|
|
 |
 |
|
Feb 6, 2007
Report Praktikal: Week , Day 1
8.00 am: Melaporkan diri
8.15 am - 12.30 pm: Job Fair, print sijil.
2.00 pm -4.45 pm: Mengemaskan blok di bawah selepas Job Fair.
Posted at 09:41 pm by weird_guy29
Permalink
Dec 11, 2006
Hello people. Weird guy is back. Here's some information about JavaScript Injection. JavaScript is a widely used technology within websites and web based applications. JavaScript can be used for all sorts of useful things and functions. But along with this comes some additional security issues that need to be thought of and tested for. JavaScript can be used not only for good purposes, but also for malicious purposes. Using JavaScript an individual can modify and change existing information within a form. It can be used not only to change form input tags, but also the cookie's that are currently set in the browser, and any other value within a website or web application. Any type of parameter manipulation that you want to perform can typically be done with Javascript injection. To execute any javascript within a current session, a user would enter the specific javascript commands within the browser's url bar minus the http://. All javascript commands must start with the javascript: tag followed by any javascript command that will be executed. All javascript is ended with a ; so a user could enter multiple javascript commands, as long as each command ended with the ; Thats all for today. Have a nice day.
Posted at 09:56 pm by weird_guy29
Permalink
Dec 5, 2006
Good morning people. How are you people? Here's some information about Proxy Server.
A proxy server is a computer that offers a computer network service to allow clients to make indirect network connections to other network connections. A client connects to the proxy server, then requests a connection, file or other resources available on a different server. The proxy provides the resource either by connecting to the specified server or by serving it from a cache. In some cases, the proxy may alter the client's request or the server's response for various purposes.
Types:
1. Web
2. SSL
3. Intercepting
4. Open
5. Reverse
6. Split
7. Circumventor
8. Anonymous
Thats all for today. Have a nice day.
Posted at 09:31 am by weird_guy29
Permalink
Dec 4, 2006
Good evening people. How are you people? Here's some information about Encryption. Encryption is used by a web application to enable the secure transfer of data. It can be implemented between the user and the server or between the two servers involved in the web service process. Encryption VulnerabilitiesThere are two primary categories of encryption vulnerabilities in wev applications that can impact the security of the application and data. 1. Weak cipher methods The use of weak ciphers or encoding algorithms to encrypt data allows a hacker to easily decrypt the data. Poor randomization of IV data can also severely weaken the encryption. 2. Vulnerable software Some implementations of software that allows for the secure transfer of data, like SSL, suffer from poor programming, and are vulnerable to buffer overflow attacks. The use of unpatched versions of these routines allows a hacker to compromise the encryption procedures. Defend Against Encryption VulnerabilitiesThe following countermeasures can be taken to prevent exploitation of encryption vulnerabilities: 1. The application should be reviewed to ensure that only strong ciphers are being used to encrypt data. 2. Open source software from trusted vendors should be used when possible, and web application administrators should keep up up to date on vulnerability information. Any type of proprietary encryption mechanisms should be a avoided, and do not use obfuscation methods in place of true robust encryption methods.
Thats all people. Have a nice day.
Posted at 09:22 pm by weird_guy29
Permalink
Dec 3, 2006
Hello people. Weird guy feels bored today!!! Here's some information about Rootkits. A rootkit is a suite of tools used to convertly implement an administrative-level backdoor into a compromised system. Contratry to popular belief, it is not used to gain administrative-level access. Rootkits assume root-level access has already been achieved through either a buffer overflow, programming weakness, or other attack means. Rootkits typically include four basic elements: 1. A packet sniffing program for monitoring network traffic 2. Trojan backdoor programs for gaining future remote access 3. Trojan versions of system binaries and a utility to alter time stamps to replaced binaries 4. Log scrubbers for hiding the compromise
There are a large variety of rootkits available. Three examples follow that illustrate the different classifications of rootkits and methodologies;
T0rnkit illustrate a traditional UNIX rootkit. T0rnkit is commonly available and was used in a varient of the UNIX Lion worm. It stops syslogd (system logging daemon) and scrubs logs files using mjy. It also replaces several operating-system-level executables including du, find, ifconfig, in.telnetd, in.fingerd, login, ls. netstat, ps, pstree and top. It may also replace the nscd (name server cache daemon) with a Trojan horse sshd daemon that listens for remote connections on TCP port 47017 (default).
Adore is an example of a loadable kernel module, or LKM, UNIX rootkit. LKM rootkits are more difficult to identify because they function at the kernel level. They intercept and alter system-level calls. Although possible on most UNIX variants that implements LKMs, this classification of rootkit is most commonly found on Linux.
Slanret is an example of a Win32 "kernel mode" rootkit. Although less common than UNIX-based rootkits, Win32 rootkits are growing in popularity. This type of rootkit is more sophisticated than the typical SubSeven or BO2K type of backdoors commonly seen today. The difference is the level at which these kernel mode Trojans operate. SubSeven and BO2K, mentioned in the "Trojan Horse Programs" section, run at an application level and are therefore easy to identify. Slanret hides as a device driver, provides remote access by listening on an unused TCP port, and conceals itself from casual detection.
