some of my favorite ruby gem names

hoe, factory girl, rack, naked_rack, deepthroat, punch, shnork, rubbr, beer, pony, strap-on, cheeba, babygitter, backnob, badger, syckle, birdfeed, hosebird, grackle, hammock, sunspot, birdie, hubris, corrupt, gambler, paranoia, peeping, statwhore, slubydoo, slug, crack, ragweed, wee, grudge, inquisition, honkster-jelly, harker, tinkerbell, jacker, mockery, bullshit, i_dont_give_a_shit, monkey_shield, biomass, ass, massive-nancy, sassafras, clingwrap, scraper, castronaut, feedbag, bullet, snailgun, railgun, cap_gun, railgun, shotgun, punch, throat-punch, one_inch_punch, puny, shadow_puppet, hightimes, tadpole, hobosupport, runt, fugit, stammer, curly_mustache, rasta,crazy_ivan, floobs, loofah, boogaloo, mole, syrup, featherdust, grit, crow, pangea, panda, sunspot, japanese_av_actress, hurl, watcher, obsidian, glue, disguise, needle, junebug, jungle, petticoat_junction, juggernaut, jello, honkster-jelly, wizardly, crocodile, stump, burn, fire-hydrant, homeschool, fast_hammer, dutchfaker, fabricator, facade, fattr, profanalyzer, masochism

Posted by jeremy Fri, 16 Apr 2010 17:02:00 GMT


violating the linksys rvs4000

FTP is way the fuck broke on my past the return product policy expiration date of my gigabit router. I want to hack it but A) I'm just not that skilled in the ways of *nix; b) I'm too lazy to learn mips cross-compiling for linux embedded systems (whatever the fuck that means).

So I google my incompetence as usual. Search for "rvs4000 ftp" and you get a whole lot of what you already know. The shits broke. No ones gonna fix the shit. You're ten kinds of fucked if you want to ftp anything, ever.

So I roll a search on the processor "star 9202" which drops me a few gems of badassery:
Hacking the WRVS4400NX Stock Firmware V1.1.03 for Full Linux Shell Access
http://openwrt.org/logs/openwrt.log.20071102

Not my model - but it appears the only difference betweenRVS4000 and the WRVS4400N is that the WRVS4400N has a wireless chipset - that is a separate processor to run the wireless services with.

So they seem to be the same except one does wireless and one does not. So I go to the diagnostics pages of the administration ui and start pasting in the different commands from the "Hacking the WRV44...." post to see what happens. No dice. The ftp no longer works - probably a good thing - so I start stumbling around the web glossing over many pages of stuff about busybox. I try pasting in all kinds of shell commands into the way not secure 'Traceroute Target:' field when I happen to get a command to try off of the busybox wikipedia page: ';/bin/ls' - I paste-a-bitch and wa-la:

ARARPTable.htm
AccessRes.htm
Administration.htm
AppGaming.htm
Backup.htm
DHCPClientTable.htm
DMZ.htm
Diagnostics.htm
EditList.htm
Factorydefaults.htm
FirmwareUpgrade.htm
Hidden_telnet.htm
IM-P2P.htm
IPS-N.htm
LocalNetwork.htm
Log.htm
Ping.htm
PortRangeTriggering.htm
QoS.htm
Quick_vpn_setup.htm
RVS4000_Admin.pem
RVS4000_Client.pem
Reboot.htm
Report_Pic-n.jpg
Routercfg.cfg
Routing_Table.htm
Security.htm
Setup.htm
Setup_MAC.htm
Setup_lan.htm
Setup_routing.htm
Setup_summary.htm
Setup_time.htm
Setup_wan.htm
SingleForwarding.htm
Status.htm
Summary.htm
UI_02.gif
UI_03.gif
UI_04.gif
UI_05.gif
UI_06.gif
UI_07.gif
UI_10.gif
UI_Cisco.gif
UI_Linksys.gif
VPNPassthrough.htm
acl.htm
cisco.css
down_chart.jpg
err_msg
func.js
fw_version.pat
help
index.htm
info.htm
ip_conntrack.htm
left.gif
linux.js
log_data.htm
log_outin.htm
middle.gif
mm_menu.js
msg.js
new_rule.htm
po1_0.gif
po1_1.gif
po2_0.gif
po2_1.gif
po3_0.gif
po3_1.gif
po4_0.gif
po4_1.gif
ppp_log
qos_service_managment.htm
quickVpnStatus.htm
raw_data.htm
reboot_guage.htm
report.htm
restore_config.cgi
rh_bg.gif
rh_cisco.gif
right.gif
rvs4000
service.htm
set_vpn.js
setup.cgi
switch_8021x.htm
switch_diagnostic.htm
switch_dscp.htm
switch_mirror.htm
switch_param.htm
switch_port.htm
switch_qos.htm
switch_queue.htm
switch_rstp.htm
switch_status.htm
switch_vlan.htm
switch_vlan_mem.htm
switch_vlan_port.htm
table.jpg
table.png
tr069
tracert.htm
trash.gif
up_chart.jpg
upgrade_flash.cgi
upgrade_pem.cgi
upgrade_sig.cgi
upload_lang.cgi
vpn_adv.htm
vpn_main.htm
vpn_summary.htm
vpnsum.htm
wan_0.gif
wan_1.gif


