Super User Mode

• sudo -s

Install Apache Web Server

• apt update
• apt upgrade
• apt install wget
• apt install apache2
• systemctl enable apache2
• systemctl start apache2

Configure SSL

• apt intall certbot
• apt install python3-certbot-apache
• certbot --apache

Install MySQL Server

• https://dev.mysql.com/downloads/repo/apt/
• wget https://repo.mysql.com//mysql-apt-config_0.8.34-1_all.deb
• apt install ./mysql-apt-config_0.8.34-1_all.deb
• apt update
• apt install mysql-server
• systemctl enable mysql.service
• systemctt start mysql.service

Install PHP

• apt install php
• apt install php-mysqli

Systems Tools

• Connect to your MySQL Server: mysql -u root -p
• See what ports are listening: netstat -tunap
• Apache Default HTML directory: cd /var/www/html
• Echo Command: echo helloworld > hello.html
  
  

  MYSQL Commands:

  
  create database mydatabase;
  create user mydbuser@'localhost' identified by 'mypassword';
  grant all privileges on mydatabase.* to mydbuser@'localhost';
  flush privileges;
  show databases;
  
  
  
  

  Day 2: Small Business Online Shop - Home Operation

  1. Environment
  1. One Workstation - Window PC - Home Computer
  2. Wordpress Site Hosted on Godaddy
  3. Sell handmade blankets
  2. What security measures need to be in place?
  3. What security practices need to be taught?
  4. How could you as a Cybersecurity Professional be of most help?
  5. Sophos Central Review
  1. Endpoint Protection
  1. Threat Protection
  2. Peripheral Control
  3. Application Control
  4. Data Loss Prevention
  5. Web Control
  6. Update Management
  7. Windows Firewall
  2. Server Protection
  1. Threat Protection
  2. Peripheral Control
  3. Application ControlWeb Control
  4. Lockdown
  5. Data Loss Prevention
  6. Update Management
  7. Windows Firewall
  8. File Integrity Monitoring
  9. Linux Runtime Detection
  3. Encryption
  1. Device Encryption
  4. Monitor and Reporting
  6. Let’s see how it all works…
  1. What’s our environment?
  1. Windows Workstation
  1. Deploy Windows Workstation
  2. Install Sophos Client
  2. Web Server - Wordpress
  1. Deploy Debian Server
  2. Install Apache2
  3. Install PHP
  4. Install Mysql
  5. Install Wordpress
  6. Setup DNS and Let’s Surf!
  3. Let’s set up an SSH key from the windows workstation to the Web Server for “Easier” management.
  7. Let’s see what we can find wrong with this setup?
  1. Download Wireshark on the Windows Desktop
  2. Connect and login to Wordpress
  1. Can you see the credentials that you sent in plain text?
  2. How did you find it?
  3. What is a better solution
  1. SSL
  2. Separation of Web and DB Server
  3. Are SSH keys necessary?
  4. What are some possible scenarios that we might encounter - discussion
  4. Bonus
  1. Install MySQL Workbench
  2. Install Additional Wordpress Plugins and Themes