Random Blah Blah Blah

Secure Connection on iPhone

2011-10-07T17:34:00.000+08:00

Going to the wild without any weapon at hand can be very difficult. Most especially when connecting to some hostile networks on hacker conference and on coffee shops.

I search around the net and see if I can get this iPhone running with secure connections. Two of the solutions I found was to have a VPN connection and ToR (yes you heard it right, ToR is now on iPhone).

I first installed OpenVPN client which is GuizmoVPN, the package can be found at Cydia, before you can setup the VPN to run you need to sign for an account on some companies that is offering free VPN accounts. I got mine from Hotsplots

Then for ToR its pretty simple HOWTO can be found here

There, you should have your iPhone Torrified and also with VPN.

R.I.P Steve Jobs (1955-2011)

2011-10-07T06:16:00.006+08:00

I will dedicate this time to blog my own tribute to Steve Jobs death, a visionary genius that changed the tech world.

I was stunned by the news when I first saw it on Twitter and confirmed it through the Apple Inc. website (http://www.apple.com/stevejobs) (October 5, 2011). Everyone in the world who are into tech and who loves grabbing those Apple products are mourning.

At first I wasn't an Apple fan boy, with all its source closeness, too monopolized apps, centralized phone management through iTunes and not to mention the Apple has been known for its high price. It was only when I saw Steve's speech at Stanford University commencement dated back in 2005 (YouTube). The speech was very inspiring, and I was stunned how Steve managed his company Apple Inc. and how he loved what he has been doing for his lifetime, with all those words on his speech I had the impression that this guy might have the best gadget out there, giving Apple a shot and I was impressed how those graphics and functionality were integrated on a single device, everything just work together, the work of a genius. It was that speech that I started following Apple products, and getting to know Steve in my own little way, how he changed the world.

I never worked with Steve but I felt this teary eye, not because there will be no more Apple innovations but with the philosophy this guy has been living and that I have been following since. The speech at Stanford changed a bit of me, a bit on how I look at life and how I pursue my dreams, it was indeed the best and the most inspiring speech I ever heard in my entire lifetime. Whenever I have my ups and down in life, I always listen to that speech, even up to now, I even placed them on my iPod and my phone, just to be reminded that there is someone out there who is a college dropout, born out of wedlock, thrown to adoption and yet changed the world.

Again, you can't connect the dots looking forward; you can only connect them looking backwards. So you have to trust that the dots will somehow connect in your future. You have to trust in something — your gut, destiny, life, karma, whatever. This approach has never let me down, and it has made all the difference in my life.

Love and Loss
Back in 2010 I have this great opportunity that was in my hand but flew away and popped like a bubble in my hands. But because of those lines I never lose faith in me, I started coping up and trust everything will be ok, it was back in September of 2011 when I tried to connect the dots looking backwards, the view was pretty clear, as I twitted it "Seeing it all coming is the best part of it and looking backwards is the best view."

It was awful tasting medicine, but I guess the patient needed it.

It was indeed an awful tasting medicine for me, but I guess I needed it to pursue the larger part of my dreams, a dream only me can do.

Sometimes life hits you in the head with a brick. Don't lose faith.

I'm convinced that the only thing that kept me going was that I loved what I did. You've got to find what you love. And that is as true for your work as it is for your lovers. Your work is going to fill a large part of your life, and the only way to be truly satisfied is to do what you believe is great work. And the only way to do great work is to love what you do. If you haven't found it yet, keep looking. Don't settle. As with all matters of the heart, you'll know when you find it. And, like any great relationship, it just gets better and better as the years roll on. So keep looking until you find it. Don't settle.

It was not that hard hitting brick that hit my head, but I did learn something from it, I continued to work my life out, and continue what I loved, at the time of writing I already found love on what I have been doing the past few months, and I will continue to pursuing what I love. Live as it was your last, work what you love and you will never feel working at all.

Staying Hungry and Staying Foolish

Stay Hungry. Stay Foolish. And I have always wished that for myself.

Never settle, keep looking, feed your minds with great ideas and pursue it, it is only a dream away, life is peachy and we can only have them ones in our lifetime so live it as if it was your last. Perfection can only be achieved when death will come and take us away.

On this speech at Stanford I was able to cope up living what I love to do and will continue doing it until way share the same path, the path of death. There can only be one Steve Jobs, but his visions and philosophy in life will be in memory. Thank you Steve for changing the world, not just the technology but for touching the little life, a life like mine.

The transcript of Steve's speech at Stanford

GitHub and the Blah Blah Blah

2011-09-26T08:13:00.001+08:00

I seriously missed coding from functions, to methods to SVN. I wanted to develop an Extreme-Pawnage Tool, but due to the huge amount of similar InfoSec applications out there it might be useless developing such and not to mention the conference I have been managing since which is ROOTCON.

Its been a long time since I haven't used any versioning system the last was using SVN, XP-Framework which I'm also actively watching moved over to GitHub, a social coding website, where you can watch repos and follow coders/developers.

Since managing a hacker conference demands a lot of my time, instead of coding a security tool from scratch I decided to actively contribute to existing one's. Started off with putting up a GitHub Repository for all my FreeBSD port patchfiles and actively watching those ports for any updates.

I'm not new to GitHub, but it was years since I got my hands on it, so I need to review some of the basic commands. I gathered around some basic commands for reference.

The following reference were pulled from the GitHub Cheat Sheet

Configuration
identify yourself to git: email and your name
git config --global user.name "David Beckwith"
git config --global user.email "dbitsolutions@gmail.com"
To view all options:
git config --list
OR
cat .git/config

Set up aliases
git config --global alias.co checkout
View your configuration
cat .gitconfig
To ignore whitespace (Ruby is whitespace insensitive)
git config --global apply.whitespace nowarn
Some nice aliases:
gb = git branch
gba = git branch -a
gc = git commit -v
gd = git diff | mate
gl = git pull
gp = git push
gst = git status
Start using git
git init
Ignoring files
Add a file in the root directory called .gitignore and add some files to it: (comments begin with hash)
*.log db/schema.rb db/schema.sql Git automatically ignores empty directories. If you want to have a log/ directory, but want to ignore all the files in it, add the following lines to the root .gitignore: (lines beginning with ‘!’ are exceptions)
log/*
!.gitignore
Then add an empty .gitignore in the empty directory:
touch log/.gitignore
Scheduling the addition of all files to the next commit
git add .
Checking the status of your repository
git status
Committing files
git commit -m "First import"
Seeing what files have been committed
git ls-files
Scheduling deletion of a file
git rm [file name]
Committing all changes in a repository
git commit -a
Scheduling the addition of an individual file to the next commit
git add [file name]
Viewing the difference as you commit
git commit -v
Commit and type the message on the command line
git commit -m "This is the message describing the commit"
Commit and automatically get any other changes
git commit -a
A “normal” commit command
git commit -a -v
Viewing a log of your commits
git log
Viewing a log of your commits with a graph to show the changes
git log --stat
Viewing a log with pagination
git log -v
Visualizing git changes
gitk --all
Creating a new tag and pushing it to the remote branch
git tag "v1.3"
git push --tags
Creating a new branch
git branch [name of your new branch]
Pushing the branch to a remote repository
git push origin [new-remote]
Pulling a new branch from a remote repository
git fetch origin [remote-branch]:[new-local-branch]
Viewing branches
git branch
Viewing a list of all existing branches
git branch -a
Switching to another branch
The state of your file system will change after executing this command.
git checkout [name of the branch you want to switch to]
OR
git co [name of the branch you want to switch to]
Making sure changes on master appear in your branch
git rebase master
Merging a branch back into the master branch
First, switch back to the master branch:
git co master
Check to see what changes you’re about to merge together, compare the two branches:
git diff master xyz
If you’re in a branch that’s not the xyz branch and want to merge the xyz branch into it:
git merge xyz
Reverting changes to before said merge
git reset --hard ORIG_HEAD
Resolving conflicts
Remove the markings, add the file, then commit.
Creating a branch (and switching to the new branch) in one line
git checkout -b [name of new branch]
Creating a stash (like a clipboard) of changes to allow you to switch branches without committing
git stash save "Put a message here to remind you of what you're saving to the clipboard"
Switching from the current branch to another
git co [branch you want to switch to]
Do whatever
Then switch back to the stashed branch
git co [the stashed branch]
Viewing a list of stashes
git stash list
Loading back the stash
git stash apply
Now you can continue to work where you were previously.
Deleting a branch (that has been merged back at some point)
git branch -d [name of branch you want to delete]
Deleting an unmerged branch
git branch -D [name of branch you want to delete]
Deleting a stash
git stash clear
Setting up a repository for use on a remote server
Copy up your repository. e.g.:
scp -r my_project deploy@yourbox.com:my_project
Move your files on the remote server to /var/git/my_project
For security make the owner of this project git
On the repository server:
sudo chown -R git:git my_project
Then (for security) restrict the “deploy” user to doing git-related things in /etc/passwd with a git-shell.
Checking out a git repository from a remote to your local storage
git clone git@yourbox.com:/var/git/my_project
Viewing extra info about a remote repository
cat .git/config
By virtue of having cloned the remote repository, your local repository becomes the slave and will track and synchronize with the remote master branch.
Updating a local branch from the remote server
git pull
Downloading a copy of an entire repository (e.g. laptop) without merging into your local branch
git fetch laptop
Merging two local branches (ie. your local xyz branch with your local master branch) USE MERGE
git merge laptop/xyz
This merged the (already copied laptop repository’s xyz branch) with the current branch you’re sitting in.
Viewing metadata about a remote repository
git remote show laptop
Pushing a committed local change from one local branch to another remote branch
git push laptop xyz
Creating a tracking branch (i.e. to link a local branch to a remote branch)
git branch --track local_branch remote_branch
You do not need to specify the local branch if you are already sitting in it.
git pull
Note: You can track(link) different local branches to different remote machines. For example, you can track your friend’s “upgrade” branch with your “bobs_upgrade” branch, and simultaneously you can track the origin’s “master” branch (of your main webserver) with your local “master” branch.
By convention, ‘origin’ is the local name given to the remote centralized server which is the way SVN is usually set up on a remote server.
Seeing which local branches are tracking a remote branch
git remote show origin
Working with a remote Subversion repository (but with git locally)
git-svn clone [http location of an svn repository]
Now you can work with the checked out directory as though it was a git repository. (cuz it is)
Pushing (committing) changes to a remote Subversion repository
git-svn dcommit
Updating a local git repository from a remote Subversion repository
git-svn rebase