Would you check that the fuck out!?! 'Hidden_telnet.html' I (again) paste-a-bitch and HOT DAMN if I don't get some purty radio buttons. And after i click yes in the little circle and save the settings hot damn if i don't have an insecure as all holy hell no login needed telnet accessible router spread wide open and waiting like a rufied sorority pledge coed at the frat kegger... and a quick test of my dyndns enabled domain confirms that yes, I do have world facing telnet access of my router sans any security. None, nada. Zero. Luckily I can uncheck my telnet access on my hidden telnet access page and then save settings so I longer have hidden telnet access.

speedy:~$ telnet 192.168.0.1
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.


BusyBox v1.00 (2007.09.12-05:31+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

# help

Built-in commands:
-------------------
        . : break cd chdir continue eval exec exit export false hash
        help local pwd read readonly return set shift times trap true
        type ulimit umask unset wait

# ls
Active_ALG.list          linuxrc                  sbin
bin                      lost+found               tmp
dev                      nat-pt_packet_stats_log  usr
etc                      proc                     var
lib                      root                     www.eng
# ls bin
ash          df           ipaddr       mount        radvd        umount
brctl        dhcp6-serv   iplink       nat-pt       rm           uname
busybox      dmesg        iproute      netstat      sed          vi
cat          echo         iptunnel     ping         sh
chmod        flash_tools  kill         ping2file    sleep
chown        gzip         ln           ping6        sysinfo
cp           hostname     ls           ps           tar
date         ip           mkdir        pwd          touch
# exit
Connection closed by foreign host.


Maybe I can use this knowledge to fix my ftp problem. Or to get my whole home network compromised.

Posted by jeremy Tue, 17 Jun 2008 12:05:00 GMT


say it aint so

This must be why I believed Mr. Ed was a Zebra.

Posted by jeremy Sun, 28 May 2006 04:58:00 GMT


the teh

For years I thought 'teh' as a spelling for 'the' was some l337 speak hackerism but it dawned on me last night that if you're typing really fast like they teach you in 10th grade you're fingers will already be poised over the top row so slipping the 'e' before the 'h' would be very common if you're thinking faster than your typing. Kind of like how I always type 'of' instead of 'or'. It's a very persistent defect in my self-styled 4-finger hunt and peck mannerisms.

Posted by jeremy Tue, 28 Feb 2006 18:54:00 GMT


someone to be shot

Don’t break the law in Dallas or any other city in the metroplex. After 3 officer shootings in 2 weeks cops are going to have itchy trigger fingers and any sudden hand movements may get you plugged full of lead. I’m waiting for the story to break of a 14 year old kid getting shot 40+ times because he reached for his wallet. Happy Holidays from the Murderplex!

Posted by jeremy Mon, 05 Dec 2005 19:34:00 GMT


holy slow sudo port install mod_ruby

Every time I challenge the silicon gods by installing yet another demanding software package on my powerbook G3 I always start by consciously dismissing the age and condition of the laptop. The machine is 6 years old, has 386mb of ram, a 9 gig hard drive, a 500mHz processor, and a first generation airport card. After installing tiger and developer tools there is a little under 2gb of disk space left.

There is a ghost impression of the keyboard etched into the surface of the LCD screen from the oil left on the keys by my fingers. I have dropped, sat on, stepped on, rolled over, spit on, slammed shut, forced open, poked, prodded, wedged, and pried loose this poor machine during the 6 years, 2 SXSW’s, many business trips, not as many vacations, and 6 operating system upgrades of it’s life.

Every time I do something beyond surf the web on grandpa pismo and it doesn’t start smoking or tell me to hold the power button down in 5 different languages I experience a trepid euphoria not unlike that experienced by a man who only hears the metallic click of the firing pin during a game of russian roulette.

Around minute 30 of hour 2 of installing mod_ruby using darwin ports (just to see if I could) I started to get nervous. I was using a wireless connection, the elderly (original) battery was at 50% and sinking and I was having a hard time staying awake. it was 2:30 a.m. which is actually 3:30 am to my internal clock seeing as we’re only a few days in to the daylight savings time switch.

Being the dedicated, task focused person I am I… fell asleep.

I have yet to assess the outcome of this latest haphazard command line escapade.

Posted by jeremy Wed, 23 Nov 2005 11:00:00 GMT