Forgot your password?

typodupeerror
User Journal

Journal: Wrote my first snort rule!

Journal by moj0e

Wrote my first snort rule! It detects if someone is trying to capture credentials via the auxiliary/server/capture/smb module.
More information about this type of attack is here:
http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html;

Rule:
alert tcp any 445 -> any any (msg:"SMB Metasploit credential capture attempt!"; reference: url,http://www.metasploit.com/modules/auxiliary/server/capture/smb; reference: url,http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html; content:"|11 22 33 44 55 66 77 88|"; classtype:attempted-user; offset: 73; depth: 8; flow: to_client; sid: 123000001; rev:1;)

User Journal

Journal: Hacking Windows Networks, the easy way.

Journal by moj0e

Here is a beautiful tutorial on hacking Windows networks:
http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html

Here is a fix for the pcaprub issue:
http://www.backtrack-linux.org/forums/backtrack-5-beginners-section/40688-pcaprub-module-problem.html

User Journal

Journal: Ubuntu 11.10 upgrade/install NVidia

Journal by moj0e

Nvidia drivers weren't loading. Error: could not allocate memory:

Solution:
Apparently this is a known bug, and i had to do the following to fix this:

edit /etc/default/grub
find the option GRUB_CMDLINE_LINUX and add nopat, so for me this looked like

GRUB_CMDLINE_LINUX="nopat"

run sudo update-grub

Source:
http://askubuntu.com/questions/37590/nvidia-drivers-not-working-after-upgrade-why-can-i-only-see-terminal

User Journal

Journal: FDA and Security Patching

Journal by moj0e

There is a common misconception that the FDA has to approve security patches on systems. This is not the case. The FDA attempts to clarify this issue with the following statement:

http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm189111.htm

User Journal

Journal: Secure file upload/download in Django

Journal by moj0e

Original Link:
http://stackoverflow.com/questions/1340776/secure-static-media-access-in-a-django-site

Quote:
EDIT: How I ended up solving this after reading Van Gale's answer and this:

Switched to WSGI.
Installed mod_xsendfile
Moved all public media files into a subfolder in /media/public
Added access to the public folder using an Alias /media/public /var/www.../media/public
Added WSGIScriptAlias /media/protected/ /var/www.../apache/django.wsgi (same handler as for the rest of the site)
Added XSendFile On and XSendFileAllowAbove On
To the Django app I added an urlconf for /media/protected which does basically what's here, only modified for my authentication system. It handles urls such as /media/protected/GROUP_ID/file so that only members of the GROUP can download the files.

User Journal

Journal: Remastering Ubuntu 10.10 with UCK

Journal by moj0e

As of Nov 5th, 2010, there is a bug with uck (Ubuntu Customization Kit) that prevents remastering Ubuntu when run on Ubuntu 10.10.

The problem arises because mkbootmsg was placed in another package, it is now in gfxboot-dev (instead of just gfxboot).
This would cause a 'command not found' error.

The workaround is installing gfxboot-dev like this:
sudo apt-get install gfxboot-dev

Enjoy your new custom Distro!

PHP

Journal: LDAP + PHP + SSL = headache

Journal by moj0e

Apparently... LDAP hard codes the path of ldap.conf to
C:\OpenLDAP\sysconf\ldap.conf

In order for LDAP to not require a valid certificate, one must add the following contents
to that file:

TLS_REQCERT never

Source:
http://lists.horde.org/archives/sork/Week-of-Mon-20040503/001578.html

User Journal

Journal: How to clear test orders from Magento!

Journal by moj0e

After thousands of dollars of fake orders to get your magento store integrated and running... you will
probably need to clear out all those tests.... Here is how you do it:

http://www.eliasinteractive.com/blog/magento-ecommerce-how-to-reset-all-test-order-information-and-set-unique-prefix-for-orders-invoices-shipments-and-credit-memos

User Journal

Journal: Useful Magento Payment tutorial!

Journal by moj0e

After reading many semi-useful tutorials... Hearing horror stories about the only Magento book available...
Finally a useful tutorial for setting up a new magento Payment method/Gateway :)

http://colourgray.wordpress.com/2009/11/11/magento-create-a-custom-payment-method/

User Journal

Journal: Getting started developing for Magento!

Journal by moj0e

Here is a great link to get you started! It does a great job introducing the concepts needed to start coding.
http://activecodeline.com/writing-a-custom-module-in-magento-detailed-walktrough

User Journal

Journal: 30 Essential plugins for Magento!

Journal by moj0e

http://visionwidget.com/inspiration/web/374-free-magento-extensions.html

Most impressive one in my opinion?
The plugin that integrates PAP4 to magento:

PAP4 can be found here: http://www.qualityunit.com/postaffiliatepro/pricing/

Commercially available plugins that might be good to have:
http://www.aitoc.com/en/magento.html

Magento is awesome... but so is Wordpress...
Magento+Wordpress is Awesome x2!
http://www.silverthemes.com/blog/2009/04/wordpress-and-magento/

User Journal

Journal: MD5 Hash DB!

Journal by moj0e

Hey,

Looking to see what that MD5 password is? Try finding it here:
http://www.md5decrypter.co.uk/

Enjoy!

"Plastic gun. Ingenious. More coffee, please." -- The Phantom comics

Working...