Intipadi.com

How to Access MySQL via SSH Tunnel

luthfi.emka — Mon, 08 Mar 2010 04:29:49 +0000

Intipadi.com - This is a particularly useful method for gaining access to your remote MySQL databases, such as those held on a web hosting account where the MySQL port may not be open. You can use this method to gain access to other services too (SMTP, IMAP, FTP), but in this post I’ll explain how I use it in combination with MySQL Query Browser to administrate my DBs with a GUI. You need to have SSH access to your remote server (normally over port 22) for this to work. My instructions are for Ubuntu but it’s easily transferred to other distros, Mac OS X, and Windows (just download an SSH client). I’ll use PriOS Linux 2010 (compatible with Mandriva Linux 2010.0).

Run urpmi install ssh if it isn’t installed already, which will install several SSH connectivity tools (more info here). Query Browser is an excellent tool with which to run queries, updates, create views and stored procedures, and loads more besides. Run urpmi install mysql-query-browser. Now to create the SSH tunnel by using port forwarding; here’s how I access a MySQL instance on my local network:

emka@prios-laptop:~$ ssh -L 3307:localhost:3306 root@192.168.1.211
root@192.168.1.211's password:

Essentially this forwards all traffic on port 3307 on the local machine (james-laptop) to port 3306 on 192.168.1.211. The general format is
ssh -L localport:host:hostport. Note that in my example I used localhost, but this is resolved after the connection has been made to 192.168.1.211 and so it refers to that IP address.

Effectively we can now access port 3306 (the default MySQL port) on 192.168.1.211 via port 3307 on james-laptop even though port 22 (the SSH port) is the only port open on 192.168.1.211. Keep the connection open (i.e. don’t close the terminal) and open Query Browser.

In the connection dialogue set the hostname to 127.0.0.1 and the port to 3307 and enter a username/password as required. Hit connect and you should see a graphical representation of your database(s).

Note that in *nix OSs (including Mac OS X) you must use 127.0.0.1 rather than ‘localhost’ or the connection will be made via a named pipe rather than TCP.

Mudah mengompresi folder di linux dengan Tar

luthfi.emka — Fri, 05 Mar 2010 16:12:08 +0000

Intipadi.com – Format kompresi tar.gz mungkin adalah aplikasi yang sering anda pakai dan familiar dilingkungan linux/server. Kebanyakan file terkompresi yang memakai format ini adalah source code dan hasil backup sesuatu.

Nah, bagaimana caranya mengompresi sebuah folder di Linux? Cukup simpel, hanya dengan perintah berikut:

tar -pzcf namafile.tar.gz /namafolder/namafolder

mudah bukan?

Membuat Block baru untuk Moodle

luthfi.emka — Tue, 02 Mar 2010 18:45:20 +0000

Intipadi.com – Salah satu fitur yang membuat Moodle begitu pesat dan luas perkembangannya adalah kemampuan extensiblenya lewat penambahan Module dan Plugins serta Block sendiri. Untuk Core Moodle, serahkanlah pada tim yang profesional itu. Untuk kustomasi dan penyesuaiannya dengan kebutuhan kita masing-masing, kita bisa membangun module, plugin dan block Moodle sendiri.

Dalam kesempatan kali ini akan dijelaskan singkat dan aplikatif tentang pembuatan Block di Moodle. Prasyarat yang dibutuhkan cukup banyak, harus terinstall moodle dengan baik, menguasai PHP dan database MySQL.

Pada tutorial ini kita akan membuat sebuah Block baru dengan title, ContohBlock. Ikuti langkah berikut,

1. Buat folder baru di /moodle/blocks/ dengan nama contohblock. Ingat: nama folder harus lowercase!
2. Buat file baru di /moodle/blocks/contohblock/ dengan nama block_contohblock.php,
3. Tuliskan kode berikut:

title = "ContohBlock";
		$this->version = 2010110201;
	}
}
?>

NB. Block dan Moodle pada umumnya dikembangkan dengan kaidah OOP PHP yang bagus, sehingga harus diikuti pakemnya dengan baik. Sebagai contoh diatas, Block Moodle pada dasarnya hanyalah sebuah class PHP yang memanfaatkan class block_base milik Moodle. Setiap block harus memiliki fungsi init(), dimana disini minimal diisi oleh variabel title (judul/nama block) dan version (versi sebuah block).

