Índice del video completo.

• ÍNDICE

ÍNDICE

• 0:01:18 - shebang
• 0:04:32 - comments
• 0:06:12 - interpretation mechanism
• 0:08:05 - conventions and variables
• 0:15:35 - status code
• 0:16:21 - double vs single quotes
  • 0:17:08 - variables expansion
  • 0:18:03 - handling internal quotes
  • 0:19:47 - command substitution
  • 0:20:00 - history expansion
• 0:20:59 - subshell
• 0:28:07 - grouping commands
• 0:35:08 - scripts arguments
• 0:25:32 - data types
• 0:39:33 - wildcards and pattern matching
  • 0:39:36 - wildcard global
  • 0:41:47 - wildcard simple
  • 0:42:43 - character class or charset
• 0:45:28 - parameter expansion with operators
  • 0:45:40 - string length
  • 0:46:01 - substring replacement
  • 0:47:19 - string concatenation
  • 0:47:39 - uppercase conversion
  • 0:48:20 - lowercase conversion
  • 0:48:47 - character substitution
  • 0:49:12 - remove spaces
  • 0:50:00 - find position of character
  • 0:50:17 - temporary default value expansion
  • 0:50:56 - permanent default value assignment
  • 0:51:21 - alternative value expansion
  • 0:52:01 - error message on unset
  • 0:52:34 - pattern removal
• 0:53:38 - let’s echo - HackerRank
• 0:58:20 - line continuation
• 1:00:06 - cronjobs
• 1:09:33 - redirect output
• 1:11:23 - operators in bash
• 1:13:51 - read command
• 1:20:16 - personalized echo - HackerRank
• 1:21:31 - arithmetic operators
• 1:21:57 - arithmetic expansion and arithmetic evaluator
• 1:25:23 - random numbers
• 1:25:42 - let command
• 1:26:29 - expr command
• 1:27:37 - bc command
• 1:29:08 - awk math operators
• 1:30:40 - the world of numbers - HackerRank
• 1:32:14 - conditionals and evaluators
• 1:36:55 - if -else if-elif-else
• 1:42:39 - strings operators
• 1:48:02 - logic operator
• 1:50:41 - integer operators
• 1:52:19 - file operators
• 1:55:17 - relational operators and arithmetic evaluation
• 1:56:06 - tips arithmetic evaluation
• 2:00:49 - arithmetic operators and arithmetic evaluation
• 2:09:26 - comparative conditionals evaluators
• 2:11:56 - arithmetic operators - HackerRank
• 2:14:06 - regular expressions
• 2:14:38 - wildcards and grouping operators
• 2:15:37 - metacharacters and repetitors
• 2:16:25 - anchors
• 2:16:41 - charsets
• 2:17:10 - grep command
• 2:20:13 - BASH_REMATCH
• 2:21:18 - match operator
• 2:22:18 - regex 101
• 2:25:13 - cut command - HackerRank
• 2:41:58 - head command - HackerRank
• 2:48:51 - tail command - HackerRank
• 2:51:00 - tr command - HackerRank
• 2:56:44 - getting started with conditionals - HackerRank
• 2:58:55 - comparing numbers - HackerRank
• 3:01:09 - more on conditionals - HackerRank
• 3:03:40 - switch or selector
• 3:06:29 - case charset or pattern
• 3:07:52 - case multiple
• 3:09:16 - case regex
• 3:10:19 - case wildcard
• 3:11:35 - case with text processing
• 3:12:41 - sort command - HackerRank
• 3:19:59 - uniq command - HackerRank
• 3:27:53 - grep command - HackerRank
• 3:37:20 - paste command - HackerRank
• 3:43:35 - sed command - HackerRank
• 3:52:50 - awk command - HackerRank
• 3:58:48 - for loop
• 4:00:41 - for with seq
• 4:01:45 - for c-style
• 4:03:31 - for wildcards