I successfully placed the repository for unSSH, RainbowCrack and Dradis, my repo can be found at GitHub and forked XP-Framework as I will be contributing to them as well.

I pushed an update for unSSH v1.5, at the time of writing compiling Dradis to send a latest patch for FreeBSD.

My current repository are the following Experiments, FreeBSD-Ports, dialog and xp-experiments.

Exim 4.69 Heap Overflow

2011-06-14T21:44:00.003+08:00

After lurking around the net, there are still plenty of mail servers running the old Exim SMTPd server, this version is prone to a remote overflow condition. The string_format function fails to properly sanitize user-supplied input resulting in a heap buffer overflow. With a specially crafted request, a local attacker can potentially cause arbitrary code execution.

The --> Secunia Advisory

Giving it a test on Metasploit....

msf > search exim

Matching Modules================
Name Disclosure Date Rank Description ---- --------------- ---- ----------- exploit/unix/smtp/exim4_string_format 2010-12-07 excellent Exim4 <= 4.69 string_format Function Heap Buffer Overflowmsf > msf > use exploit/unix/smtp/exim4_string_formatmsf exploit(exim4_string_format) >
Set your desired options, then run the exploit.....After giving it a shot, the exploit throws an exception....
[-] Exploit exception: RCPT: 550-(GYkfcPTa.com) [xxx.xxx.75.76]:14368 is currently not permitted to relay550-through this server. Perhaps you have not logged into the pop/imap server550-in the last 30 minutes or do not have SMTP Authentication turned on in your550 email client.[*] Exploit completed, but no session was created.

At least for this exploit to work, the SMTP server should allow email relaying.....whiich is a very basic setup unless you're an idiot

iPhone 4 on Debian

2011-06-06T07:45:00.002+08:00

I've been bumping a problem on mounting my iPhone4 on Debian Squeeze, when the iPhone is plugged onto the laptop it suddenly throws an error Unhandled Lockdown Error (-5), one good solution I found to this problem is upgrade the following libraries:

semprix@carla:~$ lsusb
Bus 007 Device 002: ID 046d:c016 Logitech, Inc. Optical Wheel Mouse
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 006: ID 05ac:1297 Apple, Inc.
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 002: ID 03f0:171d Hewlett-Packard Wireless (Bluetooth + WLAN) Interface [Integrated Module]
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
semprix@carla:~$

semprix@carla:~$ sudo apt-get install libusbmuxd-dev
semprix@carla:~$ sudo apt-get install usbmuxd
semprix@carla:~$ sudo apt-get install libimobiledevice-dev

Then reboot.....

After reboot mounted my iPhone and works like a charm, it even pops-up ShotWell for photo import

RE: iTunes on Wine

2011-05-27T07:18:00.006+08:00

In reply to my previous post, installing .Net Framework does not resolve the issue with regards to the .DLL exception when installing iTunes over Wine. Instead I will try to upgraded Wine to 1.2 from 1.0(Debian package).

Remove old version, add repo and install.

Remove old version

Open a terminal

sudo apt-get remove libwine wine #to remove outdated version of wine

Add the repository

Open a terminal

sudo gedit /etc/apt/sources.list #to open repository file with a text editor (you can use gedit or another)

Add this line if you use lenny: deb http://www.lamaresh.net/apt lenny main

Add this line if you use squeeze: deb http://www.lamaresh.net/apt squeeze main

Add this line if you use sid: deb http://www.lamaresh.net/apt sid main

Save and close sources.list

wget http://www.lamaresh.net/apt/key.gpg && sudo apt-key add key.gpg #to add gpg key

sudo apt-get update #to update package list

sudo apt-get install wine #to install latest wine version

Reference : lamaresh.net

iTunes on Wine

2011-05-26T06:59:00.006+08:00

I recently bite the bullets and got myself an iPhone 4, don't get me wrong but Android is cool, but third party development is really slow, I must say third-party application portage is really at its infancy stage. One good example is having Perl on iPhone and not on Android. Both device are running *Nix so its not much of a difference, except for interface and looks but under the hood they're both good *Nix mobile device.

iPhone is one of the stable mobile Pentest device out there, you can run Metasploit, slowloris, nikto2, etc...etc...

Now traveling without an iTunes, is really awkward for me, so lately I've been fiddling how to get iTunes running on a Debian Squeeze system. Our best bet will be to run MS XP on a virtual machine, I setup VirtualBox with Windows XP as guest OS and then run iTunes inside the virtual machine, the installation was perfect, BUT I'm having trouble running the USB device inside the guest OS, which I'm about to give up. So looking on the other side of the road, the good old Wine will be our best bet. The iTunes installer runs perfectly but got stuck looking for some .DLL files. The .DLL files iTunes was complaining can be found on a .Net framework installation.

Installing .Net framework on Debian is plain simple, just download winetricks from the Wine HQ website, run the GUI and select .Net Framework. At the time of writing its still downloading the framework, so I can't give a conclusion that this will give a go for iTunes.

Dradis Framework ported on FreeBSD

2011-05-22T20:02:00.007+08:00

Dradis is an open source framework to enable effective information sharing, specially during security assessments.

Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead.

Features include:

Easy report generation.
Support for attachments.
Integration with existing systems and tools through server plugins.
Platform independent.

The first time I used Dradis I was amazed how this collaboration tool has been designed and laid out. I compiled the source on FreeBSD, and it runs smoothly, all you need was to setup ruby on the FreeBSD box. Dradis has a really unique design, collaboration made easy =) - So after months of running dradis, while on FreeBSD sandbox, I keep reinstalling them / recompiling etc...etc...so I decided to port Dradis to the FreeBSD ports tree and have a hassle free installation without *always* checking its dependencies.

Installation procedure under FreeBSD:

Pre-requisites:

Build: ruby-1.8.7.248_5,1 ruby18-gems-1.3.7 rubygem-rake-0.8.7
Run:

pkg-config-0.25_1 ruby-1.8.7.248_5,1 ruby18-gems-1.3.7 ruby18-wirble-0.1.3 rubygem-sqlite3-1.3.2 sqlite3-3.7.3_1 swig-1.3.39_1

Update FreeBSD Ports Tree using portsnap or cvsup, on this documentation we will be using portsnap:

# portsnap fetch
After portsnap is done downloading the latest ports tree snapshot, you need to extract them:
# portsnap extract
If everything goes according to plan, you should have the Dradis port in your system:
# cd /usr/ports && make search name=dradis
Port: dradis-2.5.2
Path: /usr/ports/security/dradis
Info: Opensource framework to enable effective information gathering
Maint: semprix@bsdmail.org
B-deps: ruby-1.8.7.248_5,1 ruby18-gems-1.3.7 rubygem-rake-0.8.7
R-deps: pkg-config-0.25_1 ruby-1.8.7.248_5,1 ruby18-gems-1.3.7 ruby18-wirble-0.1.3 rubygem-sqlite3-1.3.2 sqlite3-3.7.3_1 swig-1.3.39_1
WWW: http://dradisframework.org/

Once you have confirmed that Dradis is already on your ports tree directory, you are ready to build it.

