A Null Route to China: 2016

Saturday 19 March 2016

4.5 Kernel running on RPi

Update your RPi to the latest 4.5 Kernel. Simply copy and paste these on your Raspberry Pi. You might need build essentials etc....

sudo apt-get install bc unzip -y
wget https://github.com/raspberrypi/linux/archive/rpi-4.5.y.zip
unzip rpi-4.5.y.zip
cd linux-rpi-4.5.y
KERNEL=kernel7
make bcm2709_defconfig
make -j4 zImage modules dtbs
sudo make modules_install
sudo cp arch/arm/boot/dts/*.dtb /boot/
sudo cp arch/arm/boot/dts/overlays/*.dtb* /boot/overlays/
sudo cp arch/arm/boot/dts/overlays/README /boot/overlays/
sudo scripts/mkknlimg arch/arm/boot/zImage /boot/$KERNEL.img

Quickly Change CPU Gov (Raspberry Pi/Linux)

root@raspberrypi:~# apt-get install cpufrequtils
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
libcpufreq0
The following NEW packages will be installed:
cpufrequtils libcpufreq0
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 53.5 kB of archives.
After this operation, 274 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://mirrordirector.raspbian.org/raspbian/ jessie/main libcpufreq0 armhf 008-1 [12.9 kB]
Get:2 http://mirrordirector.raspbian.org/raspbian/ jessie/main cpufrequtils armhf 008-1 [40.6 kB]
Fetched 53.5 kB in 0s (72.0 kB/s)
Preconfiguring packages ...
Selecting previously unselected package libcpufreq0.
(Reading database ... 33671 files and directories currently installed.)
Preparing to unpack .../libcpufreq0_008-1_armhf.deb ...
Unpacking libcpufreq0 (008-1) ...
Selecting previously unselected package cpufrequtils.
Preparing to unpack .../cpufrequtils_008-1_armhf.deb ...
Unpacking cpufrequtils (008-1) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for systemd (215-17+deb8u3) ...
Setting up libcpufreq0 (008-1) ...
Setting up cpufrequtils (008-1) ...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for libc-bin (2.19-18+deb8u3) ...
Processing triggers for systemd (215-17+deb8u3) ...
****************************************************************************************
root@raspberrypi:~# cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors
conservative ondemand userspace powersave performance
****************************************************************************************
nano /etc/default/cpufrequtils
****************************************************************************************
# valid values: userspace conservative powersave ondemand performance
# get them from cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_governors
GOVERNOR="performance"
****************************************************************************************
**************AFTER BOOT CHECK**********************************************************
****************************************************************************************
root@raspberrypi:/mnt/USBHDD# cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
performance
****************************************************************************************
****************************************************************************************
****************************************************************************************
****************************************************************************************
root@raspberrypi:/sys/devices/system/cpu# time echo "scale=1500; 4*a(1)" | bc -l
3.141592653589793238462643383279502884197169399375105820974944592307\
81640628620899862803482534211706798214808651328230664709384460955058\
22317253594081284811174502841027019385211055596446229489549303819644\
28810975665933446128475648233786783165271201909145648566923460348610\
45432664821339360726024914127372458700660631558817488152092096282925\
40917153643678925903600113305305488204665213841469519415116094330572\
70365759591953092186117381932611793105118548074462379962749567351885\
75272489122793818301194912983367336244065664308602139494639522473719\
07021798609437027705392171762931767523846748184676694051320005681271\
45263560827785771342757789609173637178721468440901224953430146549585\
37105079227968925892354201995611212902196086403441815981362977477130\
99605187072113499999983729780499510597317328160963185950244594553469\
08302642522308253344685035261931188171010003137838752886587533208381\
42061717766914730359825349042875546873115956286388235378759375195778\
18577805321712268066130019278766111959092164201989380952572010654858\
63278865936153381827968230301952035301852968995773622599413891249721\
77528347913151557485724245415069595082953311686172785588907509838175\
46374649393192550604009277016711390098488240128583616035637076601047\
10181942955596198946767837449448255379774726847104047534646208046684\
25906949129331367702898915210475216205696602405803815019351125338243\
00355876402474964732639141992726042699227967823547816360093417216412\
19924586315030286182974555706749838505494588586926995690927210797509\
302952

real 0m6.785s
user 0m6.730s
sys 0m0.010s

****************************************************************************************

More Information: https://software.intel.com/sites/default/files/comment/1716807/how-to-change-frequency-on-linux-pub.txt

"Tinder match" is a pun.

