# Tuesday, October 28, 2008

Im sure we all know of slurping by now but I just came across this site for windows command ninja skills. with that I took the time to update my slurp tool with some hacks I just didnt think about using. As well as some uses for NET that I didnt know about.

I have attached a copy of one of the slurp scripts I run, your milage will vary but you should get a lots of Ideas from it if you know whats going down. (I also just fixed that my server wasnt serving up batch files)

File Attachment: slurp.bat (14 KB)


posted on Tuesday, October 28, 2008 9:51:11 AM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Friday, October 17, 2008
So I am working on a project that required me to get creative, I have about 10gb of DOS Games but they are in ZIP format, nice for storage but not easy to deal with on a emulator front end, who wants to unzip a thousand files. So I set to work to make this script that will run a zip file game for dosbox. I read somewhere that dosbox will mount a zip file but seems like it wont work in the sdl build I have for linux, so I built this...

File Attachment: ldDOSzip.sh (2 KB)

File Attachment: ldDOSzip.bat (2 KB)

I put up a DOS batch file, its a very basic convert from the shell, most parts work I think. I didnt actually test it. You will also need to download a unzip tool for the command line this is also expected to be ran in XP or greater as I dont know how far back some of the file and path variables go in msft land. comment back if you find any issue with the dosbox batch file for windows. I will fix it up.

I did fix up the fact that by default IIS wont server up a batch file.

posted on Friday, October 17, 2008 7:46:55 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Wednesday, September 17, 2008

Thermite is a great tool to break into banks, destroy hard disks. Or just burn a hole in a engine block. It has great effect on anything iron.

A great site to try new ways to burn things

posted on Wednesday, September 17, 2008 12:33:53 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Sunday, September 07, 2008

When you run explorer and its using mapped drives or printers, there is a lot of crap network traffic that hangs up the kernel and your experence with your OS in windows. so here is a tip that I never bloged about. Disable the qutomatic query for network resources. This will speed up your work PC a bit if your a poweruser.

Speedupwindows

posted on Sunday, September 07, 2008 9:07:52 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Tuesday, May 13, 2008
I recently was working with some shared code and didnt like the regulations or the publicity of SourceFourge, so I set up a home CVS server to distro the code. Like another individual I googled out and found a bunch of documentation from linux users, no offence but I dont have time to read 30 pages to edit a password file. so I duplicated notes from here -http://www.adp-gmbh.ch/blog/2004/november/3.html- in case its ever removed and added my own commentary and edited some things for the new version of cvsnt.

Wih the server I also just checked out TortoiseCVS (formally I used wincvs) I dont like how much its locked into explorer but its so easy that I dumped wincvs and only use the turtle.

Installation

The installation turns out to be quite straight forward. Starting the installer takes care of the entire installation.
The default installation installs two windows services: the cvsnt service (named CVSNT) and the cvsnt lock (named CVSNT Locking Service) service. Additionally, it also installs a default certificate.
The cvs.exe was installed into C:\Program Files\cvsnt. Install also adds to your path statment.

Creating a repository

A repository needs a root directory under which both the files under version control and auxiliary files for use by CVS server are stored. I created this directory manually:
C:> mkdir c:\CVSSERVER
However, this is not a CVS repository by itself; the CVS server needs to be told to use this directory as a repository. The CVS server (or service, respectively) is administered through a service control panel that can be invoked in the dos prompt like so: (or via start menu)
C:\> cvsnt.cpl 
Now, with cvsnt.cpl, one can go to the Repositories tab and add the created repository. I chose /test for the name of the repository.

A dialog informed me: C:/CVSSERVER, but is not a valid CVS repository.
Do you want to initialise it?

And yes, of course, that's what I wanted.
Then I pressed apply.
The initialization basically created a CVSROOT directory beneath c:\CVSSERVER and put some 55 files and yet another directory into CVSROOT.