Thats all for today. Have a nice day.
Posted at 10:34 am by weird_guy29
Permalink
Dec 2, 2006
Good evening people. Weird guy is back, how are you all guys. Here's some information about Social Engineering.
Social engineering has always been a dangerous threat to organizations of all types. One of the common reasons for someone to use social engineering is to try and obtain sensitive organizational information or access to a system or facility that normally would not be available to an outsider. Social engineers achieve their goals by identifying targets within an organization to exploit. These targets are either people in certain roles, such as help desk human resources, such as side entrances and garage access points. What the social engineer wants is either informational based or action/result based, and social engineering is either part of the intelligence-gathering process or the exploit and penetration process.
Although we call it social engineering, there is actually a social side and a technique side to the process:Social methods include phone calls, email, and face-to-face contact. Technical methods include posting a fake login page or impersonating a web site.
Social engineers usually want to get information on people, get user account passwords or get them reset, have employee or vendor lists sent to them, get access to remote dial-up connections or VPNs, get information on secret workings or schedules, get into facility entrances, and get people to load Trojans. Although it is mix of social and technical, it involves more of the technical aspects.
Social engineering could possibly be considered the ultimate security vulnerability; it is an active part of almost every facet of daily human life, to varying degrees. It will probably never truely go away, but with regard to social engineering with malicious intent, don't lose hope. Active measures can be taken to control and migitate the effects of social engineering attempts through single, proactive awareness training and support for preventive procedures in daily operations.
Thas all for today. Have a nice day.
Posted at 09:06 pm by weird_guy29
Permalink
Nov 26, 2006
Malicious Software: Viruses, Worms, Trojan Horses and Spyware
Good evening people. How are you all today? I would like to share information about Malicious Software: Viruses, Worms, Trojan Horses and Spyware. Malicious software programs refered to as malware include a variety of threats such as computer viruses, worms and trojan horses. A computer virus is a rogue software program that attaches itself to other software programs or data files in order to be executed, usually without the user knowledge or permission. Most computer viruses deliver a "payload". The payload may be relatively benign, such as the instructions to display a message or image, it may be highly destructive - destroying programs or data, clogging computer memory, reformatting a computer's hard drive or causing programs to run improperly. Viruses typically spread from computer to computer when humans take an action as sending e-mail attachments or coping an infected file. Many recent attacks have come from worms, which are independent computer-programs to copy themselves from one computer to others over a network. Unlike viruses, they can operate on their own without attaching to other computer program files and rely less on human behaviour in order to spread from computer to computer. Worms can destroy data and programs well as disrupt or even halt the operation of computer networks. Worms and viruses are often spread over the Internet from files or downloaded software, from files attached to e-mail transmissions, or from compromised e-mail messages. Viruses have also invaded computerized information systems from "infected" disks or infected machines. Today e-mail attachments are the most frequent source of infection, followed by Internet downloads and Web browsing. A Trojan horse is a software program that appears to be benign, but then does something other than expected. The Trojan horse is not itself a virus because it does not replicate, but is often a way for viruses or other malicious code to be introduced into a computer system. An example of a modern-day Trojan horse is Trojan.Xombe, which was detected on the Internet in early 2004. It masqueraded as an e-mail message from Microsoft, directing recipients to open an attached file that purportedly carried an update to the Windows XP operating system. When the attached files opened, it downloaded and installed malicious code on the compromised computer. Once this Trojan horse was installed, hackers could access the computer undetected, steal passwords and take over the machine to launch denial of service attacks on other computers. Some types of spyware can also act as malicious software. These small programs install themselves on computers to monitor user Web surfing activity and serve up advertising. Some Web advitisers use spyware to obtain information about users' buying habits and to serve tailored advertisments. Many users find such spyware annoying and some critics worry about its infrigement on computer users' privacy. Thats all for today. Have a nice day.
