Joomla is one of the CMS that I like and testing it for vulnerability would be fun using OWAP’s joomscan. Just in case you wanted it on your system you can download it at sourceforge Joomscan is a vulnerability scanner for websites using joomla CMS.

To install it on ubuntu you can extract it on a directory that you like like the /opt directory. After extracting make it executable and the db text file which is needed for the update:

By default perl alone does not work using joomscan and it needs a some library to get it working. you can install the needed libraries by using the command:

After the installation go to the path where it was extracted and you can now start using it. A very basic usage is

Options are fount below which is shown when you used a wrong syntax

=================================================================
OWASP Joomla! Vulnerability Scanner v0.0.4
(c) Aung Khant, aungkhant]at[yehg.net
YGN Ethical Hacker Group, Myanmar, http://yehg.net/lab
Update by: Web-Center, http://web-center.si (2011)
=================================================================

Vulnerability Entries: 611
Last update: February 2, 2012

Usage: joomscan.pl -u -x proxy:port
-u = joomla Url

==Optional==

-x = proXy to tunnel
-c = Cookie (name=value;)
-g “” = desired useraGent string(within “)
-nv = No Version fingerprinting check
-nf = No Firewall detection check
-nvf/-nfv = No version+firewall check
-pe = Poke version only and Exit
-ot = Output to Text file (target-joexploit.txt)
-oh = Output to Html file (target-joexploit.htm)
-vu = Verbose (output every Url scan)
-sp = Show completed Percentage

Here are some of chromes hidden pages. Mostly are for those who wanted to get a more detailed and technical information about the browser’s process.

about:appcache-internals
about:blob-internals
about:view-http-cache
about:credits
about:dns
about:flags
about:gpu
about:histograms
about:memory
about:net-internals
about:plugins
about:stats
about:sync
about:tasks
about:tcmalloc
about:terms
about:version

My brother has a problem with his Asus x42j Series laptop running a Genuine Windows 7 Ultimate x64 version.  Days ago he was still using his laptop connected to the network using a wired conenction and having no problem, all a sudden he can no longer connect on their Local Area Network using the ethernet.  He has no problems with the wireless connection but he prefers to use the wired connection because he is used on watching videos online especially NBA.

I was assuming that the router fast ethernet port was faulty but after asking him if he was the only one who is not able to connect via ethernet then I was able to conclude that the problem could be in his machine.  I asked him to open CMD and try to traceroute/ping to a certain public IP and turned out to prompt an error (see the img below).

There are several suggestions provided by Microsoft’s Support Engineer and you might get bored trying them all and one of the worst solution they provided which I didn’t like was to restore the previous status using system restore (fuuuuuuuuuuuuuuu).  Searching for an answer why this happened didn’t really helped me a lot, but based on reading the forums and some blogs this might have caused by 2 things: 1.  A new bug for the new eth driver  after installing an update  2.  Some driver files might have been corrupted.  But anyway I hope I can update this post and try to find out what are the reasons for such sudden failure.

Here is how the problem was solved and it was even suggested on MS’s forum (at the bottom part as of may 9, 2012).

1. Navigate to the device manager (right click my computer > select manage > go to devices section > select the network adapters) as seen on the image below.

   
   
   

   2.  Uninstall the Ethernet Adapter driver (JMicron PCI Express Gigabit Ethernet Adapter).

   3.  After uninstalling, windows will automatically detect the hardware and re-install the driver.  After the installation of the driver you can should now be able to connect to your Local Area Network using your machines ethernet connection.

Another problem:  The problem was solved but after checking the IP configuration it throws a lot of Tunnel Adapter Local Area Connection (Microsoft 6 to 4 Adapter).  There was about  36 adapters added without even the user knowing.  It might look suspicious but according to microsoft this was caused:

When the computer restarts, the Plug and Play service shuts down before the process to enable the Microsoft 6to4 adapter to be reused is performed. Because of this, the adapter cannot be reused when it is reconnected. Therefore, a new virtual adapter is created.

where:

• -h localhost is for my mysql host or server
• -u root is the mysql user
• -p pAa5sD1 is the user’s password
• nightcrawler is the empty database
• /home/tux/Desktop/nightcrawler.sql is the data to import or usually a back of the database
• > is use to import and > is used to export data from a mysql database

 
Skip the sad story

I am a great fan of ubuntu and I have been installing and uninstalling 10.04 LTS to 10.10 to 11.04 to 11.10 and go back again to 10.04 LTS or shift to Linux Mint and caused me a lot of time and a lot of data loss.  One of the biggest problem that I had since upgrading to higher versions of ubuntu or Mint was the display.  After the upgrade I needed to add i915.nomodeset=0 (which I memorized after years of adding it to grub every time I have a fresh install) to avoid the black screen.  Maybe at those times I was kind of busy with work that is why I was not able to find the solution to this problem or maybe I searched for the solution but did not find any after thousand of searches on google and posts on the ubuntu forums not until now that after having several experiments on my laptop which includes the update of ubuntu from 10.04LTS to 11.10 (again) hoping that the previous problem was already solved led to another disaster and to a dead end.

So that disaster forced me to download precise pangolin 12.04 which took me hours to download and more hours to install because of my lousy internet connection (our country was ranked the 2nd worst ISP by yahoo) and several (like a hunderd) of errors during installation.  After the installation I am again facing the 1024×768 default display problem.  I can’t proceed with work because the display was just ugly, an example is found below:

Horizontal scroll bars are appearing every time I visit a website that is not responsive (fluid).  After 3 days of searching for solutions, posting on forums and 3 hours sleep(yawn), I finally found the solution and now, I can finally get back to my usual sleep schedule.  Sharing it will sure save the time of those who has the problem (I hope google will find this post).

