Try   HackMD

My first postmortem - ALX

Issue summary

The issue arised due to the server having default timeout making it inaccessible when a client tries to communicate with it.

Timeline:

  • 2023–07–04, 6:00 AM EAT: Project release
  • 2023–07–04, 9:00 AM EAT: Begin project.
  • 2023–07–04, 9:20 AM EAT: Everything working fine. Goes to a 30 mins break
  • 2023–07–04, 9:50 AM EAT: I try to reach my server using curl, i received status unreachable. Ping returns destination unknow.
  • 2023–07–04, 10:00 AM EAT: Logged in the ubuntu server and went over to check nginx status logs only to note that the web server was down.
    Image Not Showing Possible Reasons
    • The image was uploaded to a note which you don't have access to
    • The note which the image was originally uploaded to has been deleted
    Learn More →

ROOT CAUSE AND RESOLUTION

After analysing the error nginx error logs,I realised that the server had slept due to 20 mins of inactivity. This made the error when a client tried to communicate with it. I had to create a puppet script that would start a cron job to allow ensure that the web service is active every 15 mins to avoid such a down time.

Corrective and preventative measures:

At the time of this downtime, only one web server was serving the site constituting a single point of failure (SPOF). Hence, a good preventive measure and recommendation will be to use a load balancer to distribute the traffic on multiple servers to prevent a total downtime when one server is down.

Thank you for reading my article.

Last changed by 
 
Lord_r41d3n
Shikata Ga Nai
0
85

Read more

HTB SECRET

ENUMARATION nmap scan ┌─[r00t@parrot]─[~/Downloads/htb/secret] └──╼ $sudo nmap -sT -sC -sV -A 10.10.11.120 [sudo] password for r00t: Starting Nmap 7.92 ( https://nmap.org ) at 2021-12-18 10:50 EAT Nmap scan report for 10.10.11.120 Host is up (0.27s latency). Not shown: 997 closed tcp ports (reset) PORT STATE SERVICE VERSION

Feb 13, 2023
Paper Walkthrough - HTB

In this machine on port 80 it's first leak the new vhost called office.paper! on responce header X-Backend-Server after that wordpress version is vernable through Unauthenticated View Private/Draft Posts and we got the hint already with nick comment using the vernability we check the draft message that leak to another vhost and register ourself to that and get the directory Path Traversal and get the .env secret and login through ssh and for Privilege escalation we run linpeas that lead us to CVE-2021-3560. Emumeration nmap ┌─[r00t@parrot]─[~/ctf/paper] └──╼ $sudo nmap -sV -sC -sT -A 10.10.11.143 [sudo] password for r00t: Sorry, try again. [sudo] password for r00t:

May 27, 2022
Pandora Walkthrough - Hack The

In this box, I got to learn about SNMP exploitation and sqlmap. Also we have to do priviledge escalation to gain root. Enumaration nmap ┌─[r00t@parrot]─[~/HTB/pandora] └──╼ $sudo nmap -sV -A -sT -sC 10.10.11.136 Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-15 10:04 EAT Nmap scan report for 10.10.11.136 Host is up (0.20s latency). Not shown: 997 closed tcp ports (conn-refused)

May 20, 2022
Bounty Hacker Walkthrough - Try Hack Me

You were boasting on and on about your elite hacker skills in the bar and a few Bounty Hunters decided they'd take you up on claims! Prove your status is more than just a few glasses at the bar. I sense bell peppers & beef in your future! Task 1: Living up to the title. Enumaration Nmap ┌─[r00t@parrot]─[~/THM] └──╼ $sudo nmap -sC -sT -sV -A 10.10.7.209 [sudo] password for r00t: Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-14 16:03 EAT

May 14, 2022
Read more from Lord_r41d3n
Published on HackMD