CE47 lesson 3,4,5 kali p2

Main ideas / concepts taught

1) Linux file operations: mv (Move/Rename)

• The video contrasts related commands (cp, mv, etc.) and then focuses on mv.
• Renaming with mv:
  • Rename a file by providing:
    • the current filename, and
    • the new desired filename.
  • Example outcomes mentioned: renaming something like lesson.txt to another .txt-ending name.
• Moving to a new location (not copying):
  • Key lesson: mv changes the file’s location directly rather than copying it.
  • If you move a file into another directory (e.g., from one path to C43), it ends up there and the original location no longer has it.
• Visibility check via directory listing:
  • After moving/renaming, they verify where the file/folder now exists (typically using ls or navigation with cd).

2) Combining multiple shell commands on one line

• You can chain commands so they run sequentially.
• Behavior/order:
  • Each command must complete before the next begins.
• Typical sequence described:
  • Create a directory (mkdir-like behavior).
  • Enter it (cd).
  • Create a file inside it (touch).

3) Convenience aliases (e.g., replacing clear typing)

• Aliases act as convenience shortcuts.
• Example concept:
  • Instead of typing clear (or using a control combination), typing a short command like c triggers the clearing automatically.
• Takeaway: aliases make frequent commands easier and faster.

4) Using nmap: port scanning basics and scan types

• The video transitions to cybersecurity tooling, mainly nmap.
• High-level purpose:
  • Explore networks and scan ports on a host.
• Scan types mentioned:
  • Stealth/invisible scan concepts
    • -sS is described as an “invisible” scan (SYN scan), based on TCP handshake logic.
    • -A (aggressive scan) is described as sending many packets per second and being thorough.
  • Other options/scan types are referenced briefly, including:
    • distinctions like aggressive vs SYN/stealth,
    • UDP scan,
    • service/version detection,
    • OS detection (presented as options people can enable).
• Why stealth scans may be less logged (as explained):
  • The instructor describes TCP handshake states/flags conceptually (e.g., SYN/ACK/RST) to justify why some scans don’t complete a full connection and may avoid log entries that a normal connection would trigger.
  • Claimed idea: some scans synchronize without completing the full session, so logging may differ.

5) Linux directory listing: understanding ls options

• The video explains what ls does and how variants change its output:
  • ls / ls -l: long listing format (more details such as ownership/time/permissions).
  • -a: includes hidden files (those beginning with .).
  • Mentions include:
    • -d (directory-focused listing behavior),
    • -h (human-readable size concept),
    • sorting/format options (some subtitle text is garbled).
• Key lesson: ls has multiple flags that change the metadata you see.

6) man and --help: learning command options

• The instructor emphasizes using built-in documentation tools:
  • man <command>
  • <command> --help or -h-style help
• Verbose output:
  • --verbose (and similar ideas) is described as making a command explain what it’s doing via more detailed output.
• Practical goal:
  • If you forget what an option does, use manual/help instead of guessing.

7) Linux filesystem and system directories: / and /etc, /etc/shadow

• Focuses on important system files and where they live:
  • /etc is highlighted as containing key configuration/system files.
  • /etc/shadow is highlighted as containing password hashes (not plaintext passwords).
• Mentions permission restrictions:
  • Attempting to view restricted areas may produce “permission denied.”
• Analogy:
  • /etc is like a “system control hub” (important config locations similar to other OS configuration areas).

8) Password hashing and concepts of salt

• /etc/shadow stores hashes of passwords.
• Hashes are not the original passwords.
• Salt value concept:
  • Even identical passwords produce different hashes if salts differ.
• Brute-force idea:
  • Guessing becomes difficult due to randomness, complexity, and huge search space (probability isn’t strictly zero, but is practically unlikely).

9) Inspecting restricted files with sudo

• Demonstrates elevated access to read /etc/shadow:
  • Conceptually: sudo cat /etc/shadow (prompts for a password first)
• After authorization:
  • Shows entries for different users.
• Observed content:
  • Hash entries tied to users, including accounts used by system services.

10) User and group management files: /etc/passwd and /etc/group

• Teaches what these files represent:
  • /etc/passwd: user account information
    • username, UID/GID, group membership details, home directory, shell, etc.
  • /etc/group: group membership information
    • which users belong to which groups
• Default group behavior described:
  • When creating a user, a group with the same name may be created automatically (common Linux primary-group behavior).
• Mentions admin/sudo concepts:
  • Admin users/groups and group-based permissions are referenced (without a full command procedure shown in subtitles).

11) “Everything is a file” principle (Linux philosophy)

• Notes a common Linux idea:
  • Many things are treated as files (including devices and special files).
• Contrast with Windows:
  • Windows often relies on extensions and prompts for type/behavior.
  • Linux can rely more on metadata/permissions than file extensions.

---

Methodologies / instruction-like sequences

A) Rename or move a file using mv

• Provide the source filename/path as the first argument.
• Provide the destination filename/path as the second argument.
• To rename:
  • Keep the same directory, but change the filename.
• To move:
  • Change the directory portion so the file lands in the new folder.
• After running mv:
  • Verify location using directory listing (ls) and/or navigation (cd).

B) Chain multiple commands in one line

• Use command separators so commands run in sequence.
• Typical pattern shown:
  • Create a directory.
  • Change into that directory.
  • Create a file inside it (e.g., touch 1.txt-type behavior).
• Key rule emphasized:
  • The second command depends on the first completing (e.g., cd requires the directory to already exist).

C) Learn/confirm flags for commands

• Use:
  • man <command> to read the manual/description.
  • <command> --help (or -h) for quick option listing.
• If you forget an option:
  • look it up in manual/help rather than guessing.

D) Read protected system files (password hashes)

• Use sudo to access restricted files like:
  • /etc/shadow
• Steps:
  • Run sudo cat /etc/shadow (or equivalent).
  • Enter the prompted admin password.
  • Inspect the hashed entries (hashes + metadata, including salt).

---

Speakers / sources featured

• No specific named speaker or host is clearly identified; the instructor is referred to generically as “teacher.”
• Primary tools referenced: Linux shell commands and documentation (man, --help), and nmap (network mapper).