Posts

Deauthentication Attack using Kali Linux

  This article will show you how to disconnect devices from a network with a deauth attack using Kali Linux and the aircrack-ng suite. NOTE: THIS IS FOR EDUCATIONAL PURPOSES ONLY. In short a deauth attach makes your wifi card in monitor mode spoof a MAC address of something already connected to the network, the router then says "Hey, there are two devices on here with the same MAC address" it then sends a command to all connected devices to re authenticate, kicking them off the network forcing them to re join. Obviously if you are continuing to run the attack this will happen over and over again meaning devices wont be able to connect to the wifi. The above is a simple explanation, if you want more technical detail.....Google it. Before we start my wifi adapter is wlan0 so you will need to adjust the commands if your adapter is a different name. 1. Down the wifi adapter sudo ifconfig wlan0 down 2. Kill airmon-ng if it's running sudo airmon-ng check kill 3. Put adapter in ...

Testing a windows user account password

  You may need to test a Windows user account when troubleshooting an issue but the account in questions may not have permissions to say remote desktop etc. To test the account, open a CMD Window and run the following: runas /u:domain.local\user1 notepad.exe You will then be prompted to enter a password. If the password is incorrect you will get the following: c:\>runas /u:domain.local\user1 notepad.exe Enter the password for domain.local\user1: Attempting to start notepad.exe as user "domain.local\user1" ... RUNAS ERROR: Unable to run - notepad.exe 1326: The user name or password is incorrect. If the password was correct Windows Notepad will open.

Check if multiple nics are set to register with DNS

  This checks all the nics on a server to see if multiple nics have the "Register this in DNS" which if multiple are selected it can cause connectivity issues. 1. Export a list of the servers you wish to check and save it as a txt file in the same location as the script called "computers.txt" as below: server01 server02 server03 server04 2. Copy and paste the below script in to Notepad and save it as a ps1 file: cls $servers = Get-Content computers.txt foreach($server in $servers) { $nics = Get-WmiObject Win32_NetworkAdapterConfiguration -ComputerName $server -ErrorAction Inquire | Where{$_.IPEnabled -eq "TRUE"} foreach($nic in $nics) { Write-Host $server "-" $nic.IPAddress "-" $nic.FullDNSRegistrationEnabled } } 3. Now run the script. Example output: server01 - 10.10.10.10 - True server01 - 192.168.0.1 - False server02 - 10.10.10.20 - True server03 - 10.16.10.30 - True

Fortigate cheat sheet and commands

  Command Cheat sheet Cheet sheet created by By Frederic Kasmirczak ( http://www.frederick.lu ), I just simply converted it to a wiki for copy and paste easiness. Main Command Structure Command Description show Display changes to the default configuration get List the configuration of the current object or table edit Create or edit a table in the current object edit 0 will use the next ID available in a sequence number set Set a filed / Reset a field to the default value end Save the current changes abort Exit commands without saving the fields delete Remove a table from the current object Basic Command Description get sys status Show status summary get sys perf stat Show Fortigate ressources summary execute ping Ping something execute shutdown Shutdown the device/reboot with reboot get sys arp Show the current arp table execute date/time Show the current date / time delete Remove a table from the current object Interface Command Description show sys int Show interfaces status Sh s...

Reset forgotten Windows Administrator password

Image
  1. Boot the server from a Windows installer ISO 2. Select "Repair" and "Troubleshooting" then click to open a command prompt 3. At the command prompt type: move d:\windows\system32\utilman.exe d:\windows\system32\utilman.exe.bak copy d:\windows\system32\cmd.exe d:\windows\system32\utilman.exe 4. Disconnect the ISO media and Reboot the server 5. When at the login screen click the below icon: 6. This will open a command prompt, at the command prompt type: net user <username> <password> 7. Type "exit" to close the command prompt

Netapp swapping failed disk

  Finding which node has the failed disk Run the below command to find the failed disk, which node and owner it belongs to: disk show -container-type broken Gathering and submitting logs Depending on who your support is with you may need to gather and submit logs with all the info required for them to be able to issue the disk, to do this run the commands below: run -node netapp01 -command sysconfig -A Copy and paste the results in to a txt file and call it something like sysconfig-a-results.txt Now run the below command: system controller fru show-manufacturing-info Copy and paste the results in to a txt file and call it something like sysconfig-m-results.txt You may be asked for these by NetApp or whoever your support is with before they will process a disk replacement. Replacing the disk Run the following command to list the disk ID and it's owner: storage disk show –container-type broken Remove the failed disk and wait for 1 minute then insert the new replacement disk. Run the ...