martes, 27 de diciembre de 2016

Internet old school Underground


- DRAFT with uncompleted content -

Content in Internet is fast growing but unfortunatley also a fast dying thing. So I think it is important to rescue some info before that the time destroy any proof of that times.

A time for personal pages
The years of the BBS and the later beginning of Internet was a time for free minds, learning, experimenting.

 comp.* groups were full of technical information from IT enthusiasts.

In that times most of readers were also writers, same it is still happening with paper fanzines.



A new type of content, far away from the main stream channels, was spreading very fast in the network. There were plenty of webpages full of info about  hacking, phreaking, virus, free
software, cracking, tv decode, cd recording, electronics, programming, etc...

The beginning of the Internet and the personal pages
There were some free webpage providers such as: geocities, terra.es, fortunecity, personales.com
and many people trying to share content and let his footprint there


Some interesting webpages of that moment of time (this list is mainly focused in Spain)

- Astalavista.box.sk. Serials for games and software. Curious the similar name to the probably biggest internet search engine called Altavista  (in that times)
- Isla tortuga. an article with more info about this web portal
- Viva el jamon y el vino. cracks and hosted in isla tortuga




But social life was not only digital, and BBS and IRC groups were used to schedule physical meeting where people meet.


And since 2000 a yearly Hackmeetings was organized in Spain and this periodic event lasted more than 10 years. (history)



Under (just an page of a IRC channel)







And the game stations come with a recordable storage...



Chipconsola (modchips)
The CDROM opened the door to personal copies.
And it created a new world based in information and solutions such as burning software,  modification chips and many accessories to enable a personal game station to play no-paid content. (Most times commercial but also some times created by community)




Most pages and information disappeared time ago, but there are still few communities which born and grow in that time, such as Elotrolado




Small devices scene (PDA and first smartphones)

C4pda PalmOS
small java apps, for Nokias and many other phones brands,
Palm, touch screen apps for PalmOS (PDA and business phones)
Symbian, apps for keyboard devices, and how Nokia got the train to touchscreen too late
winCE, (touchscreen PDAs and latter phones also)

Most pages are closed but C4PDA is still alive and all the information for PalmOS












And the underground became very popular (@rroba printed magazine)

During several years any spanish newspaper shop was selling the @arroba magazine, which  includes contents like  hacking, cracking, virus, privacy, opensource, alternative computer scenes,  such as amiga or MSX....




And Linux become cool and easy

As Linux and opensource become very popular, many IT enthusiasts moved to Linux and th amount of information about linux became huge.

Plenty of personal webpages, a linux group per city, forums, chats....


jueves, 13 de octubre de 2016

Best practices with Firefox, Palemoon, Waterfox and other FF flavours

This is a just a compilation of tricks or knowledge that i consider important for a daily user of a web browser



Menu Bar, old school looking and plenty of options.



I suppose that FF copied this shitty idea from IE or Chrome, at least in FF you can get rid of this.
Displaying the menu bar, not only you will have quick access to many useful functions but also you will show that you are a poweruser ;)



In Waterfox: Menu Bar, + Customize, Titlebar




Execute the 32bits version (Portable FF)
Portable version includes the option of using the 64 or 32bits version.
By default you will execute FF with FirefoxPortable.exe and it will use the 64bits version for your 64bit OS, but sometimes we can be interested in executing the 32 bits because it can be compatible with some plugins, java, etc.

Go directly to the folder with the executable

FirefoxPortable48\App\Firefox
FirefoxPortable48\App\firefox64

Note that when using above executables,  addons and configuration are stored in different folders than the default ones and  used by FirefoxPortable.exe

Access to technical information

about:config


Override Useragent for an specific webpage
entry: general.useragent.override.myURL
string: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.9) Gecko/20100101 Firefox/45.9




Beside the more famous about:config, we also have:


about:support

to identify your FF version and 32/64bits, check "User Agent " and notice that:
Win64; x64 =64bits
WOW64=32bits (WoW64=Windows 32-bit on Windows 64-bit) is a subsystem of the Windows operating system capable of running 32-bit applications.


