Last week I found a database running on port 8203 from the Websense server that was using SA with a blank password.  We opened a ticket with Websense and they confirmed my findings with the current version.  They have not issued a solution yet.  It appears to be a test database but for what?  It was really funny how it was found since it passed our quick vulnerablity scan from neXpose.   Now this is not an issue from neXpose as I was using the default Full Audit profile as part of the final risk assessment.  Shame on me for not scanning all ports since it

Google blatantly tells us in their new privacy statement that they will use our information to deliver their services.  It is the model of we are the product of the product, but for some of these services its not that we are making the product better it is the fact that they are stealing our data which leads to our privacy to marketing companies for money.  So there must be other alternatives and I am on a quest to find best of breed alternatives. 

I promise more to come on this, just really busy at work these days.

Sharing my notes.

By Bill Norment

So I believe this will be part 1.  After I started unravelling all the features its about impossible to cover everything in one blog.  So there will be a part 2 for this blog.  I hope you enjoy part one.

First - install the latest version of git
 

$ sudo apt-get install git

Next run the following

$ bash < <(curl -s https://rvm.beginrescueend.com/install/rvm)

Next go to the following user

C:\Windows>nslookup
> set q=srv
> _ldap._tcp.dc._msdcs.example.com
 
Where example.com is your domain.

I am getting the following error after running the exploit on almost every client side link.

Exploit failed: uninitialized constant Msf::Encoder::Type::PrintfUtil

My versions are as listed

In this example we want to convert dns or computer names to a single ip and write that single ip to a file so we can import that file into a scanner like nessus or nexpose.  Typically this would be a job for awk however, now that windows 7 comes with powershell we can utilize that to simulate awk.  
Put your computer names into the file named computernames.txt.  Next create a bat file with the following code in there.