• one packet auditing

    Not all packets are equal. If you send a single UDP packet to port 623 that contains an “Get Channel Authentication Capabilities” (see secion 22.13 of the IPMI v2 spec), you’ll get back a packet that has some interesting features. You can get this by parsing the output of “ipmitool -v -v -H 10.0.0.1 -U…

  • one ring to bind them, one line to find them

    I guess if you import enough libraries just about anything can be made into a one liner… if you have imported BeautifulSoup, re, requests, and sys, in python3 you can simply do: print(re.sub(r’^.*imgurl=([^&]+)&.*$’, r’\1′, str(BeautifulSoup(requests.get("http://images.google.com/search?num=50&hl=en&safe=off&site=&tbm=isch&source=hp&biw=1744&bih=1279&q=%s&oq=" % sys.argv[1]).text).find(href=re.compile("imgurl"))))) To find the first hit on a google image search with argv[1]. Google will probably change their URL…

  • mounting jffs2

    After mounting a bunch of filesystems I thought I’d just whip up a little shell script to help me out when working with jffs2 images, mtd, and linux (only tested on centos 6.) I won’t go over how to get kernel support and all that crap – there are many guides, and while many won’t…

  • avctpasswd

    Since I didn’t find it anywhere else… Avocent, who makes a heck of a lot of BMCs, and at times (like with Dell’s iDRAC, at least version 6) keeps encrypted passwords in (well, quite possible/probable OEM dependent) “/flash/data0/etc/avctpasswd” (don’t be fooled by the /etc/passwd file) using SHA1 hashed passwords converted into Base64. I surmise this…

  • … passwords in shell scripts….

    Looking at a file (manuf_sign_cert.sh): # This script is run on every iDRAC at manufacturing time. # to create a certificate with a derived CN using the # service tag so it can be authenticated by a provisioning server # for zero touch deployment. # # Files used: # 1) d_h_ssl_manuf.cnf # 2) ROOTCAPK.PEM (loaded…

  • when you’ve really hosed yourself

    Or, perhaps, working with a really minimal system… saw two posts that were pretty handy – basically how to reconstruct binaries with the shell alone (no cheats like mv or an editor or anything…); reconstruction by force: http://fakeguido.blogspot.com/2010/08/rescuing-hosed-system-using-only-bash.html And: http://www.eusebeia.dyndns.org/bashcp Some nice little functions here building on the above: http://www.h-i-r.net/2009/08/cratered-your-linux-box-here-are-some.html

September 2025
M T W T F S S
1234567
891011121314
15161718192021
22232425262728
2930