49.6 Quick Combined Revision Card
Ek dense card – situation bagha, tool recall, Blue control. Print kara. Samjla ka?
| Situation | Linux / MySQL / Nmap / MSF recall | Blue control |
|---|---|---|
| Need listening ports on OWN host | Linux: ss -tulpn | Close unexpected; firewalld/SG |
| Patch Amazon Linux | sudo yum update -y | Schedule; reboot if kernel needs |
| Restart httpd after config test | sudo apachectl configtest then sudo service httpd restart | Never reload blind |
| SSH harden | Keys; PasswordAuthentication no; sudo service sshd restart | fail2ban; restrict SG source |
| MySQL only local | bind-address=127.0.0.1; app user GRANT minimal | Deny 3306 from internet |
| Avoid wipe UPDATE | SET SQL_SAFE_UPDATES=1; + WHERE on key | Backups; change tickets |
| SQLi in PHP form | (App) prepared statements – ch29 | Least DB priv; input allow-lists |
| Map OWN lab host ports | sudo nmap -sS -T2 -p 22,80,443,3306 192.168.56.20 -oN … | Alert mindset for mass SYN |
| Version banners on OWN VM | nmap -sV -T2 … | Patch old banners first |
| Understand attacker module flow | MSF: search → use → set RHOSTS/LHOST → check → exploit (Metasploitable only) | Patch; disable service; re-scan |
| Lab evidence pack | nmap -oA; tar -czvf; note hashes | Keep under ~/labs/; no real org names |
| Disk full / logs gone | df -h; du -sh; rotate logs | Alert on disk; immutable log mindset ch31 |
| Red team (attacker) does | Blue team (defender) detects / stops |
|---|---|
| Revises only Red flags from this card | Revises situation + Blue column aloud weekly |
| Mixes cafe IP into Nmap/MSF lines | Hard-codes host-only examples in notebook |
Ravindra Bagale's Tip
Combined card wall var chipkawa – pan Blue column highlight. Exam / interview “tool dump” peksha “situation → control” strong. Blank Blue = incomplete. He jigela. Lakshat theva.
Lab
With Amir or Zoya: quiz ten random rows from the combined card. Answer format: (1) commands, (2) one Blue sentence, (3) which OWN IP you would type. Wrong IP range = restart the quiz.