quinta-feira, 1 de outubro de 2009

SpeedTouch - modem vulnerability

Something I just found out:

How to access to a SpeedTouch Administration Web Page!


You need to have access to one speedtouch web administration page.
Once you access it through you web browser just exit or, don't exit at all, without logging out. that is the important part.
After that you have to access the network where the other speedtouch is in, and which you want to access and don't know the password. Just type de web adminstration url and you're in.


Some notes:

this is probably because of a cookie validation that is not being done
just tested on 2 different speedtouch
used the url: http://speedtouch.lan for this

quarta-feira, 1 de julho de 2009

Poledit - Screen Saver template

This is a template created to use with poledit.exe which allows one to define in a policy the screen saver options.

- activating it
- prompt for password
- idle time

The idle time is pre-defined as 5 min., to change just edit the template, which is pretty much self explanatory.
The file can be found here

Based on MS KB 195655

sexta-feira, 26 de junho de 2009

VMWare 2.0.x web interface - remote console access

Problem:
Unable to connect to the MKS: Cannot connect to host localhost: Connection refused.


In order to use the the console provided in VMWare's web interface using an ssh tunnel, one needs to forward both port 8333 (web interface) and 902 (authentication daemon), assuming your using the default ports. Also note that you'll need to forward them as root, since they are privileged ports.
Example:

~# ssh _host_on_same_network_ -L 8333:vmware_host:8333 -L902:vmware_host:902


Then fire up your browser and access https://localhost:8333 and now you can freely use the console.


note. more about this

sexta-feira, 22 de maio de 2009

Nagios - Check Disk Mounted Disks

This was a development from a script found on unixdaemon. The purpose of this script is to validate the the partitions that are mounted and the partitions that are found on /etc/fstab. With this check one can prevent problems like, on reboot the partitions will not be mounted automatically, because they are not on fstab. Or validate if every partition found in fstab is currently mounted.
The original script from unixdaemon does not check partitions defined using Label or UUID, or even nfs. This was the "new" feature that i add.
Any comments or improvements are welcome.
ps. need to find some place to host the file :)
ps2. found it !

check_mounted_disks.pl