Building Dradis

The build process is straightforward: download the latest version of the framework available and uncompress in/usr/local/dradis/
Remember that you should be root to build this port:
# cd /usr/ports/security/dradis && make install clean
===> Vulnerability check disabled, database not found
===> License accepted by the user
=> dradis-v2.5.2.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
=> Attempting to fetch from http://heanet.dl.sourceforge.net/project/dradis/dradis/v2.5.2/.
dradis-v2.5.2.tar.gz 3% of 4638 kB 67 kBps
========================================
dradis uses SQLite as default database backend.
For other databases such as MySQL configure the file/usr/local/dradis/server/config/database.yml
The (SQLite) database can be initialized with the command/usr/local/etc/rc.d/dradis initdb
For more information see:http://dradisframework.org/configure.html
===========================================> Installing rc.d startup script(s)===> Registering installation for dradis-2.5.2===> Cleaning for dradis-2.5.2#

Everything should be ready by now. As the script tells you, if you want to use a different database engine, the configure and launchpage has all the answers.

Running Dradis

To start Dradis on boot-up edit /etc/rc.conf and add:
dradis_enable="YES"
To start Dradis manually:
# sh /usr/local/etc/rc.d/dradis start
=> Booting WEBrick
=> Rails 2.3.5 application starting on https://127.0.0.1:3004
#

And there we go, we compiled and started Dradis successfully :)

This installation document is also available at the Dradis Website

Code Highlighting on Blogger

2011-05-22T17:04:00.019+08:00

I will be posting some codes inside this blog, so I was searching around if there are any plugins to enable code highlighting on blogger. Luckily I was able to find prettify, lets test it out.

Perl Test Code

#!/usr/bin/perl
print "Hello Pretty =) \n";

PHP Test Code

session_start();
require_login();
$user = Users::current_user();
$cart = Cart::get_cart($user['id']);
if (!$cart)
{
   http_redirect("/error.php?msg=You do not have a cart");
}

Now that looks neat =) you can download Prettify at Google Code, and installation is pretty straight forward.

1. Download the zip file.
2. Extract it to your webserver, where blogger can read it across the internet
3. Include the stylesheet and the js before the body tag starts
3.1 Declare the stylesheet prettify.css
3.2 Declare the Javascript prettify.js
4. Add onload="prettyPrint()" to your document's body tag.

Thats it, to produce the above code simply place the pre tag pre class="prettyprint" YOUR CODE then pre end tag.

This tweak supports the following language

"bsh", "c", "cc", "cpp", "cs", "csh", "cyc", "cv", "htm", "html",
"java", "js", "m", "mxml", "perl", "pl", "pm", "py", "rb", "sh",
"xhtml", "xml", "xsl"

Clean Looks

2011-05-22T13:40:00.003+08:00

I made this blog to a more clean looks, I was able to download one of Andreas theme that has been modified by Carl, but I'm not really satisfied with how it looks, stuffs like Sidebar located on the left, image with border, and the blockquote is over rated. So I customized them but still with the minimalistic approach. I thought of sharing it for those who wanted a very clean looks on their blogger.

Download the theme here

Please remain the credits for Andreas, Carl and myself =)

Enjoy your new clean looks!!!!

PGP / GPG on iPhone

2011-05-22T13:22:00.003+08:00

I've been searching how to manage PGP/GPG Keys on iPhone, and not just manage the keys but the ability to decrypt and encrypt messages. While searching the internet I found this app called oPenGP, the app isn't free but has a Lite version which I think does the job for my needs.

Some of the key features on this oPenGP Lite Version

oPenGP Lite is a solution to support Decryption of OpenPGP messages on your iPhone.
Features:
✓ Text message Decryption through clipboard (copy & paste).
✓ Support of UTF-8 text.
✓ Import of multiple secret/public keys through clipboard (in a single copy & paste).
✓ Compliant with all OpenPGP RFC4880 & PGP® software.
✓ Ability to send encrypted text or public keys as Email or SMS.
Features LIMITED in Lite version, (fully functional in Full version):
✓ Text message Encryption through clipboard (copy & paste).
✓ Encryption with Sign.
- Message length is limited to 16 characters.
- A commercial introduction is encrypted with your message.
✓ Decryption with Sign check.
Features NOT supported in Lite version, (fully supported in Full version):
✓ Secured passphrase storage.
✓ Secured keyring storage.
✓ Auto encrypt to myself.
Features NOT supported, but on roadmap:
✓ Support of file decryption.
✓ Keys servers.
✓ Creation of secret/public keys.
Note : PGP® is a registered trademark of Symantec.

Grab it from iTunes

TrueCrypt On Linux

2011-04-24T20:25:00.003+08:00

All my hard drive are encrypted, that includes "WHEEZY" my external hard drive, I had WHEEZY setup with truecrypt. WHEEZY is fully encrypted with AES-Twofish algorithm.

I plugged in wheezy on my wardrive laptop which is running a Debian Squeeze, unlike some *BSD flavors, Linux has this auto-mount features, drive was mounted, but some volumes are encrypted with TrueCrypt, so its time to quickly install TrueCrypt.

To install TrueCrypt

1. Grab a copy from TrueCrypt website. (don't have time to solve the dependencies truecrypt on debian is throwing)

2. Extract the file

3. Run the installer ./truecrypt-7.0a-setup-x86

4. Mount the drive with truecrypt

For mounting NTFS Filesystem

1. Install libfuse(NTFS partition are mounted using this library, FUSE(FileSystem Userspace)

apt-get install libfuse2

2. Install ntfs-3g(This is an open-sourced cross platform implementation of MS Win NTFS)

apt-get install ntfs-3g

Mount the drive with truecrypt using ntfs-3g as filesystem

semprix@carla:~$ truecrypt --filesystem=ntfs-3g --mount /media/WHEEZY/DATA.tc /media/truecrypt1
semprix@carla:~$ cd /media
semprix@carla:/media$ ls -l
total 10
lrwxrwxrwx 1 root root 6 Apr 19 11:06 cdrom -> cdrom0
dr-xr-xr-x 4 4294967295 4294967295 136 Mar 3 2009 cdrom0
drwxrwxrwx 1 semprix root 4096 Apr 18 20:29 truecrypt1
drwx------ 1 semprix semprix 4096 Apr 22 18:58 WHEEZY
semprix@carla:/media$ cd truecrypt1/
semprix@carla:/media/truecrypt1$ touch test
semprix@carla:/media/truecrypt1$ ls -l test
-rw------- 1 semprix semprix 0 Apr 24 20:14 test
semprix@carla:/media/truecrypt1$

You can also mount the drive with corresponding umask using --fs-options flag

Metasploit on FreeBSD

2011-03-27T17:36:00.001+08:00

Ran a fresh FreeBSD install did a quick upgrade from 7.2 to 8.2, install necessary PenTest Tools, when I first ran Metasploit it's throwing an exception trying to look for iconv package.

