diff --git a/opsec/hypervisorsetup/0.png b/opsec/hypervisorsetup/0.png index c4e135b..7ef9149 100644 Binary files a/opsec/hypervisorsetup/0.png and b/opsec/hypervisorsetup/0.png differ diff --git a/opsec/hypervisorsetup/1.png b/opsec/hypervisorsetup/1.png index 126bc8e..39504da 100644 Binary files a/opsec/hypervisorsetup/1.png and b/opsec/hypervisorsetup/1.png differ diff --git a/opsec/hypervisorsetup/10.png b/opsec/hypervisorsetup/10.png index 7181fa8..466365e 100644 Binary files a/opsec/hypervisorsetup/10.png and b/opsec/hypervisorsetup/10.png differ diff --git a/opsec/hypervisorsetup/10_dev_list_over_onion.png b/opsec/hypervisorsetup/10_dev_list_over_onion.png new file mode 100644 index 0000000..e97a685 Binary files /dev/null and b/opsec/hypervisorsetup/10_dev_list_over_onion.png differ diff --git a/opsec/hypervisorsetup/11.png b/opsec/hypervisorsetup/11.png index 650378d..e008eac 100644 Binary files a/opsec/hypervisorsetup/11.png and b/opsec/hypervisorsetup/11.png differ diff --git a/opsec/hypervisorsetup/12.png b/opsec/hypervisorsetup/12.png index 0018773..aee2a5c 100644 Binary files a/opsec/hypervisorsetup/12.png and b/opsec/hypervisorsetup/12.png differ diff --git a/opsec/hypervisorsetup/13.png b/opsec/hypervisorsetup/13.png index 65737a5..b95d576 100644 Binary files a/opsec/hypervisorsetup/13.png and b/opsec/hypervisorsetup/13.png differ diff --git a/opsec/hypervisorsetup/2.png b/opsec/hypervisorsetup/2.png index 5cba1c7..9bdcc09 100644 Binary files a/opsec/hypervisorsetup/2.png and b/opsec/hypervisorsetup/2.png differ diff --git a/opsec/hypervisorsetup/21.png b/opsec/hypervisorsetup/21.png index bcb6fa2..e7763b2 100644 Binary files a/opsec/hypervisorsetup/21.png and b/opsec/hypervisorsetup/21.png differ diff --git a/opsec/hypervisorsetup/22.png b/opsec/hypervisorsetup/22.png index d26cc5c..56f1726 100644 Binary files a/opsec/hypervisorsetup/22.png and b/opsec/hypervisorsetup/22.png differ diff --git a/opsec/hypervisorsetup/23.png b/opsec/hypervisorsetup/23.png index b460c44..da40ce3 100644 Binary files a/opsec/hypervisorsetup/23.png and b/opsec/hypervisorsetup/23.png differ diff --git a/opsec/hypervisorsetup/24.png b/opsec/hypervisorsetup/24.png index dfade64..f9e64f5 100644 Binary files a/opsec/hypervisorsetup/24.png and b/opsec/hypervisorsetup/24.png differ diff --git a/opsec/hypervisorsetup/25.png b/opsec/hypervisorsetup/25.png index b74a9ba..9bb57ea 100644 Binary files a/opsec/hypervisorsetup/25.png and b/opsec/hypervisorsetup/25.png differ diff --git a/opsec/hypervisorsetup/26.png b/opsec/hypervisorsetup/26.png index 9c8fb78..5fd868a 100644 Binary files a/opsec/hypervisorsetup/26.png and b/opsec/hypervisorsetup/26.png differ diff --git a/opsec/hypervisorsetup/27.png b/opsec/hypervisorsetup/27.png index 1819a47..f0a8b4e 100644 Binary files a/opsec/hypervisorsetup/27.png and b/opsec/hypervisorsetup/27.png differ diff --git a/opsec/hypervisorsetup/28.png b/opsec/hypervisorsetup/28.png index cd0758f..5e26dd6 100644 Binary files a/opsec/hypervisorsetup/28.png and b/opsec/hypervisorsetup/28.png differ diff --git a/opsec/hypervisorsetup/29.png b/opsec/hypervisorsetup/29.png index 9892e40..a4c9162 100644 Binary files a/opsec/hypervisorsetup/29.png and b/opsec/hypervisorsetup/29.png differ diff --git a/opsec/hypervisorsetup/3.png b/opsec/hypervisorsetup/3.png index 076c18c..f1c15b4 100644 Binary files a/opsec/hypervisorsetup/3.png and b/opsec/hypervisorsetup/3.png differ diff --git a/opsec/hypervisorsetup/30.png b/opsec/hypervisorsetup/30.png index d998389..a6d565b 100644 Binary files a/opsec/hypervisorsetup/30.png and b/opsec/hypervisorsetup/30.png