--- Log opened Fri Jul 28 00:00:00 2017 04:00 -!- remoford [~remo_lapt@c-68-52-35-32.hsd1.tn.comcast.net] has quit [Quit: Leaving.] 06:25 <@Dolemite> mr0ning, be0tches and h0ez! 06:31 * aestetix hugs Dolemite 07:23 -!- Catonic [~catonic@71-45-91-197.res.bhn.net] has quit [Ping timeout: 260 seconds] 08:38 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:242b:853c:7eec:62d4] has joined #se2600 09:18 -!- Catonic [~catonic@71-45-91-197.res.bhn.net] has joined #se2600 09:18 -!- mode/#se2600 [+o Catonic] by ChanServ 10:02 <@Corydon76> Happy SysAdmin Day 10:11 -!- klixa [~klixa@unaffiliated/klixa] has joined #se2600 10:11 -!- mode/#se2600 [+o klixa] by ChanServ 10:25 < aestetix> hi klixa 10:25 <@klixa> hey 10:25 < aestetix> wie gehts? 10:25 <@klixa> bien...lol 10:25 <@klixa> gut 10:26 < aestetix> das ist nicht auf deutsch 10:26 < aestetix> lol 10:26 <@klixa> i didnt think anyone still used this channel... im rarely on irc tho 10:26 < xray> there is a lot of traffic on this channel, sadly most of it is not about hacking 10:26 <@klixa> ja richtig...so you still in germany? 10:27 < aestetix> ja 10:27 < aestetix> I think I will be here for a long time :) 10:27 < aestetix> certainly have no desire to go to the US anytime soon :p 10:27 <@klixa> oh? for awhile it was just dead... and this is the first time ive used my laptop in months on orc...and my phone doesnt autijoin i dont think 10:27 < aestetix> xray: I was thinking about that 10:28 < aestetix> xray: I wonder if it is because the discussions that happen in here can't happen anywhere else 10:28 <@klixa> im in indiana... my bf wants to go back to the west coast...i wanna go to new england...or nashville... 10:28 < aestetix> xray: like, from what I can tell, the atmosphere in the US is just too heavy and loaded 10:28 <@klixa> after anarchival left, it became way less entertaining, LOL 10:28 < xray> It is common on channels where everyone knows each other well 10:28 < aestetix> oh hm 10:28 < xray> the discussions tend to stray outside the charter for the channel 10:29 * klixa misses being called a slut randomly at 3am on irc 10:29 < xray> then again charters aren't set in stone 10:29 < aestetix> klixa: you're a slut 10:29 < xray> they are there to meet the members needs 10:29 <@klixa> :O 10:29 <@klixa> hahah 10:30 <@klixa> ok, well what should we be talking about xray 10:30 < xray> hacking 10:30 < aestetix> does russian hacking count 10:30 <@klixa> ill talk about all my broken stuff... i have an asus t100 with a broken screen...an ipad mini with a broken screen...a macbook pro with a broken screen.... 10:30 < xray> given the 2600 moniker 10:30 < xray> yes 10:31 <@klixa> but its SE2600 and southerners are all about strayng off topic and gossiping 10:31 < aestetix> klixa: you should come to HOPE next year 10:31 <@klixa> what is that 10:31 < aestetix> www.hope.net 10:31 <@klixa> where is that 10:31 <@klixa> im using dial up speed net atm...thethered to an ATT phone thats out of high speed LTE 10:31 <@klixa> i cant click urls 10:32 < aestetix> it's the 2600 conference 10:32 < aestetix> in new york 10:32 < xray> Jully 20-22 2018 10:32 < xray> New York City 10:32 < aestetix> xray: you going? 10:32 <@klixa> xray: are you a nashvillian? 10:32 < xray> probably not 10:32 < xray> no I'm in atalnta 10:32 < xray> I've been a speaker at PN 10:32 < xray> I run dc404 10:32 < xray> and develop NetKotH 10:33 <@klixa> okee 10:33 < xray> I work in infosec 10:33 <@klixa> ive never been to PN 10:33 < xray> I had a lot of fun 10:33 <@Corydon76> There's nothing wrong with being a slut 10:33 < xray> I would love to go again but my traveling is limited at the moment due to medical issues 10:34 < xray> which I'm hacking by the way 10:34 <@klixa> i travel too much... i was in New Hampshire 2 weeks ago, and now im here in indiana...and will prolly be in Oregon or washington in 2 weeks :/ 10:34 < xray> been reverse engineering my cryotherapy unit 10:34 <@klixa> my bf is like schizo... or something 10:34 < xray> have two parts left to spec 10:35 <@klixa> ok 10:35 < xray> If you know where I can find dual channel neoprene chilled water line insulation, please let me know. 10:36 < xray> I also need a cheap variable speed water pump. 12v - 28v DC 10:36 <@klixa> nope 10:36 < xray> can be ac 10:36 < xray> low volume like a fish tank pump. 10:37 < xray> hmmm hadn't thought of a fishtank pump 10:37 < xray> off to the googles. 