The Exception

/usr/local/share/metasploit/lib/zip/zip.rb:3:in `require': no such file to load -- iconv (LoadError)
from /usr/local/share/metasploit/lib/zip/zip.rb:3
from /usr/local/share/metasploit/lib/zip.rb:1:in `require'
from /usr/local/share/metasploit/lib/zip.rb:1
from /usr/local/share/metasploit/lib/msf/core/db.rb:9:in `require'
from /usr/local/share/metasploit/lib/msf/core/db.rb:9
from /usr/local/share/metasploit/lib/msf/core/db_manager.rb:2:in `require'
from /usr/local/share/metasploit/lib/msf/core/db_manager.rb:2
from /usr/local/share/metasploit/lib/msf/core/framework.rb:67:in `require'
from /usr/local/share/metasploit/lib/msf/core/framework.rb:67
from /usr/local/share/metasploit/lib/msf/core.rb:33:in `require'
from /usr/local/share/metasploit/lib/msf/core.rb:33
from /usr/local/share/metasploit/lib/msf/ui/console/driver.rb:1:in `require'
from /usr/local/share/metasploit/lib/msf/ui/console/driver.rb:1
from /usr/local/share/metasploit/lib/msf/ui/console.rb:10:in `require'
from /usr/local/share/metasploit/lib/msf/ui/console.rb:10
from /usr/local/share/metasploit/lib/msf/ui.rb:10:in `require'
from /usr/local/share/metasploit/lib/msf/ui.rb:10
from /usr/local/bin/msfpayload:16:in `require'
from /usr/local/bin/msfpayload:16

A quick search on the ports tree for iconv

make search key=ruby-iconv

Installed iconv

cd /usr/ports/converters/ruby-iconv && make install clean

Do a rehash and ran metasploit

# msfconsole
   _ _ _ _
   | | | | (_) |
_ __ ___ ___| |_ __ _ ___ _ __ | | ___ _| |_
| '_ ` _ \ / _ \ __/ _` / __| '_ \| |/ _ \| | __|
| | | | | | __/ || (_| \__ \ |_) | | (_) | | |_
|_| |_| |_|\___|\__\__,_|___/ .__/|_|\___/|_|\__|
   | |
   |_|

   =[ metasploit v3.5.1-release [core:3.5 api:1.0]
+ -- --=[ 635 exploits - 314 auxiliary
+ -- --=[ 215 payloads - 27 encoders - 8 nops
msf >

Install SVN from Portstree

/usr/ports/devel/subversion/ && make install clean

Update Metaploit

svn update or msfupdate

3Njoy =) and Happy H4ck1ng

Test from Android

2011-02-13T20:30:00.002+08:00

This is a test from Official Blogger For Android app.

Coffee

2011-02-13T20:20:00.000+08:00

(via WikiPedia) - Coffee is a brewed drink prepared from roasted seeds, called coffee beans, of the coffee plant. They are seeds of coffee cherries that grow on trees in over 70 countries, cultivated primarily in Latin America, Southeast Asia, and Africa. Green unroasted coffee is one of the most traded agricultural commodities in the world.[1] Due to its caffeine content, coffee often has a stimulating effect on
humans. Today, coffee is the third most popular drink in the world, behind water and tea.[2]

For one week I conducted a survey every time I will have my coffee, I will enumerate what coffee do to me. Here is the one week result.

Coffee is caffeine
Coffee was introduced around the 15th century(found out)
Coffee can be hot or cold
Coffee can be obtained in supermarket, vendo and anywhere else
Coffee is awesome.
Coffee wakes you up in the morning
Coffee is my little stimulant (aside from Redbull)

My Essential Network and InfoSec Android Apps

2010-12-29T11:11:00.002+08:00

Its been 2 months since I have my Android device, and with that two months, Ive settled down for a number of apps for Android. I will discuss my essential network and infosec apps here.

I had my device rooted with a Custom kernel, at the time of writing I'm using LeeDroid v2.3(no this is not Gingerbread fork, still on Froyo) for my custom kernel, I wanted to use OpenDesire but due to the restrictions HTC has implemented on their new devices they included a new security feature called S-ON, S-ON is a security flag implementation, they implemented it on PVT4 devices, if you have a HTC Desire with PVT3 the security flag seems to be turned off by default(S-OFF). So far I'm pretty much satisfied with LeeDroid. Now going back to the my list of infosec and infosec Android essential apps.

AndFTP: A good file transfer application for Android, supports plain FTP, SFTP and SCP.

Remote RDP: A remote desktop client for Android.

ConnectBot: SSH Client

G-Mon: GPS and Wi-Fi info gathering tool.

Net Scan: Network scanner through Wi-Fi connection.

Antennas: A very good information gathering of GPS antennas around your location, whether youre getting good signal or not.

Port Scanner: As its name imply, its a simple port scanner. There is a port of Nmap for Android, but its not free and I didnt bother purchasing them, so I settled for a simple one that can do the task.

Wi-Fi Analyzer: A very good alternative for NetStumbler or inSSIDer.

Shark: A wireshark port for Android, you know whats WireShark so no bother explaining them.

OI Safe: A good password keeper for Android.

APG: A PGP key manager

SpeedTest.Net: Network Speedtest, both GPS and LAN.

Ping and DNS: Good suite of Ping and DNS utilities.

Encrypter: A good app for encrypting texts and emailing them.

These are some of my network and infosec apps running on my android, good enough to start a reconnaissance, and perform the intense one on the netbook.

Til here, need to get my ass up and prepare for lunch.

Bloggeroid

2010-12-25T22:09:00.001+08:00

Testing from Bloggeroid

FreeBSD-SA-10:10.openssl

2010-12-07T13:07:00.000+08:00

Topic:          OpenSSL multiple vulnerabilities

Category:       contrib
Module:         openssl
Announced:      2010-11-29
Credits:        Georgi Guninski, Rob Hulswit
Affects:        FreeBSD 7.0 and later
Corrected:      2010-11-26 22:50:58 UTC (RELENG_8, 8.1-STABLE)
                2010-11-29 20:43:06 UTC (RELENG_8_1, 8.1-RELEASE-p2)
                2010-11-29 20:43:06 UTC (RELENG_8_0, 8.0-RELEASE-p6)
                2010-11-28 13:45:51 UTC (RELENG_7, 7.3-STABLE)
                2010-11-29 20:43:06 UTC (RELENG_7_3, 7.3-RELEASE-p4)
                2010-11-29 20:43:06 UTC (RELENG_7_1, 7.1-RELEASE-p16)
CVE Name:       CVE-2010-2939, CVE-2010-3864

(more)

New PGP Public Key

2010-12-07T10:14:00.006+08:00

This is my new PGP public key with two email address added.

Can be downloaded directly from MIT PGP website

Kismet Drone

2010-12-05T10:01:00.003+08:00

I first installed OpenWRT on the machine, and Kismet ran successfully, but the telnet is opened and no way to secure them cuz jffs2 filesystem cannot be mounted due to a very limited space on the machines ROM, I went to bricking the machine, that I need to short ROMs PIN 15 and 16 for me to flash a new ROM. Everything went well after reflashing the fresh ROM. Some of the stuffs needed for this experiment listed below.

WAP54G AP
DD-WRT firmware
Kismet
TextPad

Step 1. Flash the chosen firmware using the Linksys web gui.
Step 2. Login to the router using telnet.
Step 3. Install Kismet using the musatcha instruction.
Step 4. On your client machine connect to the Kismet AP machine.
Step 5. Enjoy and have a bottle of beer.

Some of the reference I ran into can be found on the DD-WRT website.

http://www.dd-wrt.com/wiki/index.php/Kismet_Server/Drone#Drone_2
http://www5.musatcha.com/musatcha/computers/kismet_on_the_linksys_wap54g.htm
The Church of Wifi

Conclusion: Although the hardware is very much limited in terms of ROM space, getting Kismet ran on the machine is pretty satisfying. Next up will be a Cantenna experiment and we are off for wardriving.

Android Eats Apple

2010-11-20T11:43:00.001+08:00

On my previous blog entry I installed Android on iPhone, it was a good idea to have a little touch base on the Android Operating System, since my iPhone is very much under powered already, yes its just an iPhone 3G, a very much under powered toy, so I decided to do one full upgrade, this time lets hit Android. Yes I do like iPhone specially when its jailbroken, with its Darwin Kernel and the coined gazzillion apps, a *BSD descendant, but it wasnt just enough and its suffocating my curiosity , things like controlled app submission, gui limitations, widgets, slowness...etc...etc....

So its time to stretch out the curiosity in me, its now time to get an Android, my shortlist Android device are Google Nexus One and the HTC Desire. After going through all the reviews on the net, youtube, etc...etc...guess who won the battle? Its the HTC Desire, with a very close match.

Note: And yes, created a new label on my blog (Android).

BlogPress Test

2010-11-16T22:11:00.001+08:00

A test from BlogPress

- Blogged from my iPhone mobile device.

Multi-Tasking and Homescreen(disabled) on iPhone

2010-11-15T10:35:00.004+08:00

As the title says, multi-tasking and homescreen wallpaper on iPhone 3G, you can choose this feature during jailbreaking your iPhone, and this two features eats up too much memory on your phone, however you can disable these features without re-jailbreaking your iPhone. To enable/disable these features we need WinSCP and pList editor, I'm not using WinSCP on this article instead I'm using iPhone Explorer, this software is very useful most especially if you cannot connect yourself to a Wireless network.

Here are some of the steps involved.

