Everything you know is wrong

Review: Hunters in the Sea

2012-02-16T19:39:00.003+10:30

Right. This book: http://www.amazon.com/Hunters-Sea-Robin-White/dp/0752865013If you're a guy, you should read this. If you don't read it and like it, you're a faggot. Period. Without a doubt the best $4.00 AU I've spent in the last six years.Submarines. Check.Smallpox genetically enhanced fuck you virus. Check.Russians. Check.Explosions. Double check.Gun fire. Check.Sex scene. Check.Navy SEALs.

Reaver

2012-01-19T19:35:00.002+10:30

Lots of PM's over the past few days about the reaver attacks. TAPE has a nice write up on his blog about it, but the main question I've been getting is pretty simple.If your wifi points accept DD-WRT - DD-WRT does not support WPS. Thus, DD-WRT is not vulnerable to the reaver attack.

Christmas

2011-12-25T10:34:00.001+10:30

Holy crap it's my first Christmas as a married man.Awesomesauce.

Crap

2011-11-29T16:01:00.000+10:30

Well shit. Playing some nethack while I wait for this server build to finish. At the bottom of the gnomish mines (for some reason I can't get further than here lately, NFI why) and battling a Gnome Lord, when the bastard jumps onto a polymorph trap and turns into a Grey Dragon.Only I'm playing a Wizard and I only have ranged spells.*disconnects from "screen" session*This will be fun...

Leaving Home

2011-11-28T20:30:00.001+10:30

Moving to another place at the moment. And ridiculously busy at work thanks in no small part to the largest rival I have going under... which is loading up the market for us.All of which means I've done nothing heaps creative lately. Except maybe an email forging application mentioned on the BT forums. But that's rubbish so far.

DIY: Poor Mans Door Monitor

2011-09-26T09:09:00.004+09:30

One of the more annoying features of our building is its propensity to flex. This isn't normally much of an issue - occasionally we have to lift a door a little higher to open or shut it, but whatever, this doesn't really cause us grief.Recently, however, the doors have gone the other way and they are now (when unlocked) ridiculously difficult to keep shut. A good breeze will blow them open

Chuckles

2011-09-05T10:59:00.001+09:30

Hahaha so I noticed this morning that there is a new certification exam available. Whatever, these fuckers like me when I keep up to date and it keeps them off my bosses back, so sweet. I took it, 2 hours they said. So I allowed 2 hours. And finished it 23 minutes later. Bahhhahahhahahaha

Unique Characters from Crunch Redux

2011-08-23T18:10:00.009+09:30

This ended up on TAPE's blog as a main page link, so this is me cleaning it up a bit. The code here will give you a filtered wordlist that contains completely unique character lines. Which means that a line of "abc" will get through, but a line of "aabc" will not (double a's). Further, "abca" will not be permitted either. The code works on a relatively simple bit of math - if the count of unique

Unique Characters from Crunch

2011-08-02T20:26:00.007+09:30

In typical Gitsnik style, TAPE (or specifically, someone who wrote on TAPE's blog), has inspired me to write a simple bit o' code for a challenge:#!/usr/bin/env perlforeach my $line (<>) { my %unique; my $size = grep { !$unique{$_}++ } split //, $line; print "$line" if length($line) == $size;}Arthur I hope that does it for you. Usage is simple, pipe input in from crunch

Married

2011-07-24T13:13:00.003+09:30

Well here we are, back and married, and I've gotto say, it was fun and well worth it! Things went along surprisingly well, though I did learn a couple of things along the way for those who think about doing a bigger one:Don't send a save-the-date unless you plan on inviting someone to the reception. This didn't end badly for us, but it could have very fast.Family are going to try to make this

Last day as an unmarried man

2011-07-01T12:47:00.003+09:30

Alrighty guys this is the last blog I should get a chance to post before I am married. I leave tomorrow to head back over the other side to do the marriage bit.Thanks everybody for their (lack-of) support, encouraging comments of "don't do it man!" and the like. It means a lot ;)The crew here at the office threw up some pizza and drinks, and even got us a gift we'd actually asked for! Thanks team

10 or so days

2011-06-28T11:35:00.002+09:30

I dropped her off at my parents place this past weekend. 2,200km in 2 days is pretty rough for even me, but I got through it ok, and she got there safely.What one is finding now is quite disconcerting, but also a good thing in many ways - namely, I can't fucking sleep and I am bored out of my skull because the house is empty. I have the opportunity to surf so much porn, watch so many gory flicks

21 days

2011-06-18T15:37:00.000+09:30

The final few weeks of bachelor-hood. Today marks the 21 day to go marker.:)

Punching for Passwords

2011-06-07T16:20:00.002+09:30

A lot is made around the traps of why you would bother with such complex password wonders as R_|C=$zH#xRJDCdS0H96bFhstbB):>7.hGsH2pt}2(I#{c!m_"When it would be just as simple for the attacker to beat you with a very large fist until you gave up the password, the token, or whatever. A method I have taken to referring to as "Punching for Passwords".Let's look at a case with regards to why this is

Counting down...

