Kurbli : hack

PowerShell on Server Core « Dmitry’s PowerBlog: PowerShell and beyond

Kurbli — Sun, 18 May 2008 13:21:41 GMT

Below is a step-by-step instruction on installing Windows PowerShell on Windows Server 2008 in Server Core mode.
Note that these are in no way official or supported by Microsoft. Microsoft is working on official version of .NET and PowerShell for Server Core installations, so eventually you will be able to get this fully supported. Until then below are the instructions you can use at your own risk, etc., etc.

PowerShell on Server Core « Dmitry’s PowerBlog: PowerShell and beyond

MSFN - Adobe Reader Speed-Up v1.36

Kurbli — Mon, 11 Dec 2006 14:01:43 GMT

Adobe Reader 8.0-ra is!

Adobe Reader SpeedUp is a simple application that was created to help make the loading time of Adobe's Acrobat/Reader software bearable for everyday use. AR SpeedUp only needs to be used once (a process taking only a few seconds) and then your 'Reader will be transformed forever. There are also some tweaking options available. "w00t!", as the young kids say.
Download: Adobe Reader Speed-Up v1.36 (Freeware)
View: Change Log
Homepage: Adobe Reader Speed-Up

Source: MSFN - Adobe Reader Speed-Up v1.36

ATMs hacked using MP3 player | News.blog | CNET News.com

Kurbli — Wed, 15 Nov 2006 22:22:58 GMT

Ezt nem hiszem el:

A criminal gang in the U.K. was able to steal confidential banking data by bugging ATMs with an MP3 player, The Times of London reported in its online edition Thursday.
The gang targeted freestanding cash dispensers and would tap the phone line between the ATM and a wall socket by placing a two-way adaptor on it and connecting an MP3 player, according to the newspaper.
The digital music device would record the data traffic, which sounds like the noise a traditional computer modem makes when connecting. The noise would be interpreted using a modem line tap or passed through a special computer software program.
The gang was then able to create copies of credit cards and make purchases worth 200,000 pounds, nearly $380,000, according to The Times.
Posted by Joris Evers

Source: ATMs hacked using MP3 player | News.blog | CNET News.com

Ilya Hevnikov’s Blog » Blog Archive » How To Triple Boot (XP, Vista, Ubuntu) With Single Boot Screen

Kurbli — Tue, 14 Nov 2006 17:37:02 GMT

A ghacks.net nyomán jutottam ide. Úgy látom, némi utánolvasással ezen ragyogó útmutató alapján meg fogom próbálni.

Since Ubuntu 6.10 was released less than a month ago, Windows Vista went RTM and dates for new Ubuntu 7.4 were announced today, I thought I’ll post a tutorial on how to create a single boot screen triple boot system with Windows XP, Windows Vista and Ubuntu Edgy Eft.

A triple boot system isn’t that much different from a dual boot, but since Windows Vista is using a new boot loader called winload it screws up with your typical GRUB installation. And it is pretty annoying going up and down through several boot menus to select your desired operating system. The key is the sequence in which you install the OSes. To give you a rough idea, check the screenshot.

You can read more on Vista’s boot process on Wikipedia.

Source: Ilya Hevnikov’s Blog » Blog Archive » How To Triple Boot (XP, Vista, Ubuntu) With Single Boot Screen

Internet Explorer 7 running side by side with IE6. (standalone mode)

Kurbli — Fri, 20 Oct 2006 10:29:23 GMT

Nyilván vannak fejlesztők, akiknek nehézséget okoz, hogy az IE7 jónéhány web oldalt az IE6-tól eltérően (mondhatjuk hibásnak is, de ez nem feltétlenül korrekt) jelenít meg. Na most ez nem újkeletű dolog, hiszen egyes dolgok megjelenítésében eltérés van az Opera, FireFox és az IE6 között is. Az IE6 és IE7 között azonban szignifikáns az eltérés. Ez alapvetően a CSS szabvány(ok) értelmezésében, interpretálásában keresendő. Az ellentmondások áthidalására találták ki a "standalone" módot. Ebben az esetben több, eltérő verziójú IE működhet egymás mellett.

Két, egymástól eltérő megvalósítású IE standalone:

1.)Yousif (TredoSoft) ez egy egyszerűbb megoldás
"The following steps should get IE7 up and running

Extract the IE7 self-extracting archive with WinRar or using the /x switch

IE7-WindowsXP-x86-enu.exe /x

Navigate to the update directory of the extracted archive and run the following updates:
- xmllitesetup.exe (This will enable limited support of tabbed browsing)
- nldsl.exe
- idndl.exe
create an empty text file called "iexplore.exe.local" and place it in the same directory as iexplore.exe
Run iexplore.exe!