1. You need to get the plist file from your phone and edit it.
Filename: N82AP.plist
Location: /System/Library/CoreServices/SpringBoard.app
ScreenShot: Figure 1

2. Once you are in the directory edit the filename mentioned on step 1 (N82AP.plist).
Edit it using pList editor, you can search Google for the software. Now consult figure 2 on what are the lines that needs to be edited.
Screenshot: Figure 2

Copy back the plist file to your iPhone and reboot your phone, and you have successfully disabled those memory eating features.

Android on iPhone

2010-11-15T08:51:00.006+08:00

It's a crazy idea running Android on iPhone, but to satisfy the curiosity in me, I tried it without no doubt, and yes I was able to run it for a whole night. I'll do some touch points here.

For you to be able to install Android on your iPhone, you need to have it jailbroken, there are a lot of jailbreaking tutorials out in the Internet, for this blog entry Im using Bootlace to do the Android installation on my iPhone. Here are the instructions.

Now for my reviews. (not a hardcore reviews, just touch base)

CONs
1. It's just really crazy to run an Android on iPhone.
2. The UI is really sluggish, memory management is not well set for iPhone.
3 The keys are just not so convenient to use.(Close keys, Menu keys, Back keys, etc..etc..)
4. Battery just begun to toast my iPhone (Power Management is not as perfect as you expect).

PROs
1. If you are a developer/researcher, its indeed good to have it tested on different hardware.
2. It's indeed geek-ish.

The rest are up to you guys, but if you really want an Android, I'd say go buy an Android device and hack through it.

FUCK GLOBE TELECOM PHILIPPINES

2010-10-08T14:35:00.000+08:00

Ok here we go another rant for Globe Telecom, one of the cellular network / ISP / phone provider in the Philippines. There are a lot of rants from this provider, why? Cause they are the worst ISP ever, they suck your money out from you pocket. Let me tell you a little experience I had with this money monsters.

I have a Blackberry smartphone and for me to be able to optimize the device I signed up for Globe Blackberry service a promo one, they have this promo Blackberry Surf Max, where you are going to register for 1500 for 30 days.

Now here is the catch, in order for your account to be activated for the Blackberry service you need to set your internet charging to per KB not per TIME(you will be charged Php5 per 15 minutes) so I switched to KB browsing just for my Blackberry service to be activated, without my knowledge they de-activated my Blackberry unlimited service without me knowing and without turning off the Blackberry service on my phone, I never signed up for any Blackberry plan from them, just a promo!!!!. Without my knowledge that my Blackberry service has been de-activated by those idiots I continued to browse and use my smartphone, check emails etc...etc....up until one afternoon they send me a text messages that my account is reaching up to its limit which is amounting to Php29++.00, this is ridiculous!!!! you never warned me or what so ever that my unlimited Blackberry service has been turned off!!!! Beware of this money sucking monsters, just what they did to iPhone internet charging as well.

A New Looks

2010-09-10T21:16:00.001+08:00

New looks for my ever boring blog. Simple and clean but with some candies on it.

Greek God Test

2010-05-15T21:14:00.009+08:00

Its not "GEEK" it Greek God Test.

What Greek God or Goddess Are You Your Result: Zeus & Zeus- Greek God and Ruler of the Olympian Pantheon the ruler of Mount Olympus, and god of the sky and thunder, in Greek mythology. His symbols are the thunderbolt, eagle, bull and the oak.
Athena	&
Dionysus	&
Hera	&
Hades	&
Ares	&
Tara	&
Aphrodite	&
What Greek God or Goddess Are You Quiz Created on GoToQuiz

GEEK Test

2010-04-05T12:19:00.001+08:00

I answered a Geek test on Matther Barr and got 87.5% geeky, not bad at all. Though I didn't know some of the terms used in the questionnaire, stuffs like bum-bag(a belt bag), though I'm not used using this bum-bag.

Take your own Geek Test now.

Space Explorer DiY Kit

2010-04-04T10:52:00.002+08:00

We went to Toys R Us and found something to get my brain working for the weekend, a Space Explorer DiY model kit. It took me a couple of hours to build it and due to it being cheap screws and bolts are really hard to get them whack in with each other, Ive managed to tie them together but it will only be good for display and not literally playing it, the parts might separate with each other. Snapshots are posted below. Next up some Einstein or Physics Kit.

Snapshots of the Space Explorer model kit.

Metasploit 3.3.3-Tokamac Released!

2010-04-02T09:13:00.000+08:00

The latest release of the Metasploit Cyber Warfare Framework has been distributed to our customers via standard prng-seeded dead-drop locations. This release includes the latest in remote platter destruction technology along with an update pack for the earsplitter module that can target smaller mammals, including dolphins.

(more)

When to quit your job???

2010-03-15T08:06:00.001+08:00

I found this article very interesting....

There are few people out there who at one time or another didn't want to just quit their jobs. Sometimes that need to escape is the result of a sudden problem and other times it's a feeling a long time coming. Quitting your job isn't a decision you should make haphazardly though. It generally has a big impact on your life, and you should therefore give it careful consideration. Here are some situations when you may have to simply say, "I quit!"

Your Job is Making You Sick: Job stress is giving you headaches and backaches, and has you losing sleep. If you can't work out the problems, you have to put your health first.

You Find Yourself Being Marginalized: Your boss, for a reason unbeknownst to you, has taken away many of your responsibilities. You are treated like the invisible man/woman and are not included in important meetings. Don't do anything until you talk to your boss to find out what's going on, but be aware that your boss may be silently urging you to leave. If the situation seems like it won't improve, think about taking the hint.

You've Outgrown Your Job: You may have started your job as a novice. Now you have a lot of experience -- more than your job requires. If you can't utilize your experience at your current job, it's probably time to start looking for a job where you can put your skills to use.

(more)

Happy Pi Day Geeks!!!

2010-03-15T07:27:00.001+08:00

There are a large variety of ways of celebrating Pi Day and most of them include eating pie and discussing the relevance of π.^[1] The first Pi Day celebration was held at the San Francisco Exploratorium in 1988, with staff and public marching around one of its circular spaces, then consuming fruit pies. The museum has since added pizza to its Pi Day menu.^[2] The founder of Pi Day was Larry Shaw,^[3] a now-retired physicist at the Exploratorium who still helps out with the celebrations.
The Massachusetts Institute of Technology often mails its acceptance (and rejection) letters to be delivered to prospective students on Pi Day.^[4]
Some also celebrate alternative Pi Days and/or Pi Approximation Days in addition to the two listed above; these can fall on any of several dates:

March 4: When 14% of the 3rd month has elapsed.
April 26: The Earth has traveled two radians of its orbit on this day (April 25 in leap years), reckoning from the start of the calendar year on January 1. Thus the entire orbit divided by the distance traveled equals π; two radians equals ¹⁄_π of our orbit. This is celebrated exactly on the 41st second of the 23rd minute of the 4th hour on April 26 or the 116th day. (In leap years, it is celebrated exactly on the 3rd second of the 2nd minute of the 12th hour on April 25 or the 116th day.) This celebration is not a Pi Approximation Day.
November 10: The 314th day of the year (November 9 in leap years).
December 21, 1:13 p.m.: The 355th day of the year (December 20 in leap years), celebrated at 1:13 for the Chinese approximation 355/113.

(more)

FreeBSD Ports Tree

2010-03-13T12:58:00.000+08:00

Wewitsky one of my infosec buddy and I were testing this cool tool that we found on SF(Sourceforge). Its called darkjumper, this tool will try to find every website that host at the same server at your target Then check for every vulnerability of each website that host at the same serve. Pretty cool aye? So I decided to port them to the FreeBSD Ports Tree

My test port

zeus# pwd
/usr/ports/security/darkjumper
zeus# ls -l
total 8
-rw-r--r-- 1 root wheel 1045 Mar 13 19:34 Makefile
-rw-r--r-- 1 root wheel   198 Mar 13 20:53 distinfo
-rw-r--r-- 1 root wheel   197 Mar 13 17:40 pkg-descr
-rw-r--r-- 1 root wheel   736 Mar 13 19:29 pkg-plist
zeus#

zeus# cat Makefile
# New ports collection makefile for:    darkjumper
# Date created:                         13 March 2010
# Whom:                                 Dax Labrador
#
# $FreeBSD$
#

PORTNAME=       darkjumper
PORTVERSION=    5.7
CATEGORIES=     security
MASTER_SITES=   http://www.semprixd.com/shares/ports/

MAINTAINER=     semprix@bsdmail.org
COMMENT=        Check for every vulnerability of each website hosted at the same server.

