whats http://www.wekk.net/blog "Person who say it cannot be done should not interrupt person doing it." Sun, 07 Mar 2010 17:51:55 +0000 http://wordpress.org/?v=2.5.1 en Filesystems, IDA+QEMU, PPC… http://www.wekk.net/blog/2010/03/07/filesystems-idaqemu-ppc/ http://www.wekk.net/blog/2010/03/07/filesystems-idaqemu-ppc/#comments Sun, 07 Mar 2010 17:51:55 +0000 admin http://www.wekk.net/blog/?p=86 (original post: http://sapheads.wordpress.com/2010/03/07/filesystems-idaqemu-ppc/)

This week I’ve been so busy at work but I’ve manage to learn some new stuff. :)

First think that I’ve learned has been because of a big problem at work with an Adaptec SAN device and a ext3 filesystem of 7.5Tb.  The controller stoped working and I started an impossible  filesystem recovery. The main thing that I’ve learned with this problem, has been that e2fsprogs has a library (called libext2fs)  that lets you modify the filesystem esially.  With that library you can go forward all the filesystem inodes and for example, mark half of the inodes as unused.

About IDA and Qemu, I followed the hexblog tutorial. It is quite useful to do things like that if  you don’t have an ARM CPU to test the code.

Last think that I’m working on now, is a ppc tool that I’ve to manually port to i386. This is my chance to learn about ppc asm.

And that’s all for me!

]]> http://www.wekk.net/blog/2010/03/07/filesystems-idaqemu-ppc/feed/ Dos links de forensics http://www.wekk.net/blog/2010/03/06/dos-links-de-forensics/ http://www.wekk.net/blog/2010/03/06/dos-links-de-forensics/#comments Sat, 06 Mar 2010 16:21:42 +0000 admin http://www.wekk.net/blog/?p=85 Aquests són dos links que trobo molt interessants en quant a contingut.

El primer es mostren principalment les diferents èinies que van apareixent així com noves versions i funcionalitats.

http://computer.forensikblog.de/en/

La segona és més genèrica a nivell d’informació relacionada amb forensics.

http://windowsir.blogspot.com/

]]> http://www.wekk.net/blog/2010/03/06/dos-links-de-forensics/feed/ Copssh http://www.wekk.net/blog/2010/03/02/copssh/ http://www.wekk.net/blog/2010/03/02/copssh/#comments Tue, 02 Mar 2010 16:29:41 +0000 admin http://www.wekk.net/blog/?p=84 Servei Openssh per windows.

http://www.itefix.no/i2/copssh

]]> http://www.wekk.net/blog/2010/03/02/copssh/feed/ PMDump http://www.wekk.net/blog/2010/03/02/pmdump/ http://www.wekk.net/blog/2010/03/02/pmdump/#comments Tue, 02 Mar 2010 16:28:36 +0000 admin http://www.wekk.net/blog/?p=83 Process memory Dump per windows.

http://www.ntsecurity.nu/toolbox/pmdump/

]]> http://www.wekk.net/blog/2010/03/02/pmdump/feed/ Xvi32 http://www.wekk.net/blog/2010/03/02/xvi32/ http://www.wekk.net/blog/2010/03/02/xvi32/#comments Tue, 02 Mar 2010 16:27:47 +0000 admin http://www.wekk.net/blog/?p=82 Editor Hexadecimal per Windows

http://www.chmaas.handshake.de/delphi/freeware/xvi32/xvi32.htm

]]> http://www.wekk.net/blog/2010/03/02/xvi32/feed/ Links i utilitats http://www.wekk.net/blog/2010/03/02/links-i-utilitats/ http://www.wekk.net/blog/2010/03/02/links-i-utilitats/#comments Tue, 02 Mar 2010 16:20:05 +0000 admin http://www.wekk.net/blog/?p=81 A partir d’ara també utilitzaré el blog per a penjar links d’utilitats que penso que algun dia puc necessitar. Avui he començar a fer-ho tot buidant el sabros.us i alguna pàgina del wiki.

La idea és tenir-los a algun lloc on els pugui buscar/trobar fàcilment sense haver d’instal·lar una nova aplicació ni haver de mantenir-ne un altre (com fins ara havia de fer amb el sabros.us)

]]> http://www.wekk.net/blog/2010/03/02/links-i-utilitats/feed/ Xming http://www.wekk.net/blog/2010/03/02/xming/ http://www.wekk.net/blog/2010/03/02/xming/#comments Tue, 02 Mar 2010 16:16:37 +0000 admin http://www.wekk.net/blog/?p=80 Servidor de X windows per a Windows.

http://sourceforge.net/projects/xming/

]]> http://www.wekk.net/blog/2010/03/02/xming/feed/ Baretail http://www.wekk.net/blog/2010/03/02/baretail/ http://www.wekk.net/blog/2010/03/02/baretail/#comments Tue, 02 Mar 2010 16:15:33 +0000 admin http://www.wekk.net/blog/?p=79 Eina que ofereix una funcionalitat equivalent al tail -f de sistemes UNIX.

http://www.baremetalsoft.com/baretail/

]]> http://www.wekk.net/blog/2010/03/02/baretail/feed/ Notepad++ http://www.wekk.net/blog/2010/03/02/notepad/ http://www.wekk.net/blog/2010/03/02/notepad/#comments Tue, 02 Mar 2010 16:14:23 +0000 admin http://www.wekk.net/blog/?p=78 Editor de text per a windows molt potent.

http://notepad-plus.sourceforge.net

]]> http://www.wekk.net/blog/2010/03/02/notepad/feed/ Ext2fsd http://www.wekk.net/blog/2010/03/02/ext2fsd/ http://www.wekk.net/blog/2010/03/02/ext2fsd/#comments Tue, 02 Mar 2010 16:10:05 +0000 admin http://www.wekk.net/blog/?p=77 Driver per windows per treballar sobre particions extX

http://www.ext2fsd.com/

]]> http://www.wekk.net/blog/2010/03/02/ext2fsd/feed/