000webhost

Web hosting
Showing posts with label Internet. Show all posts
Showing posts with label Internet. Show all posts

Tuesday, September 4, 2018

Web Traverser Security Script, Random Stuff, and More

- wanted to create a more portable script to test for directory traversal issues. Download it from here:
- description is as follows:
# Sometimes you end up on systems where you don't have administrative
# access. In spite of that you need to do a network/security test/audit.
# That's the point of this script. It's a very basic port of a dot2moon.py
# to test for directory traversal attacks against web servers
# and relies on utilities found on most UNIX/Linux systems.
#
# It basically tests various URLs against a base URL and looks for
# HTTP return codes.
#
# Obviously, I could have included automated crawling and bot 
# capabilities but given my experiences previously with having to 
# maintain up keep against counterbot technology have decided to leave 
# it out.
#
# As this is the very first version of the program it may be VERY buggy. 
# Please test prior to deployment in a production environment.

Random Stuff:
- as usual thanks to all of the individuals and groups who purchase and use my goods and services
- latest in science and technology
thesaurus linux
- latest in finance and politics
- latest in defense and intelligence
- latest in animal news
- latest in music and entertainment

Random Quotes:
- “Although Turkey has long been a participant in the development of the F-35 program, the US Senate had sought to block Turkey from receiving the stealth warplanes through language in the National Defense Authorization Act amid a deterioration of the US-Turkey relationship,” CNN reported.

Israel, which has a strained relationship with Turkey despite officially being allies, has also reportedly expressed concerns about the sale of the fighter jets to Ankara.

Israel worries that Turkey may leak secret details of the planes to Moscow or they may be sold on to enemy nations, Hadashot TV reported.

Sources in Israel were also concerned because the sale of 100 planes to Turkey will give Ankara a numerical advantage. Israel is slated to receive only 50 of the F-35 jets with the option of purchasing another 25.

Israel received its first two F-35 fighter jets in late December 2016 and declared them operational a year later.

The fifth-generation fighter jet has been lauded as a “game-changer” by the Israeli military, not only for its offensive and stealth capabilities, but also for its ability to connect its systems with other aircraft and form an information-sharing network.

US officials are reportedly worried about its NATO ally’s desire to purchase Russia’s advanced S-400 anti-aircraft system, which is not compatible with NATO systems.

Congress is also concerned about the direction in which Turkey has been moving under authoritarian, pro-Islamic President Recep Tayyip Erdoğan.

Turkey has grown closer to both Russia and Iran, all of which have intervened militarily in Syria with at least some degree of coordination.

The three countries have also met numerous times, supposedly to formulate some kind of joint peace plan for the country. Erdoğan openly traded threats earlier this year with US President Donald Trump over the possibility of American troops coming under fire from Turkish forces in Syria’s Kurdish areas.

However, a US defense official told CNN that Secretary of Defense James Mattis does not want to block Turkey from receiving the stealth fighters and is trying to get the language removed from the bill’s final version.

Turkey is a partner country of the F-35 program, along with allies such as the UK, Italy, Canada and Australia, contributing toward the cost of development and producing some of its parts.
- "In the age of Facebook, censoring one billboard seems like a waste of government time.

"Personally, I think the anti-vax position is stupid, but there shouldn’t be a law against stupidity."
https://www.watoday.com.au/politics/western-australia/health-minister-moves-to-ban-cunning-and-devious-anti-vax-billboard-20180615-p4zlow.html
If you had told someone two decades ago that by 2018 the company that commercialized chemical warfare and the company that commercialized Agent Orange were going to team up to control a quarter of the world’s food supply, chances are you would have been labeled a loony.

Unless your name was Robert B. Shapiro. He was CEO of Monsanto from 1995 to 2000, and in 1999 he told Business Week that the company’s goal was to wed “three of the largest industries in the world—agriculture, food and health—that now operate as separate businesses. But there are a set of changes that will lead to their integration.”

With this month’s announcement that Bayer has completed its $63 billion acquisition of Monsanto, it is hard to deny that Shapiro’s vision has been realized. Too bad for all of us that that vision is a nightmare.

Because, contrary to the feel-good corporate propaganda being churned out by the company’s PR department—propaganda that would have you believe that this merger will be good for the environment, for farmers, for ending global hunger, and, incidentally, for lining the pockets of shareholders—these two corporate giants are in fact committed to the consolidation and transformation of the world’s food supply in the hands of the genetic engineers.

Monsanto and Bayer are a match made in hell. This is The Corbett Report.

