diff --git a/ghetto/audit/ssl_thread_server.py b/ghetto/audit/ssl_thread_server.py index e4e1536..313c646 100644 --- a/ghetto/audit/ssl_thread_server.py +++ b/ghetto/audit/ssl_thread_server.py @@ -18,8 +18,7 @@ __ssl_addition__ = 'rhmoult' import sys import os import argparse -#import sys # Modification by rmoulton -#import ssl # Modification by rmoulton +import ssl # Modification by rmoulton try: from cStringIO import StringIO @@ -54,6 +53,8 @@ def main(HandlerClass=SimpleHTTPRequestHandler, ServerClass=HTTPServer, protocol server = ThreadingSimpleServer(server_address, SimpleHTTPRequestHandler) + server.socket = ssl.wrap_socket(server.socket, certfile='/path/to/cert', server_side=True, cert_reqs=CERT_REQUIRED, ssl_version=PROTOCOL_TLSv1_2) + try: while 1: sys.stdout.flush() diff --git a/ghetto/notes/NetworkSecurity/notes.txt b/ghetto/notes/NetworkSecurity/notes.txt new file mode 100644 index 0000000..4af71b5 --- /dev/null +++ b/ghetto/notes/NetworkSecurity/notes.txt @@ -0,0 +1,30 @@ +Class on 11/15, 11/17 then break and resume on 12/1 + +Link to look at: https://app.box.com/s/8tso8h5kerhy83qipb4bujkpc4bj0eoq + +Game plan: + + 11/15 Night 1: Grab docs, discussion on syllabus + 11/17 Night 2: Basic networking and IP addressing + 12/01 Night 3: Basic/Advanced networking, intro to hardware configuration (firewalls) + 12/06 Night 4: Network security design (part 1) plus Operating Systems basics, possibly even web security + 12/08 Night 5: Network security design (part 2) plus basics of IDS, IPS, HIDS + 12/13 Night 6: Wrap up of all covered topics + +11/15 + + Can't protect it, unless you understand how it moves. + discussion about how this meeting works at the networking layer: + Starts with discussion with the 7 layer OSI model (https://mplsnet.files.wordpress.com/2014/06/osi-model.gif) + Every layer of the OSI model adds its own header, Data layer also adds a footer. + Physical layer doesn't add any overhead because it's the bottom layer + Top 3 layers (application, presentation, session) are the data. In the TCP/IP model this is the application layer + Layer 4 (transport) are the segments, TCP/IP is also transport + Layer 3 (network) is the packets, TCP/IP is the Internet layer + Layer 2 (data link) is the frames and part of the TCP/IP Network Access layer + Layer 1 (physical) comprises the bits and is the other part of the TCP/IP Network Access layer + Homework: + Chapter 1 & 2 of CompTIA network+ + Joke: + (q) You're being chased by a group of clowns, what do you do when you turn around to confront them? + (a) Go for the juggler