Anybody wants to trade, let me know.

• A tweaked sidebar as mentioned in previous posts
• An improved archive page that formats much nicer
• A re-written about page
• Added a mobile gallery album for cell phone pics (been meaning to do that for awhile)
• Valid xhtml (which took by far the longest to do)

Obviously this website is extremely awesome.

Trust me, you can.

But before telling you how, I want to state that the tactics described in the following text could very easily be used for malicious and/or illegal activities.  With that said, this information should only be used for educational and/or testing purposes.  Metasploit is a very valuable security research and exploit testing tool.  I am not responsible should you decide to use it in negative ways.  Never apply this information to access a system you are not authorized to use.

With the politics out of the way, let’s get down to business.

1.  Find your “target” - in this case, I have built a toshiba laptop to run a completely vanilla Windows XP installation with no service packs or updates of any kind.

2.  Download Metasploit and install it per the installation instructions.  There are versions for Linux, Windows, and Mac OS.  The remainder of these steps will be shown using the Linux version (Ubuntu 8.04).

3.  Launch Metasploit. Version 3 actually has a GUI tool to make things PAINFULLY easy, so we’ll keep with command line to show some respect.  Launch the GUI if you wish…  many of the options are the same, it’s just offendingly easy to use.  You can see below that my linux command prompt at the top of the window, and the metasploit console at the bottom where we can get started.

4.  Pick your exploit of choice. This will depend greatly on your target’s OS and patch levels.  type “show exploits” at the metasploit command prompt to get a full listing.  To use an exploit, just type “use exploit_name”.  I picked a Windows SMB exploit as you can see below.  Notice how the command prompt changes to reflect the exploit you’ve chosen.

5.  Set your options and payload.  Type “show options” and look for anything that migh need to be set.  Most likely you’ll at least have to set the target (RHOST) to the IP of your hacking target.  Set the options by typing “set optionname optionvalue” - or in this case: “set RHOST 192.168.1.144″.  Now our exploit attempt will be directed at that IP address.

You’ll also need a payload - a way to use the exploit to get access to the target machine.  This is usually a command shell, VNC session, or could even be dll injection or adding an administrative user.  To see a list of all payloads, just type “show  payloads”.  Once you find one you like, just type “set payload payload_name”.  For this test, I’ve used the windows tcp shell bind.

6.  Double check everything and exploit.  Type ’show options’ one last time and make sure there are not any required options left blank.  Sometimes a payload will require additional settings.  Once you’re sure everything has been set correctly, just type the magic word:  exploit.  Watch as the exploit code runs; and look for the “Command Shell Session 1 Opened” text as shown below.  This means the hack has been successful.

7. Connect to the hacked target.  If you are using Metasploit for Windows; you’re automatically taken to the command shell of the hacked target.  However, in Linux we have to connect to the session manually.  To see your hack session, type “sessions -l”  (dash lowercase L).  You’ll see your list of sessions shown in the output.  Once you see your shell session, just type “sessions -i 1″ to connect to session number one.  See below:

Notice how the prompt has changed to a windows command prompt? Yeah, that means you’ve just hacked a computer.

But, I can’t find it in my heart to do that - so instead I mess around with it and change it pretty much every other week.

In the past, I’ve added the random gallery image, added the Netflix queue, added and removed all kinds of links, added and removed google ads, and played around with ul / li formatting.

THIS week, I’ve decided to add dynamic content to pull in my recent tracks from Last.fm and also my recent ‘tweets’ from Twitter.  I also got rid of some links, added in some new links, and generally wasted a couple hours pointlessly tweaking the sidebar.

I still can’t bring myself to use the built in widgets that K2 and Wordpress have to offer; which undoubtedly makes everything in the sidebar harder to do.

Regardless, may I present to you sidebar version four hundred thirty ONE.