Click Start -> Run...
type "regedit" to start the registry editor.
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Version Vector
rename the key "IE" to "xIE".

Context menus (the one you see when you right click on an empty space).
The main menu bar.
Disabling popup blocker.
Feed reader.
Installing ActiveX components and ActiveX support.
Showing combo-boxes
Web pages that require authentication.
Adding search providers via websites (like this one for example)

Link to Internet Explorer 7 running side by side with IE6. (standalone mode) | TredoSoft

2.) Jon Galloway különféle registry furfangok (regmon, regmontoregfile) segítségével egy .reg file-t készített.

Részletesen: http://tools.veloc-it.com/tabid/58/grm2id/4/Default.aspx

Mindkét megoldás használható. Galloway még adós a végleges IE7 megoldásával, Yousif megoldása erre is jó.

Internet Explorer 7 Final Released Today (3.)

Kurbli — Thu, 19 Oct 2006 13:31:33 GMT

Kedvenc internetes portálom hiányolta (valószínűleg csak most került a recenzens kezébe az IE7):

A Menu Bar hagyományos elhelyezése egy registry kulcs segítségével:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Position"=dword:00000001

http://blogs.msdn.com/tonyschr/archive/2006/01/31/521542.aspx

Increase Internet Bandwidth

Kurbli — Tue, 26 Sep 2006 13:19:33 GMT

Broadband connection are fast. But did you know that you can still increase the speed (bandwidth) of your broadband connection (e.g. Smartbro wireless broadband). You can still speed up your bandwidth by 20% more without cost. Just follow this simple step but be extra carefull because it involves editing your registry.
Because Windows XP seems want to reserve 20% of the bandwidth for its self. Even with QoS disabled, even when this item is disabled. So why not use it to your advantage.

Hogyan?:

http://smartbro.blogspot.com/2006/09/increase-inte...

Hacker Discovers Adobe PDF Back Doors

Kurbli — Sat, 16 Sep 2006 11:37:00 GMT

Egy digg nyomán az eWeek-en olvashatunk Ryan Naraine tolmácsolásában, hogy egy David Kierznowski nevű - "penetration testing expert" (ahh, de jó kis életcél, vö: Inetpub Certified Drink Master Professionals) - foglalkozású hacker

released proof-of-concept code and rigged PDF files to demonstrate how the Adobe Reader program could be used to launch attacks without any user action.

A hacker azt állítja, a kidolgozott technológia konkrét megvalósításával még nem találkozott. A közétett, és teljesen peccselt Acrobat Reader-ben megnyitható demoi:

The first back door (PDF)
A second back door demo (PDF)

elég veszélyes helyzetet írnak le. A dolgot persze az érintett cég kissebbíteni igyekszik.

Kierznowski said his interest in auditing PDF files for back doors comes from a fascination with the concept of "passive hacking."

"Active exploitation techniques such as buffer overflows are becoming more and more difficult to find and exploit ... The future of exploitation lies in Web technologies," he said, noting that internal users are often in a "relationship of trust" with the surrounding network.

Confirming a trend that sees Microsoft Office applications—Word, Excel, PowerPoint—used in zero-day attacks, Kierznowski sees a future of client-side hacking that expands the functionality of a service.

"This form of hacking merely manipulates the user's client to perform a certain function, effectively using the user's circle of trust," he said.

Copy Paste with middle mouse button (True X-Mouse Gizmo for Windows)

Kurbli — Mon, 11 Sep 2006 15:43:46 GMT

martin írta blogjában:

...Lucky me had already a bookmark to the freeware true x-mouse gizmo for windows website

Innen:

X11 is better for fingers.
Copy with mouse.
Paste with mouse.
Focus without clicks.
Raise and lower windows.
So called X-Mouse.
One and only... True X-Mouse Gizmo.

Over the years Microsoft (being under the user community pressure) has undertaken some half-hearted attempts to bring the fewer-clicks functionality to Windows. Yet the most far reaching TweakUI (see PowerToys for Windows XP for XP version) goes only about one fifth of the way. Indeed, to an average X11-user the expression "X-Mouse" means the following:

Keyboard focus follows mouse pointer instantly (the only one that can be achieved with TweakUI, annoyingly enough accompanied by the "quality" to raise the window upon click).

Marked text is placed into the paste buffer instantly on left button release.

Pasting is done with a single middle button click. (The latter two are implemented in couple of applications - only to feel more acutely the lack of it in the rest of the windows!)

Ability to lower windows with right button click on window decoration.

Autoraise (if engaged) is delayed relative to input refocusing.

All of the above is what this "True X-Mouse Gizmo" is about:-)

The Gizmo is designed to work on 98/Me/2000/XP/.NET/2003.

Teljesen el kell olvasni a cikket, van még egyéb is.

