(:
Breaking Out of Citrix and other Restricted Desktop Environments Pen Test Partners.
Archive for the ‘Windows’ Category
Breaking Out of Citrix and other Restricted Desktop Environments Pen Test Partners
Posted by jpluimers on 2015/09/04
Posted in Power User, Remote Desktop Protocol/MSTSC/Terminal Services, Windows | Leave a Comment »
Translating non-English error messages into English
Posted by jpluimers on 2015/08/06
For a long time, I’ve persuading people to install English versions of their operating systems (especially on server side) at least for some parts of their environment.
The main reason is that searching for English error messages gives you a much bigger chance of finding the cause than non-English ones.
I’m still standing by that recommendation, but life has become a bit easier because of these two sites that offer quite good translations of Windows Error messages in many languages to English:
- About FindErr.NET – catalog of error message translations.
- About – All error messages translated to their english version.
I like the latter a bit more because of the overview, but the former more because of the catalog.
The way I landed there was because of a search for “Cannot SetData on a frozen OLE data object” which I bumped into for one of my C# .NET projects.
–jeroen
Share this:
Posted in .NET, C#, Development, Power User, Software Development, Windows, Windows 7, Windows 8, Windows 8.1, Windows 9, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista | Leave a Comment »
logparser – Wikipedia, the free encyclopedia
Posted by jpluimers on 2015/07/31
Thanks to Sebastian Gingter for pointing me at Logparser:
Logparser […] powerful, versatile tool that provides universal query access to text-based data such as log files, XML files and CSV files, as well as key data sources on the Windows operating system such as the Event Log, the Registry, the file system, and Active Directory. The results of the input query can be custom-formatted in text based output, or they can be persisted to more specialty targets like SQL, SYSLOG, or a chart.
Common use:
$ logparser [options] [SQL expression]
–jeroen
via logparser – Wikipedia, the free encyclopedia.
Share this:
Posted in Development, IIS, Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows 9, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 | Leave a Comment »
security – How do I view the contents of a PFX file on Windows? – Super User
Posted by jpluimers on 2015/07/27
Dumping any kind of certificate file gives you access to more details than the Windows UI usually shows you.
This is especially handy when checking out errors or issues (which can be very difficult to track down).
For binary PFX files, the certutil and openssl commands come in very handy:
Some options to view PFX file details:Open a command prompt and type: certutil -dump Install OpenSSL and use the commands to view the details, such as: openssl pkcs12 -info -in unverified.
OpenSSL is a separate download (from my OpenSSL category of articles, see Some command-line tips for OpenSSL and file format pfx, p12, cer, crt, key, etc. conversion of certificates, keys) to get it.
CertUtil now ships with Windows by default (it wasn’t in the Windows XP era, I’m not sure about Windows Server 2003).
Here is the CertUtil help for dumping certificate information;
Dump certificate file information CertUtil [Options] [-dump] [File] Options: [-f] [-silent] [-split] [-p Password] [-t Timeout]
Note:
- the [-v] option is not listed, but does work; it will give a more verbose dump.
- [-dump] also works other certificate file extensions like .p7b files.
Here is the OpenSSL help for dumping pkcs12 information:
openssl pkcs12 [-export] [-chain] [-inkey filename] [-certfile filename] [-name name] [-caname name] [-in filename] [-out filename] [-noout] [-nomacver] [-nocerts] [-clcerts] [-cacerts] [-nokeys] [-info] [-des | -des3 | -idea | -aes128 | -aes192 | -aes256 | -camellia128 | -camellia192 | -camellia256 | -nodes] [-noiter] [-maciter | -nomaciter | -nomac] [-twopass] [-descert] [-certpbe cipher] [-keypbe cipher] [-macalg digest] [-keyex] [-keysig] [-password arg] [-passin arg] [-passout arg] [-rand files] [-CAfile file] [-CApath dir] [-CSP name]
The pkcs12 command allows PKCS#12 files sometimes referred to as PFX files to be created and parsed. PKCS#12 files are used by several programs including Netscape, MSIE and MS Outlook.
There are a lot of options the meaning of some depends of whether a PKCS#12 file is being created or parsed. By default a PKCS#12 file is parsed. A PKCS#12 file can be created by using the -export option see below.
-in filenameThis specifies filename of the PKCS#12 file to be parsed. Standard input is used by default.
…
-infooutput additional information about the PKCS#12 file structure, algorithms used and iteration counts.
and the OpenSSL help for dumping pkcs7 information:
openssl pkcs7 [-inform PEM|DER] [-outform PEM|DER] [-in filename] [-out filename] [-print_certs] [-text] [-noout] [-engine id]
The pkcs7 command processes PKCS#7 files in DER or PEM format.
-inform DER|PEM; This specifies the input format. DER format is DER encoded PKCS#7 v1.5 structure.PEM the default is a base64 encoded version of the DER form with header and footer lines.
…
-print_certs; prints out any certificates or CRLs contained in the file. They are preceded by their subject and issuer names in one line format.
-text; prints out certificates details in full rather than just subject and issuer names.
…
Notes:
- do not forget the -inform DER option to specify a binary .p7b file.
- the -text option gives you more verbose information
–jeroen
via:
- security – How do I view the contents of a PFX file on Windows? – Super User.
