https://my-it-blog.netlify.app/tags/hardening/ Recent content in Hardening on My IT Journal Hugo en-us Fri, 12 Jun 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/luks-encryption-lab/ Fri, 12 Jun 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/luks-encryption-lab/ <h3 id="objective">Objective</h3> <p>This lab demonstrates how Linux Full Disk Encryption (LUKS) works and what it protects against.</p> <hr> <h2 id="part-1---attack-scenario-unencrypted-disk">Part 1 - Attack Scenario (Unencrypted Disk)</h2> <h3 id="step-1---identify-disk">Step 1 - Identify disk</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>lsblk </span></span></code></pre></div><h3 id="step-2---create-filesystem-no-ecnryption">Step 2 - Create filesystem (no ecnryption)</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo mkfs.ext4 /dev/sdc </span></span></code></pre></div><p><img alt="sdc" loading="lazy" src="https://my-it-blog.netlify.app/posts/luks-encryption-lab/sdc.png"></p> <h3 id="step-3---mount-disk">Step 3 - Mount disk</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo mkdir /mnt/test </span></span><span style="display:flex;"><span>sudo mount /dev/sdc /mnt/test </span></span></code></pre></div><p><img alt="mount_sdc" loading="lazy" src="https://my-it-blog.netlify.app/posts/luks-encryption-lab/mount_sdc.png"></p> <h3 id="step-4---add-sensitive-data">Step 4 - Add sensitive data</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>echo <span style="color:#e6db74">&#34;Sensitive data&#34;</span> | sudo tee /mount/test/secret.txt </span></span></code></pre></div><hr> <h2 id="attack-simulation">ATTACK SIMULATION</h2> <h3 id="step-1---direct-mount-attempt">Step 1 - Direct mount attempt</h3> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo mkdir /mnt/attack; sudo mount /dev/sdc /mnt/attack </span></span><span style="display:flex;"><span>ls -l /mnt/attack </span></span><span style="display:flex;"><span>cat /mnt/attack/secret.txt </span></span></code></pre></div><p><img alt="exposed_data" loading="lazy" src="https://my-it-blog.netlify.app/posts/luks-encryption-lab/attack1_exposed_data.png"></p>