differ diff --git a/opsec/hypervisorsetup/31.png b/opsec/hypervisorsetup/31.png index a84adaf..06126be 100644 Binary files a/opsec/hypervisorsetup/31.png and b/opsec/hypervisorsetup/31.png differ diff --git a/opsec/hypervisorsetup/32.png b/opsec/hypervisorsetup/32.png index 84d3ebb..8e978f8 100644 Binary files a/opsec/hypervisorsetup/32.png and b/opsec/hypervisorsetup/32.png differ diff --git a/opsec/hypervisorsetup/33.png b/opsec/hypervisorsetup/33.png index 869c0e0..1ee1201 100644 Binary files a/opsec/hypervisorsetup/33.png and b/opsec/hypervisorsetup/33.png differ diff --git a/opsec/hypervisorsetup/34.png b/opsec/hypervisorsetup/34.png index 72e41af..457b207 100644 Binary files a/opsec/hypervisorsetup/34.png and b/opsec/hypervisorsetup/34.png differ diff --git a/opsec/hypervisorsetup/35.png b/opsec/hypervisorsetup/35.png index 4571c30..9008428 100644 Binary files a/opsec/hypervisorsetup/35.png and b/opsec/hypervisorsetup/35.png differ diff --git a/opsec/hypervisorsetup/36.png b/opsec/hypervisorsetup/36.png index b8f71ec..0c37980 100644 Binary files a/opsec/hypervisorsetup/36.png and b/opsec/hypervisorsetup/36.png differ diff --git a/opsec/hypervisorsetup/37.png b/opsec/hypervisorsetup/37.png index 1349a85..017abb8 100644 Binary files a/opsec/hypervisorsetup/37.png and b/opsec/hypervisorsetup/37.png differ diff --git a/opsec/hypervisorsetup/38.png b/opsec/hypervisorsetup/38.png index d305ba4..07ecf21 100644 Binary files a/opsec/hypervisorsetup/38.png and b/opsec/hypervisorsetup/38.png differ diff --git a/opsec/hypervisorsetup/39.png b/opsec/hypervisorsetup/39.png index 9bfca86..5c315d2 100644 Binary files a/opsec/hypervisorsetup/39.png and b/opsec/hypervisorsetup/39.png differ diff --git a/opsec/hypervisorsetup/4.png b/opsec/hypervisorsetup/4.png index b9ee7f1..e510d92 100644 Binary files a/opsec/hypervisorsetup/4.png and b/opsec/hypervisorsetup/4.png differ diff --git a/opsec/hypervisorsetup/5.png b/opsec/hypervisorsetup/5.png index b44e392..c03cd93 100644 Binary files a/opsec/hypervisorsetup/5.png and b/opsec/hypervisorsetup/5.png differ diff --git a/opsec/hypervisorsetup/50.png b/opsec/hypervisorsetup/50.png index d8ddde7..7a9dd1e 100644 Binary files a/opsec/hypervisorsetup/50.png and b/opsec/hypervisorsetup/50.png differ diff --git a/opsec/hypervisorsetup/51.png b/opsec/hypervisorsetup/51.png index 57c46d4..9226f91 100644 Binary files a/opsec/hypervisorsetup/51.png and b/opsec/hypervisorsetup/51.png differ diff --git a/opsec/hypervisorsetup/6.png b/opsec/hypervisorsetup/6.png index bada8d1..7d421fa 100644 Binary files a/opsec/hypervisorsetup/6.png and b/opsec/hypervisorsetup/6.png differ diff --git a/opsec/hypervisorsetup/7.png b/opsec/hypervisorsetup/7.png index 926d7c9..8c1b880 100644 Binary files a/opsec/hypervisorsetup/7.png and b/opsec/hypervisorsetup/7.png differ diff --git a/opsec/hypervisorsetup/8.png b/opsec/hypervisorsetup/8.png index 42b87db..2c268f0 100644 Binary files a/opsec/hypervisorsetup/8.png and b/opsec/hypervisorsetup/8.png differ diff --git a/opsec/hypervisorsetup/9.png b/opsec/hypervisorsetup/9.png index 550754f..0ba0b51 100644 Binary files a/opsec/hypervisorsetup/9.png and b/opsec/hypervisorsetup/9.png differ diff --git a/opsec/hypervisorsetup/999.png b/opsec/hypervisorsetup/999.png index 908fb8a..7d2aaba 100644 Binary files a/opsec/hypervisorsetup/999.png and b/opsec/hypervisorsetup/999.png differ diff --git a/opsec/hypervisorsetup/index.html b/opsec/hypervisorsetup/index.html index bb566a6..5be26ec 100644 --- a/opsec/hypervisorsetup/index.html +++ b/opsec/hypervisorsetup/index.html @@ -239,6 +239,69 @@ reboot now +
+
+
+
+

