Posts

Showing posts from 2015

Trying something NEW opens(ed) up new possibility

Image
Being a CUI fan boy, Terminal Emulator and Connect Bot were few of my must have app. But last time when i got to factory reset my phone i decided to try something new. And this new try opened new possibility to ease me little on my daily task. Instead of installing Connect Bot, i thought about trhing something new on market.  And hence searched for SSH-Client  https://play.google.com/store/search?q=SSH%20client&c=apps . The top on the list was  JuiceSSH . The first feature that attract me was the popup keyboard. That enables me to use keys like Tab, Esc without installing tirdparty keyboards. I was enjoying this new ssh client. I discovered another killing feature, plugins. After being attracted by its  performance monitor , i thought about doing something using this plugin sdk for my own. Beside monitoring the performance i got to restart certain services on my server to incease its performance. Hence i decide to give it a night. And that night ...

Sheltering over Somebody's bandwidth :(

Ya it is a sad fact when i got to shelter over somebody's wifi connection for internet. And that has poor bandwidth. :( After shifting to new place, i was searching for ISP nearby to provide me some good and reliable internet connection. But the fate of new residence is the poor coverage of the ISP's around and due to large demand they fail to serve in time. I am delayed 2 weeks by a ISP to provide me with internet connection. As they can't do it fast i got to wait. But i can't wait with out internet connection. If i can't wait, what had i done? Here are the things i did Searched wifi connection nearby. Scanned routers for WPS velnerability so that i could use reaver to get wifi passkey. Hacked one successfully but that one got very few signal on my room. BTW got a very strong password: 22 letter long, with symbols, digit, word combination. O o if there was no WPS vulnerability and no reaver.. :( Used and external wifi adaptor on my laptop and i received wifi from L...

Cycling from Kathmandu to Lumbini

We two friends decided to try something adventurous and crazy for our yearly long festival vacation. Hence, our plan was to cycle from Kathmandu to Lumbini, the birthplace of Gautam Buddha. It was really a nice experience. And here I am going to write the daily details. Oct 17 2015 We had started our journey from Imadol, Lalitpur at 6:00 am. I am planning to track all the way on MyTracks on my phone and hence i had started the GPS and started recording tracks. It was not so cold but we had to put jackets as the morning wind was chilled a bit. We started our paddling on a upward inclination from Kalanki upto Nagdhunga. The way after that was continuous downhill and was fun for cycling, we berely have to paddle on few places. It was around 9:00 when we reached at Simle bazzar, Dhading, where we had breakfast. We get a tire flat on my friends bike near Gajuri, and we patched it with the patch kit we had. Keep on paddling and reached Malakhu for our lunch of the day. Ha...

Cute php shell

Image
The problem i faced - I have a wordpress backend web-site hosted on shared hosting - I have no root access on the server but a limited user with access to mysql database - I had to clean junk files on uploads directory which was owned by www-data user - But as i was no super user i can't delete the file owned by other user, neither can i change ownership of the file owned by other user. My temporary solution - wrote a php which could delete a file/directory passed through GET request Then out of box i just googled "php shell single file" http://lmgtfy.com/?q=php+shell+single+file and the first entry of the result was https://github.com/b374k/b374k . And ya thats what i wanted. I could simply clone this code into webservers document root directory. Give the ownership of the directory to apache user. While accessing the code from browser, i could configure the application to my requirement like password, module required and then after it will generate single-file php shell...

Taste of Raspberry Pi

Image
Days ago i got play with Raspberry Pi-2 Model B. It was really awsome to play with it. What attract me is the terminderious power it has regardless of being so tiny on size. I had chance to try different Raspberry Pi OS with it. Raspbian   is the recomended OS by raspberrypi.org. Few strength of raspbian is - easy access to GPIO pin. a mere echo and cat could control the voltage in and out of the pins - ssh server by default - ip can be set on /boot/cmdline.txt . Hence no dispaly is required to access it - give ip added on /boot/cmdline.txt - give static ip to your machine on the same range of ip assigned to raspi - ssh to raspi using default account " pi " with password " raspberry " I can access the GPIO pin easily. With as simple shell script and my DIY hardware, i successed to seven segment display using 7 LEDs.  Similary using LDR's, it could be used to count the people/object passing by.  But one problem i faced with Raspeian is that i can't successe...

