from a security and privacy point

and not surface stuff like "whats my ip" "whats my fingerprint" (someone said the fingerprint checking sites are useless idk) or "is tor connected"

tdlr: i want to know tools to find where the security/privacy holes are

all 14 comments

sorted by: hot top controversial new old
[–] 8 points 1 month ago (3 children)

How safe from what? The absolute safety is absolute isolation, I doubt you want that

  • source
  • hideshow 3 child comments
  • [–] 6 points 1 month ago (2 children)

    Even air gapping can have vulnerabilities, kinda depends on how determined an attacker you have.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 1 month ago (6 children)

    Really vague question but I guess pentest your own shit, check all your accounts on the dark web, keep everything patched, minimize your attack surface, and in general use best security practices to try and mitigate as much risk as you can.

  • source
  • hideshow 6 child comments
  • [–] [S] 2 points 1 month ago (5 children)

    sorry for the cofusion i was asking how to check if theres any secuirty/priavcy holes you dont know about

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 1 month ago* (4 children)

    Yes, that was answered in my response. That's what a pen test is (short for penetration test).

    If you don't know what one is, that would be a very good thing to learn about.

    The other thing you can do is try to keep up on newly discovered exploits getting patched and applying those patches ASAP. A pen test can help reveal these vulnerabilities too, so it's a pretty good place to start after updates/patches.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 1 month ago (1 child)

    I have years of programming and sysadmin experience but have never tried pen testing. I have a Kali Linux live usb ready to go but I don't know where to start. I know that Kali offers training but the $3000/year cost is absurd to me. I would love to pen test my homelab but I don't know where to start.

    What is a recommended resource that does not require an account or credit card?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 month ago (1 child)

    You could maybe run some scans with metasploit or similar tools? Idk if Nessus has a free instance or trial... Something like that? You are essentially looking for a vuln scanner.

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 month ago* (last edited 1 month ago)

    Unless you're intentionally exposing inbound traffic to your LAN from the internet, pen testing really isn't necessary. Your default firewall settings would be enough to protect you from that angle.

    You can run vulnerability scans and look up best practices for your router settings, but really most modern OSes are safe as long as you follow basic common sense like not downloading and running sketchy software, even on Linux. Just keep everything updated. Even Windows Defender is sufficient as long as you're not dumb about it.

    If you're talking about remaining anonymous online, that's an entirely different, much longer conversation.

    Same with keeping your internet connected devices from spying on you.

    But without knowing what your attack surface looks like, none of us will be able to provide a very detailed answer.

  • source