2011-05-28T13:39:00.004+09:30

Right so as of the beginning of this post, I have 41 Days, 23 Hours, 50 Minutes, 46 Seconds to go. Just wanted to say that.Most of what is happening around the traps at the moment is focused on one of two things; work, or wedding. So clearly that doesn't leave me with much time to do anything else like finish off my linux exploitation training modules or sign up for something like the OSCE. It

ARRGHH

2011-04-14T14:16:00.001+09:30

Wow it's getting close... are you excited... coz I am!

Hmm

2011-03-09T10:53:00.001+10:30

Been a busy year for me. We've had some of the biggest jobs yet for us come through and I've been running flat out to keep up with them. Lots of coding to keep things running because apple don't always write the worlds best code, so I have to write even worse code to work around their problems.Picked up some Reaper-30's from Demonia which look pretty sweet, so I'll get to tuck those under my

Traffic

2011-01-11T11:27:00.001+10:30

I can not believe how much traffic is apparently generated purely by school children.I am having the best runs into work at the moment :D

Holidays

2010-12-29T10:51:00.001+10:30

Happy holidays to all.And to all I wish on you broken limbs and fractured skulls.I hate this time of year.

Zzzz

2010-12-03T14:36:00.001+10:30

Fire up the rss feeders this one is going to be a boring one.Ahhh today is a slow one. I've always hated slow days. Not that there is nothing to do, that I can't sit at home and do nothing while they are happening. It's not too bad I guess, at least I'm having a chance to get some backups and other things done. Nothing amazing to be sure, but doing some work.Pity that my machine had a panic today

Update

2010-11-03T10:11:00.001+10:30

Well I missed a whole month there. That's the first time I've missed a month since this whole thing started. To be fair, it's not exactly a heavy read blog one has going here, but still, there are some principals to uphold.Lessee, a bit of a humanity update. The gym has been getting along alright, not losing any weight at the moment because what is lost ends up in muscle but that's ok. So long as

Power Management

2010-09-21T14:44:00.003+09:30

So a lot of talk lately about desalination plants, and solar power, wind farms and so on. I've been applying my intellect to the problem from the same view I always use: How do I survive a zombie apocalypse? Well, as usual, it leads me down some interesting paths.Most notable of these thought processes has been my thoughts on wind farms lately. Certainly I have a lot of thoughts related, but wind

Exploitation

2010-08-13T14:34:00.001+09:30

Not much going on this past month. Got a gym membership, been losing some of the stomach weight. Getting back into exploit development etc. and, on request, am running some online classes for linux exploitation in a couple of weeks time. Costs provided on request, just drop me a line if you're interested - you will get a full SSH environment, a set of instructions, and you can ask me for

What's going on...

2010-07-11T15:08:00.002+09:30

What's going on these days? It's been a while since I posted something here - just over a month in fact - but it's not unusual at the moment.So, things that are going on. Welp, most recently we crossed the threshold - we are now at T minus just under 365 days (assuming everything goes well with the reception venue). The missus is excited... I'm excited too, but mostly terrified ;) Nah, it's all

Big night

2010-06-10T10:23:00.001+09:30

Wow big night last night (or big day yesterday?). I had the privilege of putting in my first 15 hour day in a long long time.Let's hope I don't have to do that again :)

Marriage

2010-05-31T09:01:00.002+09:30

Wow. Big scary damn word there. Not too scary though, just the bachelor in me crying out in fear and pain. He was never a big bachelor though, so it can just be suppressed with ease. We're drawing very near to the one-year-to-go mark and I'm working hard to get all the finances controlled correctly and the bits that I can control under control.Actually looking forward to it, which is cool. Not

Apple: ACSA 10.6

2010-05-14T14:11:00.003+09:30

Welp I can't complain about how my day has gone today since I've gotten to work at least. A bit annoyed at her boss for the missus being sick (he prevented her from going out to get some water yesterday), but I can let that pass... for now...On the upshot, I passed my recertification process today, and am now a qualified Apple Certified Systems Administrator for BOTH 10.5 (leopard) and 10.6 (snow

Or.

