000webhost

Web hosting
Showing posts with label Open Source. Show all posts
Showing posts with label Open Source. Show all posts

Monday, April 16, 2018

Dealing with Legacy Applications, Random Stuff, and More

- this post is to help outline some methods for dealing with legacy applications...
- compatibility mode works for a lot of programs but sometimes you don't have a choice but other means
- emulation layers such as Wine, Bochs, DosBox, etc... There has even been talk of emulators for older operating systems (such as DOS and Windows 95/98) out there
- watch for strangeness when using emulation layers. Performance issues, bits and pieces not quite fitting in, etc... Be prepared to have to do some work to make things work properly. Some of the underlying programs can be difficult to use so look out for shell, optimisation type programs and templates...
best settings theme hospital dosbox
dos games on windows 7
theme hospital runs slow in dosbox
Theme Hospital - Bullfrog (1997)
windows 98 emulation layer
9xbox fork of DosBox specifically for Windows.
- try running things in a separate virtual machine
- try running things in a seperate server
- some programs re-used backend data to create a new frontend. Total number of applications that have this done is minimal though. The total number of people who can genuinely reverse engineer binary (even text) file formats and programs out there is relatively small based on what I've seen. Tips on this elsewhere on my blog...
theme hospital on windows 7
hospital-22012015.zip
- if you're lucky you search for newer version that is still compatible with your operating system. The best way to achieve this is via basic web search. Thankfully, a lot of older/legacy software allows for re-use of serials along the chain
"delphi 3" on "windows 7"
"delphi 4" on "windows 7"
game maker
- if that fails look at P2P locations for file names, etc... Worry about the legitimacy of P2P sites because they may be carrying trojans and/or spyware. If it's your last resort use something like virustotal.com as a bare minimum
torrent delphi
delphi 7 and 2006 code compatibility
- else, you may need to build a custom 'fuzzer'. Conceptually, looking for 200 as opposed to 404 return status. Experience tells me that for the most part file fuzzing is a useless technique especially when the company is 'larger then average'. Larger then average entails more files which entails unique filenames and directory structures which can not be easily guesstimated which means a fuzzer is relatively useless. It needs to be an intelligent fuzzer which combines spidering/crawling capability whenever possible (look over my past work for further details). For anyone just looking to try/test new software before public release this is a nice way of doing it. Sample code is on my website and blog for anyone who's interested (look for crawling and spidering software samples as well)...
web file fuzzer
- you'll need to keep up with updates and services packs for a lot of Microsoft (and some other company's) software even if it may be 'legacy software'. The painful thing is that the updates often only become security updates later on which means you'll lose functional updates down the line at some point. This generally applies to both commercial as well as Free and Open Source (FOSS) software
microsoft sql server desktop engine
sql server 2005 service pack 3
How To Apply the Microsoft® SQL Server® 2005 Service Pack 3
SQLServer2005SP3-KB955706-x64-ENU.exe
- look for alternate/compatible solutions. For instance Delphi and Open Pascal/Lazarus are very cross compatible based on what I've read online. alternativeto.net is a great website to look at alternate choices
sample code delphi
open source lazarus projects
open source delphi projects
delphi free 2010
visual studio online
- nightmare scenario is when you have the license but have lost the serial number. Thankfully, prior to the world of authentication a lot of software was reliant on pure serial numbers for 'registration' and to move a product from trial to full . In fact, there were serial databases for programs online (such as Serials2K). For those programs whose serials can't be found in such databases they can often be found online. Sometimes, there are methods to extract the code that you used to install your software originally (from the Windows registry or some other file) but this often requires a specialised utility
extract windows 7 serial number
https://www.howtogeek.com/206329/how-to-find-your-lost-windows-or-office-product-keys/
https://www.lifewire.com/how-to-find-your-windows-7-product-key-2625112
Baixar Delphi 7 + Serial - YouTube
Video for delphi 7 serial number
BLOG : www.phsoft.blogspot.com
Delphi 7 : Serial : 6AMD-PKG68E-DB8PP7-9SFE Key : 3QH-9QW
delphi 7 enterprise serial
Serialkey preview: 6AMD-PKG68E-DB8PP7-N7GE
Key: S6J-8AW
