| View previous topic :: View next topic |
| Author |
Message |
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
 Posted: Mon May 14, 2007 5:27 pm Post subject: Re: Thanks |
  |
|
| Themagician wrote: |
| I find that I can definately use the help. Sometimes I seem to get lost in my thoughts, looking at my monitor, fixated on a pixel, almost frozen and unable to move. I guess all this talk about nightmares and those spooky packages are still getting to me. |
You mean like this?
| Quote: |
| As I approach, I can see a man at his computer his eyes locked onto the pixels pacing across the screen. He doesn't hear the screams. He doesn't smell the smoke. He doesn't feel the panic. He just sits there, engrossed in the game. |
EDIT: It's from our friend BA: http://caribbean.craigslist.org/mis/327330686.html
Last edited by Dante on Mon May 14, 2007 5:35 pm; edited 1 time in total |
|
| Back to top |
|
 |
Themagician
Site Admin
Joined: 07 Jan 2007
Posts: 73
Location: Server room
|
| Posted: Mon May 14, 2007 5:34 pm Post subject: |
|
|
Huh? Where is that from Dante? I have not been paying attention apparently!
_________________
$ PATH=pretending! /usr/ucb/which sense |
|
| Back to top |
|
|
Tipsila
Joined: 22 Apr 2007
Posts: 144
|
| Posted: Mon May 14, 2007 5:35 pm Post subject: |
|
|
| Biff wrote: |
| HPhack wrote: |
| Occultus wrote: |
Xé:3a
The number on door 1217 from this dream: |
Um. Wait a second: the password came from one of BA's dreams? How could that be possible? Could this be the reason why BA is being so elusive? Because she's giving us secret information? What is she trying to reveal to us ...? |
1217, huh? What was the date of the server crash again? |
December 17  |
|
| Back to top |
|
|
4thElement
Joined: 28 Apr 2007
Posts: 8
Location: aegis.bulls.mine.nu
|
| Posted: Mon May 14, 2007 6:18 pm Post subject: download script.... |
|
|
OK well its getting a little late here and this data comes down real slow, and I don't really want to leave it running overnight so I'm posting the script... you'll need python, then edit the commented lines at the top to insert the begining offset and the output file path... then let it loose.
| Code: |
from socket import *
# variables
output_file="<name of output file>"
init_index=0
# end variables
so_arr=[]
m_ind=init_index
o_f=open(output_file,'wb')
for ind in range(6):
so=socket(AF_INET,SOCK_STREAM)
so.connect(('www.sentryoutpost.com',5217))
print ind,'->',so.recv(1024)
so.send('X\xc3:3a\r\n')
print ind,'->',so.recv(1024)
so_arr.append(so)
mso=socket(AF_INET,SOCK_STREAM)
mso.connect(('www.sentryoutpost.com',1031))
while 1:
#print so_arr
db=mso.recv(1024)
if len(db)==0:
mso.close()
for so in so_arr:
so.close()
break
print repr(db)
if db.strip().startswith('Offset'):
mso.send('%s\r\n' % m_ind)
print m_ind
data=mso.recv(8192)
len(data)
o_f.write(data)
m_ind=m_ind+len(data)
o_f.close()
|
Happy trails....
Matt
BTW I checked all the firewall logs and I don't see any attempted connections to my network at all, I think the telnet stuff is just a bluff....
