
Combined card भिंतीवर चिकटवा – पण Blue column highlight करा. Exam / interview मध्ये “tool dump” पेक्षा “situation → control” strong. Blank Blue = incomplete. हे जिंकते. लक्षात ठेवा.
Ravindra Bagale's Tip – हिंदी
Combined card दीवार पर चिपकाओ – पर Blue column highlight करो. Exam / interview में “tool dump” से ज़्यादा “situation → control” strong है. Blank Blue = incomplete. यही जिताता है. याद रखो.
Lab
With Amir or Zoya: quiz ten random rows from the combined card. Answer format: (1) commands, (2) one Blue sentence, (3) which OWN IP you would type. Wrong IP range = restart the quiz.