Things I can't remember and Handheld Pentesting, Nokia Internet Tablet N810, Archos PMA400, Android
Saturday, October 26, 2013
HP 10.10 DVD Network boot
Here is my entry for my pxe menu
LABEL HP_FWDVD_10.10
MENU LABEL 6) Automatic Firmware Update Version 10.10
KERNEL /hpcd/10v/vmlinuz
APPEND initrd=/hpcd/10v/hpfw-1010-initrd.img media=net rw root=/dev/ram0 d3bug ramdisk_size=782392 init=/bin/init loglevel=3 ide=nodma ide=noraid nopat pnpbios=off vga=791 splash=silent hp_fibre showopts noexec32=off numa=off nox2apic TYPE=AUTOMATIC iso1=nfs://IP/exports/hp/FW1010.iso iso1mnt=/mnt/bootdevice pci=bfsort
To fix the initrd
mkdir /tmp/initrd.fix
cd /tmp/initrd.fix
gunzip -c /data/kickstart/images/hpfw-1010/system/initrd.img | cpio -i
sed -i 's/NET_MODULES=.*$/NET_MODULES="e100 e1000 igb qlcnic tg3 bnx2 bnx2x"/' etc/initrd.functions
sed -i 's/dhcpcd -t 45/dhcpcd -L -t 30/' sbin/netconfig.sh
find . | cpio --create --'format=newc' | gzip > /data/kickstart/tftpboot/hpfw-1010-initrd.img
info from here
http://h30499.www3.hp.com/t5/ITRC-ProLiant-Deployment/PXE-Boot-Image-from-an-ISO/m-p/5681899#M9269
Here is a copy of the hpfw-1010-initrd.img patched
https://dl.dropboxusercontent.com/u/21180906/HP/10.10/hpfw-1010-initrd.img
Tuesday, October 8, 2013
Random single user mode stuff
How to boot s390x in single user mode
Connected to server x.x.x.x
zPXE MENU
---------
** Error connecting to server: no profiles found **
1. Exit to CMS shell [IPL CMS]
Enter Choice -->
or press to boot from disk [DASD 2xxx]
Booting from DASD 2xxx...
00: zIPL v1.8.2-36.el6 interactive boot menu
00:
00: 0. default (2.6.32-131.39.1.el6.s390x)
00:
00: 1. 2.6.32-131.39.1.el6.s390x.debug
00: 2. 2.6.32-131.39.1.el6.s390x
00: 3. 2.6.32-131.0.15.el6.s390x.debug
00: 4. linux-2.6.32-131.0.15.el6.s390x
00:
00: Note: VM users please use '#cp vi vmsg '
00:
#cp vi vmsg 1 single // should do the trick
How to boot ppc64 in single user mode
When grub is used this part is pretty simple.
But when yaboot is used its a little different
Config file read, 1024 bytes
Welcome
Welcome to yaboot version 1.3.13 (Red Hat 1.3.13-14.el5)
Enter "help" to get some basic usage information
boot:
linux single // should do the trick
// came across another time where selinux blew up . used enforcing=0
How to boot arm in single user mode
coming soon
Connected to server x.x.x.x
zPXE MENU
---------
** Error connecting to server: no profiles found **
1. Exit to CMS shell [IPL CMS]
Enter Choice -->
or press
Booting from DASD 2xxx...
00: zIPL v1.8.2-36.el6 interactive boot menu
00:
00: 0. default (2.6.32-131.39.1.el6.s390x)
00:
00: 1. 2.6.32-131.39.1.el6.s390x.debug
00: 2. 2.6.32-131.39.1.el6.s390x
00: 3. 2.6.32-131.0.15.el6.s390x.debug
00: 4. linux-2.6.32-131.0.15.el6.s390x
00:
00: Note: VM users please use '#cp vi vmsg '
00:
#cp vi vmsg 1 single // should do the trick
How to boot ppc64 in single user mode
When grub is used this part is pretty simple.
