penetration test – How is it possible to analyze the internal network to perform lateral movement without being detected by a firewall?

How is it possible to analyze the internal network to perform lateral movement without being detected by a firewall? I'm trying to do a proper analysis of the internal network for days. I have a Meterpreter shell, add a subnet, set the proxychains port 1080 and do a slow scan with nmap. I would like to know what other effective techniques the Pentesters use everyday.

WebServer is an ubuntu, but the internal network is full of Windows and Linux machines, providing a realistic environment for training.
I am doing these studies in a controlled environment.

How can I perform an offline update of a new Windows 2012 R2 server?

Start with KB2919442, the March 2014 Maintenance Stack Update for Windows 8.1 and Windows Server 2012 R2.

Then you need to install KB2919355, the update of April 2014, which is a package consisting of six separate updates and an update tool. These must be installed in the following order:

  • clearcompressionflag.exe
  • KB2919355
  • KB2932046
  • KB2959977
  • KB2937592
  • KB2938439
  • KB2934018

You can then install the latest update of the maintenance stack, as shown in ADV990001.

Finally, install the latest monthly update rollup, as shown in KB4009470 – check the list of updates in the left margin; the last total should be at the top of the list.

I will perform a full SEO service for your website for $ 20


st.statistics – How to perform a regression with different variances of error

I have two sets of measurement values, the first series is X and the second is Y.
I need to model Y according to X, where I know that the method used to measure X is twice as good as the method used to measure Y in terms of error variance.

I am red about regression with the error term in the independent variable, but I do not know what to do when there is also an error term in the dependent variable and that ## EQU1 ## They are different.

What technique / tools / constraints should I use for this type of case?

algorithms – Modify this program to perform the following calculation in d dimensions

The purpose of this code is NOT to solve a code bug or code snippet, but to provide context as to what I am looking for. I've been told to modify this program to include d-dimensions. Now, I'm not sure how to create a D-dimensional program. However, I know that to create a 3D dimension point, I need 3 points. So, I wrote this to start, it is really something. 3 dimensions but not d-dimensional.

How can I conceptualize the idea of ​​d-dimensions?

Code for the context:

#include "Point.h"

float randFloat()
  return 1.0*rand()/RAND_MAX;

float distance(point a, point b)
  float dx = a.x - b.x, dy = a.y - b.y, dd = a.d - b.d;
  return sqrt(dx*dx + dy*dy + dd*dd);

int main(int argc, char *argv())
  float d = atof(argv(2));

  int i, j, cnt = 0 , N = atoi(argv(1));
  point *a = malloc(N*(sizeof(*a)));

  for(i = 0; i < N; i++)
    a(i).x = randFloat();
    a(i).y = randFloat();
    a(i).d = randFloat();
  for(i = 0; i < N; i++)
    for(j = i + 1; j < N; j++)
      if(distance(a(i), a(j)) < d)
      printf("%d edges shorter than %lfn", cnt, d);

How can I perform a deterministic physics simulation?

I create a physics game involving rigid bodies in which players move pieces and pieces to solve a puzzle. An extremely important aspect of the game is that when players start a simulation, it works the same way. all over, regardless of their operating system, processor, etc …

There is room for a lot of complexity and the simulations can last a long time, so it is important that the physics engine is completely deterministic with regards to its floating point operations, otherwise a solution may seem to "solve" on the machine. One player and "fail" on another.

How can I achieve this determinism in my game? I am ready to use various frameworks and languages, including Javascript, C ++, Java, Python and C #.

Box2D (C ++) and its equivalents in other languages ​​tempt me, even if it seems to meet my needs, but it lacks a floating-point determinism, especially for trigonometric functions.

The best option I've seen so far is the Java equivalent of Box2D (JBox2D). He seems to be trying to determine the floating-point determinism using StrictMath rather Math for many operations, but we do not know if this engine will guarantee everything I need, because I have not built the game yet.

Is it possible to use or modify an existing engine to meet my needs? Or should I build an engine myself?

