Recently Written
Categories
- Funny
- IT Tipz & Trix
- Misc
- News
- pok3rz
- Rants
- Reviews
- Sighs
- Uncategorized
Archives
Blogroll
- Inferno - International Man Of Mystery. And a very good friend.
- Merlijn - One of my best friends in Holland
Admin
- Log in
- Wordpress
- XHTML

Kali Blue Screen & No Icons

Posted by bb on Thursday 5th of January 2017 at 10:10 am.
Filed Under IT Tipz & Trix

I see that a few people have encountered the Kali Blue Screen, no icons and constantly getting kicked back to the log in screen after doing an update. Some people seem to think it is related to virtualised instances (VMware, VirtualBox etc).

Anyhoo – the following worked for me to cure the issue

Boot to the login screen

CTRL-ALT F2 to go to the console

Login as normal

at the prompt enter dpkg –configure -a (double hyphen before the configure)

reboot

Hope it helps someone else out and Happy New Year everyone!

(35 votes, average: 4.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | 1 Comment on Kali Blue Screen & No Icons

Recover media files from HTC HSMBackup

Posted by bb on Thursday 9th of October 2014 at 2:42 pm.
Filed Under IT Tipz & Trix

Due to my M7 going in for repair, I have temporarily got a Samsung as a loan phone. With an upcoming weekend away I wanted to grab my music and stick it on the Samsung so I could listen to it in the car on the long drive.

However, as most things in bb_land, this is not just a case of using the HTC Sync Manager to Restore -> New Phone where it extracts the files into their native format and copies them over. In fact you can’t do it at all.

A quick bit of bumbling around and I find the files stores in AppData/Local/HTC MediaHub/HSM Backup/ in folders helpfully named things like BR_534833355459393033373038 and 35F67E512C69CF39ECF43E90A40F2BDE5A510F2C with useful filenames such as 0C52E903FFEC6CDFBB37A3113D99476A0BB46891. Awesome.

Some quick peeking with a Hex Editor reveals these to be the files I need, just with no extension and a garbled filename. Only wanting to grab the MP3s and not any videos etc I banged up this quick script to be run from the HSM Backup folder

<?php

$di = new RecursiveDirectoryIterator('C:\Test Directory');
foreach (new RecursiveIteratorIterator($di) as $filename => $file) {
//read first 3 bytes of file
echo "Attempting File : $file \n"; //Show file we are attempting
if (substr($file,-1) <> ".") { //Eliminate whining when attempting . and .. in the dir structure
$newhandle = fopen($file, "r");
echo "Opened File : $file \n"; //Show we have a handle on the file
$contents = fread($newhandle, 3);
echo "Read File : $file \n"; //Show we have read from the file
//is it ID3
if ($contents == "ID3") {
//Yes -> copy to place and rename to MP3
$newfile=$file.".MP3";
copy ($file, $newfile);
}
fclose($newhandle);
}
}
?>

Running the script copies any files with ID3 as the first 3 bytes of the file to a new file with the same name but an MP3 extension (thus preserving the original for when the M7 comes back from repair to be resynced. After that a simple Windows Search for *.MP3 showed me all my files that I just cut and pasted into the Music folder on the Samsung.

Script is easy to change for different formats (i.e if you are looking for a video just change the number of bytes read and the compare constant)

Hope it helps someone recover their music if they’ve swapped phones and this is the only backup they have.

(4 votes, average: 3.50 out of 5)

About this Post
Permalink | Trackback | | Print This Article | 27 Comments on Recover media files from HTC HSMBackup

RPC_S_Server_Unavailable error (0x6ba) and Microsoft Exchange is unavailable.

Posted by bb on Tuesday 29th of April 2014 at 10:48 am.
Filed Under IT Tipz & Trix, Sighs

This post probably falls more under the doh! category than anything else but it might still be useful if anyone else suffers from the same apparent brain failure as I did 🙂 When setting up a remote user to use Outlook and was struggling massively to get it to connect. Every time Outlook would give me the following error stating that Outlook must be online or connected to complete this action.
Exchange Unavailable
Could something have changed that I was unaware of? I tried testing it with the Exchange Connectivity Tester (which is a brilliant troubleshooting tool btw) and that failed too with the horrible “The RPC_S_SERVER_UNAVAILABLE error (0x6ba) was thrown by the RPC Runtime process” error.