2010-04-27T10:45:00.002+09:30

You know. Not.Got too distracted watching movies and tv serials all weekend to care about backing up my laptop. I'll just make sure I don't mistype user commands for a while :)

Backups

2010-04-24T16:40:00.000+09:30

It is generally important to remember to keep backups. A single missed keystroke can do nasty things to your home folders :)Anyway, this long weekend I will be having a look at loading a Mac OS X timemachine backup solution onto my ZFS /raidpack, with a quota and a few other things in place to ensure it doesn't overdo it. If all else fails I'll just setup a regular rsync process, just incase :)

Updatererate

2010-04-08T15:57:00.001+09:30

Well. That was interesting.Easter was a hell run for me, for us, as usual. It's just not cool having to drive all that way to deal with a bunch of people we don't like, and only a few that we do. The mother-in-law to be was alright, but her partner needs a kick in the face. Also I don't appreciate someone who has shown me her engagement ring twice, stealing my fiancé's thunder (HER OWN FUCKING

There is something wrong with me...

2010-03-27T15:17:00.002+10:30

Soo, big week. A hardware fault on a shutdown caused 2TB of data to go missing. Thankfully the boss and I were able to retrieve the data from a third drive, but that one was corrupted (what?), then we figured out that the primary had bad bytes on it, which had corrupted the last three backups, but hadn't caused the enclosure to complain. O.oAnyway we got it back on Friday morning, but I spent all

New Post!

2010-03-22T15:02:00.001+10:30

Well it's been a while since I made an entry of substance here. Less than two weeks I suppose considering how the engagement went and all :) Things have been relatively quiet in the realm. I did lose my Account Manager to another company - I can't say anything bad about it but even I am losing sleep to the situation. It's alright really, just dealing with dumbass people can be an agitation and I

Happy Birthday Rara!

2010-03-10T16:00:00.001+10:30

'Nuff said.Also w00t this much closer to Easter :)

Engaged

2010-03-01T22:36:00.002+10:30

I am now engaged.Wow.Exciting. Terrifying. Mostly just awesome.And yes, I've heard it all - "Don't do it. It's not worth spending much on" etc.Screw you. I'm good with it.Photos available on request, or see me when possible.

Gordon Ramsey was right...

2010-02-13T11:17:00.005+10:30

Tracy Grimshaw is a fucking moron.I could finish the post there and leave you all with two lines in your RSS feeds, but that wouldn't be fun, so I suppose I will discuss that a little more and hopefully still keep this brief.A couple of days ago we had Jeremy Clarkson show up on Australia's A Current Affair programme to talk about Top Gear. I don't recall the exact wording of the question, but he

Apple: Snow Leopard mounting Active Directory home on desktop

2010-02-08T14:05:00.002+10:30

Quick and dirty apple script (which was anything but quick and is definitely dirty). My big issue at the moment with snow leopard is seeing "gitsnik" mounted in the dock, but only seeing "homes" mounted on the desktop. This aims to correct that (if anyone knowws an easier way feel free to tell me, but figuring this out on a thousand strong domain was just pissing me off):tell application "Finder"

Where are we...

2010-02-06T19:05:00.002+10:30

Well today is her birthday, and I thought it might be a good time to do a quick bit of an update to let everyone know how things are going from gitsnik's end of the line.I'm currently working on ascending another monk - neutral for a change - in my spare time (and another Tourist is on the astral plane on the office laptop), just to see if I can do it. If I can, I'm actually going to try and

FreeBSD 7 to 8 Upgrade

2010-01-26T20:59:00.003+10:30

The last couple of days saw me finally get off my ass and upgrade the desktop machine from FreeBSD 7.2 to 8.0.Let me just say that I had a hell of a time getting it upgraded - once "freebsd-update" finished running and I rebooted, the system bailed out on me. If you find yourself looking at a: "vfs.root.mountfrom.options=rw" screen and can't figure it out, I had to rebuild everything from scratch

Bumping Posts

2010-01-19T08:54:00.000+10:30

There was some work recently, might have been a British study but I'm not one for keeping track of these things, which basically said: "The Younger Generation is becoming more impatient". Younger here meaning younger than oneself. The phenomena arises from the whole SMS/IM concept. Gen X are more likely to eMail and wait, whilst we of Gen Y are more likely to use SMS and IM.Fair enough, that

HATE!!

