Reset Finger Print Solution

kamu IT support, atau kuli bangunan atau apalah, pasti tdk akan lepas dengan lupa password.
klo loe termasuk orangnya males dokumentasi ya jadi gitu deh heheh.

mesin finger print dari solution adalah mesin absensi yang paling banyak digunakan di indonesia, dan lumayan awet (MTBFnya lumayan panjang, saat ini sudah 6 Tahun penggunaan).

saya membuat tutorial ini karena saya juga mengalami masalah saat ingin masuk ke halaman admin mesin finger.

untuk mereset dalam kasus saya ini, bukan karena lupa password, namun karena orang yang ngeset mesin finger solution ntah sudah kabur kemana (resign) hihihi, skip..

reset mesin finger sebenarnya cukup mudah (dalam kasus ini mesin x100c dan x103 )

Install aplikasi attendance versi 3.7.1

Lanjut Baca....

Acunetix version 7 - Web Vulnerability Scanner

Acunetix announced version 7 of its Web Vulnerability Scanner which features a new vulnerability verifying techniques, scanning engine, support for a wider variety of web applications, improved performance, less false positives and detection of a wide range of new web vulnerability types.





Advanced vulnerability verifying techniques result in much less false positives. Such accuracy is achieved by sending a number of test inputs to the web application, and depending on the response, the software will automatically determine which web vulnerability checks to launch against the web application.

Acunetix WVS 7 includes a new fast multi threaded scanner that can scan on more threads at a time and more efficiently. Scans that could take hours to complete now can be done in minutes, depending on website structure and web applications.

When a web security threat is discovered, the software presents a more precise and understandable technical and vulnerability remediation information, to help fix the issue fast. To improve understanding, different variants of the vulnerability are gathered in one detailed vulnerability report. It can also re-check a fix for a particular vulnerability, without having to rescan the entire website.

Acunetix is also able to crawl and scan a wider variety of web technologies. Support for Web 2.0 applications has been improved, and also session handling. All of the advanced penetration testing tools have been rewritten to support Web 2.0 requests, such as JSON, XML and more.

Download

Lanjut Baca....

Zeus ~1~2~1~0

Cracker Terseksi Sedunia - download

Lanjut Baca....

tOLLS FROM rocracker

Full logs of Hacks ( only registered users ) [TEST]
C99 [ C99 shell ]
R57 [ R57 shell ]
Professional YAH00 Cookie Grabber [ RST ] (HOT)
Binary Translator [ Encoder/Decoder ] (Online)
XSS Tunnel And Shell [ Portcullis Labs ]
Netsparker Free Edition [ Ferruh Mavituna ]
SQLi Helper v2.7 [ Reiluke ]
Exploit Scanner [ Reiluke ]
D0S Attacker v 1.5 [ RoCracker ] (Online)
Admin Finder [ Reiluke ]
BSQL (Blind SQL) Hacker [ Ferruh Mavituna ]
Pangolin v 2.5.2.975 [ Nosec.org ]
Admin Page Finder [ kNigHt ] (Online)
HP Webinspect v 8.0 [ HP Systems ]
SQL Exploiter Pro v 2.15 [ SQL Dare Devil ]
PenTBox (Ruby) [ The Pentesting Box ]
802.11 WEP and WPA-PSK keys cracking [ Aircrack-ng ]
MySQL Exploiter PHP [ Fitty ] (source-code)
MySQL Exploiter [ Fitty ] (Online)
SQL Data Extract [ RoCracker ]
XSSer [ Automate XSS Injections ]
RFI and LFI dorks 2010 [ RoCracker ]
HTML, PHP, CSS Source Code Encoder [ SkyLab ] (Online)
HTML to PHP, ASP and JAVA Encoder [ SkyLab ] (Online)
Email Extractor and Parser V 1.0 [ SkyLab ] (Online)
Shell Terminal v 1.0 [ ISR ](Online)
Username: ISR Password: insecurity
Directory / Files Disclosure PHP [ Tink0de ] (Online)
TeamViewer 5.0.8232 Remote BOF PoC [ fl0 fl0w ] (source-code)
Acunetix Web Vulnerability Scanner 6 Full
Simple VNC Scanner [ pyth0n3 ]
Blue HellSoft Stealer v1.0 [ trial version ] [ Email to Author ]
JSky - Web Application Security Vulnerabilty Scanner [ Cracked Vers.]
ISR Stealer v0.2 [ by BUNNN]
Fly Crypter v2.3 + USG 0.7
Raizo Stealer + Crypter
Visual Basic Decompiler PRO v 7.9 FULL
ISR Email Bomber [insecurity]

permalink

Lanjut Baca....

