Sunday, April 16, 2017

ok, once at Las Vegas, 3 guys, with a masterkeyfor the ATM's maintenance, given from a friend working at the bank, redraw money the all night everywhere (its presumed that the password only last 24 hours) ..and all they had to do was press some keys on the keyboard check it out:

ATM Machine Hacking step by step
Company Model ACCESSING THE MANAGEMENT FUNCTIONS MENU Master Password ID Code Admin Password
atm
Diebold CSP 200 "1. With the terminal in the in-service mode, press the terminal maintenance switch. The Out of Service Password screen displays.
2. Enter the password (the default password is 626243). An asterisk appears on the screen for each character entered.
3. Once the password is entered, Select ENTER or press the Enter key on the numeric keypad. The Manage Passwords screen displays." 626243
Hyosung NH5050 "1. Press the ENTER, CLEAR, and CANCEL keys at the same time; then enter 1, 2, 3 in order.
2. Enter your password and press ENTER."
Hyosung MB1500 "Press the
CANCEL, CLEAR, ENTER key simultaneously
and then press 1, 2, 3 keys in order." "Operator Password is “159951”..
Master Password is “375876”..


ATM machnisam
Service Password is “965733”."
Hyosung MB1800 "Press the
CANCEL, CLEAR, ENTER key simultaneously
and then press 1, 2, 3 keys in order." "Operator Password is “111111”..
Master Password is “555555”..
Service Password is “222222”." "The
factory default RMS Password is “111111”."
Hyosung MB2100T "1) Change to supervisor mode by pressing
highlighted switch. (upper right corner)" "Operator Password is “222222”.
Master Password is “555555”.
Service Password is “111111”." "The
factory default RMS Password is “333333”."
Hyosung NH-1800CE To enter Supervisor mode press the ENTER, CLEAR, CANCEL, 1, 2 and 3 keys in order. "OPERATOR
111111 (6 digits)
SERVICE
222222 (6 digits)
MASTER
555555 (6 digits)"
Mandrake ecash2000 Press the CANCEL, CLEAR, ENTER key simultaneously and then press 1,2,3 keys in order. 159951
NCR 7401 terminal reboot password (in manual example)
Tranax 1700 To access the Operator Function menu, press the following keys in order , then , then then 1, then 2, then 3. 000000 000000
Tranax 1500 "To access the Operator Function menu, hold the , and
keys simultaneously for 2 seconds, release them and press 1, then press 2, then
press 3. The timing of this procedure can be difficult at first." 555555 222222
Triton 98xx "1. Press and hold down the key; while holding down the key, press the <1> key. Release both keys. After a moment the Top Menu will be displayed.
2. At the Top Menu select the management area by pressing the F7 Screen Key (next to the MANAGEMENT FUNCTIONS option)." 001234 00
Triton 9100 "1. At the Customer Welcome screen, press and hold down the key; while holding down the key, press the <1> key. Release both keys. After a moment the Top menu screen will be displayed.
2. The Top menu allows you to choose one of two options, CUSTOMER TRANSACTIONS or MANAGEMENT FUNCTIONS. Select MANAGEMENT FUNCTIONS. The password entry screen appears.
3. Enter the Master or Administrative password and press the key. The MANAGEMENT FUNCTIONS main menu screen appears." 123456 987654
Triton RL5000 "1. At the Customer screen , press and hold down the key; while holding down the key, press the <1> key. Release both keys. The password entry prompt appears.
2. At the password entry screen, enter the Master or Users password." 001234 00
Triton 8100 "1. Press and hold down the key; while holding down the key, press the <1> key. Release both keys. After a moment the top menu will be displayed.
2. At the top menu, select MANAGEMENT FUNCTIONS by pressing the key next to Management Functions option.
3. Enter the user password at the password entry display." 123456 987654
Triton 97xx "1. If the Customer Welcome screen is being displayed, press and hold down the key; while holding down the key, press the <1> key. Release both keys. After a moment the Top Menu screen will be displayed. Select the MANAGEMENT FUNCTIONS option.
2. Reset the terminal by removing and reapplying power to the terminal. When the Top Menu is displayed select MANAGEMENT FUNCTIONS.
3. Remove and then reapply power to the terminal using the ON/ OFF switch located on the right side of the card cage inside the upper enclosure of the terminal. When the Top Menu is displayed select MANAGEMENT FUNCTIONS." 123456 987654
Triton RT2000 "1. At the Customer screen , press and hold down the key; while holding down the key, press the <1> key. Release both keys. The password entry prompt appears.
2. At the password entry screen, enter the Master or Users password." 001234 00
Triton FT5000 "1. At the Customer screen , press and hold down the key; while holding down the key, press the <1> key. Release both keys. The password entry prompt appears.
2. At the password entry screen, enter the Master or Users password." 001234 00
Triton 2000 "1. If the Customer Welcome screen is being displayed, press and hold down the key; while holding down the key, press the <1> key. Release both keys. After a moment the Top Menu screen will be displayed. Select the MANAGEMENT FUNCTIONS option.
2. Reset the terminal by removing and reapplying power to the terminal. When the Top Menu is displayed select MANAGEMENT FUNCTIONS.
3. Remove and then reapply power to the terminal using the ON/ OFF switch located on the right side of the card cage inside the upper enclosure of the terminal. When the Top Menu is displayed select MANAGEMENT FUNCTIONS." 123456 987654
Triton 9600 "1. At the Customer screen , press and hold down the key; while holding down the key, press the <1> key. Release both keys. The password entry prompt appears.
2. At the password entry screen, enter the Master or Users password." 123456 987654
Triton RL1600 "1. At the Customer screen , press and hold down the key; while holding down the key, press the <1> key. Release both keys. The password entry prompt appears.
2. At the password entry screen, enter the Master or Users password." 123456 987654
Triton RL2000 "1. Activate the terminal (terminal reboot) to perform customer transactions by pressing the key next to CUSTOMER
TRANSACTIONS.
2. Enter the terminal system management area by pressing the key next to MANAGEMENT FUNCTIONS.

