tompohl

tompohl

22p

14 comments posted · 0 followers · following 0

11 years ago @ Tom's World - DEFCON 21 - Network Fo... · 1 reply · +1 points

In wireshark, when you follow the TCP stream, you will see a drop-down where "Entire Conversation" is the default selection. Choose the option in the drop-down for the bigger piece of the conversation (172.29.1.50:1024 -> 172.29.1.55:1024 819200 bytes) and the radio button for "raw" and simply choose "Save As..." to output it to a file!

11 years ago @ Tom's World - DEFCON 21 - Network Fo... · 0 replies · +1 points

Thanks! I've had a lot of fun the last couple years doing it! I hope to make it back again this year.

13 years ago @ Tom's World - HOWTO: Track your mac · 0 replies · +1 points

After resuming, what does the following command output 1 line with a pid or 2 lines?
ps auxww |grep loginwindow |grep -v grep |awk '{print $2}'
If it outputs more than 1 line, it may need to be modified to grab 1 specific pid. Also, if you do fast user switching with another user, that could be causing you the issue.

14 years ago @ Tom's World - Hacking the Nike Fuelband · 0 replies · +3 points

Nice! That is fantastic work! I was starting to think I was the only one interested in getting at the data! :)

14 years ago @ Tom's World - HOWTO: Track your mac · 0 replies · +1 points

I know it works under Lion. The trick to using launchctl bsexec is to use the PID of loginwindow process of the interactive user.

From a ssh session try this:
ps auxww |grep loginwindow |grep -v grep |awk ‘{print $2}’

Take the output number from that command (let's say it's 100) and then run the isightcatpture command:
launchctl bsexec 100 /path/to/isightcapture image.jpg

That should trigger the camera and save an image.jpg file in your current directory.

14 years ago @ Tom's World - Mud, Sweat, and Tears · 0 replies · +1 points

Geo Caching is a crazy location based treasure hunt of sorts! People place small containers out in the wilderness and register it with geocaching.com and others go and find it. They are hidden literally everywhere all over the world!

15 years ago @ Tom's World - HOWTO: Track your mac · 0 replies · +1 points

The php script wouldn't do much since latest.jpg doesn't exist :)
Here, add a second line under the curl line I suggested earlier:
curl -T /.locateme/images/taken/$datetime.jpg -u $USER:$PASS $BASEURL/latest.jpg

15 years ago @ Tom's World - HOWTO: Track your mac · 0 replies · +1 points

doing an ftp upload via curl would be an easy modification to the go.sh script:

Change:
/usr/bin/curl -u $USER:$PASS -F uploadedfile=@/.locateme/images/taken/$datetime.jpg $BASEURL/

to:
curl -T /.locateme/images/taken/$datetime.jpg -u $USER:$PASS $BASEURL

And also change $BASEURL in locateme.conf to something like ftp://mywebhost.com/uploaddir/

The only thing that you'll miss out on is where the php script symlinks the latest image to latest.jpg, but it would at least get the file out to the server!

15 years ago @ Tom's World - HOWTO: Track your mac · 0 replies · +2 points

It is in the directory named .locateme (with the '.' on the front). Files/folders in unix/osx that start with a '.' are hidden so they won't show up in Finder, but they are there. If you follow the step-by-step instructions, it should work!

15 years ago @ Tom's World - Kryptos · 0 replies · +1 points

If you hand solve the 6 letters that spell BERLIN based upon the keyed vigenere cipher with the same alphabet as the first two parts that would be the 6 letters that would match. If the answer is something like the same cipher but done twice the letters would be wrong but in the same place for the second decryption.