Is there an easier way to mount a remote vulnerable SMB share?

At the moment my methodology is to use metasploit and the Samba Symlink Traversal exploit.

I then mount the rootfs by editing the fstab like thus:

//192.168.162.105/tmp /mnt/smb_share cifs guest,vers=1.0,uid=1000

Run systelctl daemon-reload followed by sudo mount -a and finally sudo thunar so I can browse it in the gui explorer.

Is there an easier way to do this with not as many steps?

reddit.com
u/Izual_Rebirth — 6 days ago

Is there an easier way to mount a remote vulnerable SMB share?

At the moment my methodology is to use metasploit and the Samba Symlink Traversal exploit.

I then mount the rootfs by editing the fstab like thus:

//192.168.162.105/tmp /mnt/smb_share cifs guest,vers=1.0,uid=1000

Run systelctl daemon-reload followed by sudo mount -a and finally sudo thunar so I can browse it in the gui explorer.

Is there an easier way to do this with not as many steps?

reddit.com
u/Izual_Rebirth — 6 days ago
▲ 0 r/gaming

Why do so many games struggle to make a compelling hard mode? What games do you think have good hard modes \ NG+?

Added a spoiler tag here so we can talk freely.

I notice for a lot of games hard mode is just a case of enemies do more damage, they throw more at you or are quicker.

For me the perfect hard modes are the games that actually force you to understand the mechanics in detail to be able to progress rather than just have better reflexes or find cheese stratergies.

Normal mode should let you be able to finish the game with minimal challenge but hard mode should be a test of actually making sure you understand the mechanics.

For me the FF7 remake games are great because they restrict your ability to heal and regain MP so you are forced to actually use the tools the game gives you if you want a chance of surviving.

What makes the perfect hard mode game for you?

reddit.com
u/Izual_Rebirth — 10 days ago

Looking for comfortable Bluetooth headphones to use in bed while I fall asleep.

Seems silly to have to ask but I’m drawing a blank after I lost my last pair.

I like to fall asleep listening to audiobooks and YouTube. I had an ok pair before but I lost them when camping. Looking for something that will last a while. Not looking to go mad on budget but it’s there for the perfect pair.

I have never found a pair of purely in ear buds I find comfortable and have always gone with in ear phones that hook over the top of the ear so I don’t need to press them too far in to keep them secure. As I sleep on my side I need them separate so I can just have one in use. Soft caps on the end are almost certainly a must (open to alternatives). But not ones where they fall off and I’m having to dig them out my ear canal!

I commute from time to time and occasionally run so they need to be suitable for that and a decent charging case is a must. My wife is also a light sleeper so want to ensure while I can hear the audio she can’t.

Functionality wise the ability to have them pair to multiple devices is useful and not have to faff with them constantly due to them connecting to the wrong device is also useful. Controls on the headphones would be nice. Bonus points if they are buttons and not touch sensitive. Being able to use them to take and make calls on a busy train is a bonus but not 100% a deal breaker.

My last pair were Groov E TW06 and they were comfy but the touch controls were awful. Something along those lines would be perfect but with better controls and better audio quality would be perfect. Think that they are discontinued now but here’s the manual with a photo of them to show the style I’m after.

https://manuall.co.uk/groov-e-gv-tw06-headphone/

Budget is flexible. Happy to pay more for the perfect pair but not chasing the posh brand names for street cred.

Help a middle aged fat man from the UK out! Happy to answer any queries you might have and if you got this far and decided not to post I hope you have a great rest of your day anyway. 🥰

reddit.com
u/Izual_Rebirth — 12 days ago
▲ 1 r/sysadmin+1 crossposts

Fortinet No Long Auto Connects - Options Enabled and Greyed Out. Won't save password.

Very strange one. I did try on the FN sub but didn't get anywhere. Also awaiting back on FN support. Thought I'd try my chances on here as you guys have been an absolute lifesaver in the past!

We have an IPSEC VPN. We want to enable Auto Connect which was working until recently. the only change I believe that has been made is enabling Fabric Detection so it doesn't try to auto connect while on site. I can confirm that Fabric Detection is working and our test remote device is showing as being Off Fabric.

Anyone got any ideas? I don't believe anyone else has been playing with the config but I can't rule it out.

Really hoping someone could help!

FW is 7.4.11.

Relevant config (bits removed for security) below:

edit "IPSEC VPN"

set type dynamic

set interface "wan1"

set mode aggressive

set peertype any

set net-device disable

set mode-cfg enable

set ipv4-dns-server1 X.X.X.X

set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1

set comments "Production IPSEC VPN"

set xauthtype auto

set authusrgrp "VPN Users"

set ipv4-start-ip X.X.X.X

set ipv4-end-ip X.X.X.X

set unity-support disable

reddit.com
u/Izual_Rebirth — 13 days ago

Rate my set up. Also some advice wanted.

This 10 year old monstrosity is keeping me going at the moment. It leaks so it’s above a bucket and the hose is only staying in place because of a 10kg weight I’ve gaffed taped to the incredibly short exhaust pipe. It’s also on its last legs so hopefully it’ll last at least next week.

Anyone k ow if

u/Izual_Rebirth — 15 days ago

Anything to be wary of regarding chests? Spoilers

Relatively early still and just went through the time portal. Is this game like Chrono Trigger where opening a chest in the last stops you opening it in the future for a better reward?

