- 23
- 19 362
SYNACK Time
เข้าร่วมเมื่อ 18 มี.ค. 2023
We aim to bring you educational and informative content about anything and everything IT. This could range from open source projects, to security news and tools. We're very happy that you stopped by our channel and we hope that you find value in the services we provide!
Official site - synacktime.com
LinkedIn - www.linkedin.com/company/synacktime/
Official site - synacktime.com
LinkedIn - www.linkedin.com/company/synacktime/
Hosting Your Own Password Manager with VaultWarden - An Alternative to Bitwarden's Official Server
Vaultwarden is a lightweight, self-hosted password manager that allows you to securely manage your passwords and sensitive information. It features organization management, attachment handling, Vault API integration, and advanced security options like Authenticator, U2F, YubiKey, and Duo. This video will guide you through setting up Vaultwarden on your own cloud server, ensuring you have full control over your data while highlighting its key features.
⌚ Send secure messages and attachments
⌚ Organizations support
⌚ Support for various MFA methods
⌚ Compatible with Bitwarden browser plugin
⌚ Self hosted
It's much better than sticky pads! Vaultwarden allows you to set up your server and run it however you'd like. Share it with friends, families, clients or co-workers.
Chapters:
0:00 - Intro
1:00 - Signing in to your server
1:57 - Creating new items (passwords, cards, identity)
4:59 - Adding MFA to our account
6:45 - Setting up our own vaultwarden server
7:41 - Configuring Portainer
11:45 - Setting up our DNS A record with Namecheap
12:17 - New host with Nginx Proxy Manager
14:46 - Setting up our new user with vaultwarden
15:42 - Configuring the browser plugin with bitwarden
17:13 - Accessing our server admin panel with a hashed access key
20:30 - Exploring the admin panel in vaultwarden
Resources:.
vaultwarden github - github.com/dani-garcia/vaultwarden
Securing your vaultwarden admin key - github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page
Bitwarden official site - bitwarden.com
SynAckTime - synacktime.com
Build your own server - th-cam.com/video/MkvQud4cnvA/w-d-xo.html
⌚ Send secure messages and attachments
⌚ Organizations support
⌚ Support for various MFA methods
⌚ Compatible with Bitwarden browser plugin
⌚ Self hosted
It's much better than sticky pads! Vaultwarden allows you to set up your server and run it however you'd like. Share it with friends, families, clients or co-workers.
Chapters:
0:00 - Intro
1:00 - Signing in to your server
1:57 - Creating new items (passwords, cards, identity)
4:59 - Adding MFA to our account
6:45 - Setting up our own vaultwarden server
7:41 - Configuring Portainer
11:45 - Setting up our DNS A record with Namecheap
12:17 - New host with Nginx Proxy Manager
14:46 - Setting up our new user with vaultwarden
15:42 - Configuring the browser plugin with bitwarden
17:13 - Accessing our server admin panel with a hashed access key
20:30 - Exploring the admin panel in vaultwarden
Resources:.
vaultwarden github - github.com/dani-garcia/vaultwarden
Securing your vaultwarden admin key - github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page
Bitwarden official site - bitwarden.com
SynAckTime - synacktime.com
Build your own server - th-cam.com/video/MkvQud4cnvA/w-d-xo.html
มุมมอง: 496
วีดีโอ
Build Your Own PrivateBin Site for Top-Secret Encrypted Messaging
มุมมอง 45921 วันที่ผ่านมา
PrivateBin is the clandestine tool every modern spy needs. This minimalist, open-source pastebin ensures your secrets remain just that-secret. Operating with zero-knowledge encryption, the server never knows the content of your pastes, thanks to robust 256-bit AES encryption in Galois Counter mode. Originally a fork of ZeroBin by Sébastien Sauvage, PrivateBin has evolved to support seamless, cl...
Self Hosted Open Source Digital Signage by Xibo
มุมมอง 2.3Kหลายเดือนก่อน
Xibo Digital Signage is an open-source, web-based platform designed to manage and deliver dynamic content to digital displays. It provides a comprehensive content management system (CMS) that allows users to create, schedule, and monitor a variety of media, including images, videos, and live feeds, across multiple screens. Xibo supports a range of devices and operating systems, offering flexibi...