2010-01-14T17:59:00.001+10:30

I HATE people who get so blinded by a particular technology that they can not select the appropriate answers to problems.No it's not the machines I put in. Yes it happens on both sides. No, it only happens to one lab not the other. Yes they are identical builds. Yes they are identical hardware. Yes they are identical batches (see what I'm getting at here dear readers).Oh, what's that? The kit we

Part 6: An invisible choir sings...

2010-01-09T22:17:00.002+10:30

Gitsnik the High Priest entered the top level of the Wizards tower, and roasted the Wizard of Yendor on the second try (he dodged the first beam and its reflection). Stealing the book I decide to be funny, confuse myself and read a cursed scroll of teleportation to get to the bottom floor.Except the cursed scroll sent me to floor 2. TWO! I just roasted the Wizard of Yendor and now I have to crawl

Part 5: The Descension run

2010-01-09T12:06:00.004+10:30

The priest headed back up, all the way to level 1, mapping the levels, detecting treasure, hoping for some reflection and finding nothing but a bit more gold, and perhaps the odd spellbook. I am really hoping for one last wish before I kill the wizard, preferably from a wand, because I want some reflection, a spellbook of finger of death would be nice, as would a couple of wands of death. Nothing

Part 4: If Wishes were Fishes...

2010-01-08T19:12:00.003+10:30

The levels beneath the Ludios portal were short and sweet. Magic mapping, a badass sword and enough food to weigh me down even with the Gauntlets mean I can cruise through pretty much anything.I even survived two Jabberwock's and a Minotaur whaling on me while I practiced my "light" spell.Medusa's island was the right-handed configuration, which meant I had a lot of water to traverse but... no

Part 3: The GOLD!

2010-01-08T00:30:00.002+10:30

5 scrolls of genocide wipes out all the soldiers in the lair, standing just inside the door with Stormbringer clears out the throne room. P - A bag of holding called PIRATE LOOT takes care of enough gold to net me 2 more points of protection, and here I am back down at level 22 - just below the Fort Ludios portal and ready to do this.

Part 2: The Quest... FOR GOLD!

2010-01-07T22:42:00.005+10:30

Gitsnik the Chaotic Priest descended through the darkness of the stairwell his Quest leader had left open for him, into a world of graveyards, pits, gravestones, zombies, vampires and wraiths. Remember I said that wraiths were interesting? That's because a wraith can give you an extra level if you eat its corpse very quickly (assuming the corporal being drops a corpse). As a priest I plan to make

Part 1: Before the Quest

2010-01-07T09:54:00.003+10:30

A Chaotic Priest began his decent into the Mazes of Menace last night amidst a cacophony of barks from his pet dog, Silas. Silas was a good dog to begin with, racing along with his master, eating corpses, killing badguys, yapping happily when his master maced people to death, but it was not to be. Silas was left behind about 4 floors into the Mazes, too scared to descend further.Stupid animal.I

Irony

2010-01-06T08:36:00.002+10:30

Every one of you NSW people (of which I am, regrettably, no longer a member). I want you to think about something while you rag on Victorians (which I am, not-regrettably, still able to do by not living there :D) and their driving skills.Specifically, I want you to go and look at the road-death statistics. We're 6 days - SIX FUCKING DAYS - into the new year and already NSW has racked up 10 deaths

Taking a Break

2009-12-30T13:40:00.001+10:30

Taking a break until the 4th when I go back to work. And so far not a single sleep in damnit. Least I wake up to a gorgeous image :)

BSD: FSCK Remote File systems

2009-12-24T13:50:00.002+10:30

One more rather obvious post, but something I had to do today - a server rebooted yesterday and it is headless, there is no way I am going to dig my way into that building for the hell of it, so I have to run fsck somehow. But of course I can't get to the console to boot single user.The fix after a brief look:root@rack ~# grep fsck /etc/rc.conffsck_y_enable="YES"root@rack ~#And there it is.

Apple: No More Facebook

2009-12-23T12:52:00.000+10:30

This is an old trick, but one that I had to pull out a couple days ago. Stop facebook access on an individual machine. From Terminal:sudo echo 127.0.0.1 www.facebook.com >> /etc/hostssudo echo 127.0.0.1 www.facebook.com.au >> /etc/hostssudo echo 127.0.0.1 facebook.com >> /etc/hostssudo echo 127.0.0.1 facebook.com.au >> /etc/hosts

Belated Firefox 3.5 Thanks

2009-12-21T08:34:00.001+10:30

I've been meaning to do this for a while but I just wanted to publically thank the Firefox developers for finally getting around to listening to me and making the screen automatically go past when you successfully do a plugin-update. Previously you would have to click continue to load your browser screen.Well done team, about bloody time.