How to harden your private VM by distro-morphing it into Kicksecure



+

What is Kicksecure? Kicksecure is a free and open-source Linux distribution designed to provide a highly secure computing environment. It is built on a hardened version of Debian, implementing a defense-in-depth security model that protects against various types of malware and attacks.

+

Reasons to use Kicksecure

+
    +
  • Enhanced Security Features:
    • +

    Kicksecure is designed with a strong focus on security, incorporating various hardening techniques such as kernel hardening, user account isolation, and application-specific restrictions.

    +
  • Privacy Protection:
    • +

    All updates and software installations are routed through the Tor network, ensuring that user identities and IP addresses remain anonymous.

    +
  • Lower Attack Surface:
    • +

    Kicksecure minimizes potential vulnerabilities by not having open server ports or unnecessary services running by default.

    +
  • User -Friendly Experience:
    • +

    The operating system is designed to be accessible, with many applications available in their apt repositories and configured for immediate use, such as the tor browser.

    +
  • Compatibility with Virtualization:
    • +

    Kicksecure supports various virtualization options, allowing users to run it in a virtual machine.

    +
  • Free and Open Source:
    • +

    As an open-source project, Kicksecure allows users to review, modify, and redistribute the source code.

    +
+

+ Kicksecure is important in many scenarios. It is ideal for individuals handling sensitive data, such as personal or financial information, as its robust security features protect against data breaches and unauthorized access. Journalists, activists, and whistleblowers can maintain anonymity while communicating, safeguarding their identities from surveillance. Users accessing public Wi-Fi can rely on Kicksecure for secure browsing, reducing the risk of data interception. Running Kicksecure in a virtual machine helps contain potential malware threats, protecting the primary operating system. Additionally, developers and researchers can create a secure environment for security tools and cybersecurity research. Kicksecure also serves as an educational resource, offering documentation and community support for users looking to enhance their security knowledge. Its hardened configuration defends against brute force attacks, making it suitable for securing sensitive accounts. Overall, Kicksecure is essential for anyone prioritizing security, privacy, and anonymity in their digital activities. For more details on why you should use kicksecure, check out their official website.

+

Now let's setup Kicksecure in the private VM, by distro-morphing the Debian guest OS into a Kicksecure guest OS. First,we need to create a new group called console. Then add the your user to the console group

+ + 
sudo addgroup --system console
+ + 
sudo adduser "your_username" console
+

After that,we need to install console related packages.

+ 
 sudo apt install console-data console-common kbd keyboard-configuration
+ +

Now, we will install extrepo to get the kicksecure APT repository. We will also enable the repository

+ 
  sudo apt install extrepo
+ 
  sudo extrepo enable kicksecure
+ +

Next step is to download the kicksecure packages. Note that this will install a desktop environment(Xfce) and other applications

+ 
sudo apt install kicksecure-xfce-host
+ +

Finally, we need to enable the Kicksecure APT derivative.list in /etc/apt/sources.list.d/derivative.list

+ 
sudo repository-dist --enable --repository onion
+

This command will generate derivative.list file.

+ +

Disable the extrepo kicksecure APT repository. This is to avoid a duplicate Kicksecure repository.

+ 
 sudo extrepo disable kicksecure
+ +

That's it! A quick reboot will apply all the new settings and configurations.

+ 
sudo reboot
+ +

Changes after reboot

+

New GNU GRUB menu

+ +

sdwdate to synchronize the system clock with time servers over the Tor network for better anonymity.

+ +

System Integrity Checks

+ +

System updates over Tor

+ + +

In conclusion,Kicksecure offers a robust solution for security and privacy, built on a hardened Debian foundation. Users can confidently operate within a Kicksecure VM, ready for private use in today’s complex digital landscape.

+
+
+
+
@@ -264,14 +327,14 @@ reboot now

About nihilist

-

Donate XMR: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8


Contact: nihilist@contact.nowhere.moe (PGP)

+

Donate XMR: 85fGTpPWivci2dRzJSgvm5QeEuEUZ11ZDbZA6Yc58XdCHSen2oRKLpgbNBr1sv9gacbrfMP3Qw23RcGqYb8V1FN4L67kph6


Contact: nihilist@contact.nowhere.moe (PGP)

- + diff --git a/opsec/hypervisorsetup/new_grub.png b/opsec/hypervisorsetup/new_grub.png new file mode 100644 index 0000000..973309c Binary files /dev/null and b/opsec/hypervisorsetup/new_grub.png differ diff --git a/opsec/hypervisorsetup/sdwdate.png b/opsec/hypervisorsetup/sdwdate.png new file mode 100644 index 0000000..bda70d8 Binary files /dev/null and b/opsec/hypervisorsetup/sdwdate.png differ diff --git a/opsec/hypervisorsetup/sys_inter.png b/opsec/hypervisorsetup/sys_inter.png new file mode 100644 index 0000000..6d8f8d9 Binary files /dev/null and b/opsec/hypervisorsetup/sys_inter.png differ diff --git a/opsec/hypervisorsetup/tor.png b/opsec/hypervisorsetup/tor.png new file mode 100644 index 0000000..4e09d54 Binary files /dev/null and b/opsec/hypervisorsetup/tor.png differ