• 4:03:54 - for command substitution
• 4:05:03 - break
• 4:05:18 - continue
• 4:06:34 - nested loop
• 4:08:35 - while loop
• 4:10:41 - while user input
• 4:11:21 - while read file
• 4:12:23 - infinite while loop
• 4:14:27 - until loop
• 4:15:37 - until user input
• 4:16:09 - infinite until loop
• 4:17:07 - word splitting
• 4:18:24 - descriptors
• 4:21:49 - while read descriptors
• 4:24:42 - copy descriptors
• 4:27:22 - restore descriptors
• 4:30:09 - looping with numbers - HackerRank
• 4:31:12 - looping and skipping - HackerRank
• 4:34:21 - compute the average - HackerRank
• 4:37:38 - arrays indexed
• 4:38:24 - declare arrays
• 4:38:42 - view all elements arrays
• 4:39:21 - modify arrays
• 4:40:30 - modify arrays (advance)
• 4:41:00 - index array
• 4:41:17 - length array
• 4:41:32 - arrays elements access
• 4:41:58 - remove array element
• 4:42:14 - reindex array
• 4:42:44 - concatenate array
• 4:43:02 - dynamic array assignment
• 4:43:31 - declare array from arg
• 4:43:50 - string to array
• 4:45:08 - arrays operators
• 4:45:32 - arrays loop
• 4:45:55 - convert file to array
• 4:46:49 - array command injection
• 4:48:36 - array associative
• 4:48:42 - declare arrays associative
• 4:49:24 - unset arrays and variables
• 4:49:56 - modify arrays associative
• 4:50:25 - length array associative
• 4:50:34 - arrays associative elements access
• 4:50:52 - arrays associative loop
• 4:51:39 - count the number of elements in array - HackerRank
• 4:54:30 - read in array - HackerRank
• 4:55:58 - display an element of an array - HackerRank
• 4:57:07 - concatenate an array with itself - HackerRank
• 5:00:25 - slicing
  • 5:00:59 - string slicing
  • 5:03:43 - index array slicing
  • 5:04:40 - associative array slicing
  • 5:05:09 - positional parameter slicing
• 5:07:04 - slicing an array - HackerRank
• 5:08:39 - remove the first capital letter from each element - HackerRank
• 5:11:06 - filter an array with patterns - HackerRank
• 5:16:09 - vulnerabilities
  • 5:16:48 - pattern-matching “injection”
  • 5:20:56 - white collar eval bash [[-v]] code injection
  • 5:25:21 - white collar eval bash [[ $var -eq 42 ]] runs arbitrary code too
• 5:31:07 - declare command
• 5:34:22 - functions
• 5:36:41 - global vs local variables
• 5:39:18 - export command
• 5:40:13 - functions arg
• 5:41:42 - return and exit
• 5:43:51 - return values
• 5:45:51 - sudo preserve user
• 5:48:47 - catching signal
• 5:49:58 - trap command
• 5:54:08 - safe and debugging mode
  • 5:54:11 - set -e
  • 5:55:01 - set -u
  • 5:55:46 - set -o pipefail
  • 5:58:16 - set -x
  • 5:59:21 - set -v
  • 5:59:33 - debugging with redirection
• 5:59:38 - colours in bash
  • 5:59:54 - ANSI colors
  • 6:00:54 - echo -e
  • 6:02:15 - tput colors
  • 6:04:20 - echo vs printf
• 6:05:06 - basic port scan
• 6:18:43 - getopts
• 6:59:28 - shift command
• 7:13:03 - advance port scan
• 8:24:37 - “threads in bash” concurrency and parallelism
  • 8:26:46 - concurrency with & and wait
  • 8:27:24 - parallel execution with xargs
  • 8:29:46 - parallel execution with parallel
  • 8:31:18 - managing concurrency with & wait and wait -n