Melihat IP facebook, youtube, twitter

Melihat alamat IP sebuah URL atau domain seperti
www.facebook.com, www.youtube.com, www.twitter.com

Video

Download Batch File NsLookup Kendari-Underground

Lanjut Baca....

Goolag Scanner: Google search on steroids!

Anda semua harus menyadari Google sebagai 'hacker terbaik teman'. Ia memainkan peran penting dalam penyelidikan. Anda dapat menemukan banyak dorks untuk semua aplikasi web, dll Ada ton Google diaktifkan, aplikasi yang memungkinkan Anda melakukan itu semua. Tetapi, ketika nama seperti CDC, singkatan dari Cult of Dead Cow setiap jenis alat, menjadi penting! Jadi, Goolag Scanner adalah produk dari CDC laboratorium.

ScannerGoolag telah dirilis beberapa waktu tahun terakhir. It is a dork alat. Hal ini otomatis' pencarian Google 'aplikasi. Oleh Google mencari ', berarti kami penggunaan dorks, Google Dorks harus tepat. Goolag scanner mengambil keuntungan dari Google dorks dan membantu Anda menemukan beberapa mengesankan informasi mengenai aplikasi web. Pada masa lalu, informasi seperti password, informasi kartu kredit, dll telah ditemukan melalui dorks.

Sekarang, satu hal yang sangat baik mengenai hal ini adalah aplikasi yang dapat dijalankan melalui www.goolag.org, atau dari OS Windows Anda selama ini mendukung. Net Framework. It is open source too! Menggunakan satu xml file konfigurasi berbasis untuk pengaturannya. File ini terletak di sini:

{$Goolag Scanner-Installation Directory}/DorkData/gdorks.xml

Anda juga dapat menggunakan proxy untuk memindai host.

Pada saat ini adalah versi Beta 1.0.0.41, yang dapat didownload di sini. Berisi link ke kedua: sumber dan kode program dikompilasi juga.

permalink

The Goolag Scanner is a tool that has been released by the Cult of the Dead Cow to automate Google hacking using 1,500 predefined search queries.
http://packetstormsecurity.org/filedesc/GoolagScanner-1.0.41.rar.html

Lanjut Baca....

Wifi Hacking Tools for wind0ws

NetStumbler

Netstumbler also famously known as Network Stumbleris a good tool which acilitates dedecting of Wireless Lans using the 802.11b, 802.11a and 802.11g WLAN standards it runs on microsoft OS from Win98 - Win Vista, there is anothere version called Mini Stumbler which is available for the handheld Windows CE operating System.
you can get it here

Aircrack
The fastest available WEP/WPA cracking tool
Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It can recover a 40 through 512-bit WEP key once enough encrypted packets have been gathered. It can also attack WPA 1 or 2 networks using advanced cryptographic methods or by brute force. The suite includes airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files).
you can get Aircrack here (aircrack-ng-1.0-rc3) -- rapid

Airsnort
802.11 WEP Encryption Cracking Tool
AirSnort is a wireless LAN (WLAN) tool that recovers encryption keys. It was developed by the Shmoo Group and operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered. You may also be interested in the similar Aircrack.
you can get AirSnort here

Cowpatty
This Cowpatty is good brute force tool for cracking WPA-PSK, considered the "New WEP" for home Wireless Security. This program simply tries a bunch of different options from a dictionary file to see if one ends up matching what is defined as the Pre-Shared Key.
you can get Cowpatty here

Asleap
This Tool is really good for when the network is using Leap. this tool can be used to gather the authentication data that is being passed across the network, and these sniffed credentials can be cracked. LEAP doesn't protect the authentication like other "real" EAP types, which is the main reason why LEAP can be broken
you can get LEAP here

Ethereal
Ethereal is used by all around the world by both Wind0s and opensource Operating system, its used for troubleshooting, analysis, software and protocol development, and education. It has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other product. Its open source license allows talented experts in the networking community to add enhancements
you can download Ethereal here

by Ne0

"please leave a message if you find a dead link!"
"Thanks to everyone"

Lanjut Baca....