Remote connectivity results – click for full version

Google advice on the 16000+ results for that term ranged from disable IPv6 to registry edits on the server. But since it was only this one user that had issues, I didn’t think we needed to go that far. I could happily connect to ports 6001,6002 and 6004 and every other remote user was having no issues. Then it occurred to me, like a 100 year old lightbulb slowly, so very slowly, dispelling the dark fugue of confusion – this looks like a DNS error. Why is it unable to ping the server? What is it trying to ping? OWA works find for the user so it’s not an account issue. The problem – I had entered the external server name in the Outlook Account Settings (:facepalm:).

The proxy server you enter for RPC over HTTPS for the Exchange account details here :

Account Settings

is NOT the same as the address you enter for your server here :

Outlook Config – click to enlarge

Once I changed the Outlook Config to point to exchange.contoso.local – BOOM! Problem solved. And a quite shocking amount of “OMFG I wasted so much time on this, what a numpty I am” 🙂

(3 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | Leave a Comment

The Case of Metasploit and the Facebook Cookies.

Posted by bb on Tuesday 1st of April 2014 at 12:34 pm.
Filed Under IT Tipz & Trix

Or How I Started My Metasploit Scripting Journey

I have been using MetaSploit for a while now and have slowly got comfortable enough with it to start tinkering under the hood so to speak. Most of this has been driven by a desire to get the most out of the trial version of Cobalt Strike which is hands down one of the most awesome pieces of software I have played with in a while.

Whilst Cobalt Strike’s built in browser pivoting is awesome, I believe it is most useful on a reliably exploited box, rather than one that might only connect occasionally like a laptop. There are many wonderful post modules already supplied with the Metasploit framework for gathering credentials, but I couldn’t find an out of the box solution for grabbing Windows 8 cookies (enum_ie for example won’t work on a Win8 box) so I thought I would go about writing my own.

After all – how hard can it be!!

A little research shows that Windows 8 cookies are stored in %USERPROFILE%\AppData\Local\Microsoft\Windows\InetCookies and %USERPROFILE%\AppData\Local\Microsoft\Windows\InetCookies\Low in TXT files.

With my test target exploited I thought the best approach would be to search those folders and download each TXT file so we could have a complete copy of all of the IE Cookies for the logged on user.

What follows is many different approaches, one ultimately successful and IMHO a good demonstration of thinking outside the box to solve issues when you are on your own! If anyone knows of a good place for discussing newbie level Metasploit issues and being guided through the process – please let me know. Always keen to learn!

(3 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | 2 Comments on The Case of Metasploit and the Facebook Cookies.

Geoffrey Clifton-Brown MP

Posted by bb on Friday 22nd of March 2013 at 9:23 am.
Filed Under Rants

Geoffrey Clifton-Brown is the local MP where a friend of mine lives. My friend has being trying to get some straight, simple answers on The Communications Data Bill since December 2012.

If there is any wonder why people get disenfranchised by attempting to engage their local politicians on subjects, only to be fobbed off by bland, empty rhetoric and then ignored when daring to question those elected to represent them, then this is a perfect example.

In December 2012, my friend wrote to Geoffrey Clifton-Brown asking for his position on the draft Communications Data Bill and the reasons for that position using the very popular WriteToThem website. In due course he received a reply from Mr Clifton-Brown which was, shall we say, less than satisfactory. Not only did the reply instantly fall back on the old ‘we must stop the pedophiles and terrorists’ it contained a standard, boiler plate bunch of statistics indicating how vital it was that we get this new law rushed through as soon as possible.

My friend took the time to reply asking for some sources on the statistics quoted by Mr Clifton-Brown as he had located the same statistics on other websites (including one about Indian policing!) and wondered if Mr Clifton-Brown had done any checking on these statistics. As well all know, there are lies, damned lies and statistics.

Several further emails, sent directly to Mr Clifton-Brown went unanswered. Finally at the beginning of February 2013 after spotting an article quoting the head of MI5 stating that the statistics quoted by Mr Clifton-Brown in his initial reply, rested on ‘some pretty heroic assumptions’ my friend attempted to contact him again via the WriteToThem website.