Identifying SCAM Store Websites with Open Source Tools and Techniques (OSINT)
มุมมอง 1.5K2 หลายเดือนก่อน
I hate that these SCAM sites exist to con people out of their hard earned money. We here at SynAck Time decided to put together a video that shows you how to identify these sites so that neither you nor your friends or family will become victims. What we cover in our video today: ⌚ Easy signs to identify scam sites ⌚ Using tools like Web-Check to perform OSINT ⌚ Customer service that goes no wh...
Digital Signage for $20 with onn. Hardware and Open Source Software
มุมมอง 4672 หลายเดือนก่อน
Digital signage doesn't have to be expensive or use the fastest hardware. Have you ever wanted a simple weather screen in your kitchen or perhaps a calendar in your office. I hit up my local Walmart and grabbed a device by onn. and had me digital signage for any occasion. What we cover in our video today: ⌚ $20 for hardware ⌚ Side loading apps on this Google TV device ⌚ Installing Launch Manage...
Microsoft Passkeys vs Evilginx Token Theft
มุมมอง 3142 หลายเดือนก่อน
As security professionals, we're constantly fighting token theft and knowing the methods of authentication that is suspectable to this attack is vital to us winning the war against the bad guys. In this video, we talk about the methods that are phishing resistant including Microsoft's new FIDO2 authenticator app. Methods we test in this video: ⌚ Really strong passwords!! ⌚ Texting a code to you...
Network Diagrams and More With Draw.io - An Open Source Drawing Application
มุมมอง 5632 หลายเดือนก่อน
"Making network diagrams is the favorite part of my job!!" - No one. It's not the most glamorous part of a network engineer's job, but it also shouldn't be the most expensive part. Draw.io is open source, self hosted and provided completely free without strings. It can do network diagrams, flow charts and so much more! Gone are the days of dishing out hundreds of dollars to make a professional ...
Explode Malware Safely: Setting Up Your Flare-VM Lab
มุมมอง 1.3K3 หลายเดือนก่อน
In this video, we're diving into how to create your very own malware quarantine zone. I'll guide you through the steps to safely test and analyze malware, ensuring you understand its capabilities without putting your own computer or network at risk. We'll start by setting up an isolated virtual environment using VirtualBox. I'll also show you how to connect it to the internet using pfSense, kee...
Quick Tips - Updating Portainer With Your SSH Terminal
มุมมอง 2053 หลายเดือนก่อน
In this Quick Tips video, we'll show you how to easily update the Portainer container using the command line / terminal. This is a very easy process and will make sure your Portainer is always up-to-date and patched!
Updating to Evilginx 3
มุมมอง 5683 หลายเดือนก่อน
In one of our first videos, we showed you how to set up Evilginx 2 on a cheap budget VM. Well, now it's time to update that installation to version 3!! More features and better functionality along with the same sneaky tactics threat actors use. This video is solely for educational purposes! SynAck Time hopes you can use this knowledge to educate your end users on the importance of this very pop...
Quick Tips - Updating Containers inside Portainer
มุมมอง 1083 หลายเดือนก่อน
These quick tip videos are designed to be short and to the point! This video, we show you how to update your Docker containers with Portainer. One thing to always confirm is that your data is stored outside of your container! Doing this without verifying that step can sometimes lead to you having a very bad day.
Exploring Velociraptor - Open-source Digital Forensics and Incident Response Tool
มุมมอง 3863 หลายเดือนก่อน
In today's video we look at Velociraptor! We'll do a brief introduction to the platform, show you how to get your first agent installed, then we'll cover deploying your own self hosted sever using Portainer, Docker and then we'll use Nginx Proxy Manager to handle all of our incoming traffic encryption. Crafted by experts in Digital Forensic and Incident Response (DFIR), it serves those seeking ...