10:37 <@klixa> most fish tanks use filters rather than pumps 10:38 < xray> also looking for a low cost liquid heat exchanger for the peltier 10:38 < xray> yes but there is an embedded pump. A filter would be a bonus 10:39 <@Evilpig> xray: the water pump is easy to get in town 10:39 < xray> may have to build my own liquid heat exchanger as well 10:39 <@Evilpig> any of the plant places that sell indoor growing shit have them 10:39 <@Evilpig> they'd likely have similar tubing too 10:39 < xray> damn I hadn't thought of that. 10:40 < xray> thanks for the lead 10:40 <@Evilpig> there's that place over in the glutch that sells brewing shit too that would be a good bet 10:40 <@Evilpig> all seasons, I think is the name 10:40 < xray> I know a few brewing supply stores a have a few freinds into it. 10:40 < xray> That never occurred to me 10:40 < xray> thanks 10:40 <@Evilpig> anytime 10:41 <@Evilpig> once in a while i'm firing on all cylinders 10:41 < xray> They might have the insulation as well 10:41 <@Evilpig> very likely 10:42 <@Evilpig> NotLarry would be a good one to hit up if you could catch him on irc 10:42 <@Evilpig> he's got a hydro grow bed setup on his boat 10:42 < xray> I'm going to use a PC power supply and case to house it all and use a Raspberry Pi or Arduino to control it. 10:42 <@Evilpig> he's using the exact same 10:43 < xray> Ok I'll also try to catch him out of band 10:43 <@Evilpig> well he was until he dumped a 5gallon bucket of water into his power supply 10:43 < xray> hopefully didn't start a fire 10:43 <@Evilpig> just shorted out and let out the magic smoke 10:45 < xray> for being magic smoke it sure stinks a lot 10:45 < xray> you would think it would smell better 10:46 < xray> then again it's a great safety feature. 10:46 < xray> You smell it and have time to turn things off before burning down the lab 10:46 <@Evilpig> or in notlarry's case, the boat 10:47 < xray> which would be ironic, burning down something surrounded by water. 10:47 <@Evilpig> the word I would use woudl be "impressive" 10:55 <@klixa> well, the ineterious of a boat can be burned out 10:55 <@klixa> interior* 11:06 < TheDukh> Hey xray, can you PM? Have a private question to ask 11:06 <@Evilpig> I feel dirty. https://iis.wilpig.com/ 11:06 < PigBot> Title: IIS7 (at iis.wilpig.com) http://tinyurl.com/y75qv5mv 11:10 -!- klixa [~klixa@unaffiliated/klixa] has quit [Read error: Connection timed out] 11:27 < _NSAKEY> Evilpig: At least he didn't toss any chairs off of rooftops. 11:31 < aestetix> Evilpig: 21,22,23,25,53,80,443,1723,5900,8080 11:32 < aestetix> can you guess what those numbers all have in common 11:32 < xray> common network ports 11:33 < aestetix> xray: from an abstract level, yes :) 11:33 < xray> 5900 is vnc 11:33 < aestetix> Evilpig: any idea? 11:33 < xray> 1723 is pptp 11:33 < xray> probably a linux web server 11:34 < xray> although it is running DNS 11:34 < xray> so maybe not 11:34 < aestetix> they are all open ports on iis.wilpig.com :p 11:34 < xray> really 11:34 < xray> that is odd 11:34 < aestetix> according to nmap 11:34 < xray> because Windows doesn't have native ssh 11:34 < xray> or vnc 11:35 < xray> also doesn't run an SMTP server by default wither 11:35 < xray> either 11:39 < xray> now I'm curious 11:49 < xray> It looks like a linux box 11:49 < xray> PORT STATE SERVICE REASON VERSION 11:49 < xray> 20/tcp closed ftp-data reset ttl 255 11:49 < xray> 21/tcp open ftp syn-ack ttl 255 Serv-U ftpd 14.0 11:49 < xray> 22/tcp open ssh syn-ack ttl 255 OpenSSH 5.3 (protocol 1.99) 11:49 < xray> 23/tcp open ssh syn-ack ttl 255 OpenSSH 5.3 (protocol 1.99) 11:49 < xray> 25/tcp open smtp syn-ack ttl 255 Cisco PIX sanitized smtpd 11:49 < xray> 53/tcp open domain syn-ack ttl 255 ISC BIND 9.8.2rc1 11:49 < xray> 80/tcp open http syn-ack ttl 255 Apache httpd (PHP 5.3.3) 11:49 < xray> 443/tcp open ssl/ssl syn-ack ttl 255 Apache httpd (SSL-only mode) 11:49 < xray> 990/tcp closed ftps reset ttl 255 11:49 < xray> 1723/tcp open pptp syn-ack ttl 255 linux (Firmware: 1) 11:49 < xray> 5900/tcp open vnc syn-ack ttl 255 RealVNC Enterprise (protocol 4.1) 11:49 < xray> 8080/tcp open http syn-ack ttl 255 Apache Tomcat/Coyote JSP engine 1.1 11:51 < xray> never mind that was willpig.org 11:59 < _NSAKEY> But guys, you're not asking the important questions. 