Penetration Test - SIW vs Wireless keyview

Target
Jaht - (diset sebagai access point)
wepkey menggunakan WPA2 (WPA-PSK)
koneksi menggunakan fastnet unlimite 356 kbps

Pelaku Kejahatan (huehehe)
Laptop Lenovo dengan wifi internal Broadcom 802.11g Network Adapter
OS Windows XP SP2

SIW here and Wireless Key View here

webtool
http://www.wifizard.com/wi-fi/convert.htm
http://www.csgnetwork.com/wepgeneratorcalc.html

Tujuan
apakah dengan mengetahui Key (Hex)
ex : 7f1d1dfadd4c3716d3a34f6fec0832fb51bfdc6466f27bae3fdd0bb7076ccea3
target bisa memberikan kita akses share internet dan segalanya?

Start
wardriving dengan wifi connection manager (windows)

ap tsb menggunakan wepkey WPA2 (WPA-PSK)
running wirelsskeyview dan siw, akhirnya didapatkan screen shoot dibawah ini

Wirelesskeyview




report WKV
SIW






report SIW

buka webtools untuk memecah bilangan hex tsb
http://www.wifizard.com/wi-fi/convert.htm
http://www.csgnetwork.com/wepgeneratorcalc.html
(blm nemu yang tools offlinenya)

hasilnya seperti ini
kemudian memasukkan hasil














Hasil
Gagal ... !!! WPA







connected namun hingga tiga jam proses accruing ip tidak kelar2 :p






WPA2 Mixed, klo wpa yang biasa bisa kejebol :p
mungkin pake ubuntu lebih cepat ya...:)

download here

Lanjut Baca....

Cek Ip Pengirim email dengan Tracer Mail

email from someone@axwr.co.id

headernya sebagai berikut :

Delivered-To: dos@dos.net
Received: by 10.115.106.15 with SMTP id i15cs715898wam;
Mon, 5 Jan 2009 18:37:41 -0800 (PST)
Received: by 10.110.105.5 with SMTP id d5mr10358453tic.11.1231209458377;
Mon, 05 Jan 2009 18:37:38 -0800 (PST)
Return-Path: <someone@axwr.co.id>
Received: from zcigwim01.nts.co.id ([202.155.59.43])
by mx.google.com with ESMTP id a4si2463194tib.27.2009.01.05.18.37.34;
Mon, 05 Jan 2009 18:37:38 -0800 (PST)
Received-SPF: neutral (google.com: 202.155.59.43 is neither permitted nor denied by best guess record for domain of someone@axwr.co.id) client-ip=202.155.59.43;
Authentication-Results: mx.google.com; spf=neutral (google.com: 202.155.59.43 is neither permitted nor denied by best guess record for domain of someone@axwr.co.id) smtp.mail=
someone@axwr.co.id
Received: from CIGWEXMBV01.aen.nts.co.id ([10.22.0.12]) by cigwexfe01.aen.nts.co.id with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 6 Jan 2009 09:37:33 +0700
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----_=_NextPart_001_01C96FA7.B4951850"
Subject: NDA Template
Date: Tue, 6 Jan 2009 09:37:22 +0700
Message-ID: <8E1DB326EA5D52489ACE36D79F58F8B0012AC781@CIGWEXMBV01.aen.nts.co.id>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: NDA Template
Thread-Index: AclvC3EPJ3G8UkOBTG6yDMdsuyz21AADJAVUAAKwWsAABFT/yQAcjxpw
From: "Priscilla Noviana" <someone@axwr.co.id>
To: <dos@dos.net>
Cc: <kupret@kupret>
Return-Path: someone@axwr.co.id
X-OriginalArrivalTime: 06 Jan 2009 02:37:33.0495 (UTC) FILETIME=[BA70DC70:01C96FA7]
X-TM-AS-Product-Ver: SMEX-7.0.0.1345-5.5.1027-16384.003
X-TM-AS-Result: No--19.066400-8.000000-31


perhatikan ini
cigwexfe01.aen.nbs.com.id
and
By Microsoft Exchange V6.5
hehe, hanya pengen liat...provider ternyata menggunakan provider juga ya :)

lalu bagaimana caranya ?
coba gunakan

http://www.ipaddresslocation.org/email-tracking/email-header.php

kemudian paste header email ke dalam kotak yang tersedia...

dan hasilnya seperti ini

IP Address: 202.152.161.230 (202.152.161.230)
IP Address Country: Indonesia
IP Continent: Asia
IP Address City Location: Jakarta
IP Address Region: Jakarta Raya
IP Address Latitude: -6.1744,
IP Address Longtitude: 106.8294
Organization: INDOSAT IT Network (Dynamic IP)

ingin lebih info lebih detail dari ip di atas ?
masuk ke ....
http://www.robtex.com/ip/202.155.59.43.html

selamat mencoba :)

Lanjut Baca....

