DEV Community: Jihad Sinnaour

Apache2 (Optimisations)

Jihad Sinnaour — Thu, 13 Apr 2023 21:42:15 +0000

⚡ Installation

Global

apt-get install apache2-utils

PHP-FPM

apt-get install php7.4-fpm

⚡ Calculation

(1 CPU cores, 2 GB RAM)

Process size

Size per each single process.

wget https://raw.githubusercontent.com/pixelb/ps_mem/master/ps_mem.py -O usage.py
chmod a+x usage.py
python usage.py
lscpu
top
top -c -p `pgrep apache -d','`
top -c -p `pgrep mariadb -d','`
top -c -p `pgrep php -d','`

{Process size} = {Used RAM (Item)} / {Process (Item)}

# Apache:
# 50M / 5P
# 10M
# (~ 150)

# PHP-FPM:
# 200M / 5P
# 40M
# (~ 256M)

# MySQL:
# (~ 256M)

MaxRequestWorkers

MaxRequestWorkers = ({Total RAM} - {Used RAM (Kenel, MySQL...)}) / {Process size}
# (2000 - 600) / 50M
# 28M

PHP-FPM max-children

maxclients = ({Total RAM} - {Used RAM (Kenel, MySQL...)}) / {Process size}
# (2000 - 600) / 50M
# 28M

⚡ Configuration

Global

a2enmod deflate # GZIP
a2dismod mod_ruby # Unused
a2dismod mod_perl # Unused

@ /etc/apache2/apache2.conf

Timeout 120
KeepAlive On
MaxKeepAliveRequests 500
KeepAliveTimeout 3

Cache

a2enmod cache
a2enmod cache_disk
a2enmod expires
a2enmod headers

@ /etc/apache2/sites-available/{domain}.{tld}.conf

@ /etc/apache2/sites-available/000-default.conf

<IfModule mod_disk_cache.c>
    CacheQuickHandler off
    CacheLock on
    CacheLockPath /tmp/mod_cache-lock
    CacheLockMaxAge 5
    CacheIgnoreHeaders Set-Cookie
    CacheEnable disk
    CacheHeader on
    CacheDefaultExpire 800
    CacheMaxExpire 64000
    CacheIgnoreNoLastMod On
    ExpiresActive on
    ExpiresDefault A300
</IfModule>

MPM (Multi-Processing)

a2dismod mpm_prefork
a2dismod mpm_event
a2enmod mpm_worker

@ /etc/apache2/mods-available/mpm_worker.conf

<IfModule mpm_worker_module>
    StartServers 1 # {CORES}
    ServerLimit 150 # {RAM}
    MinSpareThreads 25
    MaxSpareThreads 75
    ThreadLimit 64
    ThreadsPerChild 25
    MaxRequestWorkers 150 # {RAM}
    MaxConnectionsPerChild 1000
</IfModule>

PHP-FPM

a2enmod proxy_fcgi setenvif
a2enconf php7.4-fpm

@ /etc/php/7.4/fpm/pool.d/www.conf

pm = dynamic
pm.max_children         256 # ({Total RAM} - {Used RAM (Kenel, MySQL...)}) / {Process size}
pm.start_servers        4 # ({CORES} * 4)
pm.min_spare_servers    2 # ({CORES} * 2)
pm.max_spare_servers    4 # ({CORES} * 4)
pm.max_requests         1000

Restart

service apache2 restart
service php7.4-fpm restart
systemctl start apache-htcacheclean

Test

PHP-FPM

php-fpm7.4 -t

Cache

ls -la /var/cache/apache2/mod_cache_disk/

ApacheBench

ab -n 1000 -c 100 -k -H "Accept-Encoding: gzip, deflate" [http[s]://]hostname[:port]/path

Authors:

Jihad Sinnaour - Jakiboy (Initial work)

⭐ Support:

Please give it a Star if you like the project.