It is hardly surprising that the first thing Bayer did after completing their takeover of Monsanto earlier this month was to announce that they were dropping the Monsanto name, merging the two companies’ agrichemical divisions under the “Bayer Crop Science” name. After all, as everyone knows, Monsanto is one of the most hated corporations in the world.
- "The list of cuss words against God is endless. God is still God and those who have cursed Him are now dust," Villegas, former president of the Catholic Bishops' Conference of the Philippines, said on June 10.

"When you spit upwards, your spit will return to your face. The more you spit at God, the more spit you bring to your face. It is the law of gravity. It is also the law of divine justice," he added.

"For those who dare to teach you error, pray for them and forgive them. They might be insane or possessed. They need God. They need your prayers and love and compassion," Villegas offered.

Duterte's provocative comments about God come in the wake of the recent killing of three Catholic clergymen in the Philippines.

The Philippines is considered to be the only dominantly-Christian nation in Asia, with over 86 percent of the population — some 76 million people — avowing Roman Catholicism.
- Thousands of Americans have taken to the streets in Washington DC to protest harsh living conditions as part of Poor People’s Campaign rally.

Prominent activists and human rights leaders also participated in the march on Saturday which was part of a weeks-long campaign to raise awareness about the plight of Americans living in poverty.

The protesters also called for moral revival on key issues affecting the lives of ordinary Americans, including voter suppression and mass incarceration, as well as healthcare. 

"So too few have so much and poor people have rich votes, poor people can vote. There are enough of poor people to turn the course of our country, that's what we have to do," said Rev. Jesse Jackson, activist and former presidential candidate.

"People to have rich votes, to have rich hopes, rich aspirations and the rich agenda which is feed the hungry, clothe the naked and set the capital free." 

“Don’t get it twisted,” Rev. William Barber told a crowd. “We are not left, we are not right, we are not conservative or liberal.”

Monday, August 6, 2018

Web Traffic Creator Script, Random Stuff, and More

- load testing capabilities are increasingly being sent online and many offline are limited in capability so I decided to build my own. Download it from here:
- description is as follows:
# From time to time you just want to test some basic stuff like 
# network/website performance, bot and counter-bot systems,
# logging, configuration, etc...
#
# This script allows you to do most of the basics such as change
# of user agent, change of utility, change of time, etc...
# Modify variables as you see fit (it's reasonably well commented).
#
# Obviously, isolating/benchmarking is more difficult the more
# variables are involved and certain types of devices/products
# may/will interfere. Please factor this in.
#
# Use tail command against relevant log file for live checking 
# or micro-SIEM capability. etc...
# tail -f /var/log/apache2/access.log
# tail -f /var/log/apache2/error.log 
#
# Can also be used a traffic generator obviously. Ability to detect
# such function is dependent on endpoint logging capabilities.
#
# 1.00 - created curl_gen and lynx_gen
# 1.01 - got rid of useragent bug in lynx section. Created http_gen,
# wget_gen, and aria2c_gen. Split off user agent coding into global
# variables and increased total number of variables
# 1.02 - added more documentation
# 1.03 - code cleanup
# 1.04 - added nikto like capability for multiple web pages and to
#        minimise impact of upstream caching
#
# As this is the very first version of the program (and I didn't have
# access to the original server while I was cleaning this up it may 
# be VERY buggy). Please test prior to deployment in a production 
# environment.


Random Stuff:
- as usual thanks to all of the individuals and groups who purchase and use my goods and services
- latest in science and technology
free sql training program
- latest in finance and politics
- latest in defense and intelligence
- latest in animal news
- latest in music and entertainment

Random Quotes:
- A radio antenna, which will be transported with Queqiao, will be stationed some 60,000 km behind the moon. Scientists are hoping that the radio antenna will reveal clues about the early universe, the time after the Big Bang when stars began to form from an ocean of hydrogen.
Signals have different wavelengths, and those in lower frequencies are harder to catch from a place with a lot of interference like the earth, according to Heino Falcke, professor of astrophysics from Netherland’s Radboud University, which led the effort to design and build the antenna, known as the Netherlands-China Low-Frequency Explorer (NCLE).
The antenna is designed to catch ancient signals with frequencies below 30 megahertz, Falcke told Quartz. Signals occurring in those frequencies might help to study the universe’s pristine beginnings, which scientists often call its dark ages.
“Underlying the strong humming sound from the Milky Way, there are some emissions from the early phase of the universe and it will recur at certain frequencies,” said Falcke. “If you don’t have much background noise you may be able to see some certain frequencies and that tells us something about the universe. It requires an extremely quiet environment.”
The far side of the moon can provide that environment, said Falcke. So far only a set of ground-based antennas in Australia has claimed to detect signals of the ancient dark matter, Falcke said, which could offer a reference point to what the NCLE catches.
The radio receiver will only start collecting data after Chang’e-4 arrives on the moon, Falcke said. Both the Dutch scientists and China’s teams will have equal access to the data.
- Bronk explained that unlike the US’s F-22 and F-35 stealth jets, the J-20 doesn’t have all-aspect stealth. This means that from some angles, the J-20 isn’t stealthy. A senior stealth scientist previously told Business Insider the J-20 is stealthiest from the front end.