Does the same also apply to blowing up boulders etc? Does blowing them up in the past carry on to the future?

reddit.com
u/Izual_Rebirth — 15 days ago

Out of curiosity when was the "phishish resistant MFA" requirement first announced? What are the easiest options?

Just had it dropped on my plate suddenly. I don't support Salfesforce at all but as it's potentially relating to Entra and SSO it's now on me with just over a weeks notice. I'm just curious how long this has been with our Salesforce team before they decided to spring it on me.

We don't currently have SSO enabled for SF so I'm curious what the easiest and quickest option is to get this over the line?

reddit.com
u/Izual_Rebirth — 17 days ago

Loss of IPSEC Remember Password Functionality after Firewall Upgrade

Weird one. We have forticlient configured via EMS to allow saving passwords and auto connect however all of a sudden forticlient no longer remembers the password and thus no autoconnect.

The save password and autoconnect tick boxes are tickeed but greyed out.

Any ideas? This is for version 7.4.11 of Fortigate. The firewall upgrade could be a red herring as I remember auto connecting after the upgrade but it's suddenly stopped. I don't recall any changes to the IPSEC config in recent weeks made by other memebers of the team. Kinda drawing a blank here.

reddit.com
u/Izual_Rebirth — 18 days ago

Metasploitable 3 for Server 2003 \ 2008 \ 2012.

Hi Guys,

Sitting my CSTM exam in a month or so and would love a test lab for 2003 \ 2008 \ 2012 with known vulns.

I can see MS3 can be used on 2008 \ 2012 but I need an ISO for it. The links to MSDN no longer seem to work so can anyone recommend any sort of advice on the best way to do this? Bonus points if you can also suggest something for Sever 2003 as well as last time I sat the exam this was in scope as well.

reddit.com
u/Izual_Rebirth — 19 days ago
▲ 12 r/safc

Ignoring the result... how bloody amazing was the atmosphere at the 2019 EFL final game?

I’m a Pompey fan and just heard about Kenny Jackett dying. It got me remembering his time at Pompey and our match at Wembley. I honestly don’t think I’ve been at a game with better atmosphere. That game has everything and obviously when it goes to penalties it could have gone either way.

What’s the view from Sunderland fans for the atmosphere?

For us it was probably the first time since the shit hit the fan for us in the late 00s we had a chance to draw a line under the previous decade+ of dark days. The start of being able to look forward to the upcoming season.

Probably best game I’ve ever been to in terms of the atmosphere. And your fans were a massive part of that 🫡.

reddit.com
u/Izual_Rebirth — 24 days ago

Query on potential house rule.

Playing this evening and I’m second strongest position with the strongest running away with it.

One of the weaker players was in a pretty bad place and almost going out and owed around 600 after landing on a property. I offered to cover the money he owed plus give him a property to complete a set and some money to build it up on the understanding that if I landed on it I wouldn’t have to pay. The idea was that the strongest player was in with a good chance of landing on one of his properties next turn and I was hoping to drain their money.

Is it ok to give someone money or a property with the understanding if I land on it I won’t have to pay them?

reddit.com
u/Izual_Rebirth — 24 days ago

Kenny Jackett

Best game I ever went to was Pompey vs Sunderland in the EFL Trophy. After all the shit we’d been through it was such a cathartic match that had everything. Late goals. Penalties. Both sets of fans were on top form. Probably the best atmosphere I’ve ever experienced in person. And Jackett was the man to lead us to winning it after a decade of eating shit sandwiches.

u/Izual_Rebirth — 24 days ago

Confused on Public vs Private key when it comes to signing.

Seems like a basic question but I'm getting mixed messages here from Google.

On one result I'm told:

"In public-key systems, a private key is a key used for digitally signing documents. A public key is a key that can be used for verifying digital signatures generated using a corresponding private key."

On another I'm told:

"Typically, the recipient's public key is used to encrypt the data and the recipient then uses their private key to decrypt the data."

Help this make sense to me!

reddit.com
u/Izual_Rebirth — 28 days ago

How do I speak to an actual human at Just Eat? Can I phone them?

I'm going round in circles chatting to the AI bot on their chat.

The driver didn't deliver the food. I have requested that Just Eat don't take the money from the Takeaway as it is not their fault but they won't confirm this will be the case. They offered me a refund of about 25% and not the full amount as well as telling me the food was delivered before I'd even placed the order!

Oh they have now offered £5 as a good will gesture. Still leaving my 30 quid down.

reddit.com
u/Izual_Rebirth — 1 month ago

IPSEC IKEv" - DNS Suffix Issues

Hi Guys,

Picked up a client running a 71F on 7.4.8.

Need to move to IKE2. That side all works. Just an issue adding DNS Search Suffix.

I see the command I need to run is set dns-suffix-search "domain" but it's not accepting it. Don't really have scope for a Firewall Firmware Upgrade at this point so hoping someone could point me in the right direction.

reddit.com
u/Izual_Rebirth — 1 month ago

Just seen the Celtic match ended before the final whistle due to a crowd invasion. Should that result in a 3-0 loss to Celtic?

What are your thoughts refs?

reddit.com
u/Izual_Rebirth — 2 months ago
▲ 1 r/Intune

Recommended solutions for blocking all Removeable Media except Corporately owned USB Sticks \ External Drives?

Hi Guys,

Curious what your experience is with a requirement to block all external USB devices except for "encrypted corporately owned removeable media". It's entirely possible there isn't a solution to do this in Intune so I'll expand it to other 3rd party solutions if necessary.

reddit.com
u/Izual_Rebirth — 2 months ago