Includes installed extensions (name, version, ID)


Browser info in files:
prefs.js
application.ini file.
Contains: Browser ID, version, Gecko or Goanna (min and max version)



Moving Configuration to another browser or profile

Portable Palemoon stores addons/extension and configuration in the folder "/User"
Just copying the complete folder or even specific extensions to another browser, another profile, restarting the browser and you will have the desired data ;)

PM portable -Default profile
\User\Palemoon\Profiles\Default\

Waterfox portable -Default profile
\WaterfoxPortable\Data\profile\


a possible candidate folder ;)
\User\Palemoon\Profiles\Personal_more_privacy\


Profile folder compatibility between Browser and versions:

Some errors but most extensions compatible from  Palemoon 27.5.1 to Waterfox 55.2.2
-error with specific PM extensions.
   error with PM "Addons Memory Usage - Intika MoD"
-some config pointing to PM folders
   Detect from about:config, searching palemoon word
   browser.cache.disk.parent_directory



Stored Passwords:
Are stored in sqlite and json:
\Palemoon2x_64b\User\Palemoon\Profiles\Default\signons.sqlite\Palemoon2x_64b\User\Palemoon\Profiles\Default\logins.json

To recreate json file from sqlite:  about:config, signon.importedFromSqlite, reset

Using multiple profiles:
Addon: ProfileSwitcher

Some Interesting files:
prefs.js  . Same or similar data than available from about:config
Palemoon_26.x\User\Palemoon\Profiles\Default\prefs.js
Palemoon-Portable.ini ( contain command line parameters,  profiles, paths....)




Installing extension theoretically not compatible


Main concepts:


  • It is risky, and it will work only when browser is compatible in the practice but the developer was too much restrictive.
  • Each FF web browser as a unique identifier such as:
    • Firefox {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
    • Palemoon {8de7fcbb-c55c-4fbe-bfc5-fc555c87dbc4}
    • Sea Monkey{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
    • Waterfox  {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
(extract from application.ini)

Note that for Palemoon compatibility; from addons.mozilla.org(AMO) it is recognized as:

Palemoon 26.4  as a FF 24.9
Palemoon 27.3  as a FF 27.9
Waterfox  55.2.2 as a [FF/Gecko] 55.2.2

Browser identification can be configured for specific URL
From: "about:config" page , add a key general.useragent.override.myurl
i.e. general.useragent.override.facebook.com

Download a xpi file

From version Information, we list all the versions of this extension, then clicking on "Add to firefox" button we can obtain the link to the file.

We can download with right button and "Saved Link As" or even pasting the link in other webbrowser.

Edit a non compatible xpi extension

it will save a  .xpi file (it is just a renamed zip file)
rename the .xpi to .zip (7zip can extract directly from xpi)
Extract to content to a folder


Files:
install.rdf 
contains extension identification and compatibility checks

chrome.manifest
contains technical configuration which can be common for all browser and version or can be  customized per each different web browser or version


Edit install.rdf 
to include a different version
modify min or max version
         25.0
        44.*

to add Palemoon


{8de7fcbb-c55c-4fbe-bfc5-fc555c87dbc4}
25.0
25.*




Edit chrome.manifest

  • Removing application part will apply to any
    • .ie. application={ec8030f7-c20a-464f-9b0e-13a3a9e97384} 


  • adding a new line with missing identifier (i.e Palemoon)
  • Modify appversion to apply to out browser
    • appversion>=12










lunes, 16 de mayo de 2016

CA Clarity Server Administration (OS, Tomcat, Java, pages)



Linux/batch Commands

CA Clarity PPM Commands:

#admin tower (before it was called nikuadmin)











# service status all
# service start/stop x/all
(requires Java path)

#./servicebg start


Standard UNIX commands

#ps -F -C java >/home/miuser/procesos_java.txt
# top -b -d 1 -p $(pgrep -u clarity -d',') -n 5  
(top will display info only for those IDs received from pgrep, 
-u user -d delimiter)





Clarity services and execution 

 /etc/init.d/clarity

Internal configuration files (filled with parameters from NSA):
/clarity/bin
serviceappcmd.conf
servicebgcmd.conf
servicensacmd.conf

Services:
serviceapp  launch son process  java -Dcom.niku.union.serviceId=app
servicebg
launch son process  java -Dcom..niku.union.serviceId=bg
...