Adding a user

After creating the repository, I needed to create a user that can access (that is store and retrieve files) the repository.
C:\>cvs -d:sspi:localhost:/test passwd -a some_user
Adding user some_user@localhost
New password: ******
Verify password: ******
cvs server: *WARNING* CVS user 'some_user' will not be able to log in until they are aliased to a valid system user.
The password that I have specified (and is hidden in the console) was password.
This command created \CVSSERVER\CVSROOT\passwd with the following content:
some_user:AuC4s3kI8ixcs
Now, some_user needs to be aliased (according to the warning returned by cvs) to a valid NT system user:
C:\>cvs -d:sspi:localhost:/test passwd -r SYSTEM\administrator some_user
Changing repository password for some_user@localhost
New password: ******
Verify password: ******
Although this seems a bit redundant, it looks like one has to give the password again. This is the password for the CVS user not the system account. The SYSTEM\administrator is the NT-FQ name of the local admin in this example.

Creating a module

Now, it was time to create a module which I named test_module:
C:\CVSSERVER\>mkdir test_module
C:\CVSSERVER\>cd test_module
For the beginning, I only stored one file, README.txt, into this module. (one file is required to start the module)
C:\CVSSERVER\test_module\>notepad README.txt
Here's the content of README.txt:
test_module
===========
This is some dummy text.
C:\CVSSERVER\test_module\>cvs -d:pserver:some_user:password@localhost:/test import TestModule no-vendor initial-release
I didn't specify the -m flag, so CVS opened the default editor likely notepad (as the environment variable CVSEDITOR is not set) to enter a message. 
CVS: ----------------------------------------------------------------------
CVS: Enter Log. Lines beginning with `CVS:' are removed automatically
CVS:
CVS: ----------------------------------------------------------------------

just say C for continue
.. and CVS answered with:
N tm/README.txt

No conflicts created by this import
The N obviously indicates that tm/README.txt is a new file.
Now, let's see what happened in C:\CVSSERVER>.
C:\CVSSERVER\test_module\>cd \..

C:\CVSSERVER>dir
Directory of C:\CVSSERVER
02.11.2004 23:35 <DIR> .
02.11.2004 23:35 <DIR> ..
02.11.2004 15:53 <DIR> CVSROOT
02.11.2004 23:35 <DIR> TestModule
Indeed, it added a new directory called TestModule What's in there?
C:\CVSSERVER\test_module\tm>dir
Directory of C:\test_repository\tm

02.11.2004 23:35 <DIR> .
02.11.2004 23:35 <DIR> ..
02.11.2004 23:35 <DIR> CVS
02.11.2004 23:35 506 README.txt,v
It contains a CVS directory (again, used for CVS use) and the README.txt (with a ,v suffix)
Now, the repository is ready to be used.


so in the end to connect
cvs -d:pserver:some_user:password@localhost:/test /TestModule

posted on Tuesday, May 13, 2008 11:06:21 AM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Thursday, March 20, 2008

recently found a good use of VM Converter to change the disk size and no need to mess around in command line

 1) if you own a copy of converter thats a cheat

http://www.vmware.com/products/converter/

 if all else fails

http://www.ebswift.com/OpenSource/VMDiskSize/

then use diskpart (cmd tool with windows)

run the following commands…(on a different box)

diskpart

list disk

list volume

select volume=(your volume)

extend

list volume (check your work)

posted on Thursday, March 20, 2008 1:49:47 AM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Thursday, November 29, 2007

I wanted to make a list of browser plug-ins that I use and find quite important to security and daily ops work.

First, for IE (I accidently upgraded to 7.0 and didn't feel like un-installing the behemoth)

  • Bayden Systems' TamperIE offers HTTPS form-tampering
    • sort of a mac-daddy tamper application to change your post data on the fly, must have.
  • Microsoft's IE Developer Toolbar
    • Change values on the fly also get header info and more right away
  • Microsoft's IE Powertoys for WebDevs
    • was cool but appears the highlight and show source dont work with IE7, however still works for DOM data so I keep it.