Exploring Uptime Kuma - Open Source Alternative to UptimeRobot
มุมมอง 7103 หลายเดือนก่อน
"I don't have a single unkind thing to say about UptimeRobot, but sometimes you just need the ability to host your own uptime monitoring application. For this purpose, I'd like to introduce you to Uptime Kuma. It can be hosted locally or in the cloud, and it does not only provide you with uptime statistics and downtime alerts but also offers much more! Some of the things Uptime Kuma can do: ⌚ N...
Exploring RustDesk - an Open Source Alternative to TeamViewer, AnyDesk and LogMeIn
มุมมอง 2.9K3 หลายเดือนก่อน
Exploring RustDesk - an Open Source Alternative to TeamViewer, AnyDesk and LogMeIn
Unlocking Web Secrets: Effortless OSINT with Lissy93's Web-Check!
มุมมอง 3124 หลายเดือนก่อน
Unlocking Web Secrets: Effortless OSINT with Lissy93's Web-Check!
Exploring and Installing Trilium Notes
มุมมอง 6374 หลายเดือนก่อน
Exploring and Installing Trilium Notes
Hi, can you give advice how to prompt to turn picture from anime to realistic movie scene?
Have you looked on civitai or huggingface for a cartoon to realism LoRa? You might need to keep your eye out for a realism checkpoint too. I did a search on civitai and had some good results.
@@synacktime thank you so much, i will try. Have a good day!
@@ricky-xx2sb Let me know how it works for you! Very cool idea!
I’ve been running Vaultwarden on a Synology for over 2 years with my whole family using it on multiple devices each. Rock solid, Zero issues, zero downtime. Plus you get all the features of the highest paid tier of Bitwarden while using Bitwarden’s native apps.
Good video man.
Thank you Neo, really appreciate it :)
Im using vmware. how to setup the pfsense network(2 adapters) in vmware?
Good morning! It's really easy with VMWare, right click on your virtual machine and go to Settings. Then click on the Add button at the bottom of that window and select Network Adapter. That should add the extra network interface, then you'll need to select the type of Network Connection on the right. If it's the one connecting to the internet (WAN), then I'd use NAT, if not, then use the Custom one and pick a network from the drop down that's not being used. :)
@@synacktime I put NAT for the 1st adapter. For the 2nd adapter, there are two options for Network connection: "Host-only: A private network shared with the host", "Custom: Specific virtual network" For the "Custom: Specific virtual network", it has 20 choices from "VMnet0" to "VMnet19". Which network connection should I choose? If choose "Custom", any VMnetXX will do? Do I need to configure VMnetXX?
@@ChungYuLiu I would do custom, but before that you'll need to go to Edit -> Virtual Network Editor, then Add a network. You can name it whatever you want (I call mine internal). Then make it a host-only network and uncheck "Use local dhcp service to distribute IP". Now when you go in to select the custom network on the virtual machine, it'll be easy to recognize and you'll simple make sure that any virtual machines you want to use the pfsense, will use the custom network. Hope that makes sense, if not, maybe I can whip up a super fast video about it :)
@@synacktime I followed your steps and created the Internal network. How does the Internal network subnet affect anything? I am stuck at the pfsense installation which shows differently from your installation. After clicking on to install, it goes to "Please select the WAN interface". I have eM0 and eM1 which shows different interface. How to know which to choose? I think it be good to do a fast video on pfsense(vmware) and the WAN interface part. I saw that the REMnux and FLARE are using the Internal adapter. I am a bit confused on the traffic routing, if pfsense is on, FLARE can access internet. if only REMnux is ON and fakedns, FLARE is used to detonate malware which shows the malware website IP resolution on REMnux, but unable to access internet cos pfsense if OFF?
@@ChungYuLiu I'll see if I can whip up a video for ya talking about the networking. Stay tuned!
There is a easier way to setup a malware VM Lab. But the steps you took will definitely ensure the malware samples can't escape to the net or into your network wifi environment. Most Ransomware doesn't perform callbacks to a C2 domain, IP, or URL. It's sole function is just to encrypt your machine and hope you pay the ransom. But the Crypto Ransomware will make callbacks.
True! :) We can also check out other malicious software like spyware too. I like that we can give it a little bit of internet if we need to.
@@synacktime true.
Hey to very easy edit and deploy compose files use dockge. It also can convert a docker run command into a compose file. Way more lightweight than Portainer and it doesn't "swallow" the compose file.