 

Java/Apache Tomcat (jvmParameters)
-Xms2048m 
-Xmx3072m  


Internal pages/jobs,... customization

Path:
\META-INF\object_type_group\filetype\object\view-filename.ext





XBL/PMD job/report executable
i.e:
META-INF\projmgr\xbl\projects\purgeProjects.xbl
META-INF\projmgr\pmd\projectPurgePMD.xml (include update queries)


Timesheets:
META-INF\timeadmin\vxsl\timesheets\selectTimesheetTask.xsl;
META-INF\timeadmin\xbl\timesheets\selectTimesheetTask.xbl;
META-INF\timeadmin\bind\timesheets\selectTimesheetTask.xml;
META-INF\timeadmin\pmd\timesheetDataPMD.xml; 


XOG Client
META-INF\xog\wmd/xog.xml
   pageaction id=”xog.client”
   active=”true”

miércoles, 13 de abril de 2016

Firefox - Add-ons / hacking tool (updated)

First of all I am not talking about "hacking" servers, access to weak systems or anything similar, neither discuss about the meanings cracking/hacking.


nice and different firefox logo


Now Firefox has huge potential as tool for the web(using the available Addons), there aren't competitors in this area and the other participants in the internet browsing war: IE, Opera, Chrome or Safari aren't alternatives.

Mini Glossary:
Add-on = Extension
AMO = addons.mozilla.org



The next list has some very interesting tools which add useful features to improve the web use (for me)

Enter in advanced configuration mode:
about:config

Force install of not compatible addons:
"about:config"
new boolean
 "extensions.checkCompatibility.4.0"
 or
"extensions.checkCompatibility.3.6" 
"false"

(or use add-on: checkCompatibility)

Execution of multiple Firefox portable at sametime
copy \Other\Source\FirefoxPortable.ini
to root
add AllowMultipleInstances=true


Firefox power user tools/addon

//Development
Chickenfoot
Firebug
Web developer (too many useful features)
DOM Inspector

View Source Chart
JSView  (see sourcecode from external files .ie included .js)
--
SQLite Manager (open firefox and songbird/Nightingale databases)
Xpather


//Utility
Aardvark (few features for developers but easy and useful to clean webpages before print)
Hacktheweb (improved version of aadvark addon)
Print Edit (remove, select and add break pages before to print)
Mozilla Archive format (save 1 or multiple pages in 1 file, MHT or MAFF format)

//Improve interface
ChromaTabs plus
Showcase (mini image with the tabs)
Table2Clipboard (copy table elements)
ColorfulTabs 29.9
TabGroups Manager revived. (create a parent tab to classify tabs under it)
--
Form saver
Autoformer
Autofill Forms

Tabrenamizer
Configuration stored in about:config(tabrenamizer.jsonprefs)

Copy/paste to a texte editor
Convert to human readable with Plugin:
JSTool
(or JSMin, JSFormat)
Modify content
Convert back to a minimalistic text with Plugin:JSMin,JSMin
Copy/paste text in about:config
restart firefox



//Config/Hack Firefox
keyconfig (20080929)
Show the key shortcuts assigned in Firefox, you can search for duplicated (blue background) or change the keys for each addon or function.
[after install access from Tools or Ctrl-Caps-F12]
more info:
http://forums.mozillazine.org/viewtopic.php?f=48&t=72994&st=0&sk=t&sd=a





SpellCheck 0.3
check the entire web page,
[after install, open from:"Edit, Spell check"]



//Browser tools
Quick Locale Switcher(ver 1.7.8)
User Agent Switcher (to identify FF as other ver/browser
 (XML including browser ids to import in addon)

 //Systems/networking
Firefox throttle (up/down bandwidth)
Extended status bar (Page/kb/speed/load time) v1.5.8
DownThemAll!
Firebug 1.7.3 (Net tab.  powerful stats /kb/speed/load time per object)
Httpfox 0.8.14 (similar to Firebug/developer tools but network monitor is centralized and keep monitoring when a _blank page is open)
Proxy Selector 1.31  (select different proxy configurations)
FireSSH
FireFTP
Foxyproxy (proxy with multiple functions, configuration file is compatible with Chrome addon)
--
fireftp
fireuploader
Sunrise XP (convert to plucker format)

