chiwormjava 2.0.4 → 2.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chiwormjava",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "main": "index.js",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"

package/readme.md

@@ -1024,3 +1024,230 @@ Protection applied successfully
 
 
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 1. Basic Network (OSI Flow)
+ PC
+ping 192.168.1.2 ++
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+2. IPv4 Addressing + Routing
+ Router
+enable ++
+configure terminal ++
+
+interface g0/0 ++
+ip address 192.168.1.1 255.255.255.0 ++
+no shutdown ++
+exit ++
+
+interface s0/0/0
+ip address 172.16.1.1 255.255.255.252
+no shutdown
+exit
+
+ip route 10.0.0.0 255.255.255.248 172.16.1.2
+ PC
+ping 10.0.0.2 ++
+
+
+
+
+
+
+
+
+
+
+
+
+3. NAT (PAT)
+ Router
+enable ++
+configure terminal ++
+
+interface g0/0 ++
+ip nat inside
+exit ++
+
+interface g0/1 ++
+ip nat outside
+exit ++
+
+access-list 1 permit 192.168.1.0 0.0.0.255 ++
+
+ip nat inside source list 1 interface g0/1 overload
+
+ip route 0.0.0.0 0.0.0.0 203.0.113.2
+ Router (Check)
+show ip nat translations
+ PC
+ping 203.0.113.2 ++
+
+
+
+
+
+
+
+
+
+4. IPv4 Packet Analysis
+Wireshark
+ip.version == 4
+PC
+ping 8.8.8.8 ++
+
+
+
+
+
+
+
+ 5. Packet Fragmentation
+ PC
+netsh interface ipv4 show subinterfaces
+
+ping 8.8.8.8 -f -l 1472
+ping 8.8.8.8 -f -l 2000
+ping 8.8.8.8 -l 2000
+ Wireshark
+ip.flags.mf == 1 or ip.frag_offset > 0
+
+
+
+ 6. Network Security (ACL)
+Router
+enable ++
+configure terminal ++
+
+access-list 1 deny 192.168.1.20
+access-list 1 permit any
+
+interface g0/0 ++
+ip access-group 1 in
+exit ++
+ PC
+ping 192.168.1.10 ++
+
+
+
+
+7. IP Spoofing Protection
+ Router
+enable ++
+configure terminal ++
+
+ip access-list extended ANTI-SPOOF
+deny ip 192.168.1.0 0.0.0.255 any
+permit ip any any
+
+interface g0/1
+ip access-group ANTI-SPOOF in
+
+interface g0/0 ++
+
+
+ip verify unicast source reachable-via rx
+
+
+
+
+
+
+
+
+
+
+
+
+
+8. TCP Hijacking (Prevention)
+ Router
+enable ++
+configure terminal ++
+
+ip access-list extended BLOCK_TCP
+deny tcp any any eq 23
+permit ip any any
+
+interface g0/0 ++
+ip access-group BLOCK_TCP in
+9. UDP Hijacking (DNS)
+📍 PC
+nslookup example.com
+📍 Server (DNS setup)
+
+(No CLI, but concept command equivalent)
+
+example.com → 192.168.1.100
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 10. DoS Simulation
+PC (Attack)
+ping 192.168.1.100 ++
+Switch (Protection)
+enable ++
+configure terminal ++
+
+interface fa0/2
+switchport port-security
+switchport port-security maximum 1
+switchport port-security violation shutdown
+
+interface fa0/3
+switchport port-security
+switchport port-security maximum 1
+switchport port-security violation shutdown
+MASTER REPEATED COMMAND LIST
+
+These appear everywhere (VERY IMPORTANT):
+
+enable ++
+configure terminal ++
+interface g0/0 ++
+no shutdown ++
+exit ++
+ping ++
+access-list ++
+ip access-group ++