RUN_DEPENDS=    python:${PORTSDIR}/lang/python

NO_BUILD=       yes

do-install:
        @${MKDIR} ${DATADIR}
        @${MKDIR} ${DOCSDIR}
        @${INSTALL_SCRIPT} ${WRKSRC}/*.py ${WRKSRC}/*.pyc ${WRKSRC}/*.pl ${DATADIR}
        @${CP} ${WRKSRC}/wordlist ${WRKSRC}/cgilist ${DATADIR}
        @${CP} ${WRKSRC}/AUTHOR ${WRKSRC}/GREETZ ${WRKSRC}/CHANGELOG ${DOCSDIR}
        @if [ ! -d ${DATADIR}/logs ]; then \
                ${MKDIR} ${DATADIR}/logs ; \
        fi
post-install:
        @if [ ! -f ${DATADIR}/logs/${PORTNAME}.log ]; then \
                ${TOUCH} ${DATADIR}/logs/${PORTNAME}.log ; \
        fi
        @if [ ! -f ${PREFIX}/bin/${PORTNAME} ]; then \
                ${LN} -s ${DATADIR}/${PORTNAME}.py ${PREFIX}/bin/${PORTNAME} ; \
        fi
.include
zeus#

Tool in action

[+] Target hostname : blabalabla
[+] Target IP       : 2xxxxxxxxxx
[+] Use proxy       : None
[+] Verbocity       : True
[+] Time Starting   : 20:56:58
[+] Trying reverse your target's ip...
[+] Please wait...
------------------------------

The tool will be available on the FreeBSD ports tree in a few days.

AirCrack-NG ported to PSP

2010-03-10T20:25:00.000+08:00

I was able to successfully port aircrack on my PSP. Need to do something testing, I will be posting some pictures of it once available.

PHP 5.3.2 Release

2010-03-10T07:19:00.000+08:00

The PHP development team is proud to announce the immediate release of PHP 5.3.2. This is a maintenance release in the 5.3 series, which includes a large number of bug fixes.

Security Enhancements and Fixes in PHP 5.3.2:

Improved LCG entropy. (Rasmus, Samy Kamkar)
Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Key Bug Fixes in PHP 5.3.2 include:

Added support for SHA-256 and SHA-512 to php's crypt.
Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check.
Fixed bug #51059 (crypt crashes when invalid salt are given).
Fixed bug #50940 Custom content-length set incorrectly in Apache sapis.
Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long).
Fixed bug #50723 (Bug in garbage collector causes crash).
Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16).
Fixed bug #50632 (filter_input() does not return default value if the variable does not exist).
Fixed bug #50540 (Crash while running ldap_next_reference test cases).
Fixed bug #49851 (http wrapper breaks on 1024 char long headers).
Over 60 other bug fixes.

Ethernet Controller Broken

2010-03-07T08:24:00.006+08:00

Ive been searching for a solution on how to fix my ethernet controller that has been acting up for a couple of days now, I saw the possibility that this has something to do with some Windows updates pushed to my laptop. I tried reinstalling the drivers but still nothing seems to solve the issue. As the time of writing this entry I don't have any idea how to fix this problem.

Device Manager showing that my BroadCom NetLink has some errors on it.

My Wireless card showing no Protocols at all, and adding some protocols would spit you an error.

Crazy Windows!!!!! OR it could be physically broken

DarkJumper Web p4wning

2010-03-04T11:25:00.001+08:00

While searching through SourceForge for security tool to be ported to FreeBSD, I came across this tool and the name sounds really cool, the name of the tool is DarkJumper, is a tool that will try to find every website that host at the same server at your target Then check for every vulnerability of each website that host at the same server.

Functions of darkjumper:
1. User enumeration guessing based on 4-8 chars trial taken from every site name that host at the same server.
2. Scan for sql injection,local file inclusion,remote file inclusion and blind sql injection on every site at the same server.
3. CGI and Path Scanning.
4. Port-scanning
5. Auto-bruteforcing after user enumeration
6. Auto-injector – auto column finder (mysql) if found mysql bug found
7. Proxy added
8. Verbocity added
9. IP or proxy checker and GeoIP useful for checking your IP or your proxy work or not.

I asked Wewitsky, a friend of mine to test it, he tested the tool on a Debian Lenny box and to shock his self that the tool is really cool for mass p4wning, this weekend I will give this tool a try on FreeBSD so that I can port them right away.

Blog's new home

2010-03-01T09:16:00.000+08:00

I created a custom domain for my beloved Blog. w00t, welcome home.

No Entry Defaced

2010-02-09T09:27:00.001+08:00

Funny enough to me (No Entry got defaced). Ninja p4wns

FreeBSD 8.0-RELEASE Notes

2010-02-08T08:32:00.000+08:00

A new virtualization container named “vimage” has been implemented. This is a jail with a virtualized instance of the FreeBSD network stack and can be created by using jail(8) command.
The FreeBSD netisr framework has been reimplemented for parallel threading support. This is a kernel network dispatch interface which allows device drivers (and other packet sources) to direct packets to protocols for directly dispatched or deferred processing. The new implementation supports up to one netisr thread per CPU, and several benchmarks on SMP machines show substantial performance improvement over the previous version.
[amd64, i386] The FreeBSD Linux emulation layer has been updated to version 2.6.16 and the default Linux infrastructure port is now emulators/linux_base-f10 (Fedora 10).
The FreeBSD GENERIC kernel now includes Trusted BSD MAC (Mandatory Access Control) support. No MAC policy module is loaded by default.
The FreeBSD USB subsystem has been reimplemented to support modern devices and better SMP scalability. The new implementation includes Giant-lock-free device drivers, a Linux compatibility layer, usbconfig(8) utility, full support for split transaction and isochronous transaction, and so on.
The FreeBSD CAM SCSI subsystem ( cam(4)) now includes experimental support for ATA/SATA/AHCI-compliant devices.
The shared vnode locking for pathname lookups in the VFS(9) subsystem has been improved.
The ZFS file system has been updated to version 13. The changes include ZFS operations by a regular user, L2ARC, ZFS Intent Log on separated disks (slog), sparse volumes, and so on.
The FreeBSD NFS subsystem now supports RPCSEC_GSS authentication on both the client and server.

(more)

Remember Password on MS Communicator

2010-01-13T08:24:00.003+08:00

MS Communicator on our current setup does not offer to save password, its pretty annoying that you type in your password every time you login to MS Communicator. Here is a quick hack from my God Father(Google).

A little Registry tweaking should be done.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Communicator
"SavePassword"=dword:00000001

REG_DWORD = SavePassword

You can set it You can configure this policy under both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER, but the policy setting under HKEY_LOCAL_MACHINE takes precedence

Values.

Not set = User choice (default).
0 = Users do not have the option to save password.
1 = Users have the option to save password.

I created a very simple batch script for the rest of the folks.

(moc-savepass-patch.bat)

@ECHO OFF
ECHO Set save password dialog on MOC? (ENTER TO CONTINUE)
PAUSE
reg add HKLM\Software\Policies\Microsoft\Communicator /v SavePassword /t REG_DWORD /d 1
ECHO You may now restart MOC to save your password (ENTER TO QUIT)
PAUSE

Encryption on Portable HD

2010-01-10T10:02:00.003+08:00

I just bought a new WD 160GB external hard drive for backup and being a security paranoid, Im looking for a way to encrypt the entire drive and found an Open Source encryption software (TrueCrypt), TrueCrypt supports the following Encryption algorithms: AES-256, Serpent, and Twofish. Mode of operation: XTS. Fire up TrueCrypt on my portable HD and works pretty well.

Check out this good (HOW-TO) , which I also made as reference.

XP Technology

2010-01-09T12:17:00.000+08:00

XP technology is a rapid development environment. It will run anywherePHP runs, Windows, Linux, Unix, MacOS, on your desktop PC, on yourenterprise application cluster and on your hoster's webserver.

It's BSD-licensed, that means it's completely free to use, to copy, to extend, to modify and even to redistribute.

The XP framework offers consistent, multi-purpose, object oriented, production-tested collection of classes, APIs for app server connectivity, web services, dynamic web sites, date access and manipulation, logging, collections, I/O, databases, O/R mapping, XML, unittesting, and much more.

(more)

Twitter Has Been Hacked

2009-12-19T13:00:00.004+08:00

We’ve received multiple tips right around 10 pm that Twitter was hacked and defaced with the message below. The site was offline for a while.