tshark -i eth0 -Y 'http.request.method == POST and tcp contains "password"' | grep password

tshark -i eth0 -f "src port 53" -n -T fields -e frame.time -e ip.src -e ip.dst -e dns.qry.name -e dns.resp.addr
tshark -i eth0 -Y http.request -T fields -e http.host -e http.user_agent
tshark -o column.format:""Source", "%s", "Destination", "%d"" -z conv,tcp
tcpdump -nn -v -i eth0 -s 1500 -c 1 'ether[20:2] == 0x2000'

You want to look busy, Simply run this.

cat /dev/urandom | hexdump -C | grep "ca fe"

It's weird how 'bottle of water' and 'water bottle' typically mean two different things.

Some commands and stuff for the Raspberry Pi, But also can be used on other Linux boxes too.

Securing your box a little bit more. Simply copy and paste these.

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
echo 0 > /proc/sys/net/ipv4/ip_forward

# PREVENT YOU SYSTEM FROM ANSWERING ICMP ECHO REQUESTS

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

# DROP ICMP ECHO-REQUEST MESSAGES SENT TO BROADCAST OR MULTICAST ADDRESSES

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

# DONT ACCEPT ICMP REDIRECT MESSAGES

echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects

# DONT SEND ICMP REDIRECT MESSAGES

echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects

# DROP SOURCE ROUTED PACKETS

echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route

# ENABLE TCP SYN COOKIE PROTECTION FROM SYN FLOODS

echo 1 > /proc/sys/net/ipv4/tcp_syncookies

# ENABLE SOURCE ADDRESS SPOOFING PROTECTION

echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter

# LOG PACKETS WITH IMPOSSIBLE ADDRESSES (DUE TO WRONG ROUTES) ON YOUR NETWORK

echo 1 > /proc/sys/net/ipv4/conf/all/log_martians

# DISABLE IPV4 FORWARDING

echo 0 > /proc/sys/net/ipv4/ip_forward

Sunday 7 February 2016

Block Windows 10 "Telemetry" with Cisco ACL's

Following on from the in-depth post here... https://voat.co/v/technology/comments/835741

I have created a Cisco ACL that blocks all traffic to the IP's listed.

Simply copy and paste this and apply this to your Interfaces on a Cisco Device.