Setup a LAMP (Debian 11) - Optimized method

Jihad Sinnaour — Thu, 13 Apr 2023 21:39:37 +0000

⚡ Update / Upgrade

Update source:

@ /etc/apt/sources.list

deb http://deb.debian.org/debian/ {dist} main

Update libs:

apt-get update
apt-get upgrade

Update system:

apt-get upgrade --without-new-pkgs
apt-get full-upgrade
reboot

Fix APT :

rm -fr /var/lib/apt/lists/*
apt-get --purge autoremove
apt-get clean all

Check:

uname -r
lsb_release -a

⚡ Setup Access (SSH/SFTP)

Install:

apt-get install openssh-server
# apt-get install ssh (client/server)

Change root password:

passwd root

Add SSH user:

adduser {username}

Apply SUDO on SSH user:

usermod -aG sudo {username}

@ /etc/sudoers

{username} ALL=(ALL) ALL
# {username} ALL=(ALL) NOPASSWD:ALL

Setup SSH/SFTP (CHROOT)

Configuration:

@ /etc/ssh/sshd_config

Port {port}
LoginGraceTime 60
PermitRootLogin no
StrictModes yes
MaxAuthTries 6
MaxSessions 3

#Subsystem sftp /usr/lib/openssh/sftp-server (comment)
Subsystem sftp internal-sftp

Match [User|Group] {username|groupname}
        ForceCommand internal-sftp -u 077
        PasswordAuthentication yes
        ChrootDirectory /var/www
        AllowTCPForwarding no
        X11Forwarding no

Restart:

sshd -t
systemctl restart sshd

Check:

tail -f /var/log/auth.log

⚡ Setup Apache Server

Install:

apt-get install apache2
apt-get install libapache2-mod-php7.4

Configuration:

a2enmod rewrite
a2dissite 000-default
a2dissite default-ssl
a2ensite {site}
a2dissite {site}
apache2ctl configtest
service apache2 restart

⚡ Setup MySQL Server

Install:

apt-get install mariadb-server
mysql_secure_installation

Add database:

mysql -u root

CREATE USER '{username}'@'localhost' IDENTIFIED BY '{password}';
GRANT ALL PRIVILEGES ON *.* TO '{username}'@'localhost' WITH GRANT OPTION;
FLUSH PRIVILEGES;
CREATE DATABASE IF NOT EXISTS {database};
exit;

service mysql restart

Dump:

mysqldump -u {username} –p {password} {database} > {dump.sql}

⚡ Setup PHP

Install:

apt-get install php7.4 (php7.4-common)
apt-get install php7.4-cli
apt-get install php7.4-curl
apt-get install php7.4-intl
apt-get install php7.4-imagick
apt-get install php7.4-{extension}

Change php version:

a2dismod php7.0
a2enmod php7.4
service apache2 restart

⚡ Setup PhpMyAdmin

Install:

apt-get install phpmyadmin

Configuration:

@ /etc/apache2/apache2.conf

Include /etc/phpmyadmin/apache.conf

echo 'Include /etc/phpmyadmin/apache.conf' >> /etc/apache2/apache2.conf
service apache2 restart

⚡ Setup FTP (Optional)

Install:

apt-get install vsftpd

Configuration:

@ /etc/vsftpd.conf

Edit:

listen=YES
write_enable=YES
chown_uploads=YES
chown_username=www-data
chroot_local_user=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
local_umask=0022
anon_upload_enable=YES
anon_mkdir_write_enable=YES

Add:

allow_writeable_chroot=YES
chmod_enable=YES
ftp_username=www-data
force_dot_files=YES
max_clients=10
max_per_ip=3
hide_ids=YES
user_config_dir=/etc/vsftpd
file_open_mode=0777
user_sub_token=$USER
vsftpd_log_file=/var/log/vsftpd.log

mkdir /etc/vsftpd
nano /etc/vsftpd/{username}

local_root=/var/wwwsername}

service vsftpd restart

⚡ Setup DNS Server

Install:

apt-get install bind9
service bind9 restart

⚡ Setup SMTP

Install:

apt-get install postfix mailutils (postfix-mysql)
service postfix restart
service apache2 restart

⚡ Setup TLS/SSL

Install:

apt-get install openssl
apt-get install certbot python3-certbot-apache

Configuration:

certbot --apache
# certbot renew (/etc/letsencrypt/renewal)
# certbot certonly --cert-name domain.com -d domain.com
service apache2 restart
crontab -e

12 3 * * * letsencrypt renew >> /var/log/letsencrypt/renew.log

service cron restart

⚡ Setup Firewall

Install:

apt-get install ufw

Configuration:

ufw disable
ufw default deny incoming
ufw default allow outgoing
ufw allow 80
ufw allow 443
ufw allow ssh
ufw allow from {IPV4} to any port {port}
ufw allow from {IPV6} to any port {port}
ufw enable
# ufw reset

⚡ Setup Permissions

Add WEB/SFTP user:

useradd {username}

Add WEB/SFTP user to www-data Group:

# adduser {username} {group}
usermod -aG www-data {username}
usermod -d /var/www -m {username}

Apply WEB/SFTP directory permissions:

chown -R {username}:www-data /var/www/
find /var/www -type d -exec chmod 755 {} \;
find /var/www -type f -exec chmod 644 {} \;

Change Access Control Lists (Optional):

apt-get install acl
setfacl -R -m g:www-data:rwx /var/www
setfacl -R -m u:{username}:rwx /var/www

Change Apache user:

@ /etc/apache2/envvars

export APACHE_RUN_USER={username}

echo 'export APACHE_RUN_USER={username}' >> /etc/apache2/envvars

⚡ Setup Redis

Install:

apt-get install redis-server
apt-get install php7.4-redis
apt-get install php7.4-igbinary

Configuration:

@ /etc/redis/redis.conf

# bind 127.0.0.1 ::1 (comment)
maxmemory 1024mb
maxmemory-policy allkeys-lru

Restart:

service redis-server restart

Test:

redis-cli
redis-cli FLUSHALL

⚡ Setup WP-CLI

Install:

wget https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
chmod u+x wp-cli.phar
mv wp-cli.phar /usr/local/bin/wp

⚡ Setup GIT

Install:

apt-get install git

Configuration:

git config --global user.name "{username}"
git config --global user.email "{email}"

⚡ Setup Security

Install Fail2ban:

apt-get install fail2ban

Secure Apache:

@ /etc/apache2/apache2.conf

# Decrease Timeout value
Timeout 60

@ /etc/apache2/mods-available/ssl.conf

# Use only TLS, Disable SSLv2, SSLv3
SSLProtocol -all +TLSv1

# Disable Weak Ciphers
SSLCipherSuite HIGH:!MEDIUM:!aNULL:!MD5:!RC4

@ /etc/apache2/mods-available/userdir.conf

# Limit HTTP Request Methods
allow only GET, POST and HEAD

@ /etc/apache2/conf-available/security.conf

ServerTokens Prod
TraceEnable off
ServerSignature Off
FileETag None

# Set rules for Directory /var/www/html
Options None
AllowOverride All
Order Allow,Deny
Allow from All

a2enmod headers

# Cookie with HttpOnly and Secure flag
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure

# Clickjacking Attack Protection
Header always append X-Frame-Options SAMEORIGIN

# XSS Protection
Header set X-XSS-Protection "1; mode=block"

# Enforce secure connections to the server (HSTS)
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# MIME sniffing Protection
Header set X-Content-Type-Options: "nosniff"

# Prevent Cross-site scripting and injections
Header set Content-Security-Policy "script-src 'self'; object-src 'self'"

service apache2 restart

Disable FTP access:

iptables -A INPUT -p tcp --dport 21 -j DROP

⚡ Tools

Install:

apt-get install net-tools

⚡ Service

Reset:

systemctl stop {service}
systemctl disable {service}
systemctl unmask {service}
rm /etc/systemd/system/{service}
rm /usr/lib/systemd/system/{service} 
systemctl daemon-reload
systemctl reset-failed

Authors:

Jihad Sinnaour - Jakiboy (Initial work)

⭐ Support:

Please give it a Star if you like the project.

ReVen: a Reverse Engineering Toolkit AIO

Jihad Sinnaour — Thu, 13 Apr 2023 21:32:07 +0000

ReVen is a Reverse Engineering Toolkit AIO built for Security (Penetration testing) & Educational purposes only.
It contains almost everything about RE -At least to begin- .

ReVen is built to share personal experience (passion) in RE since 2008, it can be useful for new future Reversers / Developers.

Its also a good Electron boilerplate.

Requirements

To run ReVen:

Windows 10/11 x64 -VM recommended-.
ReVen.iso -External ReVen packages- not available in this repository (More than 300 items).

To build ReVen:

Node.js ^24.

Notices

Reverse Engineering tools are denied by Antivirus (Due to binary patching algorithms, debugging ...etc).
You should make an Antivirus exception to avoid detection, or use a virtual machine.
ReVen.iso is automatically downloaded & extracted during installation.
ReVen.iso includes docs & basic tutorials about RE.
100% clean, -but use it on your own responsibility-.
90% portable.

Download

ReVen AIO

Download from: Releases.

ReVen Packages (6Go)

Download manually from:

ReVen Packages Part 1.
ReVen Packages Part 2.
ReVen Packages Part 3.
ReVen Packages Part 4.
ReVen Packages Part 5.
ReVen Packages Part 6.
ReVen Packages Part 7.
ReVen Packages Part 8.
ReVen Packages Part 9.