My friend received a reply from an intern stating that “The information you require in response to your comments is detailed in nature and Mr Clifton-Brown MP will require a few more days to reply.”. Awesome! Hopefully he will actually get an actual response. An actual response was forthcoming, eventually.

In this reply Mr Clifton-Brown appears to genuinely believe that his opinion of the bill is enough to justify his support for it. Let’s not bother with trifling details such as doing your damn job which is to represent the views of those who elected you. Being an MP sometimes means that you have to go against your personal beliefs rather than use the position as a vehicle to further your personal agenda. Apparently being an MP also means you get to duck awkward issues like where you got these statistics from, what research you have done about a bill, checking to see what your constituents feel about issues. Simples.

Committee chair Bernard Jenkin (Public Administration Committee) has recently come out and stated that,

“Good statistics underpin good policy and proper scrutiny of it. Public confidence in the information produced by government is vitally important to an effective democracy.
Without it there can be no confidence in the transparency and accountability of government, which in turn can only fuel public apathy and disengagement from the democratic process.”

Shame Mr Clifton-Brown appears to feel differently.

Undeterred, my friend, who at this time is showing the patience of a saint, again replied to Mr Clifton-Brown via WriteToThem. Since Mr Clifton-Brown was struggling with reading comprehension, he concisely summarised his questions as follows :

1. Could you please provide justification and sources for the statistics you are using to justify your support of the proposed bill?

2. Could you please provide details of what polling and research you have done a) within your constituency and b) to verify the statistics used, and results of that research (if any), to justify your support for this bill

3. Finally, could you please provide details of what preventative measures will be put in place to prevent ‘scope creep’ of the bill.

As of the date I make this post – he has yet to receive a reply. Quelle suprise

How the hell does government expect to engage people when the duck even slightly complicated issues? Voter turnout is at an all time low. People have little or no respect for politicians. And yet they wonder why? I feel terribly sorry for Mr Clifton-Brown who, on a comfy £65k+ tax payer funded salary, has to take time out of his day to instruct an intern to justify the data he mindlessly spews at his constituents as justification for the way he votes in Parliament. This is your job bozo! You get elected to represent the views of your constituents. This is not rocket science. They speak, you listen! It should not take months and repeated attempts to contact you for you to actually be able to justify your position. Having looked at all of the correspondence between you two, you have ducked, squirmed and downright avoided answering the questions posed to you. Grow a spine you feckless cunswup and answer the damn questions.

I know it sounds odd but the man who pays your wages deserves to be able to ask you what you are doing and why you are doing it. And if your answer is lacking in detail, cites, sources or anything concrete, do not be surprised when you are asked for more information. And when you are – provide it. Don’t just avoid the issue. In other words DO YOUR FUCKING JOB.

(3 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | Leave a Comment

Extract embedded Flash (SWF) files from a PowerPoint presentation

Posted by bb on Tuesday 20th of March 2012 at 8:44 am.
Filed Under IT Tipz & Trix

I was recently asked by my boss if I could dump all of the Adobe Flash videos out of our corporate PowerPoint presentation so that we can convert them to .mp4/.mov so we can put some of the animations on iPhone so our reps can show them to the customer.

It really is not as easy as it looks!

I googled a fair few sites looking for answers and there really isn’t much out there that will do this auto-magically for you. So I rolled my own 🙂

The procedure is very simple.

1. Open PowerPoint file and ensure that it is saved as .pptx (the new XML Office format)
2. Rename the .pptx as a .zip file (we all know that the new format is already zipped up right?)
3. Open the .zip file in winrar/winzip or your preferred utility
4. Navigate to the .\ppt\activeX directory in the archive
5. Extract all the .bin files to another directory
6. Run the php script below on it

All the script does is scan the files in the current directoy to see if they are .BIN files (which is where PowerPoint stores SWF files, as well as other embedded file types), search through that file for the beginning of the SWF file header (denoted by FWS), read the file length as defined in the header and save that section out to a new file with a .swf file extension.

Simples really 🙂

As always, hope it helps someone. Script follows :

(3 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | 19 Comments on Extract embedded Flash (SWF) files from a PowerPoint presentation

What to look for in an IT support company

Posted by bb on Tuesday 8th of February 2011 at 5:01 pm.
Filed Under IT Tipz & Trix

A lot of people have recently asked me how to choose the right company for their IT support. Below are my guidelines on what to look for.

