VSSadmin

 Qute stuff to do when running ShadowCopy (VVS) :)  Comments from notepad while watching a online capture from some haxxor show. Prolly abit mixed, but a kewl thing it is ;pLinux Common Directory Names:-space/dotspace/dotdotspace/namespace -mkdir ´.[space]` -mv malware /path/.\[space]/ -/path/.\[space]/malvaremkdir `temp[space]´Windows Alternate Data Streams (ADS) type malware.exe > harmless.txt:evil.exe start c:\path\to\harmless.txt:evil.exe dir /r will find it. (vista and later)  sysinternals Streams list alternate data streams (LADS) fairly easy to eradicate ADS on Steroids echo anything > … Continue reading

Pondering abit on Public Key Infrastructure

Why, Oh Why! Since I am currently working with PKI from microsoft I have had to read up abit on that. There is alot of different junk out there on the Internet, but a basic google search will get you started, and there are a bunch of different books too. Brian Komar have written a exceptionally good book on that subject it is namned: Windows Server 2008 PKI and Certificate Security you can get it from … Continue reading

VRF (eigentlich Security, but…)

VRF a way to create tunnels over internet between different sites, it is kinda handy when it comes to a situation where you can’t use your own lines and are forced to use a ISP line. The technique is sort of a development of the old (but fairly good) MPLS tech. A Full VRF implementation is according to wikipedia: The scaling limitations of VRF Lite are resolved by the implementation of IPVPNs. In this implementation, … Continue reading