If China was flying the J-20s in any direction besides towards India, the Su-30MKI radars could have been spotting the jets from their more vulnerable sides.

“Also, it is possible that the Chinese are flying the J-20 with radar reflectors attached to enlarge and conceal its true radar cross section during peacetime operations – just as the USAF routinely does with the F-22 and F-35,” said Bronk.

For safety and training purposes, stealth aircraft often fly with markers that destroy their stealth during peacetime maneuvers.

If this is the case with the J-20s, then India may be in for an unpleasant surprise next time it tries to track the supposedly stealth jets.
- Alan Thompson, who spends his days coaching gifted children, says his work is inspirational, not exhausting.

He agrees the sheer scale of a gifted child's talent can be confronting and even "jarring'' when encased in such a precocious package.

But, more than anything else, he says a gifted child gives him faith in the future.

"These kids don't want to show off. All they want to do is learn and absorb as much as they can,'' he said.

"These prodigies really are the peak of humanity. They've got the empathy, the courage, the ethics, the drive and the vision to pull us into the future. These could be the children who could take us to Mars or ensure we have equitable distribution of income or program our robots or redesign our leisure time.''
- The news that the staff at NBN Co are paid handsomely from the public purse comes in the same week that a study showed chief executives' pay in the US to be up to 5000 times that of an average worker in the companies they headed.

It is symptomatic of the era of greed that we live in, an era when people really have lost their sense of shame.

First reported in The Australian, the figures showed 2% of NBN employees, or 120, took home about $300,000 yearly while the chief executive Bill Morrow managed to get by on $3.56 million.

Eight percent of staff, or more than 480, were paid more than $200,000.

How are these fancy wages justified? Well, as far as NBN Co was concerned, it paid out sums like these because it was recruiting the best people.

You would think that that would be reflected in their work, wouldn't you? At least to some extent? Find me a dozen random people who are happy with what NBN Co has wrought in this big, brown land and I will stop complaining.

If we assume that the average NBN Co employee is paid $100,000, then Morrow takes home something like 35 times an average employee's pay.

Which puts him much below the titans of the game who are in the US, his home country: 225 companies were surveyed and in 188, the chief executive's pay could be used to pay more than 100 workers. And at 219 of those companies, the average worker would need to work 45 years to make one year's wages paid to the chief executive.

If NBN Co spent less effort on spin and activities that have little relevance to its prime task - rolling out the best broadband network possible under the existing constraints - one doubts that anyone would fault them for being paid princely amounts.

But the main activity of everyone from Morrow downwards seems to be the disclaiming of responsibility - and that extends even to the TV ads they run.

As the years tick by and the end of the rollout nears, one can be sure that bonuses will also be paid to these superlative workers for their accomplishments.

And what of Morrow? One is pretty sure that he will hang around in Australia after he finishes up with NBN Co, looking for the next company where he can continue his exceptional leadership. Telstra beckons.