Back up just a bit - for those of you who do not know me, I despise myspace.  I’ve always hated it.  HATED it.  Almost unexplainably.  I can’t even really put my finger on why - but part of it is people that put 8 million pictures/videos/songs on their ’space’ and crash my dual core 2GB RAM computer.

Anyway - In order to send Drist a message, I would have to take the ultimate plunge of debauchery and create my own ’space’.  After some reluctance, I did the unthinkable  Vanberge, the eternal hater and shunner of myspace fire death created a myspace account.  I then added Vanbergs as a friend and sent one of my favorite bands in the world a myspace message pleading them to put songs out for RockBand downloadable content.

That was just the beginning…

In the last 4 days I have signed up for and begun using a plethora of online services.  This includes (see sidebar) Digg, Twitter, Last.fm, LinkedIn, and of course… Myspace.

Until now, I’ve really sort of avoided the ‘online community’ side of the internet.  I’ve stuck to things I know and really haven’t tried anything new - primarily I’m an emailer and then I maintain this website - and that’s been it.  And actually, it’s too bad I’ve waited so long to start exploring the further reaches of the internet.  I’ve found myself enjoying embracing these communities and will no doubt continue to do so (well, I may not keep my ’space’).  But things like last.fm, twitter, and linkedin will probably stay part of my daily web activity for some time to come.

With the expansion into the online world, I began also looking for ways to consolidate my online activity into a more efficient means.  Typing URL after URL into the address bar is a very inefficient means of getting things done online.  Google reader has already helped me with this, but I felt there was more room for improvement.  In the end, I added and reorganized bookmarks into folders that I can easily ‘open all in tabs’.  I then used FoxMarks to continuously sync my bookmarks between all of my firefox browsers (since Google browser sync has been discontinued) - and then finally I downloaded Opera mini, a much improved web browser for my Blackberry 8830 which installs in seconds and absolutely dwarfs the default RIM browser.

Thanks to everyone who no doubt accepted the several invite/friend requests for these various online accounts I’ve finally decided to start using.

I found that Wordpress and Gallery each had new versions out; so I decided to take the plunge.  I upgraded to Wordpress 2.6 and Gallery 2.2.5.

I used only the-bob.org’s command line, and the process as a whole took 10 minutes and resulted in no issues whatsoever.

It’s been some time since I’ve been on a road trip, so I had been looking forward to our trip to Montana for quite some time.  I couldn’t wait to leave my blackberry at home and get 1,200 miles away.

The drive out there was surprisingly fast.  Carpooling with the inlaws, we took shifts driving and plowed straight through, stopping only for gas and food.  The drive out took approximatly 27 hours and was 1,280 miles.  I passed my free time by reading Angels and demons, watching a few different movies on my laptop (no country for old men is very deserving of the Oscar for Best Picture.), chewing sunflower seeds, and aweing at the open vastness of the North Dakota and Montana countrysides.

I had an initial picture of our trip being very ‘frontier-like’.  I envisioned sitting around campfires, having some beer, and roughing it a bit.  But it was actually the opposite.  Plentywood has about 1800 residents, several restaurants, an ACE hardware, and a fully loaded sporting goods store.  There isn’t any fast food or Walmarts within a 2 hours drive - but Plentywood holds its own in Northeast Montana.

Most of the time was spent with family that we haven’t seen in a long time.  But I did get a chance to learn alot more about my wife’s side of the family, and gain an appreciation for the western atmosphere.  I felt refreshed and really enjoyed our time.

All in all - I took alot of pictures, bought a genuine cowboy hat, shot at gophers, loved Moose Drool, gazed at the clearest night sky I’ve ever seen, visited the Mall of America, gained 11 pounds, and had an amazing time.

Vanbergs and flo, thank you again for watching our home and pets.

Any feeling or emotion that I can or will experience has been emphasized, amplified, and fully experienced with the assistance of music.  Likewise - great music is capable of actually producing these feelings and emotions.  It’s really almost impossible for me to accurately articulate into words.