Hmm I had never heard of that software before, thank you! You may have given me an idea for my next video :)
When you logged into your Portainer for the first time at 15:16 you sent your password to the server over an http connection. The address bar had https crossed out and was displaying "Not secure". Is this safe?
Great question! It's still encrypted, but the certificate is not trusted which makes it insecure. It's basically because it's self-signed. :)
I think I spent one whole month trying to install it but i keep getting various errors, i use NameCheap for the domain and Digital Ocean for the provider, most of the times it has to do with TLS problems
Your recording volume is very low! Just something to consider for next time!
My bad! Lemme see if I can increase the gain!
Looks like it won't let me increase volume without re-uploading, but I'll def keep it in mind on my next video, thank you!!
It's ok! I used to do the same mistakes back when I started recording for a podcast, I wanted to play it safe with the volume so that the audio doesn't clip. Until I learned about compressors and how they work! It's a learning experience!
@@yoshinatsu It's definitely been a learning experience :D
so far, all I can see is that fooocus is another crap fake program. reading all these chat rooms and youtube vids, nothing works and there's no real HELP to be found.
If you're going to state this is a Beginner's Guide then slow down and explain what you are doing. And NO Fooocus did not automatically open in a browser after installing. Furthermore, how do you get it to open at all?
Sorry you're having problems, my dood! Try opening a command prompt in the root of the Fooocus folder and running this command: .\python_embeded\python.exe -s Fooocus\entry_with_update.py
Well done. Have you done with with lxc or inucus containers?
I have not! But I will def look into it! Thank you :)
the pfsense iso downloaded from the pfsense website cannot be unzip. Could you paste the download link for your one that works?
You don't have to unzip the pfsense ISO, but the download process changed a bit since this video was released, they make you go through and purchase a zero dollar license - www.pfsense.org/download/ They'll basically email you the link to download the ISO, then you'll mount the ISO with VIrtualBox as a virtual CD-ROM.
@@synacktime I did that, registered and downloaded from the zip file. However, there will be a "Catastrophic failure" when unzipping, thus unsuccessful. I think its an issue for the pple who did the download now. If you have a good working version, it would help to allow us to download and use it.
@@ChungYuLiu I had the same issue but if you extract the folder using 7-ZIP it works or at least it worked for me.
@@venom_443 thanks, 7zip does work!
Can you also add a RSS ticker to Xibo? And how about security? This machine is exposed to the internet. Can I also run the server and display on a LAN without connection outside?
Yup! I believe it does have a RSS ticket. You can totally limit it to internal traffic only. You would open the ports straight to the container instead of running it through Nginx Proxy Manager. I opened mine to the net since I had multiple sites that needed to reach it. You could also limit traffic with Nginx Proxy Manager if you needed it to have it open but to only certain IPs.
@@synacktime thanks for your feedback. What I just have done is ask ChatGPT to write me a yml script for Portainer to create a Stack from the latest image. And this works like a charm.
awesome thanks 😍 seems very interesting 😀
Happy to help!!
@@synacktime do you think it will be ok to run it on a raspberry pi 3 ? Thanks
@@dragon3602010 While they do support linux, I don't think they support ARM processors. If you're looking for a cheap solution though, you could look at the Onn Google TV devices, they're cheaper than a Pi. I made a previous video about turning them into digital signage devices :)
What about local network?
Good question, Andrew! Are you looking to run it solely on a local network or like a hybrid solution? If solely on a local, then I would expose the ports instead of only allowing them through Nginx Proxy Manager. If you're looking for a hybrid solution, then I would consider using your internal DNS server to change where the domain routes to, maybe make it route to the IP of the docker server. Hope this helps and please reach out if I can assist!
after changing my nameservers on GoDaddy and my DNS on DigitalOcean, im still getting a "Failed to setup TLS Certificates", any reason?
bro i have the same problem, you resolved ?
Thank You very much!
You're very welcome!!
all that products probably available in aliexpres and 3x cheaper because the way that thing works pretty much just markup the products 3x
Sounds about right! Funny thing is that some times the buyer gets something completely random and nothing to do with what they ordered. I think it's because it takes so long to get there that they run out the clock on reversing the charges with the CC company.