It has still been a few days after the release of Ubuntu 12.04 LTS and I had no plans to upgrade my ubuntu 10.04 LTS but after doing some experiments I ended up upgrading to 12.04 and glad that I had a backup of my projects and database.  I made a fresh install of precise pangolin yesterday and so far I have 3 things to say:

BTW: I am using acer aspire 4736 running 4GB of memory, 320GB HDD & Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller

Good things:

• Super fast boot
• Unity is good for shortcuts
• Wider view on the applications and wider space in viewing codes using netbean’s vertical split window
• Minimalistic  approach which I love the most
• Free…. lol

Bad things:

• I installed ubuntu 12.04 for approximately 2-3 hours and had a lot of errors maybe 2 hours was wasted because of a lousy internet connection.
• Before you can see how pangolin looks I need to add i915.nomodeset=0 to the grub config
• The resolution needs to be configured (xorg) because the screen is kind of stretched and its not properly displaying the sites I consistently visit.  By default the resolution is 1024×768 which is a bit smaller size.
• I’m still not comfortable with unity especially on navigating to folders.  I hope there will be a patch to choose between unity and gnome shell.
• Til now I am still banging my head to fix this problem.  Refer to my post (http://ubuntuforums.org/showthread.php?t=1594308&page=7) .  This has been my big problem since the 10.10 release…  -> [solved] – check the mobile 4 series graphics controller fix

I hope to find some fixes in succeeding days…  Maybe you know some solution to this, why don’t you lead me to it…

I hope to see some more stuff after exploring it more especially when it comes to performance…

Open the config.inc.php file located on the folder where your phpmyadmin is. Every time you need to add a new server, you need to add $i++; on top of your new configuration and also you need to append the new configuration at the bottom of the current configuration as seen on the image above.

I was able to successfully install Gnokii and used Nokia 5000d-2 connected through the bluetooth media.  Here is the identity of the phone that I am using.

The details of the Phone using one of nokia’s hidden code: *#06#.

Result:

Nokia 5000d-2
V 06.31
24-03-09
RM-362
(c) Nokia
Variant: 167.01
Virtual Variant:
No Virtual Variant
Language:
V 06.31
24-03-09
RM-362
(c)Nokia
T

Using Gnokii’s commands to identify the mobile I used.

The output was,

GNOKII Version 0.6.28
Assuming: 0
IMEI : *************
Manufacturer : Nokia
Model : RM-362
Product name : RM-362
Revision : V 06.31

The HOW TO’s

Actually almost everything was followed using Gnokii’s Wiki. I am using a Laptop running Ubuntu 10.04 LTS that has a built-in bluetooth device. Below are the steps:

1. Install bluetooth using Synaptic Package Manager
2. Pair the two devices and set the cellphone to auto-connect/auto-pair the devices whenever the bluetooth devices are at range.

   

3. Install Gnokii using Synaptic Package Manager if not you can install it using this tutorial. If you are planning to use PHP make sure to read this first PHP HowTo’s. Note: Make sure to include gnokii_smsd_mysql if you are planning to use mysql to store your messages on a database.
4. After installing gnokii you need to configure it, the config file can be edited/found at /etc/gnokiirc. Edit it using your favorite Code Editor(vi, gedit, nano, etc.)

   As of this current version the significant lines to change are on lines 11-port, 102-connection. Here is my existing configuration for reference. Modify it to fit on your needs.

   To get the bluetooth’s physical address, use the command

   sudo hcitool scan
5. Open the terminal and use the command gnokii ‐‐identify and should have the details of you cellphone (the phone and laptop should automatically pair). If there is an error try to turn on the debug configuration (debug = on) to generate a bug report.
6. Try to send a message using the command
   sudo echo “This is a test message” | gnokii ‐‐sendsms 09167636896

   This will result to:

   GNOKII Version 0.6.28
   Assuming: 0
   [sudo] password for tux:
   Send succeeded with reference 66!

7. To store the messages on you database use the wiki’s tutorial on how to set-up SMSD at this link. The instructions are easy to follow and works.
8. I am on a private network and I won’t be able to use or create a PHP Web App for this and I am also currently using nginX web server. I will be uploading my script on how I will manage to send sms messages on the www. Here is a link of the app

A post to track the tools that I find useful or recommended by friends to protect my network from intrusion.

• PSAD – “psad is a collection of three lightweight system daemons that run on Linux machines and analyze iptables log messages to detect port scans and other suspicious traffic ~psad website“. I get to block IPs that are trying to scan the network for holes.

Recommended by friends

• Sagan – “Sagan is a multi-threaded, real time system and event log monitoring system, but with a twist. Sagan uses a “Snort” like rule set for detecting bad things happening on your network and/or computer systems. ~sagan website“

If you know any tools and would want to share please send me an email. Thank you in advance!

Scenario: A New Acer laptop running windows 7 premium and the user has a genuine windows 7 ultimate product key.  The user wants to upgrade the operating system but don’t have the CD/DVD for the ultimate version.  Below are some of the process on doing it:

Solutions:

• Go to Computer > Properties and on the bottom part click the change product key option. But on my case there is no such option.
• Go to run and type slui.exe 3  and press ok.  Enter the the new product key.  This did not work for me either, the error tells me to contact Acer’s customer support.
• Download Windows 7 Upgrade Advisor.  Run the downloaded file and follow every step.  At the end it will prompt you for the product key.  This option helped me solve the problem, though it prompted an error but after restarting the user’s laptop is already running windows 7 ultimate.  Don’t forget to update!

Hope it helps.  Good luck!