Tuesday, 23 October 2012

Python



  1. Mac OS X
  2. Linux 
python - V

----------------------------------------------------------

     3. Windows binary {x86, x64]} .msi

NIX tarball [tgz, tar.bz2]
traditional unix word - install manually (compressed archive files)

-----------------------------------------------------------

Install everything for windows
Python
  • Register Extension
  • TCL/Tk
  • Documentation
  • Test suite
------------------------------------------------------------
RPM (redhat, fedora)

.deb (ubuntu) - APT (apt-get)

yum (redhat GUI installation package) 

source (configure, make, install)
------------------------------------------------------------

.py

Monday, 22 October 2012

Disabling SNX Service (Outbound link of Security Gateway)


Disabling SNX Problem.

When you unchecked SSL Extender and SecureClient Mobile under VPN clients tab (Gateway Properties), the SNX service running on http/https (outbound link of FW) would be disabled as well. 

thanks



Friday, 5 October 2012

Login to CP FW with Your Public Key & Changing CP Root Password


After you login with Public key, there was a problem to switch to root access with su – command. 
When you type and change root password with...
#passwd

Although it says root password has changed, it does not change (like a bug).

To solve this issue;
After you give a password to root with the command below 
#/usr/bin/passwd root 

then,
changing mode with '#chmod 4755 /bin/su' is enough to resolve the problem. Now, you can get access from your user account (logged in with the public key) to root access. 

In my understanding, there is a permission issue on the directory placed above which does not allow us to change root password (Although it never says so). 

adios.

Thursday, 27 September 2012

fw unloadlocal in safe@office!


There is no such a thing, but there is a useful command which can save the day too;

fw delete rule ?

<indexed rules>
1-15 // Depending on size of the rule table.

you may easily delete the last rule which is an implicit deny...

Friday, 21 September 2012

Erasing CMI Temp Files


Case: SmartDashboard could not be opened, giving the Connection and GUI Client Error. When the migrate export file used in sandbox, the problem did not persist. To resolve the issue; the CMI Temp files deleted and forced to be re-created on startup.

1. cpstop
2.  cd $FWDIR/conf
 mv applications.C applications.C.old
  mv applications.C.backup applications.C.backup.old
  mv CPMILinksMgr.db CPMILinksMgr.db.old
  mv CPMILinksMgr.db.private CPMILinksMgr.db.private.old

3. cpstart

Monday, 17 September 2012

Profilo, TeamViewer ve Dijital Reklam Panoları



Müthiş Bilgi Güvenliği Yönetimi..










TeamViewer Username ve Password Dijital reklam panolarında gösteriliyordu.. Sonrada hack'landık diyorlar..
elimizle bilgileri sunuyoruz, biri bizi hack'lamıyor.. Şaka gibi..

Monday, 10 September 2012

Attacking the Domain


Windows is the first domino..

How do you crack the tough nuts?
 - Unguessable, uncrackable passwords
 - No known exploits
 - Not allowed to fuzz or write exploits
 - Modern OS protections
 - Modern networking protocols
 - Very Critical Production Environments.

Attacking the domain.

Think Fi'nesse
- the skillful handling of a situation; adroit maneuvering.



Password Guessing

Tools that excel at this;
- THC-Hydra 
freeworld.thc.org/thc-hydra/
- enum - darkridge.com/~jpr5/code.html