el8linuxel8

Iv just turned 20 and have been doing this for a year now, gets old quick so im off to university Compsci should be much more fun than fixing printers. :-)

Yeah, i dont understand how people could do this job for a 3years+. Surely theres enough jobs for us all to go around? jobs with better pay and where you have a chance of progression and get some respect. meh, just my thoughts, seems like alot of bright careers have got stuck in working in education.

I hate to say it but all these stories sound brilliant, just one question, what the hell are you all doing in schools?! ;-)

Wait, how do you know he didnt smash the window then unlock it?

Hackers arn't interested in local windows machines, malware writers are. Owning someones windows porn collection isnt really that much of a priority to a hacker. Whereas Malware writers/spreaders do want to target the masses. The title is misleading too, the guy had been working on this 0day for over 2 weeks at least, 'MAC owned in under 2mins'? kinda lame. I heard some Mac fanbois saying it was a popularity contest and he only owned the Mac and not its competitors because he wanted to take it home...lol. The author of the flash bug also admitted he could get the bug working on other arch's, e.g. linux could of been owned too so make of that what you will. And you only have to take a look into the vmsplice bug, read the vulnerable code. Its shocking! The whole competition is a farce anyway, the only reason no one entered on the first day (remote exploits) was because no one would sell (effectively what you are doing here) a remote 0day for 20k USD. Governments pay a lot more as has been documented publically in the past.

Check out ntlmaps, probably not really practical but you could mod it, pretty simple python.

Thanks for the info Geoff, i dont tend to keep much of an interest in the moodle CVS but like i say, its just a framework, there is much more possibilities than just the bulk delete..iv combined it with the lgfl script too so now i can create both users at once...now for AD intergration Have any other idea's i could add to it anyone? Geoff?

Yeah, we've done that for a while..the problem arises when you need to delete users...e.g. at the end of the year when you need to remove a yeargroup. By default the SIMS upload utility creates those users with the broken email address's, at least from what i remember.. Don't forget it also saves alot of time by making it easy to add a user in a single command, delete a user or reset the password..(it was also fun ) anyway, any improvments, suggestions are welcomed (i know the code quality is a little shoddy, it needs tidying up ) also, id love a job at cleo...if it paid better that is (which im sure it would)

#!/usr/bin/perl #moodle email script #dedicated to all junior IT techs who get all the shitty jobs #this script dedicated my senior tech, BRUVA! use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Long; use Crypt::SSLeay; my %options; #define your options here %options = ( 'vle' => 'vle.broughton.lancsngfl.ac.uk', 'emaildomain' => '@bbec.lancs.sch.uk', ); GetOptions(\%options, 'user=s', 'pass=s', 'url=s', 'newuser=s', 'newpass=s', 'createuser', ); #create useragent object my $ua = LWP::UserAgent->new( cookie_jar => ({}) ); $ua->env_proxy(); my $return = $ua->request(POST "http://login.vle.cleo.net.uk/1.8.2/?vle=$options{vle}", [ username => $options{user}, password => $options{pass}, testcookies => 0, submit => 'Login', ], ); my ($token) = $return->content =~ /token=([0-9a-f]+)\'/; push @{ $ua->requests_redirectable }, 'POST'; $return = $ua->request(GET "http://login.vle.cleo.net.uk/content.php?" ."url=http://$options{vle}/login/secure_login.php?token=$token"); #check if login succeeded $return = $ua->request(GET "http://$options{vle}"); die "Login failed" unless $return->content =~ /User Admin/; my ($sesskey) = $return->content =~ /sesskey=(\S+)\"/; #edituser($options{newuser}, $options{newpass}, $sesskey) if $options{createuser}; my @uids = grabbyquery($sesskey, 'cleo'); for my $userid (@uids) { print $userid . "\n"; } sub edituser { my ($username, $password, $sesskey) = @_; my ($lastname, $firstname) = $username =~ /([0-9a-z]+)([a-z])$/; my $uid = finduid($username) || '-1'; my $return = $ua->request(POST 'http://$options{vle}/user/editadvanced.php', Content_Type => 'form-data', Content => [ username => $username, newpassword => $password, preference_auth_forcepasswordchange => 1, firstname => $firstname, lastname => $lastname, email => $username . $options{email}, city => 'Preston', country => 'GB', MAX_FILE_SIZE => 31457280, id => $uid, course => 1, mform_showadvanced_last => 0, sesskey => $sesskey, _qf__user_editadvanced_form => 1, auth => 'manual', maildisplay => 2, emailstop => 0, mailformat => 1, preference_mailcharset => 0, maildigest => 0, autosubscribe => 1, trackforums => 0, htmleditor => 1, ajax => 0, screenreader => 0, lang => 'en_utf8', ], ); } sub finduid { my $username = shift; my $return = $ua->request(GET "http://$options{vle}/admin/user.php?search=$username"); my ($uid) = $return->content =~ /\.\.\/user\/view.php\?id=([0-9]+)/; return $uid; } sub deluser { my ($username, $sesskey) = @_; my $uid = finduid($username); my $return = $ua->request(GET "http://$options{vle}/admin/user.php?delete=$uid&sesskey=$sesskey"); my ($verify) = $return->content =~ /confirm" value="([a-z0-9]+)"/; print "$verify\n"; $return = $ua->request(POST 'http://$options{vle}/admin/user.php', Content => [ delete => $uid, confirm => $verify, sesskey => $sesskey, ], ); } sub grabbyquery { my ($sesskey, $search) = @_; my $return = $ua->request(GET "http://$options{vle}/admin/user.php?sort=firstname& dir=ASC&perpage=30&firstinitial=&lastinitial=&$search=cleo&page=0"); my $hits = $return->content =~ />([0-9]+) \//; $return = $ua->request(GET "http://$options{vle}/admin/user.php?sort=firstname& dir=ASC&perpage=$hits&firstinitial=&lastinitial=&search=$search&page=0"); my @uids = $return->content =~ /\.\.\/user\/view.php\?id=([0-9]+)/g; return @uids; } Just another quickie, I wrote this one this yesterday. Its just a simple moodle framework that can do password resets, delete users. its pretty self explanatory and you have to do a bit of work with the code to make it do what you want. the grabby() sub is nice cos you can then edit users via a search of the moodle user base... the reason i scripted it up is because cleo does not give us any decent database access. this means i cannot fix an error they made (alot of our users are given the @cleo.void.net.uk email which is lame, with this i can easily update all the users to their correct email. i know the answer is to host our own moodle but thats not viable atm, so cleo if you read this, PLEASE GIVE US PHPMYADMIN ACCESS! have phun!

