# _ _ # (c).-.(c) # / ._. \ # __\( Y )/__ #(_.-/'-'\-._) # || || # _.' `-' '._ #(.-./`-'\.-.) # `-' `-' root@client:~# ls -la total 84 drwx------ 7 root root 4096 Apr 21 17:19 . drwxr-xr-x 24 root root 4096 Apr 10 00:10 .. -rw------- 1 root root 17241 Apr 10 01:33 .bash_history -rw-r--r-- 1 root root 3106 Feb 19 2014 .bashrc drwxr-xr-x 4 root root 4096 Aug 3 2016 build drwx------ 2 root root 4096 Nov 8 21:08 .cache drwxr-xr-x 3 root root 4096 Nov 9 15:13 .config -rw-r--r-- 1 root root 26 Nov 8 20:33 .gitconfig -rw------- 1 root root 66 Dec 29 15:33 .nano_history -rw-r--r-- 1 root root 140 Feb 19 2014 .profile -rw------- 1 root root 1024 Apr 21 08:06 .rnd -rw-r--r-- 1 root root 66 Aug 10 2016 .selected_editor drwxr-xr-x 2 root root 4096 Aug 3 2016 .ssh drwxr-xr-x 3 root root 4096 Oct 15 2016 VikingVPN.Setup.Server -rw------- 1 root root 5816 Oct 2 2017 .viminfo root@client:~# head -1 /etc/shadow root:$6$u.YIVv.P$FehEdvlPOvEnLYDCVTHwVASISkUE/RDMBt.UfGMKfG3TpCT0rc1NaPlOZ3zqVMjTv8EIU1vEi8wzsSWpai39o/:17007:0:99999:7::: root@client:~# ls -la /etc/openvpn total 28 drwxr-xr-x 2 root root 4096 Mar 5 10:48 . drwxr-xr-x 95 root root 4096 Apr 10 00:10 .. -rw-r--r-- 1 root root 762 Dec 29 15:29 Chicago17.conf -rw-r--r-- 1 root root 762 Dec 29 15:32 Chicago18.conf -rw-r--r-- 1 root root 763 Dec 29 15:32 Chicago19.conf -rw-r--r-- 1 root root 763 Dec 29 15:33 Chicago20.conf -rwxr-xr-x 1 root root 1301 May 9 2016 update-resolv-conf root@client:~# cat /etc/openvpn/Chicago19.conf local 144.48.104.45 server 10.10.0.0 255.255.0.0 management 127.0.0.1 3996 dev tun3 ## STATIC SETTINGS proto udp port 443 push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" push "block-outside-dns" keepalive 30 120 link-mtu 3000 fast-io auth-nocache cipher AES-256-CBC comp-lzo max-clients 100 verb 0 daemon openvpn sndbuf 500000 rcvbuf 500000 ## Certs and Keys ca "/VikingVPN/openvpn/config/easy-rsa/keys/ca.crt" cert "/VikingVPN/openvpn/config/easy-rsa/keys/Viking1.crt" key "/VikingVPN/openvpn/config/easy-rsa/keys/Viking1.key" dh "/VikingVPN/openvpn/config/easy-rsa/keys/dh4096.pem" tls-auth "/VikingVPN/openvpn/config/easy-rsa/keys/ta.key" 0 crl-verify "/VikingVPN/openvpn/config/easy-rsa/keys/crl.pem" root@client:~# cat /VikingVPN/openvpn/config/easy-rsa/keys/ca.key -----BEGIN PRIVATE KEY----- MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDu6xGq6a5T3xyo /Mzxy86s0M4MP2KrysYXMMVfQKOMtbUJXtSzq/f0wG8JM/kffV6GaDGsQQjCO89N kygG5klV37ibh/4+kU3cZ/lrhh2PsL6kDYOXnBmF/XctnOVK4umHTmQEnxeItq4U wGRlb+l38thSlWB3+wl8UzbcT69Bfah681vJaOPzUPjFYVkd0adFuaUpuRUL6CRX TDG91lDvvSJH/pyKW/6NHxKFtSmXENfySZfdi0z2sw1QBxEbOHFskvRezIwQ7r8j FSb8DRJMdNMztY9uDoKaQsptcQ7eL0r2xpcR4YkMnXiyy8nsete3nhr3mENtFTme /TQR5tNpUp0UnCaUz/w0LSloCngRnjBzcHSHK5iZyC497CPLCEjaiIn20Ujx7qbN azQvc/TlJTdhfquk5V+F31NumlZQ+0G18I0PjmXRDcY/SDwrFWhz6HN0UblItLlk