But when yaboot is used its a little different
Config file read, 1024 bytes
Welcome
Welcome to yaboot version 1.3.13 (Red Hat 1.3.13-14.el5)
Enter "help" to get some basic usage information
boot:
linux single // should do the trick
// came across another time where selinux blew up . used enforcing=0
How to boot arm in single user mode
coming soon
Tuesday, September 3, 2013
Network boot HPS update cd
Here is what my working pxe entry looks like
LABEL HP_FWDVD_9.30
MENU LABEL 5) Manual Firmware Update Version 9.30
KERNEL /hpcd/vmlinuz
APPEND initrd=/hpcd/initrd.img media=cdrom rw root=/dev/ram0 ramdisk_size=815744 init=/bin/init loglevel=3 ide=nodma ide=noraid nopat pnpbios=off vga=791 splash=silent hp_fibre showopts noexec32=off numa=off nox2apic TYPE=MANUAL iso1=nfs://yourhost/exports/hp/FW930.iso iso1mnt=/mnt/bootdevice
LABEL HP_FWDVD_9.30
MENU LABEL 5) Manual Firmware Update Version 9.30
KERNEL /hpcd/vmlinuz
APPEND initrd=/hpcd/initrd.img media=cdrom rw root=/dev/ram0 ramdisk_size=815744 init=/bin/init loglevel=3 ide=nodma ide=noraid nopat pnpbios=off vga=791 splash=silent hp_fibre showopts noexec32=off numa=off nox2apic TYPE=MANUAL iso1=nfs://yourhost/exports/hp/FW930.iso iso1mnt=/mnt/bootdevice
Friday, July 26, 2013
Network speed tests in house -- (edited)
Server Seagate dockstar 1GB port hosting 1GB file via http
Download command
wget --output-document=/dev/null http://host/disk.img
Clients
T510 fedora Wired
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
20% [===> 224,403,456 50.7MB/s eta 16s
T510 fedora wireless with airlink wireless N
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
0% [ ] 4,665,175 869KB/s eta 19m 42
OLPC using usb 10/100 linksys
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
0% [ ] 3,056,447 809KB/s eta 22m 38s
Odroidu2 Wired (10/100 NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
5% [=======> ] 63,779,235 11.2MB/s eta 86s
Rpie Wired (10/100 NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
2% [==> ] 29,108,451 6.22M/s eta 2m 31s
Readynas Wired (GB NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
0% [> ] 8,814,592 1.79M/s eta 9m 33s
Netgear Stora Wired (GB NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
17% [===========> ] 192,380,928 39.7M/s eta 22s
wdlive wifi airlink wireless N ( went from 200k to 800K)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
1% [> ] 13,298,607 569K/s eta 32m 31s
wdlive hard wire (cat 6 cable)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
1% [ ] 11,470,775 1.08M/s eta 15m 31s
What did all this tell me. That my wifi card on airlink wireless N sucks, and that I need to tweak my wifi settings a lot. Another note the wdlive box has terrible network performance
Download command
wget --output-document=/dev/null http://host/disk.img
Clients
T510 fedora Wired
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
20% [===> 224,403,456 50.7MB/s eta 16s
T510 fedora wireless with airlink wireless N
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
0% [ ] 4,665,175 869KB/s eta 19m 42
OLPC using usb 10/100 linksys
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
0% [ ] 3,056,447 809KB/s eta 22m 38s
Odroidu2 Wired (10/100 NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: ‘/dev/null’
5% [=======> ] 63,779,235 11.2MB/s eta 86s
Rpie Wired (10/100 NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
2% [==> ] 29,108,451 6.22M/s eta 2m 31s
Readynas Wired (GB NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
0% [> ] 8,814,592 1.79M/s eta 9m 33s
Netgear Stora Wired (GB NIC)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
17% [===========> ] 192,380,928 39.7M/s eta 22s
wdlive wifi airlink wireless N ( went from 200k to 800K)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
1% [> ] 13,298,607 569K/s eta 32m 31s
wdlive hard wire (cat 6 cable)
HTTP request sent, awaiting response... 200 OK
Length: 1073741824 (1.0G) [application/octet-stream]
Saving to: `/dev/null'
1% [ ] 11,470,775 1.08M/s eta 15m 31s
What did all this tell me. That my wifi card on airlink wireless N sucks, and that I need to tweak my wifi settings a lot. Another note the wdlive box has terrible network performance
Wednesday, June 12, 2013
Showing All nics with link using bash
# for i in $(cat /proc/net/dev | grep ':' | cut -d ':' -f 1); do echo "Interface : $i" " $(ethtool $i | grep Link)"; done
Interface : lo Link detected: yes
Interface : virbr0-nic Link detected: no
Interface : virbr0 Link detected: no
Interface : em1 Link detected: no
Interface : wlan0 Link detected: yes
Tuesday, June 4, 2013
tf101 usb battery
A while back I got this "Rechargeable Laptop Battery" from a brookstone outlet a few months ago for about 35$. Not bad since its 145.
