Chain of command- looking for reference

[UH60guy]

I have a feeling I know the answer to this is going to be "ask your squadron chain of command" but since I don't have a meeting until tonight, I thought I'd check here first to see if anyone knows where I can find the information for myself.

I'm doing some pre-event homework for an upcoming CLC I'm taking, and the first question is to ID the wing leadership (CC, CV, all the directors, etc.). Being a former Army aviation maintenance manager, I always prefer referring to an official document for things wherever possible. I know the military is big on listing the leaders at each command, in fact it's usually right there on any organization's homepage. Now, as far as I can tell, our CAP Wing website hasn't been updated since 2012- which I understand due to the nature of volunteer service and that we may not have a lot of people available at higher echelons ready to update the site.

Is there another source that I would be able to find these peoples' names? Is there some sort of contact registry at NHQ? Or, would the website be the correct place, just I'm out of luck with it being out of date and dependent on the hopes my CC knows. I don't want him to do my homework for me, but if "asking my commander" is the only option, it sort of feels like that.

[Eclipse]

eServices has reports that detail duty assignments for all units.

If you, or someone else, has the correct rights, you can run a report for the -001 unit in your wing and get
the whole list in an authoritative form.

[Storm Chaser]

You may be able to find some of this information on the VAWG website:

http://vawg.cap.gov/

Click on Member Services, then Key Personnel Directory. I don't know if this directory is up-to-date, but it's a place to start.

The information you want is available, but it's going to depend on your wing and your permissions (usually determined by duty position). Good luck.

[arajca]

Each unit, invlucing wings, are required to publish a PA in January listing the unit's staff. It may be available on your wing's webpage.

[Al Sayre]

Have your Admin Officer contact the Wing Director of Administration and request a copy of the Wing Staff Roster

[Panache]

Huh.  Interesting.

AVAST: INFECTION BLOCKED
URL:   http://vawg.cap.gov/
Infection:   JS:HideLink-A [Trj]

Edit:  False positive?  VirusTotal says it's a clean site.

[UH60guy]

Thanks Eclipse- found it in eServices. I don't have permissions to pull the full report of everyone at the -001, but I was able to run an individual report for each position to find the names one by one through the "Membership by duty position" report.

Thanks to everyone else for the input too. For AAR purposes on the other tips:

Unfortunately we only have about 4 active Seniors in our Composite squadron, and we don't have an Admin officer to ask.

The website- I didn't see the list buried under member services, but it looks like it might be up to date. I had gotten scared off since they have the Wing Commander incorrect on the homepage, but it looks like that directory might be right. Still, I'll go with the eServices method (though it may take longer) since I can get the current assignments for sure.

[Storm Chaser]

A copy of the wing PA may be the best way to find this information, as some wings may deviate a bit from CAPR 20-1 and make up additional positions. You will often find that the duty position in eServices doesn't necessarily match the one on the PA.

[Panache]

Maybe not so clean... another website is reporting that vawg.cap.gov has malware on it.

web site:    vawg.cap.gov
status:    Site infected with malware

Looking at the javascript code seems to confirm this.  (Hint:  Nowhere on a CAP website should the term "buy liquid viagra online" be in the page's code.)

[UH60guy]

Where would they publish the PA? Does this typically come down the command channels to the CC, or is there a standard location for it? The website has bulletins for 2005 and 2006 only, and the "documents library" is only VAWG forms. I see some stuff about a "paperless wing information system," I guess I should probably register for that system, maybe it's in there.

Edit: seeing the comments about the Javascript makes me think I'll just stick with what I found on eServices

[JeffDG]

May want to try:
http://www.govirginiawingcap.com/

[Panache]

Additional real-time analysis...

"Unmask Parasites" reports it as "Suspicious" with "Suspicious Inline Script" found.
"Web Detector" : "This is a suspicious page" / "Trojans found".

Somebody might want to mention this to the people at VAWG HQ.

[UH60guy]

I don't have the Wing on speed dial, but my Group Commander often comes to meetings as his kids are in our squadron. I'll let him know and see if he can activate the bat-signal to Wing.

[UH60guy]

Maybe not so clean... another website is reporting that vawg.cap.gov has malware on it.

web site:    vawg.cap.gov
status:    Site infected with malware

Looking at the javascript code seems to confirm this.  (Hint:  Nowhere on a CAP website should the term "buy liquid viagra online" be in the page's code.)

Where is the code located? In touch with IT and I can't seem to find it. Want to make sure this isn't a false positive.

[Panache]

If you click on the links I provided, it'll take you to the various site scanners.  One of them has a example of the corrupted JS code.

[LSThiker]

(Hint:  Nowhere on a CAP website should the term "buy liquid viagra online" be in the page's code.)

Well considering that Viagra does not come in a liquid formulation that I am aware of.....wait.....oh now I see the problem.  Yeah, I am sure that would be a violation of CAPR160-1 

[UH60guy]

I see the example code, but I'm not sure I'm reading it right.
From UnmaskParasites:
When I click "details," it tells me "This site is not currently listed as suspicious"

Not sure what I'm looking at under "external references," as that seems to be from other websites, and I can't find that reference from the VAWG website when I right click and view source.

The "reveal hidden spam links" is a listing of things to search for, not things that it found. Was there a specific page of link that showed up for you?

About all I can see it actually finding is a "long suspicious script" which I'll take a closer look at.

[Panache]

I'll attach a screen-shot

[Panache]

Another screen-shot.

[UH60guy]

Right, I got the same thing...