With that said, there are few and rare cases where a ’song’ transcends the bounds of my mortality.  It becomes more than a catchy rhythm, more than a consistent beat, more than meaningful harmony, more than lyrics, more than vocals, and more than words can describe.  The only way i can find to describe this situation is that the artists do not simply play their instruments, write their lyrics, or sing their songs.  Rather, they wield pure and unbridled emotion via their instrument of choice; harnessing and culminating the entire universe’s energy into one cataclysmic event. (or, ’song’).

One such artist is “Drist”.  One such song is “Dissolve”.

I am fairly convinced that this song my most favorite song that I have ever heard.  The combination of music, vocals, and lyrics pull my emotions from sorrow and empathy, through hope and inspiration, and finish at absolute contentment.   I find this nearly impossible because the lyrics are almost completely objective - but nevertheless, it is an amazing experience.

Different forms of music have different effects on different people.  This particular music has a profound effect on me.  And I thank the band Drist for the experience.

Listen to the song
Drist on MySpace

The lyrics:
Oceans arrived, let go
So sure, how could my confidence be wrong
I sacrifice, and hold the pain
Of each and everyday alone

All I know, is all I loved
All long forgiven
All I knew, are all my wrongs
I’ve long forgotten

Watch as the tide dissolves
So sure, that the lines I drew
Were all gone
I sacrifice and hold onto
The chance that I will soon dissolve

Break all your ties
Face the one
Held inside.
Take your breath
Keep your head
Held back while
I show you. See them
Watch it go

I started looking at Trek, really because that’s the only bicycle brand that I’ve ever known to be top notch.  So, I spent alot of time shopping Trek bikes online and reading reviews about their different models.  In the end, I was certain that I would be purchasing a Trek SU 2.0 just from reading online about it.

Then i started to call around bike shops and ask some preliminary questions - what size frame do I need?  Is a Trek SU 2.0 going to do what I want it to?  What accessories are must haves?  etc.  From there, the next step was going into a bike shop and checking out the goods first hand.  And I was completely amazed that after one trip to a bike shop, some discussion with the biker guru employees, and a couple test rides - I had put a bike on layaway.  Not a SU 2.0.  Not even a Trek.  Rather, a brand and model I hadn’t even previously heard of: The Gary Fisher Wingra.

I picked up the bike last friday, and in the first 4 days of ownership I rode it 20 miles.  I rode it 8 miles home from the bike shop right after picking it up.  I road it to work a couple days this week (thank god our office has a shower.) and I rode around our neighborhood a few times just getting a feel for it.

The bike wasn’t too bad really pricewise - but I bought a speedo/odometer, a helmet, a lock, some bar end grips, a water bottle holder, a rack/pack carrier, and a little carry bag that attaches under the seat.  After all was said and done, we had to spend a little more than I liked - but I figured out that each day I ride my bike to work will save me about 2 bucks in gas - and I only live 4.1 miles from home.  Not to mention, riding my bike to work is a pretty good way for me to get some much needed exercise.

All in all - W00t Gary Fisher’s wingra.  Check out some pics.

Even though I feel drastic needs to make these changes, I hate doing it.  It’s so hard to find a decent theme to start with, and I definitely don’t have the time or the motivation to write my own theme from scratch.

Hoping for a solution to this ongoing problem, I have decided to use the theme “K2” - a popular theme that is currently embraced by Vanlandw and CSH.  This is a very simple, yet very aesthetically pleasant and easy on the eyes.

With that said - I am never using any other theme on palmerforpresident.com.  Any design, look, or usage of theming will all be based on K2.  I may slightly modify the theme, but it will always be K2 as a base.  Out of the box, the main thing i didn’t like was how dynamic K2 is.  It dynamically generates the sidebar and header nav on every single page that is loaded.  I modified both of these to be quite a bit more static - for me that’s a little nicer.

I don’t mind the theme, so any modifications will be fairly minor, but there will be a bit of a ‘transitional’ phase for me to get everything formatted to this themes css styles.

w00t k2