4. Install block baru tersebut dengan mengunjungi alamat:

http://alamat.web.moodle.anda/admin/index.php

5. Klik lanjutkan atau Continue, untuk mengakhiri instalasi.
6. Cek block baru anda dengan menggunakan navigasi menu, Modules->Blocks->Manage Blocks. Cari disana,

Referensi:
http://docs.moodle.org/en/Blocks_Howto

Random Posts

Virus Generic Dropper.QQ

luthfi.emka — Mon, 22 Feb 2010 00:34:34 +0000

Intipadi.com – Sebuah sample malware terbaru yang dideteksi oleh McAfee saya sebagai Generic Dropper.QQ telah selesai dianalisis untuk Safeboard AV.

Hash:
File MD5: 0×2704EB3DBE1D01732751F6889C87D747
File SHA-1: 0×9A2A59964789A004E5002CF62DC233E10AEBB2A7
Filesize: 798.720 byte

Temuan:
- Hanya melakukan infeksi di startup Windows

Modifikasi Registry:
Menjalankan virus setiap kali Windows boot:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] (Default) = "[file and pathname of the sample #1]"

Format Database ClamAV:
2704eb3db31d01732751f6889c87d747:798720:Trojan.Dropper.QQ(Intipadi)
(simpan sebagai mydefs.db, gunakan clamav dengan clamav -d mydefs.db -R path-ke-tujuan-scan)

W32/Rontokbro.b@MM

luthfi.emka — Mon, 22 Feb 2010 00:15:08 +0000

Intipadi.com – Sebuah sample Rontokbro, atau Brontok terbaru mampir di submit threat zone, Safeboard Antivirus kami. Dikenali sebagai W32/Rontokbro.b@MM oleh McAfee atau Worm.Brontok.B oleh ClamAV dan beberapa antivirus luar sudah mengenalinya. Berikut analisis sekilas tentang Brontok terbaru ini:

Hash:
File MD5: 0×0A61E7AC8EE57A718919FC1406C57FB0
File SHA-1: 0xB10A3136F56B1E0D0A2784DF7EDF29C33C8BB633
Filesize: 81.920 byte

Modifikasi File:
Hanya pada file C:\Autoexec.bat

Modifikasi Registry:
berjalan setiap Windows boot:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Bron-Spizaetus = ""%Windir%\INF\norBtok.exe""

Menyembunyikan item Folder Option dari menu Windows Explorer dan Control Panel
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions = 0x00000001

Membatasi akses Windows Registry Editor (regedt32 dan regedit)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools = 0x00000001 DisableCMD = 0x00000000

Menjalankan smss.exe tiap Windows boot:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] Tok-Cirrhatus = ""%AppData%\smss.exe""

Threat Terinfeksi
winlogon.exe, services.exe, lsass.exe, csrss.exe, inetinfo.exe, nama-sesuai-sample.exe

Kesimpulan:
1. Mengubah banyak setting sistem yang berpengaruh terhadap kerentanan sistem keseluruhan. (level 2 dari 10),
2. Membuat entry startup di registry (level 2 dari 10),
3. Berevolusi menjadi Worm jaringan yang luar biasa.

Format Database darurat ClamAV (simpan sebagai userdb.db)
- already detected as Worm.Brontok.B

Software Compilation 4.4 for Windows

luthfi.emka — Mon, 22 Feb 2010 00:01:58 +0000

Intipadi.com - Continuing their impressive record of quick delivery of fresh KDE software, the KDE Windows team is pleased to announce the immediate availability of packages with the latest KDE release for the Windows platform.

The installer provides not only most of the applications from Software Compilation 4.4, but also the latest versions of a number of independently released KDE applications. Highlights include the latest stable version of digiKam (and the KIPI plugins) and Konversation. Although Amarok is not yet included in the installer there is progress being made.

showFoto 1.1 on Windows

Packages have been split from the KDE modules allowing easy installation of just what you want to use. The KDE Windows developers are also introducing metapackages that make it possible to easily install groups of popular applications from for example KDE Graphics, the KDE Software Development Kit and KDE Games. Metapackages are not yet functional in the installer but are expected in a future release.

As always, you can install KDE applications on your Windows platform using the latest installer (Windows executable). Please remember that KDE software on Windows is still a work in progress, so not all applications are suitable for day to day use at the moment.

By: Stuart Jarvis via KDENews

Free Linux Disk Cloning Software

luthfi.emka — Sun, 21 Feb 2010 23:59:34 +0000

Intipadi.com – One of the key responsibilities of a system administrator is to ensure the safety of an organisation’s computer data. This is a critical task for any organisation, given that the loss of important data could have profound implications on its future prosperity.