Screenshot

This is how it looks, Built with {heart} using Electron.js + Some legacy {stuff}.

The App background is the electron DevTools itself.

Install, Run & Build

bash global.sh
bash init.sh
bash run.sh
bash build.sh

Packages

ReVen packages includes:

Analysing

Analyse binary executable files (EXE, DLL, OCX...).

Binary

Analyse binary.

FileAlyzer
Alternate DLL Analyzer
ExeInfo (Archived)

Compilation

Analyse PE compilation.

Detect It Easy (DiE)
Nauz File Detector (Archived)
Language 2000 (Archived)
PE Detective (Archived)
Signature Explorer (Archived)

Bytecode (p-code)

Object code converted by interpreter into binary machine code to be read by CPU.

Bytecode Viewer (Archived)

Packaging

Analyse PE packaging / protection.

Exeinfo PE
PEiD (Archived)
ARiD (Archived)
UPX-Analyser (Archived)

System

Analyse system files, processing & memory.

HijackThis
SearchMyFiles
Process Monitor
API Monitor
RegDLLView
WinObj
WinID
HeapMemView
CPU Stress
DeviceIOView
Autoruns
Fiddler
Wireshark (Archived)
DLL Function Viewer (Archived)
Process Explorer (Archived)
Process Hacker (Archived)
Zero Dump (Archived)
GDIView (Archived)
grepWin (Archived)

Calculating

Mathematical & reverse calculating.

Alternate Math Solver
Reverser Calculator
Hex-Dec
JMP Calculator
XOpcodeCalc (Archived)
Jump to Hex (Archived)
Hash Calculator (Archived)
Base Calculator (Archived)
Base Converter (Archived)

Converting

Convert binary files.

BAT to EXE
PS1 to EXE
VBS to EXE
JAR to EXE
PNG to ICO
Audio Video to EXE
RapidEXE (PHP - EXE) - CLI
RegConvert (REG - EXE)
vbstoexe - CLI (Archived)

Decompiling

Revert the process of compilation. Transforming binary program file into a structured higher-level language.

BinaryNinja
ILSpy (Archived)
dotPeek (Archived)
.NET Reflector (Archived)
Java Decompiler (Archived)
JByteMod (Archived)
VB Decompiler (Archived)
DJ Java Decompiler (Archived)
Dis# Net Decompiler (Archived)

Disassembling

Transforming machine code into a human readable mnemonic representation (Assembly language).

Ghidra
IDA (Archived)
Capstone - CLI (Archived)
Delphi Disassembler (Archived)
bddisasm - CLI (Archived)
Disasm (Archived)
Refractor (Archived)
RadASM (Archived)
Win32Dasm (Archived)

Debugging

View and change the running state of a program. (Disassembling, Decompiling, Hexing).

x64dbg
Immunity Debugger (Archived)
dnSpy (Archived)
OllyDbg (Archived)
Cutter (Archived)
Radare2 - CLI (Archived)

Hexing

Edit binary hexadecimal values.

ImHex
HEX Editor (Archived)
Hiew (Archived)

Rebuilding

Rebuild PE import table (Imports Reconstructor).

Scylla
DLL Packager
ImpREC (Archived)

Decoding

Decode hash.

Ophcrack
CyberChef (Archived)
Armadillo KeyTool (Archived)
Keygener Assistant (Archived)
SND Reverse Tool (Archived)
Hash Identifier (Archived)
RSA-Tool 2 (Archived)
RSATool (Archived)
RSABox (Archived)
MD5 Toolbox (Archived)

Comparing

Binary compare.

REPT file compare
File CompareR (Archived)
ReloX (Archived)
SideBySide (Archived)
SignMan (Archived)

Editing

Binary edit (EXE, RES, DLL).

Resource Hacker
PPEE (Professional PE Explorer)
PE Lab
XPEViewer
XELFViewer
WinMerge
DLL Injector Slait
Codejock Skin Builder
Codejock Resource Editor
Codejock MarkupPad
Codejock Command Bars Designer
Notepad++
DLL Addr&Func Converter (Archived)
DLL Injector (Archived)
DLL Loader (Archived)
DLL Rebaser (Archived)
ResEdit (Archived)
CFF Explorer (Archived)
Resource Builder (Archived)
Splash Injector (Archived)
Far Manager (Archived)
KDiff3 (Archived)
IID King (Archived)
Cheat Engine (Archived)

Extracting

Binary extracting (EXE, RES, DLL).

