Tuesday, July 8, 2014

How to get a quick list from AD with samid and company name.


dsquery user -limit 1000 | dsget user -samid -company

I doubt anyone else would ever need this info.

Tuesday, February 18, 2014

How to quickly sniff a few packets with a Cisco router.

There was a large amount of traffic on a router and I knew something was not right.

int g 0/0
ip accounting output-packets

#sh ip accounting
   Source           Destination              Packets               Bytes
 10.201.195.4    71.225.81.54                   400              187200
 10.194.41.94    63.251.34.130                  488               28733
 10.194.41.36    108.168.214.12                1140              163510862
 10.136.114.135  78.108.118.250                  45                2100
 10.194.41.57    174.62.230.118                  40                2411
 10.194.41.36    65.112.54.26                     5                178235
 10.194.41.78    63.251.34.145                  479               27517

We need more detail on .36

access-list 105 permit tcp host 10.194.41.36 any

debug ip packet 105

terminal monitor (If you are doing this remotely.)

Now you should get more info like port numbers.

no debug all

This was a DOS attack. Now it has been blocked.

Wednesday, February 5, 2014

Please do not reply to this message; it was sent from an unmonitored email address.

Why do businesses send "do not reply" emails? This is so annoying. My Twitter account was hacked. It sure would be nice if I could let them know I did not change the email address.



Hi, jamsignal

You recently changed the email address associated with your Twitter account (@jamsignal).
To confirm your new contact email, please follow the link in the confirmation message sent to that address.
If you did not request this change and believe your Twitter account has been compromised, contact Twitter support by clicking this link:https://support.twitter.com/forms/hacked
The Twitter Team

Tuesday, January 14, 2014

How to recover Ultravnc server password



HKLM\software\orl\winvnc3\default\password = 7fb09a95f8200ecb

Copy the encrypted password to a decoder like this one.

http://tools88.com/safe/vnc.php

Now I have the password and it works.

Friday, October 18, 2013

Quick script to backup Fortinet hardware on Windows.


bkup.bat

echo execute backup config ftp /fortiwifi-1 ftp.example.com  user pass >bkup.tmp

u:\putty 10.111.1.1 -l admin -pw admin-pass -m bkup.tmp

Repeat for next unit...

You need Putty and an ftp server. Now I type "bkup" and six devices are backed up in 30 seconds. I will make this a scheduled task later.

Thursday, August 1, 2013

Explorer crashes with BEX64 when I create a shortcut in Citrix.

I need to create a shortcut to the local client C drive while inside Citrix. Every attempt results in this message.


This may be a bug in Citrix but here is my workaround.

J:\>echo explorer \\client\c$\Downloads > downloads.bat

Now I just double click on downloads.bat and it opens the client folder like a shortcut.

Wednesday, July 24, 2013

I tracked down a stolen laptop with LogMeIn Hamachi.

We install Hamachi and VNC on all of our laptops for remote support. A fairly new laptop was recently stolen. I started watching Hamachi and the laptop was online the next day. I don't know of a way to get the real IP address from Hamachi so I used VNC to watch the screen. The user just happened to be filling out a job application online so I saw the name, address, phone number... We passed the info along to the local PD, the laptop was returned and there was an arrest. Hamachi and VNC are great tools for business.

Note for next time:

I will use a screen recording app to make a video of the remote screen.