Now the giant list for FireFox (where all the 31337 users are)

  • AdBlockPlus
    • This is like going from dial up to DSL, the internet all the sudden becomes “sweet”
  • BlogJet
    • This is also in my IE, its my blogger application
  • DOM Inspector
    • handy for webdev and de-construction
  • DownloadThemAll
    • I dont like to click and this is a price-less tool for saving clicks.
  • GoogleBrowserSynch
    • I dont like how big google is and I dont like the idea of google watching what I browse, this was just an interesting tool since I am on lots of computers, I just dont have the guts to sign-in yet.
  • GoogleToolBar
    • this is a must, duh.
  • HttpHeaders
    • handy for webdev and de-construction
  • ModifyHeaders
    • handy for webdev and de-construction, and user-agent mods
  • NoScript
    • The only “security” leo laporte knows with out steve giving him a script. Handy for hacking things.
  • RefControl
    • spoof the referrer to the server.
  • PDF Download
    • sometime I like to download pdf’s sometimes I like to view them live, this lets me choose.
  • Tamper Data
    • same as TemperIE but for zilla
  • ULRParms
    • Different type of TamperData type plugin
  • User Agent Switcher
  • WebDev
    • This tools is mostly a must for anyone, you can quickly shut on and off and mod parts of sites.
Update June2008:
some good hack tools
http://www.securitycompass.com/exploitme.shtml
posted on Thursday, November 29, 2007 6:25:23 PM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Monday, November 19, 2007

if you ever get me started on “24kgold connectors” you know how much I hate magnolia hi-fi and all the sales people there how they push monster and higher grade connectors.

Here is a podcast that is a full hour of how to cable your AV equipment

 

 

posted on Monday, November 19, 2007 10:55:00 PM (Pacific Standard Time, UTC-08:00)  #    Comments [3] Trackback
# Tuesday, November 13, 2007
I always seem to loose these KB’s when I’m building a dev server and need to backup or transfer or export the MS-SQL accounts. Here is the kb for sql 7.x and sql 2005
posted on Tuesday, November 13, 2007 3:11:30 PM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Wednesday, October 24, 2007

I ran across a fun post for a way to disable the reply to all, and forward ability with emails. How many times have you forward out something like “server will be down” and you get 3 reply all’s “looks like kelly is actually working today”, “haha yea kelly must have called the nerd herd”

use VBA to disable the reply to all and forward

Prevent Reply to all and forward with custom form

here is a copy of scotts post (just as a local copy)

 

posted on Wednesday, October 24, 2007 11:03:20 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Tuesday, October 09, 2007
So I was working on a script to spam a fellow classmate in a recent email proxy class I was attending,  did some searching for a Email Load Tester and found this guys script which uses netcat to pass values onto port 25 with javascript. However for the class I needed more spam like activity, so I added random characters to the subject and body. I also wanted to test out on servers that need auth, so I added a base64 encoder. The script is as user friendly as I could make it, commented here and there.


you can save this script down as a email.js and run with cscript aka 'cscript email.js' from command line.

Usual terms apply, this isn't for illegal activity, anything you damage or break is your own fault and not the publisher of the code. Use at your own risk, blog owner assumes no responsibility for your doings. May cause vomiting or bowl discomfort. If so then stop using code immediately and find a potty.

If you want multi threaded emails run more then one copy at once, I haven't had the time or care to multi thread the script.
posted on Tuesday, October 09, 2007 5:03:14 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Thursday, August 30, 2007
Now that I have a multi boot with WindowsXP, Ubuntu, BackTrack2 security was an issue. First installed windows then used gaprted boot disk to separate 3 primary and 1 expanded.  I have PGP watching windows by expanding the drive (in PGP desktop) and clicking on the C: partition and encrypting that. Then installing ubuntu in partition 2. Then using this guide to encrypt redirected /home to partition 3. the expanded disk was then used for a boot of BackTrack2 with this tip sheet and swap. So in the end I have all three OS's running with PGP login at boot, then grub, then OS. here is my grub


title           Microsoft Windows XP Professional
root            (hd0,0)
savedefault
makeactive
chainloader     +1

title           Ubuntu, kernel 2.6.20-16-generic
root            (hd0,1)
kernel          /boot/vmlinuz-2.6.20-16-generic root=UUID=0dd29d80-088f-47c6-b8$
initrd          /boot/initrd.img-2.6.20-16-generic
quiet
savedefault

title           BackTrack2
rootnoverify    (hd0,6)
kernel          /boot/vmlinuz vga=791 root=/dev/sda7


posted on Thursday, August 30, 2007 7:40:30 PM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Friday, December 22, 2006

One of the best last minuet party ideas my friends and i had was a “name tag party” what is that?