Everything I know may not be wrong

2009-12-16T10:27:00.000+10:30

Lots of "I" words in this one, not a useful post unless you want to know how my head works, I'm just trying to get some shit straight in my mind by saying it out loud.I'm not really sure why, but on my way back from the job yesterday (12 hours round trip plus the hour I was in the office before I left) I got to thinking about where things are going for me. It's not often I get onto the topic of

3 Months

2009-12-14T10:54:00.000+10:30

I am officially out of my probationary period. Excellent.

8 Years

2009-12-10T08:36:00.001+10:30

Is a very long time.

ITSEC: Connecting the dots

2009-12-09T12:50:00.003+10:30

A very very brief note here on a misconfiguration I've uncovered more than a few times. It doesn't always work (obviously) but I have found it both interesting and useful.Ok so enough blathering, when doing a pentest and trying to find any hostnames available for a given webserver, try and make use of the reverse-ip mappings and the host command:host -l 192.168.1.23 192.168.1.42Which can, and

Update

2009-12-03T12:28:00.001+10:30

Passed my exam. Have been flat out this week and looks like I will continue to be into the next week.I wanted to make a note (possibly for a later rant after a meeting scheduled around Tuesday) that I have a dork of a client, who has suggested reverting away from Exchange and to Mac Server Mail system (cyrus, postfix, squirrelmail).And you wonder why I'm murderous.

Exam

2009-11-27T09:35:00.000+10:30

Got another exam to do on Monday. Joy.This is apparently the hardest of the 5, so I don't know why I'm doing it 3rd.

Ding Dong

2009-11-19T13:49:00.001+10:30

She put down the deposit on a wedding dress yesterday.Looks like I have to marry her now.That's alllllright with me.

Apple: Snow Leopard Stop Open At Login

2009-11-18T16:37:00.005+10:30

Snow Leopard has a nice new dock feature, which currently includes a nifty section where I can select my program, hold my mouse down, and then go options -> Open At Login. Which is great for me, because I'm the sort of person who needs that crap opened for me.But not necessarily good for a school without a server.My good friends a little way out of the city are having this issue, where their

Congrats

2009-11-17T18:56:00.001+10:30

Congrats on getting your CISSP Mr Grace, very well done.

A Joke

2009-11-15T12:54:00.001+10:30

It's not often I find something amusing, but here it is, I ripped this from a website somewhere earlier today (and fucked if I can remember where). Anyhow:Don't Fuck with Lawyers.My dad is a partner in a smallish law firm. He loves nothing better than annoying people and suppliers who piss him off, nothing bad, just minor spats. He loves doing really pointless but perfectly legal things. This is

ITSEC: More fun with MiTM

2009-11-13T21:50:00.003+10:30

Anyone who spends any time in the industry knows that switched LAN's are not a massive security feature - you need to use something to ensure your standard ettercap/arp-spoof attack doesn't occur. One of the more common tools for this is arpwatch, which is useful for its email capabilities. There are other tools that explicitly make note of arpspoofing attempts. I leave those up to the user to

The Time Travelers Wife

2009-11-13T21:45:00.003+10:30

Second of Three posts tonight. I saw this movie today. Having read the book some time ago, I was not sure what I would see, and not sure what I would think (and to be honest I only remember parts, so not sure what they would keep or not!). I have to say, very pleased with it. I'm not normally a fan of Eric, nor a fan of sappy movies, so this is not said lightly:See this movie, I shit you not.I

The Gathering Storm - Final Notes

2009-11-13T21:40:00.003+10:30

First of three quick ones tonight, lets take a brief look at my final notes on The Gathering Storm.It was too quick. It takes me, on average, 3 days solid reading to get through any of the main series of books. There may well be lots of text in this one, but I got through it easily and quickly, and I wasn't even making an effort to read it all the time.It's definitely a linking book. There were

The Gathering Storm - Half Way

2009-11-11T14:19:00.002+10:30

Well let's see hmm. Wow. It's hard for me to talk about what is actually happening with this book and my head at the moment, it all moves so damned fast I'm at almost a complete loss for what is going on. I can pull some basic bits out of it - one more down to balefire, Rand has used the True Power drawn from Shai'tan, and now they've just reached Domani HQ. Oh and one of his partners is to be a