Great video, practical advice
Thank you so much! If it helps even one person, it's worth it!
You get a sub. Thanks for the video
You rock!!
great tut can you help with office godaddy, i managed to work one out but it wont login when it redirect from microsoft to godaddy login page
Hmm.. looks like that's a common issue with Evilginx. Is GoDaddy evilginx proof?!
@@synacktime were you also having the same issue, i dont think godaddy is evilginx proof. we just have to use the right sublets, i say a video presentation where a guy successfully logged in with office godaddy, but hes not responding
@@Winter-vn3xf I haven't tried it with someone running GoDaddy before. Most of my clients are straight office.
@@synacktime if you can look into it, i will be glad
@@synacktime i was able to work it out but now i'm stuck with the email autofill
You got sub dude. 👍 Awesome video.
Welcome!!! Happy to have you here! 🙌🏼
@@synacktime Sorry, I commented but didn’t subscribed. Now, subscribed 🙏🏻😅
Thank you very much. Is there any chance we could get the snapshots without waiting several hours for the Flare-VM to complete? is there is a online library for example It would be extremely helpful if we can download pre-ready vms.
Hey there! I exported the VM I created into a OVA file so you could import it into VirtualBox. I uploaded it to Megadrive so might take a little while to download. I also split it up into four files. Hope this works okay for you! mega.nz/file/6HQxyJoJ#xuprSsUiGR89Tax2zQtSl3PifNgAMTeuwFuQVs9f_F8 mega.nz/file/aLoHjTwZ#djkJ8Uj-1Yzc_0UKhRV53d88ZrpIojY9Eyo8VOpuNuY mega.nz/file/eeA1WSiB#eRTkTNJPBN6iyqczL0V2kwRknQn6D7WeQYQTEKSgYUE mega.nz/file/DawCkDaQ#8NMrDBzuUw17TYLkDnoZKCfviJ-HlREPA6mwt6KonZA
@@synacktime Hey Ben, thank you so much for uploading it ! I really appreciate the effort. I'll get started on downloading and importing it into VirtualBox. Thanks again!
@@ahmedel5258 Totally!! Hope it works well for you! The password to sign in is password. 😁
Thanks ❤
You got it!! Always happy to help :)
Is it safe ? I have a fear after seeing the installation process feels like someone is talking control over my pc so just to make sure Do you have any trouble using Fooocus ? BTW great video brother I like all of your contain keep it up ❤️
I run it all the time and so far I haven't noticed anything suspicious. 😊 Thank you for the compliment!!
my hubby and i use it all the time we love it . also we have used comfyui and easy diffusion great free to use too but we are loving fooocus alot its safe for sure we are addicted and use all the time lol
Damn, I was all in until you said "docker"... not interested.
Sorry to hear that bud! I used to not like docker too, but I was converted a while back. Rust desk can also be installed on a barebones machine too. Check out their GitHub. github.com/rustdesk/rustdesk Also I'd love to know why you don't like Docker and what you prefer! Take care!
@@synacktime Docker uses a convoluted mess of layers that obscures how services could work together directly on baremetal, or a VM/CT. I don't learn anything when I watch a youtuber use docker-compose. Waste of my time.
@@MarkConstable Sorry to hear that! I doubt all of my videos will be docker related, so feel free to check back! Appreciate the input. :)
Very helpful
Thanks so much! I hate that these sites are popping up all over.
Do you mind making a video on how you set up the phishlets?
I'll look into it! Appreciate the suggestion!
Amazing Sir. Earned a subscriber
Thank you! Happy to have you here 😀
What can I get the phishlet?
Certainly! Here is the link to the phishlets I use for Evilginx3: github.com/BakkerJan/evilginx3
Do you mind making a video on how you set up the phishlets?
Awesome tutorial! Thanks for high quality content.
Really appreciate the kind words! :)
Thank you Sir for additional knowledge!