Note: You will have to enter an appropriate password to view the Management Functions menu." The Master password must be changed from its default.


https://www.blogger.com/blogger.g?blogID=4112316754807121498#editor

good morning ! welcome back to war! So, let me go pro :) if I would like to spit money from the ATM's, I need to generate a token. the ATM OS aloud you to upgrade firmware, with a default password, one of the begining of conversation is to cross over the firewall (as last night subject...the child process and so on...much complicated stuff) , but on this case you'lle need this...

GET /oapi/v1/buildconfigs will report the error bellow:
{
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {},
  "status": "Failure",
  "message": "User \"system:anonymous\" cannot list all buildconfigs in the cluster",
  "reason": "Forbidden",
  "details": {
    "kind": "buildconfigs"
  },
  "code": 403
}
so that what's the way to get the access token and how to specify it in the openshift REST API ? thanks.

....

I think this service account don't have the access right with some resources, but I have already grant the admin role to this sa as bellow:
oc policy add-role-to-user admin --serviceaccount=jenkins -n mytest
https://github.com/openshift/origin/issues/6807

Saturday, April 15, 2017

I want to get dump from remote machine. Lets say it's deadlocked between processes, or does not come to the point of an obvious failure that might cause a crash dump action to be triggered. Or lets say i'm creating a dump of a virtual machine for forensics purposes.

This can be achieved with WinDbg. It seems you already know WinDbg, since you used the tag. Establish a remote kernel session (MSDN).
Once connected, use .dump /f to take a full kernel dump, which is the contents of the physical RAM.

Memory Forensics: How to Pull Passwords from a Memory Dump

Last time, we talked about a quick and easy way to get a memory dump on a Windows based PC. This time, we will cover pulling passwords out of captured memory files.
Several programs exist for memory analysis, we will be using “Volatility” from Volatile Systems. If you are performing your analysis on a Windows system I recommend downloading the stand alone .exe version. If you don’t then you will also need to install Python.
Once Volatility is installed, we need to get some information from the memory dump. Open up a command prompt and run the following command:
volatility imageinfo -f memorydumpfilename.raw
This command gives you several pieces of information, for now, we just need to know the profile type of the memory dump, in this case Win7SP1x86. We will use this in the next few steps.
Now, we need the hive list so we can get the starting location in memory of where the registry information resides:
volatility hivelist -f memdumpfilename.raw –profile=Win7SP1x86 (Use double dashes in front of profile for some reason they are showing up as a single)
We now have a list of where several key items are located in the memory dump. Next, we will extract the password hashes from the memory dump. To do this we need to know the starting memory locations for the system and sam keys. We look in the dump above and copy down the numbers in the first column that correspond to the SAM and SYSTEM locations. Then output the password hashes into a text file called hashs.txt:
volatility hashdump -f memdumpfilename.raw –profile=Win7SP1x86 -y 0x87c1a248 -s 0x8bfaa008 > hashs.txt  (double dashes in front of profile)
Open the hash dump file in a text editor and you should see hashes of all the user’s passwords:
Now, if you are using Windows XP and have passwords shorter than 14 characters (LM passwords), you can run them through a password cracker like John the Ripper. Or better yet,  you can copy the long alphanumeric string after the user id number (500 or 1000 numbers) and paste them in Objectif Sécurité’s Online XP Hash cracking program. This utility cracks most LM based password hashes in 5 seconds or less. For more information see  Cracking 14 Character Complex Passwords in 5 Seconds.
This will not work on Windows 7 passwords or XP passwords longer than 14 characters though. These hashes are stored in the more secure NTLM format and can take a lot longer to crack. One cool thing though is that you do not need to crack the NTLM hash to get access to a system. You can log into a system using the hash itself as the password!
The password could be a simple 14 character password or a complex 32 character monster, it does not matter. You can still use the hash to get a command prompt. For more information see NTLM Passwords: Can’t Crack it? Just Pass it!
This really goes to show that passwords really are not as safe as one might think. Dual or multiple authentication systems are really the way to go on secure systems.
Well, that wraps up pulling passwords off of a memory dump, next we will learn how to view the active network connections and processes from a memory dump.