TuneUp Utilities 2009 [beta version]

Tuneup Utilities mengeluarkan versi terbarunya yaitu TuneUp Utilities 2009 [beta].
http://www.tune-up.com/products/tuneup-utilities/features/

english
http://download.tune-up.com/TU2009/TU2009TrialEN-US.exe

deutch (password : www.dl4all.com)
http://rs441.rapidshare.com/files/164222137/T2U00U9de0a9hcv.rar

serial number tuneup utilities 2009 [beta version]
AQKA2P-HY7FQF-8M0930-DW4H4V-1EJPRC-16CHPN

• warning. hati2 menggunakan tuneup 2009 portable, sebab didalamnya mengandung trojan.

Lanjut Baca....

SQL Injection Scanners

1.SQLIer - SQLIer takes a vulnerable URL and attempts to determine all the necessary information to exploit the SQL Injection vulnerability by itself, requiring no user interaction at all
2.SQLbftools - SQLbftools is a collection of tools to retrieve MySQL information available using a blind SQL Injection attack
3.SQL Injection Brute-forcer - SQLibf is a tool for automatizing the work of detecting and exploiting SQL Injection vulnerabilities. SQLibf can work in Visible and Blind SQL Injection. It works by doing simple logic SQL operations to determine the exposure level of the vulnerable application.
4.SQLBrute - SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities. It supports time based and error based exploit types on Microsoft SQL Server, and error based exploit on Oracle. It is written in Python, uses multi-threading, and doesn’t require non-standard libraries
5.SQID - SQL Injection digger (SQLID) is a command line program that looks for SQL injections and common errors in websites. It can perform the follwing operations: look for SQL injection in a web pages and test submit forms for possible SQL injection vulnerabilities
6.NGSS SQL Injector - NGSS SQL Injector exploit vulnerabilities in SQL injection on disparate database servers to gain access to stored data. It currently supports the following databases: Access, DB2, Informix, MSSQL, MySQL, Oracle, Sysbase
7.Absinthe - Absinthe is a GUI-based tool that automates the process of downloading the schema and contents of a database that is vulnerable to Blind SQL Injection

Lanjut Baca....

ngeTrack IP

www.aruljohn.com
and
www.ip2location.com

quick tracking with this widget

Lanjut Baca....

Mengintip Photo yang di Private di friendster

Bagi yang suka iseng baca baca friendster orang, tapi mati kutu giliran mau liat foto foto si pemiliknya ternyata di Private, pasti jadi BT apalagi dikatain sama yang punya FS...."kasian dech loh".

nah.....tool berikut dapat digunakan sebagai senjata ampuh buat ngebongkar foto foto yang di private di FS, silahkan download toolsnya di S I N I password buat mengestrak filenya adalah www.forum.kendari.info selain itu dibutuhkan juga program .Net Framework untuk menjalankannya, bagi yang belum punya silahkan juga download dari S I N I.

Buat pemilik FS :
[*] Mohon untuk tidak mengupload foto foto yang benar benar bersifat pribadi
[*] Demi keamanan, alangkah baiknya jika anda mengganti UID dengan nama atau yang lainnya.

Lanjut Baca....

View Password, See Your Password IM2

Topik ini seharusnya tidak dibahas lagi, namun lagi-lagi karena alasan REMAINDER me itu yang mengharuskan saya untuk memposting artikel ini. break basa basinya ------

Lambatnya tanggapan dari Im2 mengenai pertanyaan saya

“bagaimana cara melakukan reset password pada modem im2, saya lupa hehe…”

memaksa saya untuk mengambil jalan lain (ciee lewat belakang nih). lihat screen shoot dibawah ini.

Karakter ***** tentunya tidak bisa anda baca secara kasat mata, melainkan dengan menggunakan tools atau software. Saya belum mengerti cara kerjanya mungkin di postingan berikutnya saya atau rekan saya labio, p1r4t3z, ch402, 3l1te, yang akan membahas soal ini.