- for certain software you don't really have a choice but to deal with crackers since activation/registration systems are no longer online. Multiple types of bypassing: debuggers, crackers (similar to the devices that you see in the movies that are used to bypass physical security systems. See my book on 'Cloud and Internet Security' for further details regarding this), etc... I may supply code for a simplistic 'cracker' later on but fundamentally it's not that much different then some of the 'bot code' that I have mentioned elsewhere on my blog (it will be so rudimentary that it will be effectively useless. Most modern registration systems rely on activation schemes now or else multi layers of serial numbers which are unrealistic to crack for most people without some 'genuine hard work')
http://dtbnguyen.blogspot.com/2015/08/cracking-combination-lock-some-counter.html
http://dtbnguyen.blogspot.com/2015/07/ableton-and-ableton-push-hacking.html
http://dtbnguyen.blogspot.com/2015/07/python-decompilation-max4live.html
http://dtbnguyen.blogspot.com/2015/05/installing-logic-9-under-mac-os-x-under.html
http://dtbnguyen.blogspot.com/2017/07/installing-logic-x-under-mac-os-x-under.html
http://dtbnguyen.blogspot.com/2011/03/eeepc-recovery-without-recovery.html
http://dtbnguyen.blogspot.com/2012/05/fujitsu-stylistic-st4120-recovery.html
http://dtbnguyen.blogspot.com/2018/03/midi-fighter-pro-firmware-flashing.html
http://dtbnguyen.blogspot.com/2011/08/unlocking-your-phonemodem.html
algorithm iterating serial alphanumeric
java password cracker
find serial ollydbg
delphi password cracker
- there are obviously interesting methods to protect/defend software against licensing/registration 'attacks'. Activation is obvious but I've often seen cases where they've had no choice but to drop it because it caused more problems then it fixed
visual studio 2005 activation crack
1. Check license repeatedly
2. Use multiple licensing checking layers
3. Use encrypted dlls
4. Check for the hash of your exe/dll to detect tampering
5. Do not display failures immediately
6. Don't use explicit error messages
7. Crash or fail or output incorrect results when license check fails
8. Embed user information in generated licenses
- go after newer downloads that are compatible with your files and Operating System. Like I said you can do a search, use/build a custom fuzzer, etc... you should be able to find something useful especially if the program registration system is still compatible with your version. Note, Multi-National and Trans-national companies (MNC/TNC) have this problem as well as smaller firms (they rarely ever look to see whether a user has been authenticated prior to allowing downloads)...
http://dtbnguyen.blogspot.com/2018/02/bypassing-ejay-downloader-manager.html
search based on MD5 checksum
9d4bac568aced7f1f82d4a44124fb37c 
ID: 30352, Delphi and C++Builder 10 Seattle ISO
download delphi
"delphi 2006" download url
"delphi 2010" download url
Delphi 2010 and C++Builder 2010 ISO
bds2006disk1.iso
[   ] BDS2006Disk1.iso  540.24Mb  October 8 2010 at 05:28
[   ] BDS2006Disk2.iso  494.24Mb  October 8 2010 at 05:28
[   ] BDS2006Disk3.iso  517.60Mb  October 8 2010 at 05:28
[   ] BDS2006Disk4.iso  224.03Mb  October 8 2010 at 05:28
[TXT] md5-суммы.txt  194.00b  October 8 2010 at 05:18
Delphi_C++Builder2009.iso
HTTP/1.1 200 OK
Server: Apache
ETag: "0b4c1e5542dd7cc169e5d85044a9cb33:1363822171"
Last-Modified: Wed, 20 Mar 2013 23:16:38 GMT
Accept-Ranges: bytes
Content-Length: 2021038080
Content-Type: application/octet-stream
Date: Sun, 08 Apr 2018 08:50:00 GMT
Connection: keep-alive
delphi 2006 iso
- company mergers aren't necessarily a bad thing. Most of the time they just change domains but not file naming and directory structure when they 'switch servers'
- if you can't actually get a copy of the legacy software in question online then try op-shops, specialist software boutiques, retailers, libraries, user/enthusiast groups, organisations which are likely to have a 'spare legacy copy', etc... If not too difficult then try building something from the outset by yourself that is compatible (requires 'reverse engineering' skills though as mentioned above)
http://www.computerbank.org.au/shop/stocklist/
- as an aside, if you've worked in this are you'll realise that there is basically no such as thing as genuine 'computer security'. There's only more and less security? It's much easier to attack then defend. When someone tells you that they can break into a system it's not much a statement if you understand the defender's perspective. Most of the people you see/hear about (even professionals) aren't genuine 'security experts' in the way that the average person is taught. Listen to a lot of their debates and lectures and it becomes obvious that a lot of their work is not that much different from a variation from a lot of the scripts that I use on this blog/website?
The Big Security Debate - Sydney Edition
https://www.youtube.com/watch?v=yVY8w49bHgY

