Tuesday, July 8, 2014
How to get a quick list from AD with samid and company name.
dsquery user -limit 1000 | dsget user -samid -company
I doubt anyone else would ever need this info.
Tuesday, February 18, 2014
How to quickly sniff a few packets with a Cisco router.
There was a large amount of traffic on a router and I knew something was not right.
int g 0/0
ip accounting output-packets
#sh ip accounting
Source Destination Packets Bytes
10.201.195.4 71.225.81.54 400 187200
10.194.41.94 63.251.34.130 488 28733
10.194.41.36 108.168.214.12 1140 163510862
10.136.114.135 78.108.118.250 45 2100
10.194.41.57 174.62.230.118 40 2411
10.194.41.36 65.112.54.26 5 178235
10.194.41.78 63.251.34.145 479 27517
int g 0/0
ip accounting output-packets
#sh ip accounting
Source Destination Packets Bytes
10.201.195.4 71.225.81.54 400 187200
10.194.41.94 63.251.34.130 488 28733
10.194.41.36 108.168.214.12 1140 163510862
10.136.114.135 78.108.118.250 45 2100
10.194.41.57 174.62.230.118 40 2411
10.194.41.36 65.112.54.26 5 178235
10.194.41.78 63.251.34.145 479 27517
We need more detail on .36
access-list 105 permit tcp host 10.194.41.36 any
debug ip packet 105
terminal monitor (If you are doing this remotely.)
Now you should get more info like port numbers.
no debug all
This was a DOS attack. Now it has been blocked.
Wednesday, February 5, 2014
Please do not reply to this message; it was sent from an unmonitored email address.
Why do businesses send "do not reply" emails? This is so annoying. My Twitter account was hacked. It sure would be nice if I could let them know I did not change the email address.
Hi, jamsignal
You recently changed the email address associated with your Twitter account (@jamsignal).
To confirm your new contact email, please follow the link in the confirmation message sent to that address.
To confirm your new contact email, please follow the link in the confirmation message sent to that address.
If you did not request this change and believe your Twitter account has been compromised, contact Twitter support by clicking this link:https://support.twitter.com/forms/hacked
The Twitter Team
Tuesday, January 14, 2014
How to recover Ultravnc server password
HKLM\software\orl\winvnc3\default\password = 7fb09a95f8200ecb
Copy the encrypted password to a decoder like this one.
http://tools88.com/safe/vnc.php
Now I have the password and it works.
Friday, October 18, 2013
Quick script to backup Fortinet hardware on Windows.
bkup.bat
echo execute backup config ftp /fortiwifi-1 ftp.example.com user pass >bkup.tmp
u:\putty 10.111.1.1 -l admin -pw admin-pass -m bkup.tmp
Repeat for next unit...
You need Putty and an ftp server. Now I type "bkup" and six devices are backed up in 30 seconds. I will make this a scheduled task later.
Thursday, August 1, 2013
Explorer crashes with BEX64 when I create a shortcut in Citrix.
I need to create a shortcut to the local client C drive while inside Citrix. Every attempt results in this message.
This may be a bug in Citrix but here is my workaround.
J:\>echo explorer \\client\c$\Downloads > downloads.bat
Now I just double click on downloads.bat and it opens the client folder like a shortcut.
Wednesday, July 24, 2013
I tracked down a stolen laptop with LogMeIn Hamachi.
We install Hamachi and VNC on all of our laptops for remote support. A fairly new laptop was recently stolen. I started watching Hamachi and the laptop was online the next day. I don't know of a way to get the real IP address from Hamachi so I used VNC to watch the screen. The user just happened to be filling out a job application online so I saw the name, address, phone number... We passed the info along to the local PD, the laptop was returned and there was an arrest. Hamachi and VNC are great tools for business.
Note for next time:
I will use a screen recording app to make a video of the remote screen.
Note for next time:
I will use a screen recording app to make a video of the remote screen.
Subscribe to:
Posts (Atom)