11:59 < _NSAKEY> Is install.php present? 12:00 < _NSAKEY> This is Wilpig. There are likely easter eggs. 12:10 -!- klixa [~klixa@unaffiliated/klixa] has joined #se2600 12:10 -!- mode/#se2600 [+o klixa] by ChanServ 12:21 < _NSAKEY> Heh. http://www.esquire.com/lifestyle/health/a55986/barkley-marathons/ 12:21 < PigBot> Title: The Barkley Marathons Is the Most Hellish Marathon in the World (at www.esquire.com) http://tinyurl.com/y9u3r7zy 12:23 <@Evilpig> aestetix: it's you scanning me 12:24 <@Evilpig> and those ports all point to all kinds of stuff 12:26 < xray> I take back my take back. It was a scan of iis.wilpig.com 12:26 <@Evilpig> it's the same as wilpig.com 12:26 <@Evilpig> I have a wildcard for *.wilpig.com -> wilpig.org 12:26 < xray> It think its a Linux box with an IIS banner on the web server 12:26 <@Evilpig> I got tired of making dns entries so I just put in a wildcard 12:26 < xray> Ok that makes sense now 12:26 <@Evilpig> I think it's actually an iis server running on windows 12:26 <@Evilpig> but I have some magic set up with proxypass and apache 12:27 < xray> but all the service headers look like Linux 12:27 < xray> if it's a disguised site is nicely done 12:28 <@Evilpig> no disguise. all proxy magic 12:28 < xray> it confused nmap 12:28 <@Evilpig> https://gist.github.com/wilpig/2155b60c19efdbb11a72ee2c72adbfa9 12:28 < PigBot> Title: wilpig.com.conf ยท GitHub (at gist.github.com) http://tinyurl.com/y8qmkzu3 12:28 < xray> it thinks its a windows machine or RHEL 6 12:29 <@Evilpig> I have a proper firewall point ports to various machines so you get a mixed bag when you scan it 12:29 < xray> LoL 12:29 <@Evilpig> 20/21/990 -> windows 12:29 <@Evilpig> 22 -> linux 1 12:29 <@Evilpig> 23 -> linux 2 12:30 <@Evilpig> 25,80,443,8080 -> linux 2 12:30 <@Evilpig> 32400 -> linux 3 12:30 <@Evilpig> 1723 -> firewall 12:33 <@Evilpig> I'm pretty sure my home network is like anyone else's that's been running shit for years 12:33 < _NSAKEY> Evilpig: But how many instances of install.php do you have? 12:33 <@Evilpig> i'm not an idiot. zero 12:33 <@Evilpig> unless you look into my opendcim stuff and then there is one 12:34 <@Evilpig> but Dolemite and I wrote that with some help from brimstone so that it doesn't do stupid things like resetting a db 12:34 < _NSAKEY> Haha. Wouldn't want to trigger any false alarms for forensic investigations that won't happen. 13:09 -!- remoford [~remo_lapt@c-68-52-35-32.hsd1.tn.comcast.net] has joined #se2600 14:44 -!- K`Tetch_ [~no@24-178-141-147.dhcp.thtn.ga.charter.com] has quit [Read error: Connection reset by peer] 14:44 -!- K`Tetch [~no@24-178-141-147.dhcp.thtn.ga.charter.com] has joined #se2600 14:44 -!- K`Tetch [~no@24-178-141-147.dhcp.thtn.ga.charter.com] has quit [Changing host] 14:44 -!- K`Tetch [~no@unaffiliated/ktetch] has joined #se2600 14:45 -!- klixa [~klixa@unaffiliated/klixa] has quit [Ping timeout: 260 seconds] 15:14 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:242b:853c:7eec:62d4] has quit [] 17:21 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:242b:853c:7eec:62d4] has joined #se2600 18:33 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:242b:853c:7eec:62d4] has quit [] 19:33 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:d9c9:9c36:7d71:9b34] has joined #se2600 19:59 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:d9c9:9c36:7d71:9b34] has quit [] 20:12 -!- K`Tetch_ [~no@24-178-141-147.dhcp.thtn.ga.charter.com] has joined #se2600 20:14 -!- K`Tetch [~no@unaffiliated/ktetch] has quit [Ping timeout: 240 seconds] 20:22 -!- Catonic [~catonic@71-45-91-197.res.bhn.net] has quit [Ping timeout: 246 seconds] 22:18 -!- Catonic [~catonic@71-45-91-197.res.bhn.net] has joined #se2600 22:18 -!- mode/#se2600 [+o Catonic] by ChanServ 23:01 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:d9c9:9c36:7d71:9b34] has joined #se2600 23:01 -!- TheDukh [~thedukh@2607:fcc8:ac80:d900:d9c9:9c36:7d71:9b34] has quit [Client Quit] --- Log closed Sat Jul 29 00:00:02 2017