http://www.brookstone.com/U2O-Battery-Laptop
So here is what I did to it to make it work for my tf101. The pictures are pretty self explanatory
Tuesday, May 21, 2013
Download a script and run it and log output
Run on box a
ssh root@carebears-hv-01.pony.com "wget http://unicorn.com/test " -O - | sh - 2>&1 | tee log_file.txt"
File on box b "unicorn"
##cat test
#!/bin/sh
echo "this is a test"
output on box c "carebears"
# cat log_file.txt
this is a test
Look its magic
Monday, May 20, 2013
ppc64 lpar vios stuff
Vios stuff
shows state of lpars
lssyscfg -r lpar -F lpar_id,name,state
activate lpars
chsysstate -o on -b norm -r lpar -n name
find out the name of the managed system
lssyscfg -r sys -F name
Change the name of a managed system
chsyscfg -r sys -m Server-8406-xx-SNxxxxx -i "new_name=xxxx-xxxxx-xx-01"
ppc64 lpar vios nic settings
remove bad settings
shows state of lpars
lssyscfg -r lpar -F lpar_id,name,state
activate lpars
chsysstate -o on -b norm -r lpar -n name
find out the name of the managed system
lssyscfg -r sys -F name
Change the name of a managed system
chsyscfg -r sys -m Server-8406-xx-SNxxxxx -i "new_name=xxxx-xxxxx-xx-01"
ppc64 lpar vios nic settings
remove bad settings
$ oem_setup_env
# ifconfig enX down detach
# rmdev -dl enX
# rmdev -dl entX
# rm dev -dl etX
# cfgmgr
find out your cards
$ lsdev | head -n 28
show your mapping to sea nics
$ lsmap -net -all
mkvdev -sea ent0 -vadapter ent4 -default ent4 -defaultid 1
mkvdev -sea ent1 -vadapter ent5 -default ent5 -defaultid 123
chdev -dev ent0 -attr state=up -restoreroute
Use smit to start dhcp on the nic
get macs
entstat en3
Monday, March 18, 2013
How to get serial numbers from a sun box
How to get serial numbers from a sun box
bash-3.2# smbios -t SMB_TYPE_SYSTEM
ID SIZE TYPE
1 159 SMB_TYPE_SYSTEM (system information)
Manufacturer: Sun Microsystems
Product: Sun -----
Version:
Serial Number:xxxx
UUID: ff200008-ffff-ffff-ffff-xxxxxxxxx
Wake-Up Event: 0x6 (power switch)
SKU Number: xxxxxxxxx
Family: Sun ---
Another good command
prtdiag -v
Thursday, March 14, 2013
dns and dhcp loops of death
dhcp loop fun
for i in {1..2};do index=$(($i+28-1)); echo -e "\t\thost war-vm-$i.super.mega.ultra.pony.com {\n\t\t\thardware ethernet xx:xx:xx:xx:xx:$index;\n\t\t\tfixed-address war-vm-$i.super.mega.ultra.pony.com;\n\t\t}"; done
Give you this sexy output
host war-vm-1.super.mega.ultra.pony.com {
hardware ethernet xx:xx:xx:xx:xx:28;
fixed-address war-vm-1.super.mega.ultra.pony.com;
}
host war-vm-2.super.mega.ultra.pony.com {
hardware ethernet xx:xx:xx:xx:xx:29;
fixed-address war-vm-2.super.mega.ultra.pony.com;
}
dns fun
if you want to generate entry's from war-vm-1 to 60 but your ip dose not start at 1.
its time do have your dns server do some math
super.mega.ultra.pony.com
$GENERATE 7-67 war-vm-\${-6,0} A 66.66.66.$
66.66.66
$GENERATE 7-67 $ PTR war-vm-\${-6,0}.super.mega.ultra.pony.com.
Saturday, March 2, 2013
Stereo Fun with Sony MEX BT2700
About 5 months ago I installed my Sony MEXBT2700 in my 2011 Nissan Altima. And its working great. However I lost my steering wheel controls. So I just ordered the Axxess Metra ASWC-1 Universal Steering Wheel Control Interface which is listed compatible with my car. Unfortunately it is not so sent it back. Maybe I'll look for another product another time.