Thursday, April 13, 2017

hi! welcome back to war! About dirty bombs, i will leave this information online the all day ...Imagine that you have (of course the RDX) forget the gov strategic suitcase ..just get this...or steal it...portable neutron generators ! yes..any shitty country can hv the mini nuclear bomb!


pay attention! this oil drilling waste tubular...as you know the deep exploration uses enriched uranium, is full of radiocative waste



Neutron Generators Suppliers


Manufacturer*, Custom ManufacturerManufacturer of standard and custom sealed radioactive sources including neutron generators. Neutron sources of outside dia. 0.217/0.218 in. and 0.370/0.371 in. are available in +/- 10 % tolerance. Capabilities include pressurized helium leak testing, alpha, beta, gamma wipe testing, inspection, prototype and production. Neutron sources can be used in nuclear, health physics, defense, laboratory, packaging, transportation, medical, bulk material analysis, oil well logging, power plants, homeland security and research applications. Meet ASTM and ANSI standards.

http://www.thomasnet.com/products/neutron-generators-34601120-1.html


Wednesday, April 12, 2017

Hi! I said No! No! No more computing for a while....shit....I'm back to computing (everything in security is computing Elsa grow up!, So, I have here something it looks like the bird shitting on the cables corrosive shit :) Ok why am I doing this again, because industrial systems might have several SCADA type, let's imagine that the energy grid has this CANopen network (control system for multiple microcontrollers ant their use in automation) and so the protocol is SoupSocket that actually "SoupSocket is libsoup's TCP socket type. While it is primarily intended for internal use, SoupSockets are exposed in the API in various places, and some of their methods (eg, soup_socket_get_remote_address()) may be useful to applications." but besides this link, take a look at the comment bellow

How to get SOAP Message From .svc file methood


  • kuttikrishnankodoth

    kuttikrishna...

    Member
    9 Points
    48 Posts

    How to get SOAP Message From .svc file methood

    Jul 20, 2011 08:51 AM|LINK
    Hai Team ,
    Iam trying to access the in coming Soap message HEADER from  the server side svc file methood , through Operation Contract  class but  iam not getting the  value , iam using
    MessageHeaders messageHeaders = OperationContext
    .Current.IncomingMessageHeaders;
    int headerIndex = messageHeaders.FindHeader("ClientID"""
    );
    XmlReader r = OperationContext
    .Current.IncomingMessageHeaders.GetReaderAtHeader(headerIndex).ReadSubtree();
    XElement data = XElement
    .Load(r);
    int id = (int
    )data;
    where the client id is added to the SOAP  Header Dynamically  like
    using (OperationContextScope scope = new OperationContextScope(obj.InnerChannel as IClientChannel
    ))
    {
    MessageHeader msgHeader = MessageHeader.CreateHeader("ClientID""""1098"true
    );
    OperationContext
    .Current.OutgoingMessageHeaders.Add(msgHeader);
    txtResult.Text = obj.AddTheValues(
    Convert.ToInt32(txtFirstNumber.Text), Convert
    .ToInt32(txtSecNumber.Text)).ToString();
    }
    but iam not getting the value
    please help


    Think #
  • Peter pi - MSFT

    Peter pi - M...

    Star
    12801 Points
    1763 Posts

    Re: How to get SOAP Message From .svc file methood

    Jul 22, 2011 02:36 AM|LINK
    Hi,

    At the client try using
    MessageHeader msgHeader = MessageHeader.CreateHeader("ClientID", "ns", "1098", false);
    Instead of
    MessageHeader msgHeader = MessageHeader.CreateHeader("ClientID", "ns", "1098", true);
    and at the server try using
     int headerIndex = messageHeaders.FindHeader("ClientID", "ns");
    Instead of
    int headerIndex = messageHeaders.FindHeader("ClientID", "");
    Please refer to the following code snippet.
    class Client
        {
            static void Main()
            {
                // Create a client
                CalculatorClient client = new CalculatorClient();
                String RequestAction = "http://test/Message_RequestAction";
                using (new OperationContextScope(client.InnerChannel))
                {
                    // Call the Sum service operation.
                    int[] values = { 1, 2, 3, 4, 5 };
    