  • get a shitload of name tags you know the “hello my name is” type
  • get some black lights
  • get some highlighters
  • premake funny name tags like “call me at 555–1212” or “i like tacos” or “i’m single” or “may contain small parts”
  • stick them randomly to people as they enter the party

The idea is that you can only read them in the black light and they glow bright so you can read across the room. Put the black lights in common area. Get real creative and it will be a super super hit. We took this to a bar in Canada once with black lights and i had people coming up asking for tags. Hint for a huge party have like 300 tags handy (for a 100–150 people party) you will waste a lot and loose them. If blacklights is not a possibility then just use a red/blue Sharpe.

Just a personal story on how good this was. We threw a party once and it was so good that the police busted us. On the violation it was noted “there were beer cans and stickers all over the floor” HA!

posted on Friday, December 22, 2006 8:09:12 AM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Friday, December 01, 2006

This party idea is good for the spin off to a formal party.

  • formal attire, we are talking 50/60’s formal party so tux and dress is a must
  • think casablanca in the 2000’s and theme with some random old ass bar music
  • mix cheap drinks like apple martinis and cosmopolitan and fuzzy navel things that a 1/2 gallon of vodka and some mixers can take care of (helps the cost)
  • no beer
  • have a bar with stools and some of them little french patio tables indoors
posted on Friday, December 01, 2006 12:06:39 AM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Tuesday, November 28, 2006

Ever need a different Christmas party idea? Try the “40oz white elephant”

  • everyone buys a 40 and puts it in a brown bag “bum style”
  • at the party you white elephant gift exchange
  • optional byob (bring your own box) to sit in/on/sleep the night off
  • bum wear optional

 

posted on Tuesday, November 28, 2006 10:57:57 PM (Pacific Standard Time, UTC-08:00)  #    Comments [1] Trackback
# Tuesday, October 04, 2005

Keeping the RSS feeds popping thought i would send out a link to a collection of old US government propaganda films. Since this is all open source and paid for by the people we all own this. Therefor you can use it in your own video editing. Some of the old bomb video is good for anything. What about the flicks like sally isn't to touch boys. Good stuff

Old Government films

Old computer commercials

posted on Tuesday, October 04, 2005 8:48:29 AM (Pacific Daylight Time, UTC-07:00)  #    Comments [0] Trackback
# Tuesday, February 08, 2005

I had a few thoughts on tips for people wanting to throw a CEO and office Hoe party.

  • Dress Up as a CEO or a “Office Hoe” – key word no jeans
  • Have nametags with funny names for the office
  • play office space on the break room tv
  • have a ‘supply room’
  • if you happen to have access to a copy machine put that in the main party room
  • water cooler of beer /mixed drink
  • provide notepads for notes
  • have tps reports
  • have HR give out sexual harassment letters
  • use all desk chairs as seating
  • have the bar be in a fake cube
  • all drinks served form coffee mugs
  • put the party notice on a tps report or a “memo”
  • put post it notes with a pen somewhere and stick some up early with “this party sucks” or something it will be fun if it catches on – when clean up comes you can laugh the next day
  • insist on recycling
posted on Tuesday, February 08, 2005 5:24:05 PM (Pacific Standard Time, UTC-08:00)  #    Comments [0] Trackback
# Sunday, January 16, 2005

gotta have the First Post

 

This is the new code for KellyKeeton.com/blog I chose to use the DasBlog asp.net source. with a work space here its nice easy setup just edit xml for the major options. I chose this because i wanted a ASP solution that would run on IIS and have no database back end. This was compared to .text which I didn't like as much.

posted on Sunday, January 16, 2005 10:23:04 AM (Pacific Standard Time, UTC-08:00)  #    Comments [2] Trackback