Technical notes, and other ideas.
Looking for vulnerability
Original Article: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5638
Refer: https://github.com/mazen160/struts-pwn
Script: struts-pwn-master.zip
$ python struts-pwn.py --check --url 'https://my.domain.com/checkme.action'
[*] URL: https://my.domain.com/checkme.action
[*] Status: Vulnerable!
[%] Done.
Every 1 to 3 years we are issued new POLAR certificates that need installed on our servers to allow us to connect to HTTPS on our servers. This is a security feature where the servers need to have their target certificates installed.
Use the following attachment [ update-polar-certs ] [ developers-vm-polar-cert-update ] to allow you to copy-n-paste the commands, also this was for the batch server which is on Java 1.6.
Go to halprdjobs02.hq.halw.com and run the following commands as root:
$ cd /usr/java/jdk1.6.0_45/jre/lib/security
$ /usr/java/jdk1.6.0_45/bin/keytool -v -import -trustcacerts -alias pcl_rsa -keystore /usr/java/jdk1.6.0_45/jre/lib/security/cacerts -storepass -file /software/pcl-cert/JBoss/COMODO_RSA_Certification_Authority.CER
$ /usr/java/jdk1.6.0_45/bin/keytool -v -import -trustcacerts -alias RSA-organization -keystore /usr/java/jdk1.6.0_45/jre/lib/security/cacerts -storepass -file /software/pcl-cert/JBoss/New_Princess_COMODO_RSA_Organization_Validation_Secure_Server_CA.cer
refer: http://www.omgubuntu.co.uk/2016/08/make-gimp-look-like-photoshop-easy
refer: http://doctormo.deviantart.com/art/Gimp-2-8-Photoshop-Tweaks-432736644
To help a fellow deviant, I've put together a download that anyone with Gimp 2.8 on Linux can use to make their copy of gimp look more like Adobe Photoshop and make people more comfortable.
I've taken various bits of guides online and various tweaks. All you have to do is download the file, unzip it. Then in the file manager go to your home folder, show hidden files, delete or move your old .gimp-2.8 configuration folder out of the way, and replace with the new one. Then load gimp. Then me know if it works for you or if it fails.
See attached file to import
Example for Ubuntu as follows:
$ sshpass -p 'YourPassword' ssh user@host
Refer: https://www.fossmint.com/stacer-ubuntu-system-optimizer/
--------------- On Ubuntu 64-bit ---------------
$ wget https://github.com/oguzhaninan/Stacer/releases/download/v1.0.4/Stacer_1.0.4_amd64.deb
$ sudo dpkg --install Stacer_1.0.4_amd64.deb
$ Stacer
Ubuntu: $ mplay filename.mp3
Mac: $ afplay filename.mp3
Refer: http://askubuntu.com/questions/17275/progress-and-speed-with-cp
$ rsync -ah --progress source destination
$ alias copy="rsync -ah --progress"
$ alias copydir="rsync -ahr --progress"
Example setting load balancing between 2 servers
$ sudo gedit /etc/nginx/sites-available/default
upstream talproxy {
server 10.7.19.75:12940 weight=2;
server 10.7.19.3:12940 weight=1;
}
server {
... REMOVED TO SAVE SPACE ...
### BEGIN PATCH ###
location /talproxy {
proxy_pass http://talproxy/;
}
Refer: http://ubuntuhandbook.org/index.php/2016/02/kodi-16-released-how-to-install-it-via-ppa/
$ sudo add-apt-repository ppa:team-xbmc/ppa
$ sudo apt-get update
$ sudo apt-get install kodi
This probably won't be needed
sudo apt-get install --install-suggests kodi
Helpful Hint
Kodi the \ is the shortcut key to toggle between fullscreen and window
--
Refer: http://askubuntu.com/questions/849396/uninstall-kodi-on-ubuntu-14
If you need to remove and purge an application and finally removing/purging also the application configurations files, do so by using the following commands:
$ sudo apt-get update
$ sudo apt-get remove kodi*
$ sudo apt-get purge kodi*
Then remove the settings folder to remove all settings and library data. This will not delete any videos or music, but just the settings and library data itself:
$ rm -r ~/.kodi/
or
$ rm -r ~/.xbmc/
for older versions before 14.0
Seems fast and will create thumbs without needing to import. It's also cross-platform compatible for Windows, Mac and also Linux. Does not handle external drives very well though.
http://www.xnview.com/en/xnviewmp/#features