Apple: Logout Hook - Reboot on Logout

2009-11-11T10:00:00.002+10:30

Ok, this is a dead simple script I knocked out today because 4 other companies have somehow failed to get this done for the client. The basic premise is that the client has a refit based Mac installation and want to reboot everytime the student logs out.Anyone who thinks that they can rip this off has to know that my picture is right there and I will be with the clients I've done this for :)This

The Gathering Storm - First Impressions

2009-11-09T09:44:00.002+10:30

I pulled through the first 150 pages of the new Wheel of Time book last night, and thought that - for my 300'th entry - I would make a brief note on what I'm thinking so far. Remember that Brandon is writing these now that Robert has passed on, though he is doing it from his notes. So, my impressions?Awesome.So far I haven't been able to distinguish the difference between the writing style of the

A MEMORY OF LIGHT

2009-11-08T11:03:00.002+10:30

Book 12 has been released! The missus is going looking for a copy for me today!CELEBRATIONS ARE TO BE DISCOVERED IN THE HOUSE OF GITSNIK!

Christmas

2009-11-06T11:38:00.001+10:30

We are, what, 70560 hours out now? Good enough time as any I suppose - for those of you who read this and are in or around my family, I (we), will not be home for Christmas.Also will not be sending any gifts to anyone I care for.

Cup Day

2009-11-03T15:20:00.001+10:30

I love cup day, it's great - it's damned slow and no one wants anything done.There is a problem with it though: The race that stops a nation, and my entire office completely missed the fact that it was on.HAHA

2009-10-29T11:36:00.001+10:30

It occurred to me today that it has been almost two years since I started this thing. There is a lot to be said about time I suppose, none of what I say will be anywhere near interesting or useful anyway. I am half convinced that the majority of you are here for the ITSEC stuff and the angry gits things. Unfortunately (well not *un*fortunately), I'm almost married now and the angry side of me

ITSEC: OpcodeDB

2009-10-26T20:37:00.001+10:30

Well the Metasploit opcode database has been down for a very long time (at least it is everytime I check it, and yet today I came across a resource that made me wget the entire thing down.SECURINFOS.INFO are my new best friendCheers

ITSEC: Linux Privilege Escalation

2009-10-22T20:32:00.016+10:30

So after reading this blog entry I began to think about making some notes on how to do all that sort of thing on a Linux box. This post will be (and has been) created over the course of a number of sessions, and as such may be a bit disjointed. I have also probably missed a few ways, but we can't be giving too much information away now can we :)Anyway, getting root on a Linux box isn't quite as,

Wedding, Updates

2009-10-19T10:50:00.001+10:30

And I'm back. My brother is married, and my car was hit. I spent just on $2,000 for that trip - getting ready, getting alterations and cars and such together, and I am really fucking disappointed. First things first though, I have to get a new headlight for my car after a damned roo came out of fucking nowhere and took me in the front of the car. I'm currently trying to put together a quote on

ITSEC: Thinking outside the box

2009-10-09T16:35:00.002+10:30

This post comes in, as always, after the post I left on the remote-exploit forums, and will be fleshed out a fair bit more.I was pentesting a network today and having some trouble finding a valid username and password - this is not uncommon as my hacktop doesn't have that large a password list in it, but it can be annoying (happens more often at the smaller sites). I had to find another way

Update

2009-10-07T20:21:00.003+10:30

So let's take a look at the recent past. I successfully obtained my Apple Certified Technical Coordinator, passing it with flying colours and amazingly hilarious looks. I walked in there to see 3 other people taking their tests. 20 minutes later I walked out of there to see those three still taking their tests. I don't know how anyone could spend so much time in a multiple choice exam, but there

Exams

2009-10-01T18:00:00.003+09:30

I am sitting three exams in the next few days, a tech exam, then a sales exam (so I have an idea of what is going on with that stuff), and then - over the long weekend - the OSWP. All in all this should be a bunch of fun. From all accounts I only just got my exam time in the first day that I wanted, so haha to anyone who didn't!All in all, the weekend is going to be full and intense. Should be

Work

2009-09-18T21:02:00.003+09:30

One week in, and I am loving being back in the saddle again. At the moment I'm operating tightly with the sales girl to talk with clients and start pushing our hardware over the competitors. I've got training manuals coming along soon and I will be getting three or four more certificates to my names.Hello Alicia darling, stalking me at work again :)

