OpenVas is a great tool, but the GUI is one of the worst I have seen.

@stacksofplates said in Are CMS Detectors Legal?:

@IRJ said in Are CMS Detectors Legal?:

OpenVas is a great tool, but the GUI is one of the worst I have seen.

Ya. What's with the lady in the scan area? The reports are also not great.

Yeah she really annoys me. She has to be the most annoying thing about the GUI. The reports have good information but the format isn't great. They aren't well organized and they don't have pretty images.

If they are looking for a security analysis or Pen Test let me know. It sounds like they will need one in a few months once they try to get everything up to par.

@dafyre said in old MSP wants to know what they did wrong:

@IRJ said in old MSP wants to know what they did wrong:

If they are looking for a security analysis or Pen Test let me know. It sounds like they will need one in a few months once they try to get everything up to par.

*cough* shameless plug *cough*

Lol.Obviously they aren't ready for one yet, they have a ton of patching to do first after an internal assessment.

Good luck!

It would be pretty neat if you documented the whole process. This is the kind of stuff we see on Spiceworks everyday

@DustinB3403 said in old MSP wants to know what they did wrong:

@ntozier

While I don't disagree, the issues that the previous tech left should be documented, and provided to the customer so they can address the issue. I don't think that @Mike-Davis should even communicate with the old tech at all.

It's not his place to speak to anyone but his customer. If the client asks that of @Mike-Davis then ok.

I would highly recommend that this company pay for the documentation process. Otherwise I wouldn't touch the company. @ntozier is spot on. If they won't pay for the documentation process then they are already lost. You can't start fixing things if you don't document what exactly is wrong.

Why would you want to run anything in Windows XP? That is the real problem here. If your software doesn't support anything higher than Windows XP, then you need a new vendor.

Thanks for the catch @JaredBusch . I'll look at it later

@MattSpeller This tablet is ok. I don't use Windows 10 on it much anymore. I basically just use Android which runs fine, but you can buy a more powerful Android tablet at this price.

@dafyre For this tablet root is almost a must. Android is only given 8GB and only about 2GB are free. Root is required for something called Apps2SD. Otherwise on this particular tablet, you are unable to install any apps on your SD card.

@MattSpeller said in How to root the Chuwi Hi8 Android / Windows 10 Tablet:

@IRJ said in How to root the Chuwi Hi8 Android / Windows 10 Tablet:

@dafyre said in How to root the Chuwi Hi8 Android / Windows 10 Tablet:

@IRJ said in How to root the Chuwi Hi8 Android / Windows 10 Tablet:

@dafyre For this tablet root is almost a must. Android is only given 8GB and only about 2GB are free. Root is required for something called Apps2SD. Otherwise on this particular tablet, you are unable to install any apps on your SD card.

That's good to know. I thought Apps2SD had been baked into the stock android for a while now.

Yeah, I don't think this is an issue on newer versions of Android.

Given your experience with this is there a tablet (pure android) that you'd recommend?

I'm after: cheap, USB OTG, most internal storage for my money (but cheap comes first)

We can talk about $30-50 tablets or we can talk about $100 tablets. What is your budget?

@MattSpeller said in How to root the Chuwi Hi8 Android / Windows 10 Tablet:

most internal storage for my money (but cheap comes first)

This is usually my last concern. Because almost all Android tablets take MicroSD cards. Tablets are so cheap and become "outdated" so quickly. Especially tablets for under $100.

I am not sure that the Customer can legally do anything. Old MSP could always say they were renting use of the domain name (which would be perfectly acceptable). Unless there is documentation that says 100% clearly that the Customer owns the domain name, I think legally you are in trouble.

Anyone can buy any domain name. You don't need a registered business to snag a domain name.

P.S. I would create a full backup of the website IMMEDIATELY

I finally got my hacking lab setup. I have 3 180 day trials (Windows 10, one Windows 8.1, and Server 2016) running so it will get a littler smaller soon, but I am loving it right now.

I am looking at a reliable remote solution for Kali (Debian) Gnome 3 using zero tier.

I have zerotier setup and configured to connect on startup, but finding a remote solution has been a challenge to say the least. Kali is not the best for compatibility. XRDP does not work, tightvnc does not work, and x11vnc is very unreliable and the service dies after some time.

Long story, short I found nomachine and set it up. The connection seems very slow. Much slower and less resolution than a normal vnc session.

What type of performance are you guys getting from nomachine or other remote desktop viewing applications using zero tier?

I am not against paying for a reliable remote desktop solution. Teamviewer works flawlessly, but I am looking for something that isn't $849 for one license if possible.

@scottalanmiller said in ZeroTier Performance?:

NoMachine isn't the fastest over slow connections. It can be quite painful.

Ok so it is nomachine?

VNC is working fine over zerotier. I wasn't sure if something wasn't configured right for nomachine, but it seems like by nature it is slow?

@Dashrender said in ZeroTier Performance?:

I'm wondering - are you connecting to GUIs on 'nix at your clients?

The terminal will be used for most functions. Tools like nmap can have issues when using the GUI so they need to be run from a terminal. Running scans without a GUI is much quicker.

There are a some applications in Kali that have no command line options (mostly newer tools).

Tools like nomachine and TeamViewer create a new display so the vm is locked to the customer.

You can use the upgrade tool which is even easier if you are on a current version of owncloud. Even though the article doesn't say anything about updating from owncloud, the first article I posted does say you can use this method on current owncloud servers. You just switch the update channel and search for updates.

https://nextcloud.com/blog/get-up-to-date-with-the-new-nextcloud-updater/

@Lakshmana ,

I think you should start your training from the beginning. You have alot of knowledge of different commands, file systems, scenarios, etc, but you always seem to struggle with the basics.

Linux or anything else in IT is alot like math in the way that you must understand counting, and addition and subtraction before you can learn algebra and calculus.

Check out udemy.com. They have some great training material at a very fair price.

What is the purpose of recording the calls? I am asking because maybe skype isn't the best tool for the job.

@Mike-Davis said in Print Services - Migrate from one server to another:

@DustinB3403 said in Print Services - Migrate from one server to another:

GPO's push the printers out to our clients.
I could just recreate all of the printers on the new server, and update the GPO

I've pretty much done that. Add to that an email to users to check their default printer the next day because it sometimes changes when the printers get remapped.

I would create a new GPO instead of updating the GPO for reporting reasons. You can do a report and see how is getting the new GPO, once you feel almost all clients have the new GPO, you can unlink the old GPO. Otherwise, you have to trust that GPO is being "updated" vs applied.

@DustinB3403 said in Print Services - Migrate from one server to another:

@IRJ So create the printers on the new print server and create a new GPO as well and then push that new GPO to overwrite the old settings.

This would mean you'd have double the printers, unless you modified the old GPO to remove the printers from \old-server\

Yes you would have double for a short period of time during the transition, but this ensures that you never lose printing.