18.How to Run Ai locally on Your Pc

2025-01-25

Why Run AI Locally?

Privacy: Your data stays on your machine.
Cost: No API fees or subscriptions.
Customization: Tweak models to solve your unique problems.
Offline Access: Use AI even without an internet connection.

Step 1: Installing Ollama

Ollama works on Windows, macOS, and Linux. Here’s how to set it up:

For Windows (Preview):

Download the Ollama Windows installer.
Run the .exe file and follow the prompts.
Open PowerShell or Command Prompt and test with ollama --version.

For macOS/Linux:

Open Terminal and run this command:

curl -fsSL https://ollama.ai/install.sh | sh  

Verify the install: ollama --version.

Step 2: Running Your First AI Model

Ollama has a library of pre-trained models. Let’s start with Llama 2 (a popular open-source model by Meta):

Developing a Vulnerability Scanner

2024-12-20

#project

Developing a Vulnerability Scanner [prerequisite]

Creating a vulnerability scanner is an intricate but rewarding process. It demands programming expertise, an understanding of security vulnerabilities, and insights into target systems. Below is a structured guide to help you build your scanner.

Key Steps in Developing a Vulnerability Scanner

1. Define Scope and Objectives

Target Systems: Identify whether you’re scanning web applications, networks, or both.
Vulnerabilities: Specify what you’ll detect, e.g., OWASP Top Ten or CVEs.

2. Research Vulnerabilities

Stay updated with databases like:
- National Vulnerability Database (NVD)
- CVE Details

3. Choose a Programming Language

Opt for languages suited for security tasks and network programming:
- Python: Easy to use with vast libraries for security tools.
- Go: Excellent for performance-critical tasks.
- Java: Great for cross-platform compatibility.

4. Architecture Design

Modularity: Make your scanner extensible for adding new vulnerabilities or scan techniques.
Concurrency: Use multi-threading or asynchronous programming to scan multiple hosts efficiently.

5. Scanning Techniques

Active Scanning: Directly interact with services and analyze responses.
Passive Scanning: Monitor network traffic for vulnerabilities without interaction.

6. Implement Protocols

Support diverse protocols like HTTP, FTP, SSH, SNMP, etc.
Leverage libraries, e.g., requests for Python.

7. Vulnerability Detection

Maintain a database of known vulnerabilities and detection methods.
Core techniques include:
- Port Scanning: Identify open ports and running services.
- Service Fingerprinting: Determine service versions to identify vulnerabilities.

8. Reporting Mechanism

Provide clear and actionable reports containing:
- Vulnerability description.
- Severity levels (e.g., CVSS scores).
- Remediation suggestions.

9. User Interface

Develop a user-friendly interface (CLI or GUI).
Allow users to:
- Configure scan parameters.
- View results interactively.

10. Testing and Validation

Test on intentionally vulnerable systems like the OWASP Broken Web Applications Project.
Ensure accurate detection with minimal false positives or negatives.

11. Compliance and Ethics

Comply with local laws and regulations.
Obtain proper authorization before scanning any system.

12. Continuous Improvement

Regularly update vulnerability databases and scanning methods.
Gather user feedback to enhance functionality.

Points to Keep in Mind

Performance

Optimize for large networks and complex web applications.

Accuracy

Minimize false positives and negatives to build trust.

Security

Secure your scanner to prevent it from being exploited.

Documentation

Provide comprehensive user documentation with installation steps and usage guidelines.

Conclusion

Building a vulnerability scanner is a challenging yet fulfilling project. Start with a robust foundation and iterate based on user feedback and the evolving security landscape. Engage with the security community for insights and support.

Password Vault Manager

2024-12-18

#project

Building CRUSVAULT: A Secure Password Vault

Welcome to this blog post about creating CRUSVAULT, a secure and interactive password vault application using Python. This project leverages encryption, password management techniques, and a user-friendly interface. Let’s dive into the details of its features, code explanation, and how to build it. Image Description

password manager git link

Features of CRUSVAULT

Secure password encryption using the cryptography library.
Interactive command-line interface (CLI) with rich for a visually appealing experience.
Manage multiple vaults with the ability to add, edit, delete, or retrieve passwords.
Password strength checker and generator.
Easy vault creation, renaming, and deletion options.
ASCII art header for a personalized touch.

