Saturday, September 10, 2011

Installing Metapsploit 4 in Ubuntu 11.04

I think you've already know what is Metasploit if you come up to my blog post from search engine. If not you can read here what is metasploit, what is need for, what capabilities of, etc..
Installing Metasploit is easy, just as simple as download, run the install script and done but then you need some extra configuration, just a litlle.
1. You can download from this URL. Choose your operating system, for me I choose the Linux 32bit. If you use Linux just use wget to download from the URL.
 
wget http://updates.metasploit.com/data/releases/framework-4.0.0-linux-mini.run
2. Install the dependencies if you still need, check this dependency,
$ sudo apt-get install ruby libopenssl-ruby libyaml-ruby libdl-ruby libiconv-ruby libreadline-ruby irb ri rubygems
$ sudo apt-get install subversion
$ sudo apt-get install build-essential ruby-dev libpcap-dev
3. Run the install script. Before you can run the *.run script you need to make this as an executable.
chmod ugo+x framework-4.0.0-linux-mini.run And then finally you can execute that
./framework-4.0.0-linux-mini.run Wait till completed and..Yeay..you have a Metasploit framework installed on your machine. It's working now, you can execute msfconsole in your terminal and get the framework start, but to make it fully running you still need to configure the database.
4. Install database, I prefer PostgreSql as recommended by the Metasploit itself.
$ sudo apt-get install postgresql-8.4
$ sudo apt-get install rubygems libpq-dev
$ sudo gem install pg
5. The last thing is setting up the Postgre to work with Metasploit.
Be System postgres user
$ sudo -s
# su postgres
Create Postgre User
# createuser msf_user -P You will be prompted like this
Enter password for new role:
Enter it again:
Shall the new role be a superuser? (y/n) n
Shall the new role be allowed to create databases? (y/n) n
Shall the new role be allowed to create more new roles? (y/n) n
create your password, for example I write 'msfpass' as password
Creating the database
createdb --owner=msf_user msf_database CTRL-D to exit from postgres user or switch to your Linux user.
Start the framework, and type
msf> db_driver postgresql
msf> db_connect msf_user:msfpass@127.0.0.1:5432/msf_database
msf> db_hosts
change the msfpass to your password.
Done. You have fully install Metaploit Framework.

Categories: , , , , , , ,

Thursday, August 18, 2011

Anonymous


We [Anonymous] just happen to be a group of people on the internet who need — just kind of an outlet to do as we wish, that we wouldn't be able to do in regular society. ...That's more or less the point of it. Do as you wish. ... There's a common phrase: 'we are doing it for the lulz.'
We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us.
[Anonymous is] the first Internet-based superconsciousness. Anonymous is a group, in the sense that a flock of birds is a group. How do you know they're a group? Because they're traveling in the same direction. At any given moment, more birds could join, leave, peel off in another direction entirely. 
Anonymous merupakan salah satu "kelompok" hacker yang saat ini terkenal bersama dengan lulzSec dan teaMPoisoN. Mereka merupakan organisasi tanpa pemimpin dan bergerak dengan penentuan operasi tertentu yang biasanya digerakkan melalui social media seperti YouTube, Twitter, dan IRC channel mereka.
Karena tidak memiliki kepemimpinan itu terkadang pengklaiman kasus hacking mereka jadi membingungkan, satu grup menyatakan mereka melakukan apa, dan grup lain ternyata menyatakan sesuatu yang lain. Misalnya dari ancaman terbaru mereka yaitu untuk meng-kill Facebook yang beritanya sudah tersebar bebas, ternyata itu hanya di-iyakan oleh beberapa anggota dan yang lainnya menyatakan kebalikannya.
Sejarah mereka sudah cukup panjang, dimulai dari tahun 2003 di situs imageboard 4chan.

Anonymous (used as a mass noun) is a group initiating active civil disobedience and spread through the Internet while staying hidden, originating in 2003 on the imageboard 4chan, representing the concept of many online community users simultaneously existing as an anarchic, digitized global brain.[2] It is also generally considered to be a blanket term for members of certain Internet subcultures, a way to refer to the actions of people in an environment where their actual identities are not known.
In its early form, the concept has been adopted by a decentralized online community acting anonymously in a coordinated manner, usually toward a loosely self-agreed goal, and primarily focused on entertainment. Beginning with 2008, the Anonymous collective has become increasingly associated with collaborative, international hacktivism, undertaking protests and other actions, often with the goal of promoting internet freedom and freedom of speech. Actions credited to "Anonymous" are undertaken by unidentified individuals who apply the Anonymous label to themselves as attribution.
Mari kita lihat sejarah aksi Anonymous ini :

  • Habbo Raid (2006) : Habbo merupakan social networking yang berkonsep seperti hotel bagi penggunanya, karena dianggap menyebarkan isu rasisme,mereka menjadi sasaran Anonymous.
  • Hal Turner Raid (2006) : masih mengenai isu rasisme, mereka mendeface web milik penyiar Hal Turner dan menyebabkan kerugian karena pembayaran bandwidth, Hal mencoba menuntut di pengadilan, tapi gagal.
  • Penahanan Chris Forcand (2007) : Chris merupakan seorang kriminal yang melakukan tindakan asusila, orang-orang dari Anonymous melaporkan Chris setelah diperlihatkan foto-foto menjijikkan perbuatannya.
  • Project Chanology (2008) : Project menentang Church of Scientology / Christian Science. Karena mereka dianggap melawan kebebasan berbicara. Serangan dilakukan bukan cuma di dunia maya dengan DDoS, black faxes dan prank calls, tetapi juga melalui aksi di dunia nyata melalui demonstrasi dengan masa sekitar 8000 orang. Disinilah muncul topeng legendaris V for Vendetta Guy Fawkes.
  • Deface AllHipHop dan SOHH (2008) : lagi-lagi tentang rasisme, biasa dilakukan dengan flooding DDoS dan kemudian juga XSS sampai akhirnya bisa mencuri data-data penting di web itu.
  • No Cussing Club (2009) : penyerangan terhadap McKay Hatch yang menentang penggunaan umpatan,  dilakukan dengan penyebaran data-data pribadi Hatch yang kemudian menyebabkan keluarga Hatch menerima teror melalui paket mengerikan, telpon dan surat.
  • Youtube Porn's Day (2009) : mengupload video-video porno ke Youtube dan mentagnya dengan judul normal, pada hari itu sukses membanjiri Youtube dengan video porno.
  • Pemilu Iran (2009) : pemrotesan saat Pemilu di Iran yang kembali memenangkan Ahmadinejad. Iran kemudian melakukan Internet censoring, menutupi dari dunia mengenai gerakan pemrotes yang tidak setuju dengan pemilu itu. Anonymous bekerja sama dengan PirateBay dan beberapa hacker Iran memberikan media untuk pejuang Iran agar bisa berhubungan dengan dunia luar.

*i'll update it soon*

Categories: , , , , , ,

Copyright © Johannes Dwi Cahyo | Powered by Blogger

Design by Anders Noren | Blogger Theme by NewBloggerThemes.com | BTheme.net      Up ↑