edwigetadmin

 

If you run fix-splash on a backtrack installation and get:

$ sudo fix-splash
[*] Fixing Initrd
[*] Extracting Initrd
181100 blocks
cpio: File ./initrd grew, 46361600 new bytes not copied
181100 blocks
[*] Reboot and bask in the joys of BootSplash

The fix is really simple…..

Continue reading »

 

You might also want to see my article Installing JTR On Backtrack for Multiprocessor Cores

I am too lazy to restore the old version of this file from my old website (it was hosted for years on mambo and I am just too lazy to do the db conversion).  Anyways, this website serves a couple of purposes, first is to keep some of my own notes handy and second to help others.  With that in mind, here is a collection of tips on using john the ripper:

Prepare Linux Shadow Passwords

umask 077
./unshadow /etc/passwd /etc/shadow > mypasswds

Continue reading »

 

Lets face it, John the Ripper has been around a long time and the reason its been around a long time is because its damn good at cracking passwords.  Yea, hashcat and oclhashcat are great for gpu cracking, but it doesn’t support as many algorithms as JTR.  So, imagine my surprise when I fire up John The Ripper on backtrack 5 64 bit and find out it is using a single CPU.  That is letting a potential 75% of my system sit there wanting to do something.  Luckily the fix is easier than fixing a sandwich.

If you already have jtr installed, you may want to see my john tips article.

First, lets grab the jumbo sourcecode….

Continue reading »

 

When you upgrade pacman, you will get a message that says “run pacman –init” and when you do from a console (like on a remote server), you will then be presented with the following message:

# pacman-key --init
gpg: Generating pacman keychain master key...
 
Not enough random bytes available.  Please do some other work to give
the OS a chance to collect more entropy! (Need 282 more bytes)

Continue reading »

 
m5270123_aftershot_205x211

I had reviewed bibble labs bibble pro software several times as a solution to Digikam, Lightroom, etc in Linux.  Most recently I tried the bibble labs pro v5 series in October.  I was ready to shell out the $299 but for the life of me couldn’t figure out how to order the software from their website (and I am an IT person).  Anyways, Corel software purchased Bibble Pro in January 2012 and released it under the new name Aftershot Pro.  They also reduced the price down to $99 (or $79 if you are upgrading or have a license version of lightroom).

I immediately bought a license….and you know, if Adobe would release Photoshop for Linux, I would do the same thing.

 

I created this because I always forget the command to enumerate snmp and I am often too lazy to read man pages :)

#!/bin/bash
 
# By Ed Wiget
# This script takes an input ip or domain and performs a snmpwalk using common community strings
# 20120204 - initial script
 
function proghelp (){
	echo ""
	echo ""
	echo "Help:"
	echo "./eds-smtpwalk.sh ip_address"
	echo ""
	echo "Example:"
	echo "./eds-smtpwalk.sh 127.0.0.1"
	echo ""
	echo ""
}
 
if [ $# -ne 1 ]
then
clear
proghelp
exit
fi
 
# set up the first input value
if [ "$1" == "" ]; then
 
        echo "What is the ip address to query?"
        read SVRIP
else
        SVRIP=$1
fi
 
if [ -f wordlist-common-snmp-community-strings.txt ]; then
	for COMSTG in `cat wordlist-common-snmp-community-strings.txt`
		do
# removed below in favor of auto list
# set up the second input value
#if [ "$2" == "" ]; then
#        echo "What is the community string?"
#        read COMSTG
#else
#	COMSTG=$2
#fi
 
		snmpwalk -v2c -c ${COMSTG} $1 system
	done
 
else
 
echo "wordlist-common-snmp-community-strings.txt does not exist.......fetching now......please wait"
echo ""
wget http://fuzzdb.googlecode.com/svn/trunk/wordlists-misc/wordlist-common-snmp-community-strings.txt
echo ""
echo "please run again....."
fi

 

You should see:

Part 1 – why i quit smoking (yea, I can say that now)

Part 2 – my first e-cig kit order and its problems

Part 3 – the upgrade kit that has been a dream

Part 4 – the flavor quest

So today I placed an order for some needed parts from my favorite e-cig supplier modern vapor for the lux kit.  If you want to order that kit, see the part 3 link above.  It has a link to it much like the parts I ordered below (and by the way, I do not work for and am not affiliated with modern vapor in any way.  I am just a happy customer showing huge progress in health since switching to e-cigs).

My most recent order consisted of:

Continue reading »

 
#!/bin/bash
 
# By Ed Wiget
# This fixes dropbox sync issues on linux
 
# get a list of files executable now
find ~/Dropbox -type f -perm -u+x > /tmp/dropbox_files-`date +%Y%m%d`
 
# fix the permissions
sudo chown -R $USER ~/Dropbox
sudo chmod -R u+rw ~/Dropbox
sudo chown -R $USER ~/.dropbox
sudo chmod -R u+rw ~/.dropbox
 
# remove any conflicting files from the file list above step 1
grep -v -e "conflicted copy" -e "Case Conflict" /tmp/dropbox_files-`date +%Y%m%d` > /tmp/dropbox_files-`date +%Y%m%d`.txt
# set the executable permissions back
for files in `echo /tmp/dropbox_files-\`date +%Y%m%d\`.txt` ; do chmod u+x "${files}" ; done
 
# remove any files that are in conflict
find ~/Dropbox -type f -name \*"conflicted copy"\* -exec rm -f "{}" \;
find ~/Dropbox -type f -name \*"Case Conflict"\* -exec rm -f "{}" \;
 
# remove temp files
rm -f /tmp/dropbox_files-`date +%Y%m%d`
rm -f /tmp/dropbox_files-`date +%Y%m%d`.txt
Sometimes you will run into an issue where you have multiple computers that mysteriously stop syncing with dropbox. What I have found is it is almost always caused by 1 of 2 things……file permissions, conflicts. I have 8 devices syncing to my dropbox, and every single one of them are linux except for one. It seems as though anytime I use my sole Windows computer to add something to dropbox….the others mess up. I suspect an issue with linux file permissions and windows ntfs drives.

Anyways, this script will fix the problems. Make sure you adjust the path if your linux install does not have dropbox at ~/Dropbox.

 

 

I usually don’t disable apache, php, nginx headers because to me that is just security through obscurity.

My thoughts are this…..

  1. if someone doesn’t know what version of software you are running and they decide to hack your domain or server, they will simply throw every public exploit at it that exists for said product or even simply “fingerprint” it for the correct version
  2. It makes my life easier because I can also query for those headers if for some reason I don’t remember the version of software (which saves me from logging in to the server or using other methods that might take longer – efficiency is key!)
  3. skiddies are going to throw everything at it anyways

On the flipside…..

Continue reading »

 

For some reason, websecurify does not work in fluxbox…..well, it works just fine, you just can’t see the results due to a theme issue.  It definately appears related to the chrome theme used in websecurify because changing qt theme and gtk theme has no effect.  Also changing the fluxbox theme does not work and my regular chrome browser works fine.

Images below…

© ÈÐ Wïgê† Ðð† ñåmê Suffusion theme by Sayontan Sinha