1. Check how many engineers they have on staff – not subcontracted.
2. If they do subcontract – ask why.
3. Visit their workshop – it is your lifeblood they are looking after. Make sure they have the tools to deal with it.
4. Get references – and make sure you have the name of the technician they worked with as good technicians will often leave a bad company.
5. Follow up the references – ask for examples of problems that they have solved for you. See if you can speak to the technician in the reference.
6. Ensure that you meet the technicians – after all, you will be dealing with them, not the guy who sold it to you.
7. Make sure that IT is their primary focus – you don’t ask your mechanic to fix a filling / perform heart surgery.

Most importantly you should remember that if your IT fails, your business will suffer. Don’t just accept at face value what a salesperson tells you a company can do as sales people are generally not technical people. Sales people are commission focussed – technical people are solution focussed. No one (that I know of) pays their technicians on a per fix basis. Sales people are commissioned on a per contract basis (generally).

Ultimately you need to be sure that the company you choose values your business as much as you value your IT. That is why it is important to pick a company that has made an investment in staff, workshop and spares and not just in a flashy advertising campaign/website.

Personally speaking, if the company who approaches me for IT support doesn’t have 100% focus on IT solutions, I’m not interested. My lifeblood should be their lifeblood – my data is vital to me and it should be to them. I don’t want anybody looking after my business / data who isn’t 100% focussed on that.

(1 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | Leave a Comment

Jerky Mouse in Windows 2008 R2 under ESXi4.1

Posted by bb on Tuesday 5th of October 2010 at 12:31 pm.
Filed Under IT Tipz & Trix

The laggy mouse issue seems quite common and after a bit of Googling I have found a solution that worked perfectly, at least for me.

It’s a simple video card driver upgrade!

Scroll down to Display Adapters and expand the selection so that you can see the currently installed adapter. Right Click and go to Update Driver Software.

Select ‘Broswe my computer for driver software’ and navigate to C:\Program Files\Common Files\VMWare\Drivers\wddm_video folder

Update the driver and reboot!

Everything is now fixed 🙂

Hopefully this will help anyone else who is having poor mouse performance in Windows 2008 R2 under ESXi4.1 – it is no fun using vSphere to work on a VM with a horrible, jerky, jumpy, laggy mouse!

(3 votes, average: 5.00 out of 5)

About this Post
Permalink | Trackback | | Print This Article | 1 Comment on Jerky Mouse in Windows 2008 R2 under ESXi4.1

Moving shares between SBS 2003 & SBS 2008

Posted by bb on Tuesday 15th of June 2010 at 10:36 am.
Filed Under IT Tipz & Trix

Still migrating the data over for my client, I ran into the usual problem of moving data from one drive to another preserving both NTFS ACLs and share details.

The easiest way round this, that I have found, is as follows

Issue the following commands from the command prompt on the destination server to copy all of the NTFS ACLs and data over from the source server to the destination server (in my instance I was copying their data drive, which was D) so my commands looked like this

net use z: \\source_server\d$ robocopy z:\ d:\ /E /COPYALL

However, this does not preserve the share info. Since mine was a fresh install, I just needed a complete copy of the drive and share permissions I just exported the following registry info from source server :
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares]

Re-importing that on Destination server had everything up and running in copy_time+2 mins 🙂

Happy days

(No Ratings Yet)

About this Post
Permalink | Trackback | | Print This Article | 1 Comment on Moving shares between SBS 2003 & SBS 2008

Moving lists between SharePoint sites

Posted by bb on Tuesday 15th of June 2010 at 10:24 am.
Filed Under IT Tipz & Trix

Once I’d overcome the issues with user permissions outlined here I noticed that the companyweb was different to oldcompanyweb.

A lot of the metadata was missing, including version history. Turns out that this is quite the problem just using stsadm from the command line.

However, I found a great tool called SharePoint Content Deployment Wizard.

In my case, I just deleted the lists that didn’t have the data required and re-imported them using this tool though you could use it just as well to skip the whole stsadm -o export/import proceedure. Though please make sure which account you are logged in as else you may run into the problems outlined in my previous post.

Again – hope it helps!

(No Ratings Yet)

About this Post
Permalink | Trackback | | Print This Article | Leave a Comment

keep looking »

Recently Written

Categories

Archives

Blogroll

Admin