_________________
chown -R us ./base |
|
| Back to top |
|
|
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
| Posted: Mon May 14, 2007 7:03 pm Post subject: |
|
|
So I've got the script running (Nice job!!) and it is humming along merrily (I started it at offset=0 to begin). However, I am little worried because the stuff in the output file looks like this:
| Code: |
O%^?d^_^???g^_g?L?(?^?^S^?C$??#^???U?^]^F?x?U^??q? ^[Ut^?@^??a?^???!;EKCEW$
^?"*?,?@?^?lC^P.??"^A?w,"?#P^YA??V)??2^??^?v?&^?WK[<?LX^?Y?Q^V^K^?^?[=^?A2?$
???^^?+?~^S5?S.???^K?|e^B?{I{??hb????6??^??^A'^X?eQ\?CL?^V{4?u^?$p??^?^hn$
^??E4}???^?YF?????^?^M[?^?^?^?^\#2gT^C^Ne:c??^?&n???K?y??^MqLu^?krR
^N^??qeF?^?J?z}Is?p?/8J3^?q0pf7^\WEd?^?J?"z/?VAkx?r^?^?^O^ü?q]5s.->^_??]^\O?$
R?^_^?4?^?^Mi^?^G!^L^T?^?^V1?^E^?^???^?^Q^A^E(^R?^Z{?^?G*^??^??jD^A?Aq??^?ua^$
? ^?&{P^Xv??^Ud^?^L?^???8^?^R?^GsyCl?h^?B??^EO?c^??qv???5^?4%?^C^??XA7^?+6^D??$
?^V'?E?0^@?IM??^K/^?^V?Q[F?\??0d_PLu^A?aZj??^X??s^?^R???^?Q?Hzx?1?>??k?^CE?^?u$
-+?^??^?V?^R@^_9^·9?S^?w?^A'??j^E^?^Q?-?^F9?^W9,??^P?n6?^Z^?^B^?^?^¡?^?? +^$
^@^@?^@ |
Is that right? |
|
| Back to top |
|
|
Mapmaker
Joined: 20 Apr 2007
Posts: 236
Location: Honolulu, HI
|
| Posted: Mon May 14, 2007 7:15 pm Post subject: |
|
|
So these series of numbers appear at the far ends of the file:
(REMOVED, SEE EDIT)
Do we know what these are? Are they from the site? Or are they something else?
EDIT: It seems that there's more to them than that. I'm running the script from the negative end, and I found some more numbers. There also seems to be a prefix to them or something, so here's these anew (spacing added to make things line up):
| Code: |
1260 6.3355e+00 -1.3259e+02 -4.2625e+02 1.3916e+01 1.1756e+02 3.7679e+02
2336 3.7996e+01 -6.8742e+01 -3.5335e+01 3.1434e+00 5.6756e+00 2.9715e+00
... BULK OF FILE ...
39686 1.2961e+02 4.1840e+01 6.7803e+01 2.2397e+01 7.4536e+00 1.1934e+01
|
|
|
| Back to top |
|
|
Rogi
Joined: 20 Apr 2007
Posts: 20
|
| Posted: Mon May 14, 2007 7:21 pm Post subject: |
|
|
Dante:
I'm thinking, no.
It could be whatever tool/font you're using to view the data or it could be something in the script that's limiting the characters to the first 128 characters (Basic ASCII set) only and not including the other half (Extended ASCII characters).
If you're on a windoze box, try looking at the output in Wordpad (Not Notepad) using Arial to see if the question marks are really something else. Or just look at the file in hex.
Mapmaker:
They are just numbers with varying decimal precision noted (Move the decimal two places to the right for "+02") Given the diversity of the precision, I don't know what they could be representing. They're probably not posting numbers or database keys for the old forum, though.
Edit: Disregard that last. I wasn't recognizing the exponents. Guess I better just go home, now.
_________________
Nothing to say. |
|
| Back to top |
|
|
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
| Posted: Mon May 14, 2007 7:33 pm Post subject: |
|
|
| Rogi wrote: |
Dante:
I'm thinking, no.
It could be whatever tool/font you're using to view the data or it could be something in the script that's limiting the characters to the first 128 characters (Basic ASCII set) only and not including the other half (Extended ASCII characters).
If you're on a windoze box, try looking at the output in Wordpad (Not Notepad) using Arial to see if the question marks are really something else. Or just look at the file in hex. |
Hrm, and if I'm on a Mac?
I'll try some things. The actual file should be fine, though, right? |
|
| Back to top |
|
|
Rogi
Joined: 20 Apr 2007
Posts: 20
|
| Posted: Mon May 14, 2007 7:38 pm Post subject: |
|
|
Not if the script converted all the extended characters into question marks.
Definitely try the hex view.
_________________
Nothing to say. |
|
| Back to top |
|
|
Jegger
Joined: 14 May 2007
Posts: 45
|
| Posted: Mon May 14, 2007 8:03 pm Post subject: |
|
|
| Occultus wrote: |
I get slightly different results.
At 5915000 I get an EOF error (end of file)
I get the text Jegger got at 5915000 at 5914600 (400 bytes less).
|
Yeah, You might want to verify that the data at the end is consistent. It seemed to go changing on me all of the time. Do you think that we're PEEKing at a running process? (Old-skool programmers, forgive the joke  ) |
|
| Back to top |
|
|
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
| Posted: Mon May 14, 2007 8:12 pm Post subject: |
|
|
| Rogi wrote: |
Not if the script converted all the extended characters into question marks.