Bah

2009-09-06T13:54:00.002+09:30

Bah, two days working on this character, a phenomenally ridiculous amount of luck (EIGHT! wands of wishing), until I... well I'm not sure but I think my God was angry and I tried to convert an altar, it pretty well went downhill from there.I died on the Plane of Fire (so close!), I got halfway across is, but I'd had to use my last wand of wishing to get my armour back so I couldn't get a

Interviews, OSCP

2009-09-04T16:11:00.003+09:30

I took the OSCP challenge exam a couple of days ago, and successfully passed it, so I am now officially an "Offensive Security Certified Professional". That exam was one of the more draining experiences of my life. I had five servers to attack, the first server fell within 2 hours (I had some problems developing a working exploit because I mis-calculated the overflow buffer of EIP), and the next

So

2009-08-27T11:39:00.004+09:30

First of all everyone wave hi to my girlfriend, I know she stalks this thing while she is at work.I had a whole bunch of notes planned for this, I was going to talk about how Gen Y get all the blame for growing up as they were raised by Gen X, to talk about lack of spelling and grammar, and how pleased I am that my own younger brother has straightened up his act a bit after I called him on his

hpwuHUHRILFGASh

2009-08-24T11:45:00.001+09:30

ibpebFP29H3NFOBYljhklhefpbdKLBsadfljkbalbdfVLARGTired. Stupid weather changes keeping me up.

Wrecked Pentest Code

2009-08-20T13:34:00.002+09:30

Well the title is a little misleading as I ignored the need for commas. Anywho I am completely wrecked at the moment, I am definitely not getting enough sleep.On the other hand, I threw a new contribution into the r-e forums yesterday (or the day before, I forget) which may prove useful. To quote almost verbatim:The premise for the script is relatively simple, as you go through your pentest you

Dead Simple Finger

2009-08-14T11:15:00.001+09:30

Dead simple finger user enumeration (BT3 has no finger program, I don't have BT4 operational):#!/usr/bin/perluse strict;use warnings;use IO::Socket;my $host = shift || "127.0.0.1";my $port = shift || 79;while(my $user = <>) { chomp($user); my $s = IO::Socket::INET->new( Proto => 'tcp', PeerAddr => "$host", PeerPort => "$port" ) or die "Can not connect to [$host:$port]: $!"; print $s "$user\n"

Genius

2009-08-12T13:32:00.005+09:30

I am a fucking genius.If you look two entries ago (the blog titled "Work") you can read about the "rape" victim on the radio.Read it? Good. Now, I just wanted to say:I FUCKING CALLED ITI am a fucking genius, I was 100% on the fucking money, I OFFICIALLY ROCK (harder than normal). The bitch started the ruination of a large number of careers over a fucking LIE.And I called it.When every other cunt

New Tool (Unreleased)

2009-08-05T09:54:00.002+09:30

I'm not releasing this tool just yet because I'm still doing the PWB course and I don't want the team to think I ripped it off from here if they google for it, but I have written a decent single threaded SMTP-VRFY brute force tool.The only tool I've seen out there so far is smtp-user-enum.pl, which comes sort of close to doing it (actually it does it and well), but it has one glaring failing in

Work

2009-08-03T09:06:00.002+09:30

She starts a new job position today, shifted from training to an on-her-own position. Most excellent darling!On an aside, we're contemplating making a new news couple of posts, reading between the lines to make some points that every news station is ignoring.Hopefully someone will pick up a bit of an understanding of how shit actually happens.But for now, let's have a quick look at this alleged "

'OlyCrap

2009-07-26T20:06:00.002+09:30

I got a message out of the blue today, from a random guy on one of the security forums I frequent (incidentally actually using the "gitsnik" name), for a request for contact. The hell. So I checked out his posts and they seemed ok, I asked him why and he gave a decent answer, so I said sure. Thus far he seems to be on the ball at least, and bonus of bonuses, he seems to have a decent thirst for

Tools, Training

2009-07-19T00:43:00.003+09:30

Bonus of bonuses, I have finally been gotten off my lazy ass and am going to be doing the PWB OffSec course, just for the 30 days lab and then I will schedule the exam, but it's great to finally be doing some of this stuff - perhaps with a bit more of it to my name people will be happier to have me doing the jobs they're currently underpaying me to do.Perhaps not too I guess.Anyway, in the

Password Permution

2009-07-07T13:00:00.004+09:30

(EDIT: See the very bottom of this post for the update I just posted).I posted the following code to the back track forums a short while ago to a small acclamation, I suppose it is necessary to post it here as some sort of proof that there are a few less Gitsnik's on the web than one would believe from a simple google.All it does is produce a correctly "leetified" list of passwords, use it to