did you try this yet? content => "$text"

zsh > bash fluxbox is my fav, use compiz+kde at work though(Teachers love that shit).. in terms of education id imagine something lightweight like flux would be the best though, keeps things simple.

the script doesnt actually define $wikiTemplate at all, if they used lexical variables the script would fail to execute. [[:Template:$wikiTemplate]] looks as though its some kind of bbs code to me, never played with mediawiki though. install wireshark and sniff the post requests sent to your wiki from the script and post here.

Feel free to post it on my behalf. Im looking at it from more of a techie aspect cos tbh, lancsngfl should be adding features like this to their apps ;-)

the client login lacks https too, pretty silly. Btw, i have a few moodle scripts too if anyone is interested i can dig them out.

https://www.lancsngfl.ac.uk/email-admin/login.php Not Found The requested URL /email-admin/login.php was not found on this server. Apache Server at http://www.lancsngfl.ac.uk Port 443

I knocked this script up this morning because the teachers are trying to force teachers to start using their emails, trouble is half of them have used it once and forgotten their pw's. This script is just a mass password reset at the moment, but i will be adding more features soon. If anyone is interested i will keep you updated. Anyway, thoughts and improvements are welcome #!/usr/bin/perl #mylgfl script - reset all passwords #by josh hall for BBEC use strict; use warnings; use Getopt::Long; use LWP::UserAgent; use HTTP::Request::Common; my %options; GetOptions( \%options, 'user=s', 'pass=s', 'domain=s', 'password=s', ); help() unless $options{'domain'}; my $username = $options{'user'} . '@' . $options{'domain'}; my $ua = LWP::UserAgent->new(); $ua->cookie_jar({}); $ua->agent('Mozilla/5.0'); $ua->env_proxy(); push @{ $ua->requests_redirectable }, 'POST'; #ok now we need to login my $check = $ua->request(GET 'http://www.lancsngfl.ac.uk/email-admin/login.php'); $check = $ua->request(POST 'http://www.lancsngfl.ac.uk/email-admin/login.php', [ do => 'login', user => $username, password => $options{'pass'}, submit => 1, ], ); die "You are not logged in\n" unless $check->content =~ /Logged in as/; #grab all the usernames $check = $ua->request(GET 'http://www.lancsngfl.ac.uk/email-admin/view.php'); print $check->content(); my @users = $check->content() =~ /(\w+)@[a-z\.]+<\/td>/g; #reset all users for my $user (@users) { print "Resetings User: $user\n"; edituser($user, $options{'password'}) } sub edituser { my ($username, $password) = @_; my ($surname, $initial) = $username =~ /(\w+)([a-z0-9])$/; my $check = $ua->request(POST 'http://www.lancsngfl.ac.uk/email-admin/edit.php', [ task => 'editSingle', uid => $username, forename => $initial, surname => $surname, password => $password, password2 => $password, ], ); } sub help { print <<"ENDDOC"; -------------------------------------------- MYLGFL all user Password reset version 0.1 Code grabs all usernames from view.php and then proceeds to reset the passwords to one you specified. Usage: perl mylgflreset.pl -user LGFLADMIN -pass LGFLPASSWORD -domain SCHOOLDOMAIN -password DEFAULTPASSWORD ENDDOC exit; }

I dont see how it makes Islam look foolish tbh. Maybe Pakistan's leaders?

Nanog thread neat explanation, routing deets Nice threads on the subject.

http://projects.info-pull.com/moab/ http://www.google.co.uk/search?hl=en&safe=strict&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=safari+vulnerabilities&spell=1 As the advertisments say, apples are far more secure than all of its competition, not. Apples are for faggots.

Amazing.

fanboy lol

one of my favourite work past times is to take control of their session and hold the up key (or something similar until they crash), then repeat until they realise somethings broken...even better when they are on level 10 or something :twisted:

If you want it easy use something like Easyphp or xampp.

Hi there. I work at a school in lancs as a mere technician. Computers are seriousss business!

The best thing about Ubuntu is its existing documentation, but as someone previously stated the more the merrier i guess.. If you want a linux hobby, forget ubuntu and get into slackware Slackware is a real hobbiest OS, super fun!