Archive

Posts Tagged ‘local’

Pass-the-hash from memory

October 15th, 2012 No comments

This is the most impressive and scariest hack I ever seen.
The tool called WCE, Windows Credential Editor can get any password
from a Windows box, from memory! So even if you login in the server 3months ago,
the hack would still work. This is no common pass-the-hash attack,

Read more…

check local administrator group

June 5th, 2012 No comments

We needed a way to know if anyone has added itself to the Local Administrator group on any servers.
So I wrote this script and setup on schedulle task to run each hour. In case any changes
happen on the Local Admins group and e-mail will be sent.

Read more…

Get Local Admins

May 18th, 2009 No comments

Remotely Get Local Admins Users inside Administrators group, for Workstations
Also tests the connectivity, it gets computers from AD object type “computer”
and it prints out a nice report.

Read more…

Categories: VbScripts Tags: , , , , , , , , ,

NRPE_NT bug

November 25th, 2008 No comments

Nagios NRPE_NT bug.
Well I wrote few scripts that are actually quite complex to run under Windows 2003 Servers,
some of them I start getting no output or just the first character output using NRPE_NT 0.8.0.2 or 8b.
It seems NRPE does not handle well the STDOUT using the LocalSystem account, I just set the service
“Nagios Remote PLugin Executor for NT/W2K” to run under another account with Administrator Permissions, and now it all works!
Wow that was scary, because I took me 3 days to write a script to get the Value of the Top Mailbox Sizes (Under Exchange 2003)
and it worked localy but not thru NRPE, well now the mistery is solved!

Problem:

NRPE_NT does not output correctly, just the first character
Solution:

Run the Nagios service under a specific Administrator account

Read more…