Firebug (Net function)




//Semantic Web
Operator(check web for microformats, RDFa and eRDF and permits interact)
Tails export (show microformats and offer export to standard file formats)




Firefox 12

Fastest Search v2.23 (support regexpr and many options)
Stylish 1.3.2
jSON handle 02.2.1

Compatible with the old Firefox  v3.6.28
Specific addons versions for FF3.6:

chickenfoot107.xpi
colorfultabs-4.6.5-fx+sm.xpi
  configuration stored in about:config(extensions.clrtabs.dpref)
web_developer-1.2.2-fx+sm.xpi
tabrenamizer-0.9.6-fx.xpi
   configuration stored in about:config(tabrenamizer.jsonprefs)

Firebug 1.7.3 
Firefinder for Firebug 1.1(works with firebug 1.7.3)
TableTools2 1.17View Source Chart 3.05
WebDeveloper 1.2.2
Xpather 1.4.5
DOM Inspector 2.0.14
JSView 2.0.5
SQLite Manager 0.6.8


 
Remove It Permanently 1.0.6.10
   configuration stored in \FirefoxPortable\Data\profile\rip_store\config.xml
Hacktheweb 1.3.20 (improved aadvark addon)
Aardvark 3.0
Print Edit 9.0


Palemoon v.26
Light fork of a previous Firefox version (previous to FF v29 and its Australis user interface)

Important info
Palemoon from v25 has not anymore the same GUID than FF


Specific palemoon addons
https://addons.palemoon.org/extensions/other/pm-commander/

https://www.palemoon.org/tabgroups.shtml
Addons Memory Usage - Intika MoD
      used through about:addons-memory




lunes, 7 de marzo de 2016

BlackBerry - patching android APK - GMS(Google Maps Services)

Why to do this:
Some apps are using Google Play/Maps services and they requires them to run.
However BB10, not only doesn't include these services  but also cannot be installed from Blackberry World.

Example of successfully  patch apps because its Google maps services (gms) requirements:

-Wikiloc (though this apps uses OpenStreetMaps offlines maps, it requires the gms) 
Transport apps:
  -City mapper
  -Moovit (it work very good without gms services, but few functions requires them)
 










Definitions and synonyms:
 
GMS, Google maps services
PS, Play services
GS, Google services
android.vending=Google Play (shop)
apk, file with a full 


In the  Crackberry forums there is plenty of posts and information about the process.




Following instruction are just a simple quick reference.




Installing on Blackberry 
1)  Google maps services (by Cobalt)
Download Cobalt's files (lookup crackberry, or any web searcher)
Copy to BB10, the  apk containing gms, such as com.google.android.gms-8.4.xx-cobalt-buildx.apk
Execute apk file from any file explorer (com.google.android.gms-8.4.xx-cobalt-buildx.apk)












2)(Optional) Blackberry Google ID
Most third party apps don't require of this service, but if your want to use apps from Google you need it.
Besides its main function, which is identifying you BB device with your Google account, it also gives you 2 additional options. From Android settings you have the complete configuration for the Android Runtime.
cobalt.blackberry.googleid-x.x.apk














3)(Optional) Mobile Network/Google Settings
It gives you the function to disable mobile data for Android apps.
Besides previous main function, it also gives you the access to the Android Settings  and from there you have the complete configuration for the Android Runtime.
cobalt.mobilenetwork-x.x.apk


Patching from PC Desktop
Download and install "Play_services_PS_Patcher-1.4", (it requires JAVA)
Execute, browse, load apk file,
Click on "Analyse APK file" (with default options), Click on "Continue"







Screenshots of patched and working apps








Download fixed/patched apps:

Wikiloc 2.7.8 apk fixed for BB10





(requires GMS service running in the BB10)

By default you cannot the see the maps because default maps are online Google, but an offline map is hundred times in the mountain better for mountain than one requiring a 3G connection.
So from the main menu "Offline maps", download any map (thanks to openstreetmaps community)




Uninstalling Google Services from Blackberry

There are some reason to uninstall these services temporary or definitively, but as it is logic, those patched apps which really require Google services will not work any more ;)



Method1: From Blackberry Google ID, Android Settings, Applications, Google Play services, Uninstall