Another thing to look at is an X icon in the system tray. If it looks light red or "happy:" , TXMouse is ready to copy on mark.

Download

Szerző:
Andy Polyakov
Sven Hultinsgata 12a
Chalmers University of Technology
Gothenburg
SE-412 96 SWEDEN

Currently listening to: HardRadio - The Heavy Metal Supersite

CP: Use Gmail Generate Unlimited E-mail Addresses

Kurbli — Sun, 10 Sep 2006 10:27:23 GMT

A ShoutWire-on olvastam a címről:

Gmail has an interesting quirk where you can add a plus sign (+) after your Gmail address, and it'll still get to your inbox. It's called plus-addressing, and it essentially gives you an unlimited number of e-mail addresses to play with. Here's how it works: say your address is pinkyrocks@gmail.com, and you want to automatically label all work e-mails. Add a plus sign and a phrase to make it pinkyrocks+work@gmail.com and set up a filter to label it work (to access your filters go to Settings->Filters and create a filter for messages addressed to pinkyrocks+work@gmail.com. Then add the label work).

Mire jó?:

Find out who is spamming you
Automatically label your incoming mail
Archive your mail

Úgy tűnik, használni is fogom.

User support

Kurbli — Sat, 09 Sep 2006 10:53:43 GMT

Ahhoz, hogy ügyfeleim gépeit folyamatosan felügyelhessem (most mindegy, milyen software-rel), továbbá, ha nem vagyok a felügyeleti gépnél, vagy maguk az ügyfelek futtatnak e gépről (mint Terminal Server-ről) bizonyos keretek között alkalmazásokat és nincs lehetőségem erre a célra egy servert és server software-t használni (értelmét sem látom), szükségem van:

- az egyidejűleg lehetséges TCP kapcsolatok számának megnövelésére,
- az XPSP2-őt futtató gépen lehetővé kell tenni több egyidejű RDP kapcsolatot (minél többet, de legalább hármat a konzollal együtt)
- egyidejűleg több VNC servert is kell tudni látni.

Ezekre a dolgokra az alábbiakat használom (úgy tűnik, nem ütközik egyik sem sw jogi akadályba):

LvlLord: Event ID 4226 Patcher (4226 fix)
http://www.lvllord.de/?lang=en&url=tools:

What's this all about?
After almost everybody knows the <<EventID 4226: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts>>, I used a day to create for educational purpose a fix for this argumentative feature.
Unfortunately there exists no REG-key which could easily be set (would be so nice and easy, right? *smile*). The file TCPIP.SYS in the directory C:\WINDOWS\SYSTEM32\DRIVERS and C:\WINDOWS\SERVICEPACKFILES\I386 has to be changed (system dependend eventually in C:\WINDOWS\SYSTEM32\DLLCACHE, too).
Needed things:
- Windows XP SP2 (from RC2 upwards) or Windows 2003 Server SP1 beta
- patcher
- a small amount of time
What's been done:
To say it easy: the before 10 half-open connections are beeing increased to 50 (can be changed during runtime and with the parameter /L) and the CRC is been corrected. And that's it!
Comment:
The method described here, should only be used by users, who know how to handle all the described. With the download of the here published program the user know, that changes are made on third party files. For damages in every kind I cannot be hold responsible for. Indeed, tests worked fine here. However, nothing is impossible.
Info: When error occurs, the patcher can change the TCPIP.SYS back to the original!
Instruction:
Just download the patcher and execute it. It will automatically find the windows directory and ask, if it should increase/decrease. For higher values, please check the help with parameter /?.
After a successful patch, the new TCPIP.SYS will be automatically installed. After that, the computer should be restarted.

Ez a saját gépemen így néz ki:

Jól látható, hogy itt már 50 "half open" kapcsolat lehetséges.
sala: Terminal Server Patch
http://sala.pri.ee/terminal-server-patch/:

The beta 2055 release of XP PRO SP2 let you run two or more sessions (one local console and one or more remote desktop) concurrently. But this functionality was removed in the Final release. This patch will enable two or more concurrent sessions in Windows XP PRO Service Pack 2 (SP2) or later if you have FAST USER SWITCHING enabled, and your windows is NOT in a domain.
Uninstaller is also included and can be found at windows Control Panel -> Add or Remove Programs.
Screenshot
Download Latest Binary
IntelliNavigator Inc: VNC Navigator
http://www.intelliadmin.com/default.htm

This program allows you to easily manage your VNC servers. It supports RealVNC, TightVNC, and UltraVNC. Connect to servers with just a double click. It keeps your passwords safe in a 256 Bit encrypted database.
(Free version limited to 3 connections)

J'accuse: a kép négyzetalakú lett a ~~kíváló~~ .NET Paint alkalmazása miatt, direkt hagytam így.