access-list 101 deny ip any host 13.107.3.128

access-list 101 deny ip any host 23.9.123.27

access-list 101 deny ip any host 23.67.60.65

access-list 101 deny ip any host 23.67.60.73

access-list 101 deny ip any host 23.67.60.97

access-list 101 deny ip any host 23.74.8.80

access-list 101 deny ip any host 23.74.8.99

access-list 101 deny ip any host 23.74.9.198

access-list 101 deny ip any host 23.74.9.217

access-list 101 deny ip any host 23.96.212.225

access-list 101 deny ip any host 23.101.115.193

access-list 101 deny ip any host 23.101.156.198

access-list 101 deny ip any host 23.101.187.68

access-list 101 deny ip any host 23.102.17.214

access-list 101 deny ip any host 23.193.225.197

access-list 101 deny ip any host 23.193.230.88

access-list 101 deny ip any host 23.193.236.70

access-list 101 deny ip any host 23.193.238.90

access-list 101 deny ip any host 23.193.251.132

access-list 101 deny ip any host 23.210.5.16

access-list 101 deny ip any host 23.210.48.42

access-list 101 deny ip any host 23.210.63.75

access-list 101 deny ip any host 23.217.138.11

access-list 101 deny ip any host 23.217.138.18

access-list 101 deny ip any host 23.217.138.25

access-list 101 deny ip any host 23.217.138.43

access-list 101 deny ip any host 23.217.138.90

access-list 101 deny ip any host 23.217.138.97

access-list 101 deny ip any host 23.217.138.122

access-list 101 deny ip any host 40.117.145.132

access-list 101 deny ip any host 64.4.54.253

access-list 101 deny ip any host 64.4.54.254

access-list 101 deny ip any host 65.52.108.27

access-list 101 deny ip any host 65.52.108.29

access-list 101 deny ip any host 65.52.108.92

access-list 101 deny ip any host 65.52.108.94

access-list 101 deny ip any host 65.52.108.103

access-list 101 deny ip any host 65.52.108.252

access-list 101 deny ip any host 65.52.236.160

access-list 101 deny ip any host 65.55.44.108

access-list 101 deny ip any host 65.55.113.13

access-list 101 deny ip any host 65.55.138.111

access-list 101 deny ip any host 65.55.138.126

access-list 101 deny ip any host 65.55.252.43

access-list 101 deny ip any host 72.21.81.200

access-list 101 deny ip any host 72.21.91.8

access-list 101 deny ip any host 94.245.121.253

access-list 101 deny ip any host 94.245.121.254

access-list 101 deny ip any host 104.73.92.149

access-list 101 deny ip any host 104.73.138.217

access-list 101 deny ip any host 104.73.143.160

access-list 101 deny ip any host 104.73.153.9

access-list 101 deny ip any host 104.73.160.16

access-list 101 deny ip any host 104.73.160.51

access-list 101 deny ip any host 104.73.160.58

access-list 101 deny ip any host 104.91.166.82

access-list 101 deny ip any host 104.91.188.21

access-list 101 deny ip any host 104.208.28.54

access-list 101 deny ip any host 131.253.40.53

access-list 101 deny ip any host 131.253.40.59

access-list 101 deny ip any host 131.253.61.66

access-list 101 deny ip any host 131.253.61.82

access-list 101 deny ip any host 131.253.61.84

access-list 101 deny ip any host 131.253.61.96

access-list 101 deny ip any host 131.253.61.100

access-list 101 deny ip any host 134.170.51.246

access-list 101 deny ip any host 134.170.51.247

access-list 101 deny ip any host 134.170.58.118

access-list 101 deny ip any host 134.170.58.190

access-list 101 deny ip any host 134.170.115.62

access-list 101 deny ip any host 134.170.165.251

access-list 101 deny ip any host 134.170.165.253

access-list 101 deny ip any host 134.170.179.87

access-list 101 deny ip any host 137.116.74.190

access-list 101 deny ip any host 157.55.240.220

access-list 101 deny ip any host 157.56.77.138

access-list 101 deny ip any host 157.56.77.139

access-list 101 deny ip any host 157.56.96.58

access-list 101 deny ip any host 157.56.96.123

access-list 101 deny ip any host 157.56.144.215

access-list 101 deny ip any host 157.56.144.216

access-list 101 deny ip any host 191.232.80.58

access-list 101 deny ip any host 198.41.214.183

access-list 101 deny ip any host 198.41.214.184

access-list 101 deny ip any host 198.41.214.186

access-list 101 deny ip any host 198.41.214.187

access-list 101 deny ip any host 198.41.215.182

access-list 101 deny ip any host 198.41.215.185

access-list 101 deny ip any host 198.41.215.186

access-list 101 deny ip any host 204.79.197.200

access-list 101 deny ip any host 207.46.7.252

access-list 101 deny ip any host 207.46.101.29

access-list 101 deny ip any host 207.46.114.58

access-list 101 permit ip any any

Saturday 16 January 2016

Remove Secret Cisco History

show history all <------- You will be surprised what is actually there

try these commands.
Router(config)#line vty 0 4
Router(config-line)#no history
Router(config)#line console 0
Router(config-line)#no history

Monday 4 January 2016

2016 Stock Pick List

Company name Symbol Currency P/E ratio
Tate & Lyle PLC TATE GBX 147.87
Sceptre Leisure Plc.    SCEL GBX 147.62
Easyhotel PLC EZH GBX 141.48
Premier Farnell plc PFLB GBX 141.03
Severfield PLC    SFR GBX 139.98
Fresnillo Plc FRES GBX 139.36
DM PLC    DMP GBX 131.38
Scientific Digital Imaging plc SDI GBX 129.41
Brunner Investment Trust Plc    44GL GBX 127
Premier Farnell plc PFLA GBX 126.22
Crimson Tide plc    TIDE GBX 123.46
Barclays PLC    BARC GBX 122.63
Mortice Limited MORT GBX 122.3
Immedia Group PLC IME GBX 120.37
Lowland Investment Company plc LWI GBX 114.64
Vectura Group PLC VEC GBX 114.24
Consort Medical plc CSRT GBX 108.83
Value and Income Trust plc    VIN GBX 108.41
Digital Globe Services Ltd    DGS GBX 107.53
Tanfield Group plc    TAN GBX 106.16

If you found this useful you can always donate...........15nut3xGxhkE8Urc4KXwCsNbi72dWPn1cQ

Content is intended to be used and must be used for informational purposes only. It is very important to do your own analysis before making any investment based on your own personal circumstances. You should take independent financial advice from a professional in connection with, or independently research and verify, any information that you find on any Website and wish to rely upon, whether for the purpose of making an investment decision or otherwise.