Ascension and FileServer

2009-06-27T12:42:00.003+09:30

I ascended a knight last night:gitsnik-Kni-Hum-Mal-Law ascended to demigod-hood. HP was 259/310 and I had 5,721,906 points. Carrying Dragonbane, Werebane, Sunsword, Excalibur, 5 Amulets of Life Saving, The Amulet of Yendor (duh), +4 Silver Dragon Scale Mail, +4 T-Shirt, +3 Rustproof Helm of Brilliance, +5 Leather Gloves, +5 Fireproof Boots of Speed, +4 Cloak of Magic Resistance, 9 points of

FreeBSD as a Desktop

2009-06-20T17:37:00.002+09:30

This fileserver has started to serve a different purpose, it's going to operate as a desktop system for me as well.Thus far I've slapped OpenOffice on here, Firefox and Thunderbird, aMSN and X-Chat, XMMS, mplayer, vlc and a few supporting programs for PDF's and the like. I'm looking for something decent to set up MYOB so that I can generate invoices and what not.I'm using the fluxbox window

Hydra

2009-06-16T19:23:00.004+09:30

I noticed something stupid today, my FreeBSD 7.2-RELEASE-p1 server has a copy of hydra installed from ports... but no pw-inspector program (for some fucking reason). In hindsight I could have ripped this out of the ports folder, but I only just thought of that.So:FreeBSD, Hydra, pw-inspector, ports install.Download the hydra-5.4-src file from the THC website (or just rip it out of your ports file

ZFS Update

2009-06-14T16:02:00.002+09:30

Ok just a few notes, I'm busily looking for a job now that I'm leaving my current one.First, I forgot to mention adding zfs_enable="YES" to my /etc/rc.conf in my previous post, as well as the zfs_load="YES" line to /boot/loader.confSecond, I reformatted my root OS drive (actually I wiped out /usr instead of /usb accidentally :D), so it was necessary to recreate and reset the zfs system. Doing so

Update

2009-06-10T22:34:00.003+09:30

Well. Shit.I got so tired of fucking around with gvinum that I went searching through the docs for how to do it with geom_raid5. But on the way I noticed that ZFS has finally reached a decent usability level in the latest version of FreeBSD 7, so I installed a copy of 7.2 on the server (still using the disk in question), so let's do it like this:# zpool create raidpack raidz ad2 ad6 ad8# zfs set

FileServer - The Long Run

2009-06-10T18:43:00.002+09:30

Well we are on the home stretch (hopefully) with this file server. Due to what I think is a smaller than necessary power supply, the main OS drives are non operational, so I am running a bit of a risk, and cutting one disk out of the RAID array. According to ibeast.com I'll get just on 1900GB of storage space. It's not quite what I was after, but this server build has gotten to the point where I

YAAP

2009-05-30T16:51:00.002+09:30

I worked on this character for about a week. Another Elvish Chaotic Wizard (they are my favourite!). I actually didn't think I was going to be able to pull this off, especially after I found Famine and Death and neither had the right altar, but I was generating conflict and I broke a couple of wands of teleportation to get to my altar and voila:Goodbye Gitsnik the Demigod...You went to your

McAffee Update

2009-05-27T08:59:00.003+09:30

Well who is really surprised. The last couple of days I have had a grand total of 14 and 3 emails show up in my backscatter queue. (Edit: Nope not those numbers, see below)Good job McAffee. That doesn't seem dodgy WHAT SO EVER!Edit: Here are the logs and their respective sizes, pardon the formatting - blogspot doesn't deal well with pre tags. I tried to keep all the valid data but remove some

McAffee are deliberately making spam?

2009-05-25T11:01:00.002+09:30

Lets have a look at some interesting "coincidences" here. This post will be amazingly more technical than my usual bitching and rants, so please bear with me.First, lets have a look at my server, dreadnought. She isn't so great but she does do redundant mail services for me and a few other companies. I implemented, some time ago, a block filter for backscatter - as I don't use her as my outgoing

YA(another!)FAP

2009-05-24T19:01:00.003+09:30

Wow. I was really having a bad run this time, though for doing that I almost doubled the points score of my previous number one slot:2122016 gitsnik-Wiz-Elf-Mal-Cha died on the Plane of Air.Killed by an air elemental, while helpless (with the Amulet). So, the short and dirty. Another Wizard, another Elf. I found no less than 6 bags of holding (including sokoban) and knocked over roughly 11 wishes