V^V

InfoSec, Programmer, Entrepreneur and Wannabe Blogger. Thanks for stopping by.

[vikasprogrammer]

Useful UNIX SMB Commands

Learned a lot of SMB commands during the last test, thought to share with everyone:

##To list all the domain current machine can talk to

$ wbinfo --all-domains 

##To get the DC for a particular Domain

$ wbinfo --getdcname=<DOMAINNAME>

MACHINE001

##List of all users in domain in /etc/passwd style

$ getent passwd > /tmp/users

$ wbinfo -u

##Same for groups

$ getent group

$ wbinfo -g

##To get info about a user on a DC (-P use the configured password on this machine)

$ net user info spider -P -S <DC_HOST>

<List of groups the user belongs to>

##To add a user to the domain

$ net user add <user> <pass> -P –S <DC_HOST>

##Get the current authorised user

$ net getauthuser

##if this works, you might want to check the secrets.tdb file 

$ strings /etc/samba/secrets.tdb | grep USER 

$ tdbdump /etc/samba/secrets.tdb

Hope this info is useful :)

[vikasprogrammer]

Excellent guide to configure Postfix with Courier POP3/IMAP for Virtual Domain and non-UNIX user accounts

This is the first of an occasional series of posts about Linux systems administration. I've been an on-off Linux sysadmin for about, well, my first Linux was Slackware on a stack of 3.5" floppies. ...

x

[vikasprogrammer]

Wifi Password for Verizon AC30 0000

If for some reason your Verizon AC30 SSID has changed from AC30 XXXX to AC30 0000 and your old wifi password is not working, then try this password:

ac30pass

Your welcome!

[vikasprogrammer]

Blind SQL Injection without White Spaces

So, you just found out that doing www.example.com?id=1' throws a nice mysql error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''id=1'' ORDER BY page_id desc LIMIT 1' at line 1

Happy, well not yet! 

Looking closely at the error and taking out just the output between near .... at line 1

 'id=1'' ORDER BY page_id desc LIMIT 1

This means, no matter what I input, it will be placed between 'id=<myinput>'. Strange!

So to escape 'id=<myinput>' I tried, ?id=1' or '1'='1, and interestingly :

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''id=1'' ORDER BY page_id desc LIMIT 1' at line 1

And, more interestingly no mention of my beloved '1'='1, at this point I was basically angry. 

I thought to myself, may be its removing the spaces, so I tried ?id=1'or'1'='1 and voila! no errors. 

And moments laters, :(

Now, I had to create a query which can identify true and false condition AND with no white space. 

[FAST FORWARD]

After a long list of tries, I got this :

/?id=1'or'1'=(SELECT(_utf8'.')=substring(@@version,X,1))and'1'='1

So, '.' is the placeholder for all the testing chars and X is the counter to rotate for all the chars of output. So, as we know if X=2 then output has to be '.' i.e TRUE condition. In this case, I got NO "page not found error" and if I tried something else in place of '.', I get "page not found error". Thats it! game over! 

I wrote a quick perl script to iterate over all the output chars for all possible ascii printable chars. Profit!

Perl Script: http://pastebin.com/ixB5d90N

Output:

$ perl blind-version-test.pl

5.1.1-Ubuntu

[vikasprogrammer]

Popup cart module for Prestashop

If you are using prestashop as a platform for you website, you might have realized that when user clicks on "Add to Cart", the user needs some confirmation. This module is a great way to show confirmation of added products to the cart. It greatly enhance the UI. For details see the forum post at Prestashop:

http://www.prestashop.com/forums/topic/192415-free-popup-cart-show-modal-cart/

Buy at : https://www.xtendify.com/product/9-Popup_Cart‎

Cost: Just 20$

Compatible: Prestashop 1.4.x, 1.5.x

Demo: www.iwasugly.com

[vikasprogrammer]

Flip it All - Expert book reviews!

Announcing Flip it All (www.flipitall.com). Read expert book reviews before you buy. 

[Love reading books? Get paid for writing book reviews]

[l8]

[vikasprogrammer]

Great work by l8!

[vikasprogrammer]

phpMyAdmin Alternative - Adminer

If you are a heavy PHP/MySQL dev, you already know about phpMyAdmin - defacto standard for managing MySQL on a remote server. 

I like phpMyAdmin (pma), infact till date I was a heavy user of pma, but I don't know what happened, its too heavy now. It just takes forever to load. 

I don't need those fancy UI, I just needed a interface to quickly execute SQL and get out. I started thinking, is there only one client in this world for web based MySQL management. So.. I asked Google.. and.. pma is a thing of past!