Posted at 06:50 pm by weird_guy29
Permalink
Nov 24, 2006
Good evening people. Its hard to weird people around the world. Here's information about Open-Source Software. Open-source software is software produced by a community of several hundred thousand programmers around the world. Open-source software is free and can be modified by users. Works derived from the original code must also be free, and the software can be redistributed by the user without additional licensing. Open-source by definition not restricted to any specific operating system or hardware technology. although most open-source software is currently based on Linux or Unix operating system. A related free software movement supported by the Free Software Foundation supports similiar goals of making software freely available without the restrictions of copyright or patent law. Check out this cool link for more detailsOpen-source software is based on the premise that is superior to commercially produced proprietary software bacause thousands of programmers around the world working for no pay can read, perfect, distribute and modify the source code much faster and with more reliable results, than small teams of programmers working for a single software company. Although it may seem that contributors to open-source software receive nothing in return, in fact they receive respect, prestige and access to a network of knowledgeable programmers (who in turn can be tapped for solutions or even employment). And although it may seem the process of software improvement is chaotic or unorganized, in fact these are self-organizing communities of dedicated professionals who have a well-defined organizational structure and a set of business process (or procedures) for getting the work done. The open-source movement has been envolving for more than 30 years and has demonstrated after many years of effort that it can produce commercially acceptable, high-quality software. Now thousands of open-source programs are available from hundreds of Web sites. The range of open-source software extends from operating systems to office suites, browsers such as Mozilla's Firefox and games. Several large software companies are converting some of their commercial programs to open source. IBM for instance, is handling over its Java-based database program called Cloudscape to the Apache Software Foundation, an open-source group. Novell is investing heavily in open-source companies that sell versions of open-source group. Thats all for today. Have a nice day & please leave your comments.
Posted at 08:37 pm by weird_guy29
Permalink
Nov 23, 2006
Good evening people. Here's some information about Denial-of-Service attack. I hope you'll enjoy reading it.
Denial-of-Service is the complement to system/network penetration and encompasses a variety of techniques designed to deny users or clients access to specific systems and network resources. The types of resources targeted in denial-of-service attacks include the following: • CPU utilization • Disk space and I/O • Memory utilization • Network bandwidth Techniques for denial-of-service are harder to identify than for system/ network penetration because they tend to be application or environment specific. Some common techniques for denial-of-service include the following: Application or protocol exploits. These may appropriate specific application or protocol features to effect a denial-of-service; an example might be the appropriation of a protocol authentication or cache mechanism to effect denial-of-service. Buffer overflows. Denial-of-service buffer overflows generally attempt to exhaust system resources or exploit an application vulnerability in executing code to crash an operating system or application component. Malformed packet data. Malformed packet data may be forwarded to a target system with a vulnerable TCP/IP stack implementation or application service as a means of crashing a system or system/network resource. Packet flooding. Packet flooding attempts to exhaust network bandwidth or system bandwidth as a means of denying access to targeted resources. The objective of most denial-of-service attacks is to effect excessive resource consumption or to crash a resource (such as a process, service, or network listener) as a means of denying access to the resource. A new and emerging type of denial-of-service is the distributed denial-ofservice (DDoS) attack, which leverages significant numbers of Internet or networked systems, in an organized manner, to affect a multisystem denial-of-service against a system or network. Many organized DDoS exploits leverage application or other system vulnerabilities to gain system access to a set of vulnerable "slave" systems, which are managed from multiple masters; a covert communications channel is often established between the master and slave and is used to issue instructions to the slave systems. At the attacker's designation, a DDoS attack is launched against the target network using packet flooding or malformed packets to launch the attack. Thats all guys. Have a nice day.
Posted at 08:50 pm by weird_guy29
Permalink
Nov 22, 2006
Good evening people. Weird the only word exists, this sounds funny but it is the reality. Weird people will conquer this freak world!!! Here is some information about PHP.
There are some compelling reasons to work with PHP. For many projects you will find that the production process is significantly faster than you might expect if you are used to working with other scripting languages. As an open source product, PHP is well supported by a talented production team and a commited user community. Furthermore, PHP can be run on all the major operating systems with most servers.
Speed of Development
Because PHP allows you to separate HTML code from scripted elements, you will notice a significant decrease in development time on many projects. In many instances, you will able to separate the coding stage of a project from the design and build stages. Not only can this make life easier for you as programmer, it also can remove obstacles that stand in the way of effective and flexible design. PHP Is Open SourceTo many people, "open source" means free, which is, of course a benefit in itself.This may sound a little foreign to all you folks coming from a non-UNIX background, but PHP doesn't cost anything. You can use it for commercial and/or non-commercial use all you want. You can give it to your friends, print it out and hang it on your wall or eat it for lunch. Check out this cool link Well-maintained open source projects offers users additional benefits, though. You benefit from an accessible and commited community who offer a wealth of experience in the subject. Chances are that any problem you encounter in your coding can be answered swiftly and easily with a little reasearch. If that fails, a question sent to mailing list can be yield an intelligent, authoritative response. You also can be sure that bugs will bw addressed as they are found, and that new features will be made available as the need is defined.You will not have to wait for the next commercial release before taking advantage for improvements. There is no vested interest in a particular server product or operating system. You are free to make choices that suit your needs or those of your credits, secure that your code will run whatever you decide. PortabilityPHP is designed to run on many operating systems and to cooperate with many servers and databases. You can build for a UNIX environment and shift your work to NT without a problem. You can test a project with Personal Web Server and install it on a UNIX system running on PHP as an Apache module. Thats all for today. Have a nice day & please leave your comment.
Posted at 05:20 pm by weird_guy29
Permalink
|
|

Practical report
Check Out This Cool Links
Weird's Friends' Blogs
|
|