                    MessageHeader msgHeader = MessageHeader.CreateHeader("ClientID", "ns", "1098", false); OperationContext.Current.OutgoingMessageHeaders.Add(msgHeader);                 Message request = Message.CreateMessage(OperationContext.Current.OutgoingMessageHeaders.MessageVersion, RequestAction, values);
                    Message reply = client.ComputeSum(request);
                    int response = reply.GetBody();
    
                    Console.WriteLine("Sum of numbers passed (1,2,3,4,5,1098) = {0}", response);             }
    
                //Closing the client gracefully closes the connection and cleans up resources
                client.Close();
    
                Console.WriteLine();
                Console.WriteLine("Press  to terminate client.");
                Console.ReadLine();
            }
        }

        // Define a service contract.
        [ServiceContract(Namespace="http://Microsoft.Samples.Untyped")]
        public interface ICalculator
        {
            [OperationContract(Action = CalculatorService.RequestAction, ReplyAction = CalculatorService.ReplyAction)]
            Message ComputeSum(Message request);
        }
    
       
        // Service class which implements the service contract.
        public class CalculatorService : ICalculator
        {
            // Perform a calculation.
            public const String ReplyAction = "http://test/Message_ReplyAction";
            public const String RequestAction = "http://test/Message_RequestAction";
    
            public Message ComputeSum(Message request)
            {
                //The body of the message contains a list of numbers which will be read as a int[] using GetBody
                int result = 0;
    
                int[] inputs = request.GetBody<int[]>();
                foreach (int i in inputs)
                {
                    result += i;
                }
    
      MessageHeaders messageHeaders = OperationContext.Current.IncomingMessageHeaders; int headerIndex = messageHeaders.GetHeader("ClientID", "ns"); result += headerIndex;             Message response = Message.CreateMessage(request.Version, ReplyAction, result);
                return response;
            }
        }
    And maily focus on the bold font, hope this helps you.
    Best regards,
    Peter
    Please mark the replies as answers if they help or unmark if not.
    If you have any feedback about my replies, please contact msdnmg@microsoft.com
    Microsoft One Code Framework 
  • kuttikrishnankodoth

    kuttikrishna...

    Member
    9 Points
    48 Posts

    Re: How to get SOAP Message From .svc file methood

    Jul 22, 2011 05:10 AM|LINK
    hai peter ,
    here iam using a wcf exposed Methood some thing like
    public list GetEmployeedetails(int empid,out  string Result)
    {
    // logic goes here ..
    }
    in this case how come i get the   Message request inside the metood to get the items
    Thanks very much
    Think #
  • kuttikrishnankodoth

    kuttikrishna...

    Member
    9 Points
    48 Posts

    Re: How to get SOAP Message From .svc file methood

    Jul 23, 2011 04:39 AM|LINK
    i  DONE LIKE
     // NOTE: You can use the "Rename" command on the "Refactor" menu to change the class name "MyTestService" in code, svc and config file together.
        public class MyTestService : IMyTestService
        {
            public int AddTheNumbers(int intA, int intB)
            {
                int intResult;
                string str = OperationContext.Current.RequestContext.RequestMessage.ToString();
                MessageHeaders messageHeaders = OperationContext.Current.IncomingMessageHeaders;
                string headerIndex = messageHeaders.GetHeader("ClientID", "ns");
               // result += headerIndex;             
               // Message response = Message.CreateMessage(request.Version, ReplyAction, result);
                //return response;
                ServiceManager objSM=new ServiceManager();
                 intResult=objSM.AddThenumbers(intA, intB);
              
                 return intResult;
            }
        }
    
    
    IN CLIENT SIDE
      protected void btnSum_Click(object sender, EventArgs e)
            {
                ServiceReference1.MyTestServiceClient objProxy = new ServiceReference1.MyTestServiceClient();
              
               
    
                using (new OperationContextScope(objProxy.InnerChannel))
                {
                    MessageHeader msgHeader = MessageHeader.CreateHeader("ClientID", "ns", "1098", false);
                    OperationContext.Current.OutgoingMessageHeaders.Add(msgHeader);
                    txtResult.Text = objProxy.AddTheNumbers(Convert.ToInt32(txtFirstNumber.Text), Convert.ToInt32(txtSecondNumber.Text)).ToString();
                }
                
            }
    NOW ITS WORKING FINE https://forums.asp.net/t/1701908.aspx?How+to+get+SOAP+Message+From+svc+file+methood+

Energy Blackouts total electric outage graphite carbon balls trow 2 ground impact

  https://www.alibaba.com/product-detail/Graphite-Carbon-Ball-C80-Instead-of_1601156433008.html?spm=a2700.galleryofferlist.normal_offer.d_ti...