Blog


View Vittorio Pavesi's profile on LinkedIn

Blog Archive

September 1, 2011

List of IIS Sites

The following command generate an excel file with the list of web sites in IIS 7

%windir%\system32\inetsrv\appcmd list site > c:\sites.xls

August 24, 2011

Analyze MS Cluster Logs (Windows 2008)

Do you need to analyze cluster logs but you're not able to find them on Windows 2008 ?

Use the following from Administrative Command Prompt

Cluster /Cluster:"clustername" log /gen / copy "C:\Windows\Cluster\Reports"


View more here: http://blogs.technet.com/b/askcore/archive/2010/04/13/understanding-the-cluster-debug-log-in-2008.aspx

August 22, 2011

Error 0xc0000225 on Windows Server

After resizing the primary partition of a Windows 2008 Server, I received error
0xc0000225 from Windows Boot Manager.

The solution is:
1) boot from the original Windows DVD
2) get to the command prompt using Repair option
3) run x:\sources\recovery\StartRep.exe

August 12, 2011

Android change Default Gallery

I spent a lot of time in order to find how to replace the default gallery for my Android phone.




The solution is really easy:
  1. Tap the Menu button on your phone and select the Android Settings option.
  2. Scroll down to the Applications section and tap it.
  3. On the next screen, tap Manage Applications and then the All tab on the subsequent screen.
  4. Scroll down the list of apps until you see the old browser listed and tap that entry.
  5. On the next screen look for the "Launch by default" section and hit the Clear defaults button.

iDump Extract MP3 from iPod

iDump will allow you extract your songs off your iPod to a PC.
It's available into an installer package and in a standalone exe format.

Connect your iPod and run iDump and you'll have access to all your MP3
, select the songs you want to transfer then pick a destination directory and how you would like your songs to be named

Download it from http://www.escsoft.com/idump.php 

May 17, 2011

Upgrade Windows 2008 R2 Standard to Enteprise

If you want to upgrade your Windows 2008 R2 Server Standard to Enterprise Version, you can use this simple procedure:

dism /online /Set-Edition:ServerEnterprise /ProductKey:489J6-VHDMP-X63PK-3K798-CPX3Y (this is a code provided by Microsoft for this task)
Restart Server
SLMGR /REARM
Restart Server
Insert MAK Code
Restart Server

Thanks to Claudio for it.

April 6, 2011

Graph DB

I just learned that exist a new type of DB called Graph DB.

A graph database is a kind of NoSQL database that uses graph structures with nodes, edges, and properties to represent and store information. Nodes are very similar in nature to the objects that object-oriented programmers will be familiar with.

More details on http://en.wikipedia.org/wiki/Graph_database

March 19, 2011

CyberDuck a FTP client with Cloud Support

CyberDuck is an FTP client created for MAC but recently ported to Windows.

The real innovative feature is the possiblity to manage Emerging open cloud software standards such as:
  • Amazon S3
  • Google DOCS
  • RackSpace Cloud
  • Windows Azure
  • DropBox
 More details on http://cyberduck.ch/

March 18, 2011

WINDOWS 7 WiFi Support as HOTSPOT

Alfredo point me out to a really interesting article: how to make your Windows 7 a WiFi HotSpot.

Basically the article explain that latest Intel Wireless Driver allow you to share your LAN connectivity using Wireless Adapter.

He used it for my smartphone in order to reduce 3G traffic.

The procedure is really simple:

1) Open an elevated command line with administrative privileges and type

netsh wlan set hostednetwork mode=allow ssid=Test key=password
replacing the name and password with your own preference.

2 )Start the adapter by
netsh wlan start hostednetwork

3) Share an existing connection to it by going to the “Properties” of a connection, selecting the “Sharing” tab and enabling ICS and choosing the corresponding Virtual WiFi adapter

March 13, 2011

Tool for finding SQL Injection (1) - Scrawlr


HP Web Security Research Group in coordination with the MSRC developed Scrawlr, a Tool  that crawl a website while simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities.

This tool has some limitations:
  • Will only crawls up to 1500 pages
  • Does not support sites requiring authentication
  • Does not perform Blind SQL injection
  • Cannot retrieve database contents
  • Does not support JavaScript or flash parsing
  • Will not test forms for SQL Injection (POST Parameters)








Scrawlr - Tool for finding SQL Injection — PenTestIT