Friday, February 2, 2018

Bypassing eJay Downloader/Download Manager, Random Stuff, and More

For those who don't already know this you can often bypass a lot of download managers out there if the 'Download Manager' doesn't really feel like a good 'Download Manager' (there are some genuinely terrible ones out there. Some of the worse I've come across don't even allow for resumption of downloads! Truly bizarre given this day and age?). I recently had this situation with:
They basically want you to use their download manager at:
- to figure this out first startup Wireshark and run it on the relevant network interface controller/device
- then run the download manager/program like so
wine ejay_hiphop5_reloaded_downloader.exe &
- then freeze the the output from Wireshark and do a search request for the names of the files in question. This led to an IP address. Direct connection to IP address seemed to lead to a stall/non-response?
ejay_hiphop5_reloaded_setup.exe
ejay_hiphop5_reloaded_setup-1.bin
 wget 74.47.33.212/deploy/ejay_hiphop5_reloaded_setup.exe
--2018-02-02 05:50:52--  http://74.47.33.212/deploy/ejay_hiphop5_reloaded_setup.exe
Connecting to 74.47.33.212:80... connected.
HTTP request sent, awaiting response... ^C
- examination of the trace led to the following two URIs
- if you're wondering how to do this from Linux CLI here are relevant commands/code...
tcpdump -Ar ejay_hiphop5_trace.pcap | less
00:12:02.811894 IP system.60716 > static.212.33.47.78.clients.your-server.de.http: Flags [P.], seq 1:117, ack 1, win 229, options [nop,nop,TS val 9596671 ecr 1453398521], length 116: HTTP: GET /deploy/ejay_hiphop5_reloaded_setup-1.bin HTTP/1.0
E....@@.@.e....dN/!..,.P.y.R........1......
..w.R.V
GET /deploy/ejay_hiphop5_reloaded_setup-1.bin HTTP/1.0
Host: downloader3.ejay.com
User-Agent: Download Manager
- as you can see below, everything seems fine with wget
Resolving downloader3.ejay.com (downloader3.ejay.com)... 78.47.33.212
Connecting to downloader3.ejay.com (downloader3.ejay.com)|78.47.33.212|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 757552 (740K) [application/x-msdos-program]
Saving to: ‘ejay_hiphop5_reloaded_setup.exe’
ejay_hiphop5_reload 100%[===================>] 739.80K   141KB/s    in 6.4s    

Resolving downloader3.ejay.com (downloader3.ejay.com)... 78.47.33.212
Connecting to downloader3.ejay.com (downloader3.ejay.com)|78.47.33.212|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1729064223 (1.6G) [application/octet-stream]
Saving to: ‘ejay_hiphop5_reloaded_setup-1.bin’
ejay_hiphop   0%[                    ]  12.06K  17.3KB/s
- frustrating thing is that attempting to use aria2c to speed things up didn't really seem to make much of a difference with regards to speed...
aria2c --max-connection-per-server=4 --min-split-size=1M http://downloader3.ejay.com/deploy/ejay_hiphop5_reloaded_setup-1.bin
Download Results:
gid   |stat|avg speed  |path/URI
======+====+===========+=======================================================
a08282|INPR|   215KiB/s|/media/sda1/eJay HipHop 5 Reloaded/ejay_hiphop5_reloaded_setup-1.bin
- funny thing is that in the past I've worked with many people who said that you can't really gain much from a packet trace? It depends on what you're looking at?

Random Stuff:
- as usual thanks to all of the individuals and groups who purchase and use my goods and services
- latest in science and technology
- latest in finance and politics
- latest in defense and intelligence
- latest in animal news
- latest in music and entertainment

Random Quote:
- "The proposed shutdown of exchanges that the justice minister recently mentioned is one of the measures suggested by the justice ministry to curb speculation," the Office for Government Policy Co-ordination said in a statement.
"A government-wide decision will be made in the future after sufficient consultation and coordination of opinions."

The petition was launched last month by an unnamed person and credited the increase in the value of cryptocurrencies with an increase in hope among the people who could now contemplate finding relief from economic distress.

Last year, youth unemployment reach 9.9% and dissatisfaction among young people played a role in electing Moon Jae-in as president in May 2017.

In 2017, South Korea became a major bitcoin trader with 4.5% of all global transactions using the won. This made it the fourth most widely used currency for trading bitcoin, after the US dollar, the yen and the euro.
- “Like his mentor Trump, Hoekstra wears duplicity as a badge of honor. Nothing that they say can be believed or taken at face value. They lie through their teeth and talk with forked tongue,” Etler said.

“This has been the modus operandi of European colonialists and imperialists ever since the Americas, the Middle East, Africa and Asia were invaded and occupied. In other words they are not to be believed or trusted,” he concluded.

Hoekstra, 64, served as the US Representative for Michigan's 2nd congressional district from 1993 to 2011. He was born in the Netherlands and moved to the United States at age 3.

A former Republican congressman for Michigan, Hoekstra served as a national security adviser for Trump during last year’s presidential election campaign.
- Mohan and Kincl said: "Though these changes will affect a significant number of channels, 99% of those affected were making less than US$100 per year in the last year, with 90% earning less than US$2.50 in the last month.