Definitely try the hex view. |
Yea, I'm stumped. I can't tell anything about what this output file is like. Irritating!
Okay I found a hex editor that works, but now I just see all the strange characters.. lots and lots of them
Last edited by Dante on Mon May 14, 2007 8:29 pm; edited 1 time in total |
|
| Back to top |
|
|
Krispy
Joined: 09 May 2007
Posts: 5
Location: San Francisco, CA
|
| Posted: Mon May 14, 2007 8:15 pm Post subject: |
|
|
Getting little tidbits of text out of the file as it is downloading:
| Quote: |
| "red such technology, in fact I'm quite willing to embrace it. However RFID while it would be appropriate for tracking your dog it is not appropriate for higher security applicati" |
| Quote: |
| GetME out"]So I called the number and told her all about a "dream |
And so on. I find it strange that there are these fragments scattered in a sea of binary goop. I looked at it in HEX and nothing obvious pops out (though I'm not sure what to look for).
Edit: A few more snips:
| Quote: |
om your presentation you describe methodologies you envision as delivery mechanisms, like BitTorrented payloads of massive size, but the collabora
|
| Quote: |
href="/wiki/index.php?title=Image:Page.jpg" title="Image:Page.jpg"><img src="/wiki/images/thumb/6/60/Page.jpg/78px-Page.jpg" width="78" height="120" alt="" /></a></div><div class="gallerytext">
<a href="/wiki/index.php?title=Image:Page.jpg" title="Image:Page.jpg">Page.jpg</a><br />
<a href="/wiki/index.php?title=User:Themagician&action=edit" class="new" title="User:Themagicia
|
Last edited by Krispy on Mon May 14, 2007 8:52 pm; edited 1 time in total |
|
| Back to top |
|
|
Eggnog
Joined: 20 Apr 2007
Posts: 2
|
| Posted: Mon May 14, 2007 8:28 pm Post subject: |
|
|
| Krispy wrote: |
Getting little tidbits of text out of the file as it is downloading:
| Quote: |
| "red such technology, in fact I'm quite willing to embrace it. However RFID while it would be appropriate for tracking your dog it is not appropriate for higher security applicati" |
| Quote: |
| GetME out"]So I called the number and told her all about a "dream |
And so on. I find it strange that there are these fragments scattered in a sea of binary goop. I looked at it in HEX and nothing obvious pops out (though I'm not sure what to look for). |
Huh, those are obviously posts on this very forum. Is this whole thing a wild goose chase? |
|
| Back to top |
|
|
Jegger
Joined: 14 May 2007
Posts: 45
|
| Posted: Mon May 14, 2007 8:29 pm Post subject: |
|
|
| Krispy wrote: |
Getting little tidbits of text out of the file as it is downloading:
| Quote: |
| "red such technology, in fact I'm quite willing to embrace it. However RFID while it would be appropriate for tracking your dog it is not appropriate for higher security applicati" |
| Quote: |
| GetME out"]So I called the number and told her all about a "dream |
And so on. I find it strange that there are these fragments scattered in a sea of binary goop. I looked at it in HEX and nothing obvious pops out (though I'm not sure what to look for). |
If you don't mind grepping for "e+", I think that the scientific notation numbers are probably the most interesting piece of this data. |
|
| Back to top |
|
|
Krispy
Joined: 09 May 2007
Posts: 5
Location: San Francisco, CA
|
| Posted: Mon May 14, 2007 8:37 pm Post subject: |
|
|
| Jegger wrote: |
| If you don't mind grepping for "e+", I think that the scientific notation numbers are probably the most interesting piece of this data. |
Not seeing any interesting numbers.. Feel free to double check yourself though...
EDIT: I spoke too soon...
On line 16395:
| Quote: |
72037 -1.4597e+02 8.5717e+01 8.3207e+01 4.0678e+01 2.3856e+01 2.3105e+01 |
More lines rolled into Mapmaker's post ....
Last edited by Krispy on Mon May 14, 2007 9:45 pm; edited 3 times in total |
|
| Back to top |
|
|
|