UPS on Netgear ReadyNas Duo
On the Netgear ReadyNas Duo you can add a UPS to prevent data loss.
But how do you manage that with out being present or able to login to your ready nas.
With the cli of course. First you have to setup the webui to handle the connection.
To do this you must login to the readynas
Click System
>> Power
>>> Under UPS Configuration you can select Enable network monitoring of attached UPS
But how do you manage that with out being present or able to login to your ready nas.
With the cli of course. First you have to setup the webui to handle the connection.
To do this you must login to the readynas
Click System
>> Power
>>> Under UPS Configuration you can select Enable network monitoring of attached UPS
>>> Now you can enter your Ip of the host you want to check the ups status.
Here is what the output looks like
~]# upsc UPS@172.x.x.x
battery.charge: 100
battery.chemistry: PbAc
battery.runtime: 1688
battery.voltage: 27.6
driver.name: hidups
driver.parameter.lowbatt_pct: 0
driver.version: 2.0.5
ups.mfr: APC
ups.model: Back-UPS XS 1500 LCD
ups.serial: JB0648006890
ups.status: OL
take your battery.runtime and / 49 and you get your time in mins
so mine is
$ bcalc 1688/49
34.4489
34 mins of run time
hmc clean up things
show disk stats
monhmc -r disk -n 0
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda2 16121184 8686268 6616004 57% /
udev 1036752 132 1036620 1% /dev
/dev/sda3 6040320 1775564 3957916 31% /var
/dev/sda7 8056524 158620 7488652 3% /dump
/dev/sda8 32297564 203056 30453872 1% /extra
Zero out
chhmcfs -o f -d 0
Watch for /var filling up past 50%
If /var ever fills up past 50% you will have trouble logging in via the web or ssh .
Thursday, February 28, 2013
synergyc fun over ssh
Client side
synergyc -f localhost
ssh -f -N -L localhost:24800:host_server:24800 host_server
Server Side
cat /etc/synergy.conf
section: screens
t520:
t420:
end
section: aliases
t420:
t420s
t520:
t520.local
end
section: links
t520:
down = t420
t420:
up = t520
end
section: options
screenSaverSync = false
synergys -f --config /etc/synergy.conf
Wednesday, February 27, 2013
About my system
APEVIA X-Superalien ATXA6SW-BL/500 Blue Aluminum Server Computer Case
CORSAIR CMPSU-750TX 750W ATX12V
CORSAIR DOMINATOR 4GB (2 x 2GB) 240-Pin DDR2 SDRAM DDR2 1066
ASUS Striker II Formula LGA 775 NVIDIA nForce 780i SLI ATX Intel Motherboard
Intel Core 2 Quad Q6600 Kentsfield 2.4GHz LGA 775 Quad-Core Processor BX80562Q6600
Rosewill RCX-Z775-EX 92mm 2 Ball CPU Cooler
2 Western Digital Caviar Black WD1002FAEX 1TB 7200 RPM SATA 6.0Gb/s 3.5
nvidia geforce 9800 GTX
Tuesday, February 19, 2013
using screen as serial terminal
screen -L /dev/ttyUSB0115200 cs8
- /dev/ttySX:
- baud_rate: 300 1200 9600 19200 38400 57600 115200
- cs8 or cs7: eight (or seven) bits per byte.
- ixon or -ixon: software flow-control (CTRL-S/CTRL-Q) sending data.
- ixoff or -ixoff: software flow-control receiving
- istrip or -istrip: Clear (or keep) the eight bit in each received byte.
Example connecting to power pc
screen -L /dev/ttyUSB0 19200 vt100
Thursday, February 14, 2013
UPS on NETGEAR ReadyNAS Duo
[root@fedora-arm ~]# upsc UPS@172.x.x.x
battery.charge: 100
battery.chemistry: PbAc
battery.runtime: 1036
battery.voltage: 27.2
driver.name: hidups
driver.parameter.lowbatt_pct: 0
driver.version: 2.0.5
ups.mfr: APC
ups.model: Back-UPS XS 1500 LCD
ups.serial: JB0648006890
ups.status: OL
Subscribe to:
Posts (Atom)