EDIT: I'll explain in more detail how the game is supposed to work. The player receives a puzzle or level containing obstacles and a goal. Initially, a simulation is not running. They can then use parts or tools at their disposal to build a machine. Once they have pressed start, the simulation begins and they can no longer modify their machine. If the machine solves the puzzle, the player has broken the level. Otherwise they will have to press Stop, change their machine and try again.

design – Do I need to use a repository or service object to perform logging?

I work in Java Spring and I have typical service and repository layers. The repository enters a JSON; transmit it to the service; The service maps the response of the repository to a DTO.

I also need to perform event logging later (send these events to an audit REST service), which requires properties that are not part of the DTO, but rather part of the repository response object. . Note that these particular properties are actually used as part of the business logic to perform the mapping.

So you can say that for obvious reasons, just use the repository response object to perform these event records because some properties are not present in the DTO object.

However, mapping the repository response to DTO requires a number of calculations, business rules, and so on, which event logging now also needs if I only use the repository response. In other words, I need to run the same business rules I did when mapping and use them for the event logging process. All because event logging requires some properties of the repository response object, but not the DTO object.

To make matters worse, some controllers use the same DTO object to eventually return the results as part of the JSON.

I've thought about two solutions:

  1. Include these necessary properties in the DTO object, so that they can be used by the event logging process, but continue and disable them during marshalling / demarshalling with the JSON library. If additional event logging scenarios are introduced with more missing properties in the repository response, I need to continue adding them here.
  2. Perform some of the logging that requires the missing properties of DTO during the on-premises mapping. The problem is that now I strongly combine the operation of mapping from one object to another with partial or complete logging of events that will be terrible for unit tests and general laws of the universe. In addition, as new event logging scenarios may arise, this coupling becomes even deeper.

I wanted to know if there are other design solutions / models that can be more sensible, extensible and maintainable that I can use?

html5 – how to perform an imputation of the deadline 02/2022 automatic

I have problems with my form. I do not know how to make it automatic with the 02/2022 automatic bar. I enter in my form and I get 022022 … I want it to be automatically the bar / when I type> 022022, it turns automatically 02/2022 .. I tried to use the type of order date but it gets the date xx / xx / xxxx .. I just want some light xx / xxxx?

my html code is like that

interaction design – prepare a user to perform an action before moving to the next step

I design an application that allows users to train at home.

I have a step (let's call it step 1) in which the user must be able to "sync" (step 2) with the app for future exercises. During this synchronization period (step 2), the user has to move his body or just move – the way he has to move is presented through a video on the screen.

Suppose the screen looks like this, with a title, an image of the position that the user must take and a small description. The call to action must again remind the user that he must be able – in the example, I have used a general CTA.

Once the user has clicked on the "CTA" button, he goes to step 2. The screen of step 2 looks like the screen of the user. Step 1, the image being replaced by a video and the absence of button. Once the synchronization is ready, the user receives a message (success or failure).

Current issues:

  • When the user goes from step 1 to step 2, he is not ready to perform what he sees in the video in order to synchronize him. He must first re-read what he is supposed to do, even though I have prepared it in the previous step on what he is supposed to do. By not moving when he reaches Step 2 and waiting to deal with what he has to do, the step seems a lot harder than it is. actually and sometimes, synchronization fails.

Already tried: move the video, as well as the initial position, in step 1 so that it can preview what it is supposed to do. Sometimes users start playing at step 1 and they are tired and complain that the timing does not occur.

I am looking for any possible solution that would facilitate the process and solve the problem.

Possible solution: I thought about it when writing this. When the user arrives at step 2, inform him of what he has to do and add a big countdown when he can start performing this move / action . Maybe during this countdown, he will be able to prepare himself.

LE: The synchronization process (step 2) captures the user's movement and compares it to the video. In this way, for the following exercises, he knows which leg is the left leg, which arm is the left arm, and so on. Synchronization takes between 10 to 15 seconds, but nothing is too difficult. The actions that the user must perform are simple: lift your knee, hand, etc.
Another mention is that this process must be performed each time the user begins training.

LE2: Age demographics using the application is 40 years old and over

How to perform web services tests?

Hello friends,

How to perform web services tests?