DSU Computer Clubs Wiki

This is a sample checklist for CCDC-style competitions.

Change all shell user passwords:

read; for u in $(cat /etc/passwd | grep -E "/bin/.*sh" | cut -d":" -f1); do echo "$u:$REPLY" | chpasswd ; done

Change all shell users' Samba passwords:

read; for u in $(cat /etc/passwd | grep -E "/bin/.*sh" | cut -d":" -f1); do echo -e "$REPLY\n$REPLY" | smbpasswd -sU $u ; done

Enable the firewall:

ufw enable

Check the permitted ports and remove unnecessary whitelists:

ufw status numbered

ufw delete [number]

Change all passwords for local users:

Get-LocalUser | Set-LocalUser -password (read-host -AsSecureString)

Change all passwords for domain users:

Get-ADUser -Filter * | Out-GridView -PassThru | Set-ADAccountPassword -NewPassword (Read-Host -AsSecureString) -Reset

Note: These must be ran in an administrative powershell. When ran there is sometimes no prompt. Just type in the password and hit enter.

Enable it. Good luck.

Check SMB Version:

Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

OR

Get-SmbServerConfiguration | Select EnableSMB1Protocol

If SMBv1 is enabled then disable it:

Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

OR

Set-SmbServerConfiguration -EnableSMB1Protocol $false

If SMB is required then enable SMBv2 which is secure:

Set-SmbServerConfiguration -EnableSMB2Protocol $true

-Enable Network Level Authentication -Make sure only required users are in RDP group