Homeslice - Just Like a Boss

Another Cookbook of Sorts This one for Reverse Engineering Software and Firmware https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/?utm_source=tldrinfosec Tools Old friend  JD-GUI  to reverse the Android app and get a sense of things The AWS CLI  to download the firmware image. binwalk  for firmware inspection. Grok  to give a quick AI assisted look into prior research.

 How to Enable Jetpack and Wordpress Connection in Amazon bitnami First step is to Allow xmlrpc.php or you will get a 403 forbidden error. Steps: cd /opt/bitnami/ sudo vim ./apache/conf/vhosts/wordpress-vhost.conf ./apache/conf/vhosts/wordpress-https-vhost.conf find this part:     <Files xmlrpc.php>     Order Allow,Deny     Deny from all     </Files> change it to:     <Files xmlrpc.php>     Order Allow,Deny     Allow from all     </Files> Restart your bitnami services Optional Steps  sudo apt-get update  sudo apt-get install php-xmlrpc  sudo cp /usr/lib/php/20220829/xmlrpc.so /opt/bitnami/php/lib/php/extensions  ls -al /opt/bitnami/php/lib/php/extensions  sudo chmod 755 /opt/bitnami/php/lib/php/extensions/xmlrpc.so   ls -al /opt/bitnami/php/lib/php/extensions  sudo /etc/init.d/bitnami stop  sudo /etc/init.d/bitnami start

 How to Add NewAuthentification Methods to Office365 Using this link. https://entra.microsoft.com/#view/Microsoft_AAD_IAM/PasswordResetMenuBlade/~/AuthenticationMethods User Admin Center https://entra.microsoft.com/#view/Microsoft_AAD_UsersAndTenants/UserManagementMenuBlade/~/AllUsers/menuId/ Password Reset Methods https://entra.microsoft.com/#view/Microsoft_AAD_IAM/PasswordResetMenuBlade/~/Properties/fromNav/ Entra Admin Center https://entra.microsoft.com/#view/Microsoft_AAD_IAM/EntraDashboard.ReactView

DCOM FUD Caused by KB5004442 Applies to Windows domain controllers that are setup as "Certification Authority" that are being used from domain connected workstations to perform user self enrollment to generate certificates for PIV smart cards.  PIV smart cards are used to authenticate and logon. While setting up a DCOM application such as certificate enrollment services between workstations and servers, all running modern operating systems such as Windows Server 2022 and Windows 10, you start to see DCOM failures.  And you see error 10036 in the system log. 10036 "The server-side authentication level policy does not allow the user %1\%2 SID (%3) from address %4 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application." (%1 – domain, %2 – user name, %3 – User SID, %4 – Client IP Address) This is a real error message from the test environment. The server-side authentication level policy...

 WMIC says "Invalid Global Switch" Why does it say that when you use the /NODE switch?  It's because WMIC really wants the full IP address of the remote computer, not the name. Here's an example of it: This is the right way to do it, to prevent "Invalid Global Switch" The WMIC Cookbook In these examples, we will write all output to a file called a.out. First one will be written, others will be appended. # --------- CUT HERE ----------------------- # A powershell script by Uncle Joe # To append to the file, use /APPEND instead of /OUTPUT $username="talladega\lets_go_brandon" $password="Nascar22" # Get Computer Name wmic /NODE:192.168.0.143 /OUTPUT:a.out /USER:${username} /PASSWORD:${password} computersystem get model,manufacturer,name,username # Disk Check wmic /NODE:192.168.0.143 /APPEND:a.out  /USER:${username} /PASSWORD:${password}   logicaldisk list full # CPU Check: wmic /NODE:192.168.0.143 /APPEND:a.out  /USER:${username} /PASSWORD...

How to fix this "No suitable default server credential exists on this system" The Fix The fix was done by Dell Server support using Powershell command  New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "ims.local" -FriendlyName "MySiteCertIMS" -NotAfter (Get-Date).AddYears(10) Then finding the newly created certificate using MMC under Console Root, Certificates (Local Computer), personal, certificates and copying to Trusted Root Certification Authorities, Certificates.

How to Raise Your Website DA Score First you ask, what is DA? DA is the so called domain authority score that moz.com gives to most websites as they age and gain followers and web traffic.  DA is used by almost all SEO experts and SEO sales people to justify their existance.  In some way, DA is used by google to sort search engine results (SER), even though they won't admit it, DA is used to elevate some sites to the top of the search results.  In google analytics GA-4, the tag manager, will track referrals and engagement time. The referrals source is the backlink.  The link title is used to build up keywords as well.  The A HREF tag on external websites that contain your backlinks has a title The words between the A are what get's used to build your keywords over time.  Having one backlink does not help. The external websites that contain your backlinks must have a high DA rating as well to really count.  The SEO salesmen and other grifters often say ...

 How to Pair A Logitech K270 Keyboard Connect a non-unifying reciever to your computer and pair it with a K270 keyboard.  The reciever is all black, with no red stars on it.  It is stamped "logi" on the black plastic part, and has C-U0010 on the metal parts. What you will need: ConnectUtility from Logitech Logi Reciever with M/N C-U0010 FCC ID:  JNZCU0010 Also marked CNC ID C-11077  This is a so called non-unifying reciever Logitech K270 Keyboard Windows 10  Logitech M185 Mouse is compatible Logitech M310 Mouse is not compatible. You need a Unifying reciever C-U0007 Connect the Logi Reciever to your USB port, start up the connect utility, then follow the prompts.

The URL Redirect Trick This shady SEO trick will fool MOZ into recording some very high DA backlinks to your website. Only Moz is fooled, but your website's DA will increase.  Shady SEO hucksters will show you this metric and convince you that they have actually done you a great service.  DA does not help organic rankings. Google and Bing do not care about DA. DA is purely a Moz invention. What is DA ? For the website owner or small business owner who wants to promote his or her online presence, the comcept of DA is akin to how much credibility the website has in relation to its peers.  DA means domain authoritiy. DA is a great measure that grows with each high DA backlink that points back.  Some unscrupulous marketers have figured out how to plant your backlink in other high DA websites. The list below is an example. By clicking on each link, you will land on a website that shows barewirenetworks.com on a high DA website. The reality is that only Moz will show a gai...

 Security Defaults in Microsoft 365 Are Stupid Everyone hates them. Can we just get back to using passwords again? Here's how we turn them off. The settings are very well hidden, in 2023, they are buried deep inside Azure.  For your office 365 email tenant, you need to find the Microsoft Azure portal for your domain. Use this link: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Properties By doing this, you are living dangerously. You have been warned.

 Shoretel Mobility Router 4000 Configuration Hints and Tips So you just bought a Shoretel Mobility Router 4000 from Ebay or from a scrapper, and found that it is operational and was pulled from a working environment. That's perfect. Now you just need to reset the passwords and get the existing license keys from the database.  The first step is to power it on and confirm that it is working correctly.  Connect a VGA cable to the rear VGA port, and a USB keyboard to the USB port.  Start it up and look for the login screen to appear.  If it is untouched then you will not be able to login with the default admin/changeme passwords.  You will then need to reset the password, using some back door methods that I will explain in detail.  The SMR runs x86-64 linux. Reset The Admin Password The first step is to connect a bootable Ubuntu USB volume to the USB port, then reboot it, press F12 to get to the boot menu, start it up with ubuntu.  In a nut shell, you...