Archive for June, 2009

Windows: Keyboard Kung Fu

Here’s a few [lesser] known Windows shortcuts: (feel free to share more in the comments!)

WinKey + E : Windows Explorer

WinKey + R : Run

WinKey + F : Find (Windows Search)

WinKey + L : Lock computer

WinKey + Pause/Break : Computer properties

CTRL + LEFT SHIFT + ESC : Task Manager

CTRL + ALT + END : Shows Shutdown menu *on remote machine*

Tags: ,

Trend Officescan – Proof of concept

In April a Trend vulnerability was discovered.  The Trend real time scan service can be exploited by running a scan on a long directory name.  It’s surprising that this vulnerability was discovered and yet is still exploitable in the latest release of Trend — which I’ve confirmed today.  What’s neat is someone who only has user level privilege on a machine would be able to halt the Trend service and then potentially run some nasty code.

Here’s a VB project that will generate a long directory name and then attempt to run the scan: Trend POC (I’ve also compiled the source for those who don’t have VB — rename the .exe_ to .exe)

I’m running AVG Free on my Windows machine and happy with that.

Tags: , , , ,

Sourceforge.net down?

It looks like SF.net (sourceforge) is down.  Can anyone else confirm this?

UPDATE: It appears it was a database outage (disk corruption) over at SF.  You can read their update post here for the details: http://apps.sourceforge.net/wordpress/sourceforge/

DD-WRT and wireless observations

I installed DD-WRT over the weekend following this tutorial.  This is something I wish I would have done a lot sooner because of the additional features DD provides.  Unfortunately I have a v8 WRT54g which only has 2mb of flash memory.  This limited me to only being able to run the stripped down “micro” version. DD supports syslog but the micro version does not log firewall events.  I was hoping to pass these to my IDS.  Hopefully I can figure out a way to use iptables to replicate a span or tap port.

I tweaked the TX Power using DD.  Be warned you can overheat your router if you try to crank this up too high.  The biggest signal boost I was raising my access point 2′.  Try to keep your AP elevated as much as possible.  See my image below….

dd-wrt

Tags: , , ,