UniExtract2
DLL Export Viewer
RegFileExport
ResourcesExtract (Archived)
DotNetResExtract (Archived)
RegFromApp (Archived)
Inno Extractor (Archived)
Innoextract - CLI (Archived)
Innounp - CLI (Archived)
MSI Unpacker (Archived)
Fearless MSI Unpacker (Archived)
LessMSI - CLI (Archived)
Mmextract - CLI (Archived)
ExeDumper (Archived)
Table Extractor (Archived)

Games

Dragon UnPACKer
Unity Assets Bundle Extractor
Ninja Ripper
3D Ripper DX (Archived)
QuickBMS (Archived)
Unity Asset Editor (Archived)
DevX Unity Unpacker (Archived)
Unity Studio (Archived)
UnityEx (Archived)
uTinyRipper (Archived)

Unpacking

Unpack & remove binary protection (EXE, DLL).

XVolkolak
.NET Reactor Slayer
ConfuserEx Unpacker - CLI
ILProtector Unpacker (Archived)
de4dot (Archived)
RL!deUPX (Archived)
RL!deASPack (Archived)
RL!dePacker (Archived)
GUnPacker (Archived)
ASPack Unpacker (Archived)
IsXunpack (Archived)
Unpacker ExeCryptor (Archived)
Universal Unprotector (Archived)

Patching

Patcher

Generate patching program using binary compare.

dUP 2
AT4RE Patcher (Archived)
CodeFusion (Archived)
uPPP (Archived)
Apatch (Archived)
Inno Setup XDELTA Patch Maker (Archived)
PEiD Patch Maker (Archived)
Graphical Patch Maker (Archived)

Loader

Build binary patch loader.

Advanced Loader Generator
Abel Loader Generator (Archived)

Keygen

Build Key generator.

REPT Keygen Maker

Skin

Build patcher skin.

Dup2AP Skin Converter
Image Flipper
Skin Builder
Skin Extractor
uPPP2AP Skin Converter (Archived)
RGNerator (Archived)

Release

Build patcher release file.

Release Builder
DizView
Fast Cracktro Maker (Archived)
mRelease Builder (Archived)
NFO Maker (Archived)
NFO Scroller (Archived)
NFO View (Archived)
NFO Viewer 2 (Archived)

ASCII

Build patcher release ASCII.

Ascgen
1337 Converter (Archived)
ASCII Art studio (Archived)
ASCII Converter (Archived)
ASCII Generator (Archived)
ASCII Table (Archived)
Magic ASCII Pic (Archived)

Sound

Build patcher sound (MX).

FastTracker 2
OpenMPT (Archived)
MilkyTracker (Archived)
ModPlug Player (Archived)
ChipRip (Archived)

Bypassing

Trial

Trial reset.

RunAsDate
DateHack (Archived)
Trial-Reset (Archived)

System

Bypassing system.

RunFromProcess
ScyllaHide

Assembling

Assembling Machine code.

Flat assembler (FASM)

Programming

Programming tools (+Compilator).

PyScripter
Embarcadero Dev-C++ (Archived)
Dev-C++ (Archived)
Small Basic (Archived)

Encoding

Data encoding (Hash).

WinHasher
Alternate Hash-Generator
PuTTY
HashMyFiles (Archived)
XOR (Archived)
Base64 - CLI (Archived)
MD5 - CLI (Archived)
SHA1 - CLI (Archived)
Dissecting RC4 Algorithm (Archived)
DSS-DSA Generator (Archived)
gRn-Rsa-Donkey (Archived)

Packing

Executable packing.

UPX
ConfuserEx
Alternate EXE Packer
Amber (Archived)

Testing

Simulating

Circuit / Logical simulation.

Fritzing
Arduino Simulator
Arduino CLI
PICSimLab (Archived)
UnoArduSim (Archived)
Dia (Archived)
Logisim (Archived)
SimulIDE (Archived)
Circuit Simulator (Archived)

Sandboxing

Executables safe testing.

Sandboxie Plus
Sandboxie Classic (Archived)

Mobile

Mobile application reverse.

APK Editor Studio
OTP Extractor
WhatsApp Extractor (CLI)
WhatsApp Viewer
Apktool - CLI (Archived)
APK Protect (Archived)
XAPK Detector (Archived)
APK Multi-Tool (Archived)

Authors:

Jihad Sinnaour - Jakiboy (Initial work)

⭐ Support:

Please give it a Star if you like the project.