Update: – We have just found out that the same defacement is appearing at at least one other site, mawjcamp.org. We are not able to see what was at this domain before, but it is now displaying the same defacement that Twitter was only a few minutes ago.
Twitter does not have the best record with security issues. We have previously covered a number of incidents, and as recently as two months ago their web servers were misconfigured to reveal detailed internal network information. We also previously wrote about their admin interface having a password of ‘password’ on one account, and the well-known Twitter doc incident. It was hoped that with the hiring of a new COO, Dick Costolo, as well as a number of other high-level engineers, including security experts, that Twitter had grown out of the phase of being vulnerable to security incidents on such a large scale.
We do not know a lot about the group claiming responsibility for the attack as we haven’t heard their name before and they do not show up in any defacement mirrors or security sites. Similar Iranian groups were active during the election campaign in that country. We have emailed the group (they were kind enough to leave an address on the defacement) for a comment (also added them on Gchat – worth a shot).
Update 2.: Twitter.com is down, status.twitter.com is down. Some tweets are getting through at the moment because parts of the API are up. Search also seems to be working. The Firehose is up – Tweets are coming in from FriendFeed (all those tweets about ‘is twitter down’ are from third-party sites)
Update 3.: It is suggested that if you use the same password on your Twitter account with other accounts, now would be a good time to change your password on those other accounts.
Update 4.: There is a history between Iran and Twitter. It was well noted and covered in the media that Twitter was used as a tool during the Iranian election protests. The US government actually intervened to assure that Twitter was available to the protestors in Tehran and around the country. This attack may be an act of reprisal from groups who were not happy with the role that Twitter played during the protests.
Update 5.: There is speculation at the moment that this may be a DNS redirect, which means that the Twitter.com domain has been redirected to the defacement page. This doesn’t explain why some sub-domains are down, while others are currently still alive (such as search)
Update 6.: Twitter.com is back. The company updated its status blog saying: “Twitter’s DNS records were temporarily compromised but have now been fixed. We are looking into the underlying cause and will update with more information soon.”
Update 7.: Twitter’s Platform Lead engineer Alex Payne has a funnier update on the current status

Source: TECHRUNCH

[Update from SecurityFocus]
by: Robert Lemos, SecurityFocus 2009-12-18

On Thursday, an unknown attacker hijacked Twitter's domain name and redirected visitors to an unrelated site hosting a page claiming Twitter had been hacked by the "Iranian Cyber Army." Evidence indicates, however, that the attackers were able to change the domain-name system (DNS) entries at Twitter's provider, Dyn Inc., said Rod Rasmussen, president and CEO of Internet Identity, an infrastructure security firm which monitors DNS changes.

(more)

Extreme Programming

2009-12-07T11:03:00.002+08:00

Extreme Programming (or XP) is a set of values, principles and practices for rapidly developing high-quality software that provides the highest value for the customer in the fastest way possible. XP is extreme in the sense that it takes 12 well-known software development "best practices" to their logical extremes -- turning them all up to "10" (or "11" for Spinal Tap fans). See Kent Beck's introduction to Extreme Programming Explained for more details.

(more)

CodeIgniter Framework

2009-12-07T09:04:00.000+08:00

Ive been looking at CodeIgniter Framework for a couple for months now and it seems to be a good PHP Framework. Some info on CodeIgniter Framework

CodeIgniter is an Application Development Framework - a toolkit - for people who build web sites using PHP. Its goal is to enable you to develop projects much faster than you could if you were writing code from scratch, by providing a rich set of libraries for commonly needed tasks, as well as a simple interface and logical structure to access these libraries. CodeIgniter lets you creatively focus on your project by minimizing the amount of code needed for a given task.

CodeIgniter is right for you if:

You want a framework with a small footprint.
You need exceptional performance.
You need broad compatibility with standard hosting accounts that run a variety of PHP versions and configurations.
You want a framework that requires nearly zero configuration.
You want a framework that does not require you to use the command line.
You want a framework that does not require you to adhere to restrictive coding rules.
You are not interested in large-scale monolithic libraries like PEAR.
You do not want to be forced to learn a templating language (although a template parser is optionally available if you desire one).
You eschew complexity, favoring simple solutions.
You need clear, thorough documentation.

Domain Controller Offline Login Very Slow

2009-12-06T11:14:00.015+08:00

Im really annoyed logging onto my work laptop that it takes 5-10 minutes to load all desktop icons. It seems that there is something wrong going on at the backend, checked the event viewer and found this error on login.

[Update 1] The tweak is to disable media sensing on the Windows client station.

Did a couple of research and found this
Microsoft TechSupport (KB326152) and referred to disabling MediaSensing (KB239924) on Windows

[Update 2] The tweak is to set the DNS cache count on the Windows station registry

[Update 3] Tried to add the autoenrollment onto the MMC.

[Update 4] Nothing seems to work on all of the tweaks, /me sighs, f*ckin windows, need to reimage the box for this matter and observe the changes accordingly for me to be able to find the correct solution to the problem.

Port 22 Attack Statistics

2009-12-03T13:00:00.004+08:00

From SANS Internet Storm Center

FreeBSD 8.0-RELEASE Announcement

2009-12-02T00:45:00.001+08:00

The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 8.0-RELEASE. This release starts off the new 8-STABLE branch which improves on the functionality of FreeBSD 7.X and introduces many new features. Some of the highlights:

PHP 5.3.1 Released

2009-12-02T00:20:00.002+08:00

The PHP development team would like to announce the immediate availability of PHP 5.3.1. This release focuses on improving the stability of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users of PHP are encouraged to upgrade to this release.

Metro Drowned due to typhoon

2009-09-27T12:32:00.004+08:00

I woke up around 9:30AM on September 26, 2009 its a Saturday so no work for me, I went out to have my morning Cig and Coffee and saw this....

AND THIS

This is my worst experience when it comes to raining in Metro. The flood went in to our room and waited for a couple of hours for it to subside and then clean up the mess, its a pain in the ass. Well I cant complain much when I saw the news that in the Quezon City, Makirina and the rest of the Metro area the flood is reaching up to the human neck.

Typhoon Ondoy flood the streets of Metro Manila
By Vernadette Joven (philstar.com) Updated September 26, 2009 01:10 PM

MANILA, Philippines – As typhoon Ondoy continues to hit Luzon, Metro Manila and nearby areas are currently flooded, the National Disaster Coordinating Council (NDCC) reported.

Based on NDCC’s latest situation report, areas in the National Capital Region that are not passable include Malabon (C4 Letre, M.H. Del Pilar, Panghulo Road, Catmon and Dampalit); E. Rodriguez cor. Araneta Avenue in Quezon City; Palasan in Valenzuela; Brgys. 180, 185, 187 in Pasay; Brgy. Santolan in Pasig; Barangay Malanday in Marikina; Brgy. Tunasan in Muntinlupa; and Brgys. Banaba, Sta. Ana, and San Mateo in Rizal.

According to the recent weather bulletin from Philippine Atmospheric Geophysical and Astronomical Services Administration (PAGASA) signal no. 2 remains in Aurora, Quirino, Nueva Vizcaya, Nueva Ecija, Pangasinan, Tarlac, Zambales, Pampanga, Bulacan, Rizal, Northern Quezon, and Polilo Island. While Isabela, Mountain Province, Ifugai, Benguet, La Union, Ilocos Sur, Laguna, Cavite, Batangas, Mindoro provinces, Lubang Island, Marinduque, Camarines Norte, Bataan, Metro Manila and the rest of Quezon are under signal no. 1.

PAGASA added, typhoon Ondoy continues to move with a maximum sustained winds of 85 kph near the center and gustiness of up to 100 kph. and is expected to leave the country’s area of responsibility by Monday morning.

Fenopy Torrents

2009-09-05T18:06:00.005+08:00

Fellow geeks, I found this torrent site, slick and quite reliable.

Aside from the good old Pirate Bay and Mininova, this is a good alternative as well. Enjoy

RE: Apache dot org hacked

2009-08-30T11:01:00.002+08:00

Official statement from the Apache team, I got this article from SecurityFocus

Apache investigates Web server attack
Published: 2009-08-28

The Apache Foundation shut down its Web servers early Friday morning after detecting attack code running on the computers, the organization stated in an advisory.

The attack, which started late Thursday night, apparently came from an account used to backup the group's servers automatically to an external hosting service. Using the proper SSH key authentication for the host, the attackers accessed people.apache.org, which acts as a "seed host" for Apache.org's Web sites. The attackers placed script files on the host, which were then synchronized to the Web server, Apache's infrastructure team stated.

The team noticed the attack early Friday morning when it detected the rogue processes spawned by the scripts.

"To the best of our knowledge at this time, no end users were affected by this incident, and the attackers were not able to escalate their privileges on any machines," Apache's infrastructure team said in the statement. "While we have no evidence that downloads were affected, users are always advised to check digital signatures where provided."

