xkcdpass - secure passwords for transport

Passwords are problematic. Always. Especially during COVID-19 - were you have to securely transport data via insecure means. What I want to say: Sending confidential data via email. Actually, thats quite easy: (7)-zip everything with AES256 using a long enough key - transfer the key via additional, more secure lines of communication (e.g. phone) and you are ok for the most part.

However, spelling %-FoPN#~OeJQ0h9g3_JWrvnq9h^ip))srzg{\vnj via phone is "a bit cumbersome". Thats the moment you recall Randall Munroe's xkcd #936 Password strength:

And with this basic idea, xkcdpass was born. It can generate passwords from multiple dictonary entries, seperated by some symbols and generate things like showcase surging swoosh bakeshop smoked duffel - and you can also tweek the settings to change the amount of words used, length, delimters, etc.

It is written in python and can be installed via a quick pip install xkcdpass and then used with the command line paramter xkcdpass

All infos are in the Git repo found here.

Long enough sentences are good enough - and are awesome as "transfer keys" to secure the real data.

[1841] Reset Password / Config, ROMMON Upgrade and Software Upgrade on Cisco 1841

1.) Reset Password / Config

- Connect to the router via Serial Cable

- Power on the router, but send a break during the first 60 seconds of boot time to get to the rommon CLI

- enter confreg 0x2142 followed by a reset

- Router is booting up, as soon as it does enter the system configuration dialog, answer the question with no

- enable

- conf t

- config-register 0x2102

- exit

- wr mem (because I just want to overwrite the old config :)!)

2.) ROMMON Upgrade

- Get the latest / needed ROMMON upgrade from Cisco

- Copy it i.e. to your CF card via Card Reader, TFTP or other means

- Boot up the router and enter privleged / enable mode

- Enter the upgrade command: upgrade rom-monitor file flash:<Filename>

- Answer yes to get the process starteted

- After the upgrade the router will reload

3.) Software Upgrade

- Get the latest/needed image from Cisco

- Just copy it to the CF card via Card Reader, TFTP or other means

- Reload

Snom 360 Update and Password Reset

WARNING, this is ONLY for Users on an Snom 360 with Firmware Revision 6.X.
If you got an different Revision the steps could be different.
Check out the Snom Wiki in that case ( http://wiki.snom.com/Firmware ).
Basically we just do reflash the Firmware with the same Revision again to erase data and passwords and unlock the Phone.
Than we do an automatic update to the latest release.

- Download the latest Snom 360 Firmware from the Snom Website for your Revision ( http://wiki.snom.com/Firmware/V6/Latest_Release )
- Download tftpd32 or an similar tftp Server
- Rename the Firmware to snom360.bin and upload it to the root Directory of the tftp Server
- Plug in the Network Port and Power to the Snom
- As the message "To Update by TFTP: Press Any Key" appears, press any key on the phone
- Enter valid IP Data for the Phone. Always press Next. I.e. the IP, the Subnet, the Gateway, DNS and the IP of your tfp Server.
- As you're finished, it will ask for this again and again, press Check Mark right beside the big X Button. The tfp Download will start. Don't unplug the phone during the Firmware Update. The Phone will automatically reboot after the flash is done.
- After this flash we have reset all data - including the passwords, so we now can press the Help Button on the phone and get the ip adress of the phone, connect to it by using an HTML Browser. But before you access the website, you need to enter the Administrative mode of the phone, otherwise you won't be able to set any setting or update the phone. So press the Settings Button and press "Administrative Mode" - password is 0000 on default. Press Check Mark to accept. Now access the Website.
- To update to version 7 Firmware (the latest Firmware, experimental) you need to go to the Advanced Tab, scroll down to Update. Set the Update Policy to "Update automatically" and the Setting URL to "http://provisioning.snom.com/update6to7/update_once.php". Press Save and Reboot, Accept with Yes. The Phone will Reboot.
- After the reboot, the phone will access the internet and check automatically for an update, download it and start flashing. It will reboot serval times, don't power it off until its done. It should take something like 10 Minutes or more, depending on your Internet connection. If it doesn't reboot anymore and does show the normal menu for longer than half an minute you can consider it ok.
- You can now create Identitys (Profiles) for your Sip / VoIP Accounts and reregister them via the Webinterface.

Windows 2000 / XP Password Special

So, you logged out of Windows and need to get your password back? Thats for what this little collection is for.

Lets say you need to "crack" an Windows 2000 / XP Password. For i.e. login data. Then you should go for Ophcrack: http://ophcrack.sourceforge.net/

If you just want to login into Windows 2000 / XP / Linux etc. without using or cracking the password with admin rights, go for konboot: http://www.piotrbania.com/all/kon-boot/

And should you stumble across the problem of having forgotten your network drive passwords and login but still have access to Windows and got these pw saved, use Nir Soft Network Password Recovery: http://www.nirsoft.net/utils/network_password_recovery.html

Be advised ONLY to use these programs if they come from the orginal website as other websites do add keyloggers and other nice stuff to them. And only use these tools if you own the pc or have the rights to - check your local law!