Prerequisites

Before you begin, ensure you have the following installed:

Bash Commands

2024-12-16

#basic

Bash Cheat Sheet

A cheat sheet for bash commands.

Command History

!!            # Run the last command

touch foo.sh
chmod +x !$   # !$ is the last argument of the last command i.e. foo.sh

Navigating Directories

pwd                       # Print current directory path
ls                        # List directories
ls -a|--all               # List directories including hidden
ls -l                     # List directories in long form
ls -l -h|--human-readable # List directories in long form with human readable sizes
ls -t                     # List directories by modification time, newest first
stat foo.txt              # List size, created and modified timestamps for a file
stat foo                  # List size, created and modified timestamps for a directory
tree                      # List directory and file tree
tree -a                   # List directory and file tree including hidden
tree -d                   # List directory tree
cd foo                    # Go to foo sub-directory
cd                        # Go to home directory
cd ~                      # Go to home directory
cd -                      # Go to last directory
pushd foo                 # Go to foo sub-directory and add previous directory to stack
popd                      # Go back to directory in stack saved by `pushd`

Creating Directories

mkdir foo                        # Create a directory
mkdir foo bar                    # Create multiple directories
mkdir -p|--parents foo/bar       # Create nested directory
mkdir -p|--parents {foo,bar}/baz # Create multiple nested directories

mktemp -d|--directory            # Create a temporary directory

Moving Directories

cp -R|--recursive foo bar                               # Copy directory
mv foo bar                                              # Move directory

rsync -z|--compress -v|--verbose /foo /bar              # Copy directory, overwrites destination
rsync -a|--archive -z|--compress -v|--verbose /foo /bar # Copy directory, without overwriting destination
rsync -avz /foo username@hostname:/bar                  # Copy local directory to remote directory
rsync -avz username@hostname:/foo /bar                  # Copy remote directory to local directory

Deleting Directories

rmdir foo                        # Delete empty directory
rm -r|--recursive foo            # Delete directory including contents
rm -r|--recursive -f|--force foo # Delete directory including contents, ignore nonexistent files and never prompt

Creating Files

touch foo.txt          # Create file or update existing files modified timestamp
touch foo.txt bar.txt  # Create multiple files
touch {foo,bar}.txt    # Create multiple files
touch test{1..3}       # Create test1, test2 and test3 files
touch test{a..c}       # Create testa, testb and testc files

mktemp                 # Create a temporary file

Standard Output, Standard Error and Standard Input

echo "foo" > bar.txt       # Overwrite file with content
echo "foo" >> bar.txt      # Append to file with content

ls exists 1> stdout.txt    # Redirect the standard output to a file
ls noexist 2> stderror.txt # Redirect the standard error output to a file
ls 2>&1 > out.txt          # Redirect standard output and error to a file
ls > /dev/null             # Discard standard output and error

read foo                   # Read from standard input and write to the variable foo

Moving Files

cp foo.txt bar.txt                                # Copy file
mv foo.txt bar.txt                                # Move file

rsync -z|--compress -v|--verbose /foo.txt /bar    # Copy file quickly if not changed
rsync z|--compress -v|--verbose /foo.txt /bar.txt # Copy and rename file quickly if not changed

Deleting Files

rm foo.txt            # Delete file
rm -f|--force foo.txt # Delete file, ignore nonexistent files and never prompt

Reading Files

cat foo.txt            # Print all contents
less foo.txt           # Print some contents at a time (g - go to top of file, SHIFT+g, go to bottom of file, /foo to search for 'foo')
head foo.txt           # Print top 10 lines of file
tail foo.txt           # Print bottom 10 lines of file
open foo.txt           # Open file in the default editor
wc foo.txt             # List number of lines words and characters in the file

File Permissions

#	Permission	rwx	Binary
7	read, write and execute	rwx	111
6	read and write	rw-	110
5	read and execute	r-x	101
4	read only	r–	100
3	write and execute	-wx	011
2	write only	-w-	010
1	execute only	–x	001
0	none	—	000

For a directory, execute means you can enter a directory.

windows command

2024-12-14