Another Brick on the Wall

The first thing that comes into my mind after i find any app with security, encryption, locked features etc, is that whether it can be tweaked and to get the paid features. Since 1 or 2 months back an app attracts me. But due to my laziness i hadn't given enough time to it in past. But tonight i decide to give it a serious try. I sit on computer with the apk of that application on hand. For every app my first try is to look at the app's private directory and check whether i could find any interesting information hidden on database or on preferences file. But this very app has nothing of this type. That's why this need a serious try. I have the apk means i have the source code. All i need to do is extract the apk and then convert the .dex file to .jar package. After this the story goes easy cause that jar package can easily be converted to a zip file full of source code. Yahoooooo. Then starts slightly extensive task. I have to go through the source code and then find fu...

"Sward on Circle" Riddle

After one of my friend pointed me this question. I become curious to solve it by programming logic. And just after i got to my computer i started the vi editor and started to write a program to find the solution. I just tried to simulate the real game situation. And comeup with following code. #include <stdio.h> #include <stdlib.h> struct player { struct player *prev; struct player *next; int roll; }; int main(){ int i=0; int j=100; int count=0; struct player* players[100]; for(i=0;i players[i] = (struct player*) malloc(sizeof(struct player)); players[i]->roll=i+1; } for(i=0;i players[i]->next = players[(i+1)%100]; // players[i]->prev = players[(i+99)%100]; } struct player* head = players[0]; struct player* nextHead; count = 0; while(1){ if(head == head->next->next){ printf(" I am the winner %d\n",head->roll); break; } count ++; printf(" %d ",head->next->roll); nextHead = head->next->next; head->next = nextHead; ...

Hacking with CashOnAd

"Cash on ad" was a new an innovative technique on the advertising industry. After installing an app on your android phone you will be paid for watching ads. That app will play an advertisement each time u receive a call. And the company behind will pay you few cents for viewing the ad. F1 soft had released such app and I was curious to try it. Installed it and it works well. But the sad fact is that I rarely receive call and hence the earning is negligible. Taking advantage of my rooted Galaxy Pop GT-S5570, I explored the internal database of this app. I was amazed to see that all the records are on plain text. Few records are on XML file and few records are on sqlite database and all are readable. Then after I started writing an app for android to exploit this app's record keeping. I wrote an app which will modify the target app's XML and database. I named it <a href="https://github.com/scvishnu7/CashOnClick" > CashOnClick. </a>  Which basically...

Preparation to go offline

Image
I was preparing to go offline for few days i was searching for apps that can be used while there is no internet connection. Few preparation i have done are Downloaded few Audio books from Nepali Audio Books application Have a book named The Oath of Vayuputras , third book of series The Immortals of Meluha on kindle. Few TED videos to be watched. Have Maps.me for offline map which usages Openstreet Map . Few maps tiles saved from Google Map Kiwix installed on my Android and Offline schoolpedia zim file copied to sdcard. The offline wikipedia is new thing on my list. I have recently come to know about the zim file(file format to store wikipedia content for offline use) and the zim reader avaliable. The kiwix.org have published app for android and for all other major platforms. I picked the android version and to test this app i picked zim file of offline wikipedia(because it is smaller than offline wikipedia(2.1G vs 9.7G). From my initial testing it works well on my android(Samsung Gr...

First encounter with Linux

It was early 2009 (I guess), I got my first desktop computer on a computer fair named "CAN Info Tech". It was Intel Pentium IV with 1GB RAM and 160 GB of hard disk. It was on my choice because of the budget I had and the configuration was along one of the popular configuration on market. I was quite excited and I had requested the seller to install lots of softwares on my machine. With my computer on room, I was exploring it. I got a DVD labeled " Ubuntu 8.04 Ultimate Edition" from an open source expo few months back. Out of curiosity I booted from that DVD. I was amazed to get this new interface on live DVD environment. Then in the way of exploration I had installed that OS on my system. But while I rebooted my system I didn't get my windows on it. It was 2 or 3 day after my purchase of computer, I noticed that I had wiped all the hard drive space including the OS partition and installed Ubuntu on it. I was shocked at that moment but when I reminder that incide...

Yet another attempt...

Change of interest and determination is the biggest mistake of my life. And this is my yet another attempt to continue blogging about something that worth remembering for myself on future. Lets see how this will die.  Wanted to document the stuffs i had done on past and which i will do on future. The single purpose is to make this as a tool to remember those days.  Do not expect to find my purely personal stuffs here :D :D, i will post only those things which have a little line of hope of being able to be useful for others on the internet. And i am hopping that the number of visitors will not affect my blogging. Ok lets see how it goes.