Random Stuff:
- as usual thanks to all of the individuals and groups who purchase and use my goods and services
- latest in science and technology
usb graphics for crypto mining
usb graphics card mining 
Windows Mobile for Government - Common Criteria certification
cheat theme hospital reputation
- latest in finance and politics
- latest in defense and intelligence
- latest in animal news
- latest in music and entertainment

Random Quotes:
- Pogue claims the report also shatters another common perception of cyber security, “that of the teenage hacker living in a basement”.

The report found that three-quarters of respondents were college graduates and nearly one-third (32%) had post-graduate degrees. The majority (57%) worked for medium-sized, large, or enterprise businesses.

“When organisations develop their cyber security strategies, they may have IT, legal, risk, and human resources teams at the table but the one person they never invite is the bad guy,” Pogue said. “It’s no wonder that so many security strategies are misdirected.

“The Nuix Black Report 2018 is an opportunity to bring the adversary to the table and have the hackers themselves tell you what’s most effective for your security efforts.”
- These results suggest the Iron Dome debate has been too polarized. The system’s initial value may have been largely symbolic. But it later become very influential.

That’s good news for Israel and its American funder. It’s also reassuring for potential Iron Dome buyers facing missile threats in other parts of the world.

Only Azerbaijan has purchased any systems so far. But the U.S. Army may buy some for short-range air defence. (Canada only bought the radar.)

However, the system isn’t “the end of rockets.” Attackers can counter interceptors by firing rockets in large batches. Indeed, Israel’s opponents keep acquiring more rockets. Hamas in strife-filled Gaza reportedly has 10,000. Hezbollah in Lebanon has 120,000. That latter arsenal would severely strain Israeli interceptors during any future “Northern War.”

Similarly, sophisticated attackers use technology to make their missiles hard to intercept. In their Syria strike, America and its allies used difficult-to-detect cruise missiles. Defenders can’t intercept what their radars can’t see.
at
Labels: , , , , , , , , ,

Saturday, December 10, 2011

Open Source Routing Research Notes

If you've ever used Vyatta before you've probably noticed its very Cisco-ish syntax even though it clearly has a Linux heritage. I've been working on a project that has required a better understanding of how this is ultimately achieved. Quagga, Bird and Xorp came into my sights after a preliminary search as well as a number of other 'younger' projects.

Initially, Bird/Xorp configuration seems to be a lot less readable than Quagga but simpler in that it relies on only one file. Edge to Quagga, then Bird and finally Xorp. Research indicates that Xorp may have been the default open source routing engine prior to Quagga. Whitepapers suggest that open source routing software on commodity hardware is able to achieve similar or superior speeds/performance to that of proprietary solutions at a fraction of the cost. Learning curve is reduced by use of similar syntax of Cisco/JUNOS CLI and of course open nature of routing protocols. Documentation for all options seem to be reasonable.