🎉 ¡Felicitaciones, estás aprendiendo Bash Scripting! 🎉

I’m going to share my personal configuration of Bspwm + Polybar + VSC + nvim + Kitty + Spotify with you, which can be installed on any Linux distribution designed for Penetration Testing, Ethical Hacking, CTFs, etc.

I must say that I’m not a developer, so the code is quite straightforward. It lacks validations and could be infinitely improved. When installing, we’ll see how everything is set up. I’ve kept it this way to catch any errors. It serves its purpose, which is to install the entire environment on top of a freshly installed image. I encourage you to modify it to your liking. It’s something I’m planning to do myself as I prepare for OSCP, and I take any opportunity to practice scripting.”

Good Luck

1. Considerations
   1. bebiam
   2. archlinux
   3. Repositories
   4. LaTeX
   5. Spotify
2. Installation
   1. Cusiosities
3. hotkeys

Considerations

This script for the environment setup has been tested on the latest versions of Kali, Parrot, Ubuntu, and Arch Linux.

Before installing anything I will explain a little how the script of the three different versions works:

I recommend you to read the whole post before installing in environment.

bebiam

The -d parameter determines the distribution you want to install. Initially, it was intended for Kali and Parrot, as they are based on Debian. However, since many people have been asking me via DM if they can also install it on other distributions, I decided to make it work for Ubuntu as well, since it uses the apt package installer. By importing the repository records from Kali, you can use all Kali tools on any Debian-based distribution. Therefore, it will also work for Debian.

archlinux

Many also asked me if it works for Arch. It’s more complex than just replacing apt with pacman, so I decided to implement it. However, since Arch Linux is compatible with BlackArch repositories, it is no longer necessary to implement Kali’s repositories. Therefore, everything here uses pacman, aur, paru, and the entire BlackArch suite. A few considerations when setting up the distribution: assign more than 4GB of RAM, otherwise the Xorg grub won’t load, and you won’t be able to select the environment. Also, although it’s not always the case, sometimes Polybar might not compile. You just need to copy the four lines of code and press super + alt + r.

Repositories

I decided to implement optionally with the -r the installation of the repositories for some tools that I saw in the OSCP course, plus the ones that are installed by default, all the ones I used to solve the Play, Practice, and Challenges machines. This is because, imagine you’re in a CTF, Audit, or OSCP Exam environment, and you need to install tools you know or don’t know how to install, and they might fail or not. So, I’m covering this part. Of course, there are some tools that I couldn’t implement in the installation as a distribution because they have windows to select and pop-ups, plus they use specific versions of packages. That’s why I’ve installed the stable versions of everything, so if you need something specific, you can install it in a virtual environment. All of this will be installed in /opt and you must have more than 160gb of space.

LaTeX

This is optional -l and its installation adds more than 30 minutes to the BSPWM installation. It’s for people like us who prefer to create our reports in LaTeX and write code. If you prefer Word or LibreOffice, don’t install any of this.

Spotify

Although it’s my favorite -s, I don’t have it installed because it consumes a lot of resources. I don’t recommend it for systems with less than 16 GB of RAM. Also, it takes 10 more minutes to install. I don’t install this on a virtual machine because it doesn’t make sense, but if you want to use Spotify on a laptop or physical computer installation, it’s recommended because it’s something you’ll always use. Also, the daemon on a physical machine is not the same as what’s implemented with the whole environment.”

You log in and you’re ready to go.

Installation

I have implemented everything so you don’t do anything, just clone the following repository and copy the following commands.

# file: "execute commands"
git clone https://github.com/4xLoff/Entorno-BSPWN.git
cd Entorno-BSPWN
chmod +x helpers.sh
sudo ./helpers.sh -d debian -r -l -s

You can choose which distribution you want to install the environment on, and you can also choose whether or not to add the optional flags. I invite you to read the code; although I do some checks, it should be executed in this way because I’m handling the dual-user assignment to install the tool. This is the way to install the necessary tools for each user with low privileges and root.

Cusiosities

Depending on the time of installation, only thing you need to do when you see screens asking you to restart some services is to press Enter,

Or if it asks you to choose between yes or no, always select yes, or provide the password. Lastly, this is something I can’t skip: the installation of Neovim. Wait for the Lua packages to load and for all the screens to finish. To exit, type :x.

At some point it will change, you will log out, at this moment you will have to restart the system and to start the session choose the BSPWN option.

Choose tab bspwm kali.

Choose tab bspwm arch.

Choose tab bspwm parrot.

Choose tab bspwm Ubuntu.

I have automated the entire installation, so you no longer need to configure either zsh or powerlevel10k; these will load automatically. If you wish to edit anything, it’s in the configuration file. Neither fzf nor neovim needs to be configured separately. Just open any file, and the dependencies for neovim will be installed. Don’t forget that this must be done for the low-privileged user as well as root.

• see more in the link

All of us who use this type of environment are used to seeing our IP and VPN from Hack the box. This is also implemented in the following way, for example.

To configure the IP and name of the HTB machine we use.

# file: "set target"
settarget 10.10.10.4 Blue

And to clean.

# file: "clean target"
cleartarget

It is also used to clear the target when there is no IP set, and if you click on the target IP you will copy it to the clipboard.

Still, I like my environment to be simple, so I have removed what I don’t need and implemented the following.

• The location of the window will always tell you where you are located, no matter if you are between terminals, watching a video or whatever.

• The interfaces for ctf’s.

• Resizing applications is something that I really like because certain applications fit into the environment bar with just one click.

• The implementation of spotify to hack with my favorite music.

Like most of us who have customized our environments, we have learned this thanks to s4vitar and even used his environment. But in the exercise of wanting to know more, how could I set up my own environment? I reached the conclusion of using the forest template since it has many utilities already implemented that can be taken advantage of, unlike the simple one that we all learned and replicated.

This looks like this, and also the letters move.

hotkeys

🎉 Congratulations, you now have your own Environment!. 🎉