WMI, Query Windows SecurityCenter2">
In Windows Vista, the WMI query to get anti-virus information has been changed. Pre-Vista clients used the root/SecurityCenter namespace, while Post-Vista clients use the root/SecurityCenter2 namespace. But not only the namespace has been changed, an example using the query "select ...Read More
CPU type of a dotNet assemby">
If you need to change the CPU type on a dotNet assembly for example, if the assembly needs to write to a registry key and does not work correctly on a 64b machine. Per default it's any CPU, so the ...Read More
Darkstat Website: http://dmr.ath.cx/net/darkstat/
Darkstat for Windows port Website: http://www.neophob.com
You need WinPcap to use this tool: http://www.winpcap.org - I tested it with version 4.1 beta2.
Download:
Windows Binary
Windows Source (Ugly hack)
Example:
c:>darkstatdarkstat 3.0.707 (built with libpcap 2.4)
WinPcap devices:
WARNING: if you don't see any devices here, ...Read More
You can run a cmd.exe shell on vista without login and with full system rights:
take ownership of file %WINDIR%system32magnify.exe
change permission of file %WINDIR%system32magnify.exe and add full control to your user
copy cmd.exe to %WINDIR%system32magnify.exe (overwrite)
logoff
start "Ease of access" and select "Make ...Read More
Quote from MS Technet:
Q: Hey, Scripting Guy! How can I delete folders based on a wildcard character? For example, how can I delete all the folders whose name starts with December?
A: Hey, RR. Well, that depends. If you’re running Windows ...Read More
CYGWIN, MPD, shared mem, fork’s and quirk’s">
I tried to compile mpd for Windows using Cygwin. After adding some workarounds (add fake_getaddrinfo.h, check http://musicpd.org/mantis/view.php?id=1566) I was able to compile mpd. But when I tried to start it, mpd failed:
$ ./mpd --no-daemon --stdout --verbose
binding to any address
flushing warning ...Read More
NET Permissions — sign an .NET assembly">
If you want to execute .NET assembly’s from a network share (as an example) you need to increase permissions for this file. Per default you are only allowed to execute local .NET assemblies.
You uniquely identifying a .NET assembly by added ...Read More
SetACL is a set of routines for managing Windows permissions (ACLs) from the command line, from scripts and from programs. These routines can be used from various container or interface programs. (http://setacl.sourceforge.net/).
If you start with setacl.exe the syntax might be ...Read More
When you look at the taskmanager you'll see several svchost processes. If you want to know what a specific svchost process does keep on reading...
Use the CLI command "tasklist /svc" to see it's corresponding PID
c:> tasklist /SVC
...
svchost.exe ...Read More
CDO.Message (cdosys.dll) to send an SMTP Mail with importance (as a VBS Script)">
I had to create a .VBS script to create an automated E-Mail message. The hardest part was to set the importance of the mail, I've found the solution here: http://www.lewisroberts.com/?p=64
Here come's the script:
Dim iMsg
Dim iConf
Dim Flds
Dim ...Read More
I wanted to edit some Registry permissions with the command line utility setacl.exe and wrote a little script to automate this stuff. The name of the registry key is HKEY_LOCAL_MACHINESOFTWAREGeutebrück – yes, with a nasty umlaut. When I used cmd.exe ...Read More
Standard user's in big companies usually runs as unprivileged users, thus they cannot execute admin tasks. But sometimes it's necessary to run a task with admin rights (automated software deploy) - runas, in some situations, is a bad idea because ...Read More