+1-323-909-4740 blog@hegars.com

VIM

Pasting Blocks of code This prevents auto indent gone wild. :set paste :set nopaste

QEMU

escape key for -nographic Ctrl-A X Disk create disk image qemu-img create -f qcow2 win2k.img 4G convert qcow2 to raw qemu-img convert 32mb.qcow2 32mb.raw mount disk image losetup /dev/loop0 32mb.raw kpartx -a /dev/loop0 mount /dev/mapper/loop0p1 /mnt/32mb convert...

TZSP to PCAP

https://xn--blgg-hra.no/2015/03/ids-with-mikrotik-and-snort/ tzsp2pcap https://github.com/thefloweringash/tzsp2pcap compile and prereqs apt-get install libpcap-dev libpcap0.8 make Running Wireshark # ./tzsp2pcap -f | wireshark -i – using this strips the tzsp...

BINWALK

Package: binwalk Description-en: tool for searching binary images for embedded files and executable code Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded...

Crazy Disk Layout

Found a set of disk in my pile that came out of a Buffalo NAS root@debian:~# mdadm –detail /dev/md127 /dev/md127: Version : 1.2 Creation Time : Thu May 28 11:42:20 2015 Raid Level : raid5 Array Size : 1953259520 (1862.77 GiB 2000.14 GB) Used Dev Size : 976629760...

HP Storageworks Ultrium 960 LTO-3 pSCSI

HPE Library and Tape Tools https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_0da0741bc19f497d8b35964bef Firmwares in cp030021.exe # mt -f /dev/nst0 stsetoptions scsi2logical scsi2logical – seek and tell use SCSI-2 logical block addresses instead of...