Open-source software is a popular target for online attackers. In February, the group that maintains the open-source forum software phpBB acknowledged that an attacker was able to get access to their servers. In 2001, a hacker who used the name Fluffy Bunny compromised Apache's Web site.

Apache current powers approximately 47 percent of all Web sites, according to the latest Netcraft survey.

Full Article @ SecurityFocus

Apache dot org hacked

2009-08-28T19:08:00.004+08:00

I was lurking around the net and stumble on Apache's site and saw this

PRC Website Hacked

2009-08-21T22:24:00.006+08:00

PRC or the Professional Regulations Commission has been hacked, we already informed the webmaster, admins and yet they dont give a shit.

screenshot of the site pawned.

[semprix@sid ~]$ nmap -sT -sV www.prc.gov.ph

Starting Nmap 4.85BETA7 ( http://nmap.org ) at 2009-08-22 05:52 PHT
Interesting ports on www.prc.gov.ph (61.28.187.100):
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp closed smtp
53/tcp closed domain
80/tcp open http Microsoft IIS webserver 5.0
443/tcp open https?
Service Info: OS: Windows

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 30.54 seconds

and they are running IIS 5.0 which is a jurassic version and has loads of vulnerability.

What a shame...

Colored Bash Prompt FreeBSD

2009-08-21T12:01:00.003+08:00

FreeBSD is focused on being a server operating system, so this big beast does not have some sleek prompt or installation UI, so a quick hack on coloring your shell is by putting this little code on .bash_profile and on the prompt do

[semprix@sid ~]$ source .bash_profile
[semprix@sid ~]$

DIR=Ex
SYM_LINK=Gx
SOCKET=Fx
PIPE=dx
EXE=Cx
BLOCK_SP=Dx
CHAR_SP=Dx
EXE_SUID=hb
EXE_GUID=ad
DIR_STICKY=Ex
DIR_WO_STICKY=Ex

export LSCOLORS="$DIR$SYM_LINK$SOCKET$PIPE$EXE\
$BLOCK_SP$CHAR_SP$EXE_SUID$EXE_GUID\
$DIR_STICKY$DIR_WO_STICKY"

export CLICOLOR="YES"

Beastie on Boot Menu

2009-08-18T10:53:00.002+08:00

Im missing beastie on the boot menu, FreeBSD team depreciated it starting FreeBSD-6.x, I conducted a research how to get the little fellow back on the boot menu, the hack was pretty easy though.

1. You just need to open /boot/beastie.4th and see some standard options like beastie, beastiebw, and fbsdbw.

2. You now fire up vi or any editor you like and then open /boot/loader.conf and set the loader_logo="beastiebw" in my case here it is

[semprix@sid ~]$ less /boot/loader.conf
loader_logo="beastie"
legal.intel_wpi.license_ack=1
if_wpi_load="YES"
wlan_load="YES"
wlan_amrr_load="YES"
firmware_load="YES"

Little beastie is back on the boot menu =)

Twitter Targeted by Familiar Worm

2009-08-16T15:27:00.000+08:00

Hackers are continuing to use Twitter to exploit people's PCs with the latest scam redirecting users to the malicious Koobface worm, according to PC Tools.

The security firm says Twitter users may see a tweet in their stream that reads 'my home video :)' or 'cool video! WOW'. The message includes a link that redirects users to a set of spoofed social networking pages and the pages then prompt for a plugin install, often stating 'Flash Player required' which contains the malicious threat with the link 'setup.exe'.

READ MORE

Unssh ported to FreeBSD

2009-07-31T10:56:00.003+08:00

While searching through SourceForge for some open source application I found Unssh, Unssh - Provide a fast way to delete entries from OpenSSH's known_hosts file. This is a simple automation of the things normally done by the user when having an "offending key" in his/her known_hosts file caused by a changing host key of the destination. A very handy shell script.

I decided to port them to FreeBSD, a glimpse of the shar file can be found below.

# This is a shell archive. Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file". Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
# /usr/ports/net/unssh
# /usr/ports/net/unssh/distinfo
# /usr/ports/net/unssh/pkg-plist
# /usr/ports/net/unssh/pkg-descr
# /usr/ports/net/unssh/Makefile
#
echo c - /usr/ports/net/unssh
mkdir -p /usr/ports/net/unssh > /dev/null 2>&1
echo x - /usr/ports/net/unssh/distinfo
sed 's/^X//' >/usr/ports/net/unssh/distinfo << 'ffaed319a3a891f959181d624002e3df'
XMD5 (unssh-1.4.tar.gz) = acb420bc39e475ed521b78012d84c857
XSHA256 (unssh-1.4.tar.gz) = fc4f1afc7fca09d318120dbbd274f5cac16ef7481efc52d6774996508306ef18
XSIZE (unssh-1.4.tar.gz) = 11427
ffaed319a3a891f959181d624002e3df
echo x - /usr/ports/net/unssh/pkg-plist
sed 's/^X//' >/usr/ports/net/unssh/pkg-plist << '5947c2bd8f14e944a4078b7dec4b332b'
Xbin/unssh
5947c2bd8f14e944a4078b7dec4b332b
echo x - /usr/ports/net/unssh/pkg-descr
sed 's/^X//' >/usr/ports/net/unssh/pkg-descr << '64d39941c5632c7642d1c1e3079679e5'
XProvide a fast way to delete entries from OpenSSH's known_hosts file.
64d39941c5632c7642d1c1e3079679e5
echo x - /usr/ports/net/unssh/Makefile
sed 's/^X//' >/usr/ports/net/unssh/Makefile << 'e191d4ec6896b56fa16ed54cc47d6502'
X# New ports collection makefile for: unssh
X# Date created: 30 July 2009
X# Whom: semprix
X#
X# $FreeBSD$
X#
X
XPORTNAME= unssh
XPORTVERSION= 1.4
XCATEGORIES= net
XMASTER_SITES= http://www.defconph.org/~semprix/ports/unssh/
X
XMAINTAINER= semprix/at/bsdmaildotorg
XCOMMENT= Fast way to delete entries from OpenSSH known_hosts file
X
X.include
X
X.include
e191d4ec6896b56fa16ed54cc47d6502
exit

FreeBSD ports unssh

2009-07-30T13:26:00.001+08:00

Dont have much to do with work

Hello World (The Come Back)

2009-07-24T10:49:00.000+08:00

Making my first post(again). I used to have this blog but deleted it due to lack of updates. Im bringing this blog back to life for good.

Random Blah Blah Blah

Secure Connection on iPhone

R.I.P Steve Jobs (1955-2011)

GitHub and the Blah Blah Blah

Configuration

Set up aliases

View your configuration

To ignore whitespace (Ruby is whitespace insensitive)

Start using git

Ignoring files

Scheduling the addition of all files to the next commit

Checking the status of your repository

Committing files

Seeing what files have been committed

Scheduling deletion of a file

Committing all changes in a repository

Scheduling the addition of an individual file to the next commit

Viewing the difference as you commit

Commit and type the message on the command line

Commit and automatically get any other changes

A “normal” commit command

Viewing a log of your commits

Viewing a log of your commits with a graph to show the changes

Viewing a log with pagination

Visualizing git changes

Creating a new tag and pushing it to the remote branch

Creating a new branch

Pushing the branch to a remote repository

Pulling a new branch from a remote repository

Viewing branches

Viewing a list of all existing branches

Switching to another branch

Making sure changes on master appear in your branch

Merging a branch back into the master branch

Reverting changes to before said merge

Resolving conflicts

Creating a branch (and switching to the new branch) in one line

Creating a stash (like a clipboard) of changes to allow you to switch branches without committing

Switching from the current branch to another

Viewing a list of stashes

Loading back the stash

Deleting a branch (that has been merged back at some point)

Deleting an unmerged branch

Deleting a stash

Setting up a repository for use on a remote server

Checking out a git repository from a remote to your local storage

Viewing extra info about a remote repository

Updating a local branch from the remote server

Downloading a copy of an entire repository (e.g. laptop) without merging into your local branch

Merging two local branches (ie. your local xyz branch with your local master branch) USE MERGE

Viewing metadata about a remote repository

Pushing a committed local change from one local branch to another remote branch

Creating a tracking branch (i.e. to link a local branch to a remote branch)

Seeing which local branches are tracking a remote branch

Working with a remote Subversion repository (but with git locally)

Pushing (committing) changes to a remote Subversion repository

Updating a local git repository from a remote Subversion repository