Adminer is the my favorite now,  its a single .php file no-nonsense copy paste installation. Connects to db and voila.. simple and yet amazing interface!

I couldn't recommend it enough! Try it yourself today!

[vikasprogrammer]

Android 4.x to 4.1 - Simple steps (Backup > CWM > 4.1 flash)

4.x: How can I update to 4.1? Neither am I unlocked nor I am root and so no Clockworkrecovery either.

4.1: No worries - First take a backup of the system without becoming root - http://forum.xda-developers.com/showthread.php?t=1420351

4.x: Done. Now?

4.1: Follow this to install CWM in order to get to final step i.e installing 4.1 - http://forum.xda-developers.com/showthread.php?t=1357642

4.x: Done that.. phew! now?

4.1: Follow this guide to flash (put) official ROM which will get OTA (over the air updates) in future here - http://webtrickz.com/guide-to-update-galaxy-nexus-running-android-4-0-4-to-android-4-1-jelly-bean-using-clockworkmod

4.x: Thanks. 4.1 love!

[vikasprogrammer]

VBA on Mac OS : Accessing Files

Looks like accessing files through VBA on Mac OS is not as straightforward as it seems to be. I was trying to insert a picture in a MS Word document, but was getting run time error 5152 "This is not a valid path" error:

ActiveDocument.Shapes.AddPicture "/Users/username/1.jpg", False, True, 60, 35, 100, 100

After a lot of googling I couldn't find out how to access the filesystem through VBA on Mac. So I tried running following code and voila.

MsgBox FileSystem.CurDir

So, overall to access filesystem in Mac OS through VBA use the following format: 

ROOT HDD NAME:FOLDER:SUBFOLDER:SUBFOLDER2:File.ext

Thanks for reading!

[vikasprogrammer]

Journey 2: The Mysterious Island

Journey 1 was awesome, right? Well, this one is not. There are some (read very few) special effects, but thats about it, nothing more nothing less. Watch this at home, if possible using a free medium (you know what I mean). Kids *may* enjoy, but I won't count on it. Overall, it lacks a strong story and thrill/suspense factor, which movie of this category should have. I mean, you gotta give us more, a scene with giant lizard just won't cut it, this is 2012.

Tip for Producer/Director: Don't just show your best scene in the trailer and not have any thing else in the movie, its lame and stupid!

IMDB: http://www.imdb.com/title/tt1397514/

My rating: 2/5.

[vikasprogrammer]

Board Room Spying: Real but not new!

@hdmoore recently published Video Conferencing weaknesses in a 1hr webcast. Its is kinda interesting but not so much because even though its a real threat, its not a new one, here is why: (this is just summary, for full issue refer Source).

What is affected? How to test? 1. Auto-answer systems (comes default with Polycom). Can be tested using metasploit module. [1] 2. Vulnerable VC systems (Only LifeSize systems has an exploit). Also, can be tested using [2]. 3. Default or no passwords. Some vendors like Tandberg have no passwords vulnerability. Patches are already released. [3] As you can see, the only thing unique above is "auto-answer", which is what the NYT primarily talks about in the article. Whats the Impact? 1. Access the VC systems, use camera to pan-zoom etc. 2. Access the admin interface (webbased ui) to basically control the whole system. 3. Read passwords, listen to conversation, record from a distance. What was found in the survey done by hdmoore? 1. Out of 3% random IPs on internet, 250,000 had 1720 port open (h323 port), out of these 5,000 systems had auto-answer. 2. Major vendors: Polycom, LifeSize, Tandberg, Codian, Sorenson. How to protect? 1. Disable auto-answer 2. Firewall the system 3. Change default passwords 4. Apply patches 5. Enable logging. These excerpts were taken from the webcast presented by Rapid7, you can access it here (1hr long): http://www.rapid7.com/resources/webcast-boardroom.jsp. Ref: [1]:  http://metasploit.com/modules/auxiliary/scanner/h323/h323_version [2] : http://www.metasploit.com/modules/exploit/unix/http/lifesize_room [3]:  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111109-telepresence-c-ex-series

Latest about h323 attack is here: https://twitter.com/#!/search/%23h323

[vikasprogrammer]

[devteam]

Here’s a quick breakdown of how many A5 owners have jailbroken their devices since Friday morning. The numbers as of Monday afternoon are:

491,325 new iPhone4,1 devices

308,967 new iPad2 devices

152,940 previously jailbroken (at 4.x) iPad2 devices

Total: 953,232 new A5 jailbreaks in a little...