Though the "external references" is talking about ...iub.edu and ...indiana.edu  not vawg.cap.gov unless I'm reading this wrong. Does this mean that the VAWG website is linking to those others, and those others have the viagra links? When I click "view source" on the various frames on the VAWG website itself, I don't see links to either of those sites, so I'm confused where that's coming from. Not sure if it's the Unmask Parasites website trying to advertise its usefulness, or if it's saying that's on the VAWG website somewhere.

[UH60guy]

Another screen-shot.

And I saw this too- though you notice it's not saying it found those terms, it's saying "type this in to search for these terms." I tried a few, and even changing it to just "viagra site:www.vawg.cap.gov" and came up with nothing.

[Panache]

Doing a google site search for the terms "viagra" and "cialis" both indicate that those terms are SOMEWHERE on the site.

I did a search for "puppy", just to make sure it was throwing out false positives, and the search came back with no hits.

[Panache]

Another screen-shot.

And I saw this too- though you notice it's not saying it found those terms, it's saying "type this in to search for these terms." I tried a few, and even changing it to just "viagra site:www.vawg.cap.gov" and came up with nothing.

Try doing the site search with vawg.cap.gov, not www.vawg.cap.gov

[Panache]

Snippit of code.  (Taken remotely, 'cause I'm not going to the site personally)

[UH60guy]

OK, that narrows down the search- though as I'm not the admin all I can do is go through page source code page by page.

Too bad it doesn't narrow it down more though!

Did you have any hits with other scanners? My computer's not picking anything up, and I've tried a few other scanning sites and come up cold:
http://www.avgthreatlabs.com/website-safety-reports/domain/cap.gov/
https://www.virustotal.com/en/

Have you used Unmask Parasites before? I've never heard of them before- if you haven't either, keep in mind there is a common trick to give false positives to drum up antivirus business. Not saying I don't believe you- the state of the website definitely makes me believe it would be possible- but just I can't find the links in the source code.

[UH60guy]

Whomp, there it is. Found it.

Tricksy, tricksy hobbitses. I lost it again, but I definitely saw the spam code for all of a second until I accidentally closed the wrong window. At least now I know generally where to look...

[Panache]

I kicked in the Sandbox mode and went to the website and copied the page source.  I'll attach it here as a PDF file.

[UH60guy]

Yeah, that's the problem. It's the index page that brings up the frames that has the bad code. That's why right-clicking and viewing each frame's code was turning up nothing. It's on the index itself, not the content. That also explains how I got lucky with one click but lost it again

Thanks for the help with the search. I'll report this to VAWG right away.

[Panache]

Glad to have helped. 

[UH60guy]

Hey, at least we did something productive while I was procrastinating on CLC homework, right?

Edit:
Answer back from VAWG is they intend to shut down the website and use the other Virginia Wing website, so I'm not sure what action if any will be needed. Makes me wonder why we are going with a .com instead of the more official-looking .gov, but those decisions and the information feeding them are way above my pay grade.

I was also just offered a wing IT job... that'll teach me to open my mouth!

[Ed Bos]

Hey, at least we did something productive while I was procrastinating on CLC homework, right?

Edit:
Answer back from VAWG is they intend to shut down the website and use the other Virginia Wing website, so I'm not sure what action if any will be needed. Makes me wonder why we are going with a .com instead of the more official-looking .gov, but those decisions and the information feeding them are way above my pay grade.

I was also just offered a wing IT job... that'll teach me to open my mouth!

Is this the new website? Are you THAT fast?  :clap:
http://www.govirginiawingcap.com

[Panache]

I was also just offered a wing IT job... that'll teach me to open my mouth!

Woo-hoo!  An extra zero on your CAP paycheck!

[UH60guy]

I was also just offered a wing IT job... that'll teach me to open my mouth!

Woo-hoo!  An extra zero on your CAP paycheck!

I blame you for getting me into this mess, Panache

And no, some people with much more experience than me created that .com website a while ago... it's just now an opportunity for me to try to help out where they need it. I haven't done any website design in about 10 years, so this should be interesting... not to mention needing to read up on assorted regulations I've never cracked the surface of and a possible new specialty track.

[Panache]

I was also just offered a wing IT job... that'll teach me to open my mouth!

Woo-hoo!  An extra zero on your CAP paycheck!

I blame you for getting me into this mess, Panache

I regret nothing!

[Eclipse]

A number of years ago I was running the website for my Group and its units - most of them had very basic
contact and info pages based on the same Joomla templates with security and rights I had established personally.

One unit decided to do their own thing, format-wise, and its very non-technical CC and family built the site using
Frontpage...

...

...yeah.

Not only was it an ugly, non-compliant, nostalgic gateway to the '90's, but the templates they were
using were probably downloaded from a Warez site and had vulnerabilities the size of semi-trucks.   As it
happened I transitioned from Group CC right around this time and it was no longer my problem, though since
the hosting was "paid up" and I was the admin, I just maintained access until the contract ran out and they transitioned to Google sites.

When the contract with the provider ran out and I shut everything down, I did one final copy of the whole site
as a historical backup.  When that particular unit's directory hit my machine, the anti-virus went nuts and
quarantined a bunch of stuff.

I found a whole structure of pharma spam content that the unit had been "hosting" for several years.
Since we weren't running any analytics or traffic monitoring, we have no way of knowing how much
SPAM we were actually hosting, but it was likely a nice little "hidey hole" for someone.

Some days I hate computers.

[Panache]

I suspect that's what happened to the vawg.cap.gov domain.