"Any of the channels who no longer meet this threshold will be paid what they’ve already earned based on our AdSense policies. After thoughtful consideration, we believe these are necessary compromises to protect our community."

In April last year, Google set a YouTube Partner Programme requirement of 10,000 views for videos to carry ads. This time, that has been cut further.

Thousands of contractors will review the clips on Google Preferred. Within that section, the company says it will have "a three-tier suitability system" that will “give them appropriate placements for their brand, while understanding potential reach trade-offs", according to the website Recode.
- “The Boosting Business Innovation Programme is providing $18 million to the state’s 11 universities — including $1.5 million to UNSW — and the CSIRO to work with businesses to support innovation.

“The Boost program brings business and research brains together in one place to develop new ideas and opportunities, including through Techvoucher supported research projects.”

LoyaltyX chief executive Philip Shelper said participants in the UNSW trial earned a digital stamp for each purchase, with 10 stamps converting to $10 worth of ether.

“The research results have been extremely positive with students excited by being rewarded with cryptocurrency that can grow in value, providing a major opportunity to re-invent loyalty programmes,” he said.

“Ether is a floating currency, and over the course of the trial participants saw their Ether balance increase in value by 30 per cent. Those that chose to keep their Ether rather than cash it in have seen a gain of over 450%. Cryptocurrencies could provide the first major advancement in loyalty program design since frequent flyer programs were launched in the early 80s.”
- Both senators and House members want AT&T to stop collaborating with Huawei on standards for 5G. They are also seeking an end to the use of Huawei handsets by AT&T's discount branch Cricket, Reuters said quoting Congressional aides.

The news agency quoted Chinese foreign ministry spokesman Lu Kang as saying he did not know anything about the matter, but hoped that China would be given a fair operating environment in other countries.

“We hope that China and the US can work hard together to maintain the healthy and stable development of trade and business ties. This accords with the joint interests of both,” he told a daily news briefing in Beijing.

In keeping with the prevailing sentiment in Congress, a bill has been introduced by Republicans Michael Conaway and Liz Cheney to prevent the government from doing business with Huawei or ZTE, the latter being a Chinese telecommunications and systems and equipment firm.

Back in 2012, the US Congress issued a report that raised concerns about state-sponsored spying related to products made by Huawei, the biggest global maker of telecommunications equipment. The company has denied any such involvement.

In Australia, nearly six years ago, Huawei was denied any role in supplying equipment to the country's national broadband network project, following advice by ASIS, one of Australia's spy agencies.

Last year, Australia put pressure on the Solomon Islands to drop Huawei as the main contractor for an undersea cable project. The Project Honiara undersea cable project is expected to improve the capacity of the local telco, Our Telekom, to handle domestic and international calls.

In December, Britain's Financial Times newspaper reported that Canberra would block the deal with Huawei and instead pay the $100 million cost itself.

The director-general of ASIS, Nick Warner, spoke to Solomon Islands Prime Minister Manasseh Sogavare about the undersea cable deal soon after US Secretary of State Rex Tillerson and Defence Secretary James Mattis visited Australia in mid-June.
https://www.itwire.com/security/81416-us-politicians-push-at-t-to-cut-huawei-ties-report.html
- The majority of people over 75 live alone and about 200,000 older people in the UK have not had a conversation with a friend or relative in more than a month, according to government data.

Most doctors in Britain see between one and five patients a day who have come mainly because they are lonely, according to the Campaign to End Loneliness, a network tackling the health threat isolation poses to the elderly.
- “The United States has a lot of expensive weapons to sell, the Saudis have lots of money. So they come to a deal. The only problem here is the weapons are not going to solve the problem,” Jones said.

“This is not the first time that the Saudis have bought weapons from the United States.  They have already spent billions of dollars in weapons and those weapons cannot prevent simple things like the fact that the Yemenis have fired two missiles which had landed in Riyadh,” he stated.

“These missiles are not anything sophisticated. They are basically the re-worked Scud missiles of the sort that Iraqis, Saddam Husain, fired in Israel during the Iraqi war,” the analyst noted.

“They had been welded together with bigger gas tanks but they are the same missiles. This is a primitive missile. The patriot missile system cannot block them. So why are they buying more patriot missiles?” he asked. “Well, because this is what they do. They buy, the United States sells, and that’s the whole story here.”

Automated Government and Getting Country Issues via AI/ML, What is Vabbing?, and More

Automated Government and Getting Country Issues via AI/ML: - I've been researching the possibility of Semi to Fully Automated gover...