Heck yeah, Rex!! Stay safe out there and watch out for bad guys :)
Amazing video, oh my goodness though I completely either was daydreaming or something because I forgot to or didn't even pay attention to when you said to disconnect the iso file. lol I installed pfsense like 5 times in a row before I realized. Thanks for the video!
Happy to help!! Really thankful for the kind words. ☺️
A touch confused. If I am logging into Evilginx and its a fake website to capture my user and password and not the real Microsoft website, how is Evilginx sending me a prompt on my auth app on my mobile device or know my SMS #? Is Evilginx some how proxying those request to Microsoft but just intercepts the answers from the client?
Exactly! Evilginx is a man in the middle attack and the site is sending your authentication to Microsoft and when Microsoft issues you a token, Evilginx keeps a copy for itself. Hope this clears it up! Let me know if you'd like to chat further.
Thank you, very good and dynamic introduction! I just started playing with fooocus and is great to have as OSS
That's awesome! Once you've become familiar with the way image diffusion works, check out ComfyUI. It's a little more complicated but pretty cool once you get used to it :)
Does the self-hosted version allow web browser remote control?
Yup! But since we're not running the pro version, we didn't have access to it. Great question!
This right here is Gold. I've being trying to install flarevm but having some issues. I'll let you know once it works
Please let us know how it went! Malware analysis is an amazing skill and will be a huge plus on any resume. Don't forget to check out Huskyhacks!
This thumbnail is fire 🔥🔥🔥
lol! Thank you! Wait until you see the next one! I think I'm going to challenge myself to be even weirder ;)
Thank you for your video. I found it very helpful but I do have question I hope you'll be able to offer a suggestion with. I rendered out a nice forest scene with trees and colorful vegetation at the max res of: 1728 x 576. I would like to upscale it to poster size (16 x 20 inch). When I upscaled the image (upscale fast 2x), the detail became blurred and washed out. Could you please assist in suggesting what I need to do in order to end up with a high res poster size image? I'm still learning the ropes here so I don't fully understand all the techniques. Thank you.
Hey Mysticgatekeeper, not ignoring you but just haven't had a chance to experiment. Never did such a big increase in resolution :) I'll have to try it on my side, there might be a certain checkpoint that's really good at enhancing lower resolution images.
@@synacktime Hi. Thanks for replying. I actually experimented and discovered a solution that worked for me. I took my final image and enlarged it x2. I then took that image and did the same. The image resolution, detail and clarity were perfect. It worked.
Actually, I have been watching many videos on TH-cam and have tried to deploy Uptime Kuma on my VPS with all the features, such as SSL and domain. Unfortunately, I have not been successful every time; it has always failed. However, I found your video yesterday and watched it just once. Thanks to your guidance, I was able to successfully deploy Uptime Kuma. Your video is truly tailored for novice users like myself. Thank you for your time and support; you have earned my respect.
This really means a lot to me! Thank you so much for your kind words! ☺️
great easy to understand video
Thank you! 😊
YOU CAN'T begin anything on fooocus because this god awful setup of a software by of course, the knuckle heads over at google, won't even download on every computer. And mine is brand new. That's google for ya. Always putting crap out before they work all the nasty kinks and nuts out of their products. It's so good nobody can download it. The community site is packed with people saying the same thing. Wasted over 3 hours monkeying around with this stuff. Maybe because its not that great as it seems is why Windows kept telling me not to RUN the program. Not that it mattered. This entire process is so bad its embarrassing. Worse, this software is NOT FREE. NO matter what they say. They asked me for money to choose a plan and I hadn't even used the free one yet. As usual, nothing is as easy and simple as they are portrayed in instruction videos. because every computer is different. Google seemed to have forgotten that. Waste of time.
Sorry you've had so much trouble!
Nice video! thanks
You're so very welcome!!
Very relaxing voice
Thank you 😊
Great video! thanks for explaining everything so well :)
Aw! Thank you so much! That's very nice of you to say!
VERY HELPFUL VIDEO!!!!!!! Keep the great work.
Really appreciate that!! :)
thanks, good tutorial
Thank you so much!
I have never heard the term "evil proxy" before.
Scary stuff, right? I'm going to do a video in a day or so that shows how we can protect ourselves!
@@synacktime More interesting really.