"zebra is an IP routing manager. It provides kernel routing table updates, interface lookups, and redistribution of routes between different routing protocols.", http://www.quagga.net/docs.php

# and ! used to mark comments in configuration files.

telnet direct to 2601 (telnet to higher ports to configure/monitor the other protocols) and configure/monitor using a Cisco like CLI interface. Like Cisco/JUNOS CLI interface, modes (enable, global config, interface, etc...), commands (show, no, router, etc...), and auto-completion of commands are also supported.

Most protocols major protocols catered for except for proprietary ones such as IGRP and EIGRP. For example, RIP (v1/v2), RIPng (handles IPv6),  OPSF (v2/v3 which handles IPv6), BGP, even ISIS is supported.

Cisco style access-list command and complete support for IPv6 available.


If you're familiar with the Cisco CLI then you'll be completely at home with the Quagga interface. Commands are identitical in most cases. In fact, its a fairly good way of revising for CCNP BSCI, and other Cisco certification exams if you don't have access to actual equipment or simulation software.



Although I haven't attempted to use this apparently 'SMUX' allows you to reference information from the various Quagga services by providing a bridge between SNMP and Quagga. A more apt description would be that, "SMUX is the snmp multiplexing protocol (RFC 1227). It can be used by an snmp agent to query variables maintained by another user-level process."

While I was doing all this I decided to 'clean up' a number of other anomalies on my system. For example, 'kdump' was not starting on boot. Obvious solution would be to simply remove kdump package but I just wanted to make it work. Thought it was just a non-configuration issue. Went through the uncommenting of the default options but it still wasn't starting. Went through the relevant 'init' file. Noticed that it required a 'crashkernel' parameter (eg. crashkernel=128M@128M) in order for it to work (/proc/cmdline contains kernel boot parameters if you're curious. While other /proc files can be written to this file was not responsive to chmod and being written to even if you are root). Ultimately, only way to test is to modify kernel boot parameters via /boot/grub/menu.1st. However, then noticed that kernel wasn't configured with this option available. Hence, boot was not possible. Had to update kernel and kernel source (required for my work with other packages). Thereafter, kdump startup was now possible (if you're curious "echo 1 > /proc/sys/kernel/sysrq", "echo c > /proc/sysrq-trigger" can be used to create a kernel crash situation if you're curious).

yum update kernel
yum update kernel-headers
yum update kernel-devel

Once again, noticed that performance when MTU is 1392 is much better than 1500 during download of packages via yum. Upgrade of kernel  'broke' my VirtualBox setup though. Obviously, suspected kernel module issues so went to /usr/src/vbox_host-* and had to re-run 'make' to re-recompile the relevant kernel modules and re-register relevant modules. Noticed later on that there was an option for the vboxdrv init file (setup) which was 'more correct' though. Used this and VirtualBox startup was all good again. It was a bit easier with VMWare Server though. Kernel modules are automatically re-compiled/re-registered and setup on startup.

Following is useful if you're interested in more about about kernel dump analysis,


While completing all of the above, I remembered previous work regarding PKI certificates to setup OpenVPN. Looked for mkcert.sh/CA.pl and found but also noticed tinyca2 and openvas-mkcert. tinyca2 is a very simple GUI based application for managing certificates while openvas-mkcert is CLI based. Haven't tried using these certificates with OpenVPN as yet though. Will experiment another time.


http://en.wikipedia.org/wiki/List_of_free_and_open_source_software_packages

- as usual thanks to all of the individuals and groups who purchase and use my goods and services
http://sites.google.com/site/dtbnguyen/
http://dtbnguyen.blogspot.com.au/
at
Labels: , , , ,
Subscribe to: Posts (Atom)

List Biggest Employers in New Zealand, Random Stuff, and More

#################### START new-zealand START #################### !!!!!!!!!!!!!!!!!!!! DATE Thu 13 Aug 12:54:23 AEST 2026 DATE !!!!!!!!!...