- CertUtil Certification Authority Utility | Windows CMD | SS64.com.
- OpenSSL: Documents, openssl1.
- OpenSSL: Documents, pkcs121.
- OpenSSL: Documents, pkcs71.
Share this:
Posted in CertUtil, OpenSSL, PKI, Power User, Public Key Cryptography, Security, Windows | Leave a Comment »
Saving MMC files as MSC and prevent the “save console settings” dialog.
Posted by jpluimers on 2015/07/24
Two tricks when creating MSC files that contain the snap-in configuration of the MMC (Management Console).
Normally you do this once:
- Start MMC
- Add some snap-ins
- Save your configuration as an MSC file
And then when you need that particular configuration, each time:
- Open the MSC file
- Perform some actions
- Close the MMC
- Answer No to this question:
---------------------------
Microsoft Management Console
---------------------------
Save console settings to [filename].msc?
---------------------------
Yes No Cancel
---------------------------
The trick around this last question is:
Share this:
Posted in Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista, Windows XP | Leave a Comment »
Fixing 84b40000 error on SQL Server 2008 updates (like KB2977321 and KB2285068) via: Microsoft Community
Posted by jpluimers on 2015/07/14
When installing SQL Server 2008 Service Pack 3 related updates, some don’t like compressed directories (even if the database files themselves are uncompressed).
I found this holds at least for KB2977321 and KB2285068.
For x86 systems, ensure these directories are not compressed:
C:\Program Files\Microsoft SQL Server
C:\Program Files\Microsoft SQL Server Compact Edition
For x64 systems, ensure these directories are not compressed:
C:\Program Files\Microsoft SQL Server
C:\Program Files x86\Microsoft SQL Server
C:\Program Files x86\Microsoft SQL Server Compact Edition
–jeroen
via: Can not install KB2285068 Error Code 84B40000 – Microsoft Community.
Share this:
Posted in Database Development, Development, Power User, SQL Server, SQL Server 2008, SQL Server 2008 R2, Windows | 1 Comment »
Windows < 8: User variables are not resolved correctly in Windows if they contain %APPDATA% or %LOCALAPPDATA%.
Posted by jpluimers on 2015/07/13
Older Windows versions than 8.x will not correctly expand %APPDATA% or %LOCALAPPDATA% in environment variables: User variables are not resolved correctly in Windows..
This even happens when the registry storage of the environment variables are marked as REG_EXPAND_SZ under these keys:
- Global:
- Local:
Basically there are four categories of Windows versions:
- For Windows 10.x this is fixed.
- For Windows 8.x and Windows Server 2012 R2, there are updates in KB2919355.
- For Windows 7.x and Windows Server 2008 R2, there is a hotfix.
- For older Windows versions, there is no solution.
–jeroen
via: User variables are not resolved correctly in Windows.
Share this:
Posted in Development, Power User, Software Development, Windows, Windows 7, Windows 8, Windows 8.1, Windows 9, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista | Leave a Comment »
YouTube: Some windows shortcut key hints (by Alister Christie)
Posted by jpluimers on 2015/06/29
I wrote quite a few entries about Keyboards and Keyboard Shortcuts.
But Alister Christie did something much better: he published a great video on YouTube: Some windows shortcut key hints.
Most of the examples he shows work in Windows 7 and up.
–jeroen
Share this:
Posted in Keyboards and Keyboard Shortcuts, Power User, Windows, Windows 7, Windows 8, Windows 8.1, Windows 9 | Leave a Comment »
20 years ago today: Here’s a nickel kid. Go buy yourself a real computer.
Posted by jpluimers on 2015/06/24
An eternal Dilbert strip that is based on the tiny Here’s a nickel kid. Go buy yourself a real computer fragment from single.h:
#if _FP_W_TYPE_SIZE < 32
#error "Here's a nickel kid. Go buy yourself a real computer."
#endif
Share this:
Posted in *nix, ARM, Assembly Language, Delphi, Delphi 1, Development, Fun, Geeky, History, MS-DOS, Power User, Software Development, Windows, Windows 8.1, Windows 95, Windows NT, x86 | 2 Comments »
Research notes on Diffie Hellman over WebSockets over a MittM http proxy to setup an encapsulated secure channel
Posted by jpluimers on 2015/06/17
Inspired by CloudFlare Keyless SSL, I have this idea of using Diffie Hellman over WebSockets over a MittM based http proxy (which intercepts and decrypts HTTPS traffic) like mitmproxy (but them from a commercial vendor to inspect web traffic) to setup an encapsulated secure channel.
I know SSH uses Diffie Hellman to setup a secure channel over a binary TCP connection.
Binary communication over HTTP usually means WebSocket.
I don’t want WebSSH (which does use WebSockets, but is probably filtered by the MitM proxy anyway).
Maybe either of these open source tools will work:
If these don’t work, I need to do more research.
Since I use C# and .NET for much of my work, I started the WebSocket over HTTP C# query.
c# – How to use proxies with the WebSocket4Net library – Stack Overflow.
–jeroen
Share this:
Posted in *nix, *nix-tools, Communications Development, Development, HTTP, Internet protocol suite, Linux, Power User, SSH, SuSE Linux, TCP, WebSockets, Windows, Windows-Http-Proxy | Leave a Comment »
The Wiert Corner - irregular stream of stuff 