Pada screenshoot saya menjalankan dua program yaitu MF622 HSDPA EDGE USB MODEM (Program untuk melakukan dial IM2) dan PassUnleash.exe (tools untuk melihat (NB. program ini hanya berjalan pada applikasi yang di instalkan pada komputer, jadi jika ingin mengintip password yang diketikkan di gmail login, lupakan saja :) )

Cara menggunakan Password View atau See Password atau passunlesh sangat mudah, anda lakukan klik + drag ke kolom password yang ingin anda lihat passwordnya, password akan ditampilkan di tooltip dan window tools tersebut.

saya telah melakukan di aplikasi lain seperti yahoo messager dan filezilla dan 100% berhasil.

yahoo messager

Filezilla

Out Link | 4shared |

Lanjut Baca....

Buddy Spy 2.219 - Yahoo! Messenger Status checking

Buddy Spy is the premier program for Yahoo! Messenger status checking.

Lanjut Baca....

blueinfy

dont think this a adult website but this you can find a tool for security aplications like Web and Application Server Fingerprinting/Mapping tool (Beta), Web Application/Services Firewall - IHTTPModule for Web 2.0 application, Application Code Scanning and Tracing tool, Web Services Footprinting, Discovery, Enumeration, Scanning and Fuzzing tool, Web 2.0 Fingerprinting, Scanning and Discovery tools, Application footprinting and mapping tool using MSN APIs and any more you can find it

you can vsit this in blueinfy.com

Lanjut Baca....

Tune Up 2008 dan Drivermax v30

neh buat teman-teman yang butuh software utilities, ada yang terbaru dari Tune Up utilities yaitu Tune Up Utilities 2008 untuk downloadnya tinggal klik disini
*gambarnya Tune Up Utilites 2008 Versi Jerman tapi cuman gambar

dan juga ada software yang cukup kam rekomendasikan yang berguna untuk memback-up driver pc, laptop atau notebook anda yaitu Drivemax v30

dan untuk mendownloadnya silahkan klik disini

Lanjut Baca....

scanrand [the new nmap rival]

Scanrand is extremely quick and effective port scanner. It works by forking two distinct processes:
* One to send the initial queries
* One to receive responses and reconcile them from the above

Scanrand implements numerous options; reasonable defaults are selected when no specific guidance is received from the user. The only thing mandated is a target destination, which may be specified using either a FQDN(Fully Qualified Domain Name) or a numeric specification.

If you haven’t heard of the suite, Scanrand is one of the five tools in Paketto Keiretsu by Dan “Effugas” Kaminsky of Doxpara Research.

download scanrad here

the article as scanrand vs nmap

[anything you do the have a "furrow" just like the "concept" you can not run from this like "furrow" u used nmap or scanrad "if you used" this]

Lanjut Baca....

Norton 360 + Working Keygen

Lagi2 Paket Satu Berjuta Aksi (banyak bacot ma upload sembarangan kata temen gw, hehehe...hem...apal kata dunia :)) keep share...lanjut....MAu link downloadnya .... patch Keygen Notron 360

untuk norton 360 sendiri dalam proses upload loading.... link

Technorati Tags: antivirus,anti virus,crack,patch,keygen,norton

Lanjut Baca....

XSS Me [find the cross site scripting on firefox]

sebelum membahas tentang XXS Me itu ada baiknya kita ketahui apa yang dimaksud dengan cross site scripting adalah adalah sebuah injeksi yang dapat di input ke html atau remote halaman sebuah webpage.Cross-Site scripting kadang waktu tertuju ke "XSS",karena "CSS" sewaktu-waktu ke Cascading Style Sheets. (CSS).Jika kamu mnedengar vulnerability dengan CSS atau XSS,itu pasti mengarah dan tertuju ke Cross-Site Scripting.

read more here

nah bagaimana dengan XSS Me, XSS Me merupakan suatu "plugins" yang terintegrasi dengan browser Firefox yang berguna untuk men-scan dan mencari celah pada stuatu target atau web yang kita inginkan [seperti gambar dibawah]

nah untuk file XSS me-nya silahkan download disini
dan untuk instalasi file *.xpi cukup mudah buka firefox - open - [klik file yang akan diinstal (*.xpi)] dan selanjutnya ikuti prosedur penginstallannya

Lanjut Baca....