xTZ5GBb70mlDhCfCsg28YwJ9xeBASaN5P/u39brKhydDpeiei3YeYeRLUunTt6k8 QvEKjnRJWROCK8VZTXOcZfU4EmzHQV33AgRGMyyNY/JqkIv58IXIKplm6pRLp86h Nh/6wkR49lBuGRHT7EOxZp3/muEi1+K+Fg+CZLpYMu+HDy1IgxuKOUqUQgljWwIY uOh8Y4RfL/glv0pzGw3nBtJE8td52wIDAQABAoICAAGFK2KcBAjylXsZyLANLO56 kaUQTi9rpeEF5WuavK+rhFBf8xiFkplTFCHJ297wbEaMqSxAaa7atJH4yrtogbTz LHiI3/xD7mvlmXeurcd5R21BzMGNM7hfiX+XzPmyAexjek1xObQb/XWSV9Exahni SLAV1TxOM5w/50x1kVboVscZf08DxNeKf1q6KNgAuoC+Eqf2ToT54ClSCcr8bx1n Za1xmEtlFHSPaw3AvlgAum8HOtklBsNXFlGZCenTbR1UvgtQX9/HtR2jB9F4v9IO uD1O/W+k1f3nSORzYLXXNTHmx5VMixOyeM8ibtF7Yp3/eopyxJMQHIK/d7JZdqTk xN8HfGozirk2Ke00U92lEod3VpzspRNMebepUt1b5n/p5tFGjO85UPRBlFzLOtma rPRGDBGOgwpT+ngibSEWxbzmVT2Uq5TFJ6oA3CJFkEfWG9BRD48zRruRa5fTuz7m 5NjphmA3+QLZD0qU31pChgCNqjvlvp4rKzJgO1jxlXMUd4rkNEdhv4+TpdbkX/ut Ma+5X41pxNYt29Q6NnS4v/r6yEmwS7cErdfAKokcfn5tx7+gzlcWGT7LKyyqEISd 2YiSl61qAtmDii/6e4tBh3lxvD3VmTizAbH7o9RPdMtvkO5Bq9XhK3tkq5ju+o3M mTfMQstr57cuxW/Cpk8pAoIBAQD7bghN6+q1s1uXG17GUJ2T7Ox2EtzlGR+PKcF+ wxbQRQe3jwz69+IJp+wj4XTpyzLSlPA7XGumFRZok+PG/It3tkzywJyFhSGpAxka sEt+inGtkQ6N4OBM+a5qd0LH4UJIefMzbH/YA9gUXcF5QK1XWYloy64uWuQWx8Ip UlZVYWTBxyfVTati4VW3i6KAOx3T0RD0OUlI2jromi8zv0LFUnedwMe2EGRZELrD EFcK0quxNmq5DxHgHEjY89efj9CFFfRrnC4heHVwet5NJ3ucQFkrDwK4KznmI/Jb 62slOJ7zE93b9+gMonzS69jJ+C9CpQ4p98/Wrs9khw2IL3B9AoIBAQDzQtEmqpZ7 8TVbCOYeDHVOTQTpJLoUKFZHIKROW/zN5T4BB7JcBRNsj2k9Hu5buXP+zNVUSfEQ RGUEElnG6Rwipzy/GANbp+9m84z+MO8fbgghUKPYy1sAChdCF3aTFMx7+AcIHQez 1dHYsAGSCRXI/v4qMiYIIfLZII2AcLnTnTgkVgMb5NpZHQjLmd8FtIi51Td5EMxK bnBpF3OqE3d3UQkNic3wRvDvV0sdurLXNU6leq1FzIFWiKpfpcszK1aRDz4NE2sM UfjOaqOnpistrhMjrKhKTKImfZ7uTsmL3XXL0iPrOuOq2guJStlFJJKsPVypN9Ib xPKAJg47V7s3AoIBAQDC9gVWdrLfBh7lQwHwgR5PUA3jWKkUtLB2EIjLxHbyNDTR rwj/qisKFb3T7MT9bOURyQ+m1/lZJUzk9phO+hEjWKa+LYCxQBRju9VBjqZbjvqq /antdgw3Y/xM7gFIgHEnRfjBTUast/5bfH/Dh9VhwDn+msGLjEsFJwx1gjUTq5u3 briCe+GDoPsYghwVlsGAN8MPvUQIS8AWEUi8tXgPDe1W09+IW5mUPpazHv5/k/Ay T+HdccQIpaYPJLV0Ms4cBHQs5UQYDBH0kDHEXfNJq9P4wYD4UfxpakJJ6HiCui72 idck9ExpT62+18aYhewPn3EmNdRhwddrOhXSHgb5AoIBAQDat+/vkR+eruCnSlgF GnR6g3tv2IrKRv5UE4BHyCOESKK4MGBoplOxnzwjLWVo6VTm+uqwT49EbgpZX9qC ouOeMLnIo2GZjmQNL9xMTFkj7D25HpVC/oyCe5Av54LAecnliLthyyA6zHxSFOZE lJCW2NZTwCU72LJOERvJKRGbt9dbrE49TUYZK6bV0TKaIZlxZMjsvHLCVYwSoXho qfoXOLAoEQguCsrkl5s9TrkwEIj29ldG07pSwKxXNW1/Q28hHBBRl2z/ddB8X5tn yFs4RjSFNd9WdpKwgvBcGlDSxbr9GKMdBCThYA1RUxAJP/n0jXN73mm2eB0FpbHU H2x/AoIBACGt6UTzdBWZ7HqaoSnrYGf0v0I8DXx0R88LuEYduQmREHi7FcIxwTdJ 1jznU3sOE2LLvnEAsGrmR8H4hXEMCj/kcOwQjRVsg6gTQV0BP7Thp2bGw6h5nkOV Xg9Q+IlR0NyVblX6kE9nVspRcWzJFc01pA+UP7OM+rIexK1OS3yVHl+rU40bwMwf kM2HkUJyFR11O//Ils36wVgoQdyMA6UoOYLEF7yYOIWL2M+Wbyib6bfcA6ZxP3lQ 8jD+Bxs56xrXY75OyDo1M5A/UUMS05z9WlBNFcBmdmiZDRuukeoOb13IJPUAOlIT cYcTkDmPz4sKiXFKA6I9JTttCr3ibAw= -----END PRIVATE KEY----- root@client:~# wget -qO- https://community.openvpn.net/openvpn/wiki/Hardening |grep Keep;echo huRDur