[vikasprogrammer]

Must have apps for jailbroken iPad (iOS 5 compatible)

I have used jailbroken iPad since 4.3.3. I recently installed 5.0.1 and jailbroken that as well. Thanks to greenpois0n. I have tried a number of apps / tweaks before and wanted to check if all of them are compatible with iOS 5 or not? Here is what I found:

1. Backgrounder (Free) Backgrounder allows you to send an application in background for real. It gives you true multitasking capabilities for e.g let youtube buffer a video while you check your email.

iOS 5: Compatible.

2. SBSettings (Free) Excellent app or tweak to iOS 5 notification center. It gives you ability to toggle Wifi, data, Bluetooth, Airplane etc mode right from notification center.

iOS 5: Compatible. Don't forget to enable it under Notifications>SBSettings, so that it will attach itself to notification center. By default, its accessibly via a left swipe on top status bar.

3. Yourtube HD (5$) Awesome app, plugs right in to default Youtube app. Creates a new download button to download videos for later watch and allows to specify the quality while download (SD, HD, 720p etc).

iOS 5: Compatible, though you won't be able to download from Bigboss repo. Use xsellize, its awesome.

4. Safari Download Manager (2$) Again, awesome tweak, it allows you to download files right from Mobile Safari, just like regular browser.

iOS 5: Not compatible.

5. Safari Upload Enabler (1.99$) What do you do when you are on a site which asks for file upload, like setting your facebook profile from Mobile Safari, you use Safari Upload Enabler.

iOS 5: Compatible. (v1.0-5 and above)

5. iFile (4$) So where do you see all these files you download? iFile is Finder (windows explorer) for iPad.

iOS 5: Compatible.

6. KillBackground (Free) To kill all background apps, use this. Period.

iOS 5: Compatible. But also kills your Music app which its not supposed to (at least in 4.3.3). Don't forget to enable it in non wiggle mode under Settings>Killbackground. Killbackground icon can be found in the switcher (when you double click your home button or four fingers up!)

7. Action Menu Plus (2.99$) Excellent tweak to add custom options to right click menu or action menu, if you will. You can add options like Copy All, Lookup (Google, Dictionary etc), History (of copied items) etc.

iOS 5: Compatible.

8. Activator (Free) Not a must have app, but installed by default by SBSettings. This tweak gives you gesture based app control, for e.g you can set it to open Settings when long press on statusbar.

iOS5: Compatible. By default installed by SBSettings

Some more needs mention but I am not a big fan like Dreamboard or Winterboard for theming,

I will keep searching for more apps and previous ones which are compatible with iOS 5. If you have any suggestions or any leads on iOS 5 compatible counterparts, please let me know in comments below. Thanks for reading!

PS: Note that I do not have an iPhone, so most of the above apps/tweaks are only applicable / usable on iPad.

[vikasprogrammer]

Good read.

[vikasprogrammer]

engadget.com Vs theverge.com

You might think its ridiculous to compare a Mar 2004 (engadget.com) website to a Oct 2011 (theverge.com) website, but I am going to do it anyways.

engadget.com "was" my daily dose of gadget / tech news. I even launched my own gadget news portel at enggresources.com/patrika but couldn't maintain it, writing is a time taking job, I tell ya! Anyways, when Aol bought engadget.com, I wasn't sure if they are gonna influence the articles, but after a while it started publishing some crap articles around endorsements, which were not really news. After a while, Joshua left engadget.com and I am pretty sure it was the same reason I sighted. After him, engadget really pissed me with really crap articles. Tim stevens, the new editor-in-chief wasn't doing his job. My daily dose was gone! I was scared and uninformed.

One week before, I stumbled across theverge.com, man, what a site design it was. I mean information is so organized and the highlights are readily accessible, I just loved it! and to my surprise it was Joshua who launched it. I was dazzled and amazed, not just by the quality and amount of information, but also by the thought of getting "that" tech news daily dose again. Thanks so much guys! I love you.. I watch all your vergecast and shows. They are awesome!

So.. here I am comparing the site ranking between these two website, as a web designer and "verger", this is my right and duty ;)

Here is the graph published at google trends if you compare these two:

Not even close, right? but I am sure many verger can spot the declining traffic at engadget after theverge was launched. The thing to note is that, theverge was actually launched by the name thisismynext.com on Jan 2011 which was then changed to theverge.com, just saying!

To end this, I hope theverge overtakes the gadget news category and provide free quality information to everyone. Thanks again!