There are a number of different strategies that a system administrator will need to use to ensure that data is preserved. For example, the person will need to maintain the computer system and/or network, by applying operating system updates and patches, by performing regular backups, and ensuring that the system is kept secure at all times. Disk cloning is a highly popular method of performing comprehensive backups of the operating system, installed software, and an organisation’s data with the minimum of effort.

However, disk cloning software is not simply helpful for system backups. It has a wide range of other uses such as provisioning new computers in the workplace, restoring computers from a master image, and system recovery.

This article is the first in a series highlighting all of the best free software that is of real benefit to anyone who needs to maintain a computer system.

To provide an insight into the quality of software that is available, we have compiled a list of 6 high quality Linux disk cloning software. Hopefully, there will be something of interest for anyone who needs to perform system admin tasks.

Now, let’s explore the 6 disk cloning software at hand. For each title we have compiled its own portal page, providing a screenshot of the software in action, a full description with an in-depth analysis of its features, together with links to relevant resources and reviews.

Disk Cloning Distro:

Clonezilla Similar to Symantec Ghost
FOG A cloning / imaging solution / rescue suite
Mondo Rescue Reliable, disaster recovery solution
G4L ncurses-based hard disk and partition imaging and cloning tool
Partimage Stores partitions to a image file
PING Partimage Is Not Ghost

MySpace Activity And Content Stream

luthfi.emka — Sun, 21 Feb 2010 23:52:34 +0000

Intipadi.com – MySpace has launched an activity and content stream, which they are calling simply the “Stream.” Previously they showed a feed of status updates from friends, but the new feature shows a lot more content, including things like music your friends are listening to on MySpace Music, video they’re watching, links they are adding, etc.

The company hasn’t formally announced the product, which sort of makes sense since they’re still playing catch up with similar features on Facebook. But it’s an important beachhead in their go-forward strategy, we’ve learned. More on that in our next post.

No more Google Gears for Safari

luthfi.emka — Sun, 21 Feb 2010 23:49:37 +0000

Intipadi.com – While digging through the Chromium forums back in November looking for clues about the then-unreleased Chrome for Mac beta, we stumbled on an interesting bit of information: Google was moving away from supporting Gears going forward. While this move was obvious for some given Google’s heavy investment in HTML5, Google hadn’t talked much about what would happen to their plug-in that allowed for things such as offline access to Gmail. They’re talking now.

In a post yesterday on the Gears API blog, Ian Fette from the Gears team comes right out and says it in his title: “Hello HTML5.” Fette notes that the reason there haven’t been many updates to Gears in the past several months is because the team has shifted its focus towards implementing the same features into Chrome through HTML5. So far, this includes Database API, workers, local storage, and web sockets. And soon, LocalServer API and Geolocation will be a part of Chrome as well, Fette notes. In essence, all of these features make Gears unnecessary — well, at least in Chrome, which Google obviously wants you to use.

Because of this shift of focus, Fette notes that support for Gears will be increasingly “constrained in scope.” What this means is that beginning immediately, they will no longer be supporting Gears on OS X Snow Leopard (and later). Meanwhile, Gears support in Firefox and Internet Explorer will continue in limited form for now. But both of those too will eventually be killed off. “We will not be investing resources in active development of new features,” Fette writes.

Really, all Google is waiting for is an effective way to migrate Gears-enabled apps (and their users) over to HTML5. While there is currently no good way to do this, it seems as if Google just may wait for developers to drink the HTML5 kool-aid and then kill of Gears support entirely — even if there are still some who are using it.

I’m all for this. As I wrote back in December, I’m of the opinion that plug-ins are perhaps the biggest inhibitor of a unified web. That is, a web where everyone sees the same content the same way, no matter what browser or which OS they’re using. It doesn’t matter if those plug-ins are made by Google (Gears), Microsoft (Silverlight), Adobe (Flash), or anyone else. Via Techcrunch.

darkjumper – Python Blind SQL Injection tools

luthfi.emka — Sun, 21 Feb 2010 17:00:29 +0000

Intipadi.com – Telah direlease darkjumper versi ke 5 oleh my brother gunslinger dengan pengembangan 2 dari darkjumper versi 4. Fungsi – fungsi tool ini terfokus pada penetrasi terhadap suatu server shared hosting, antara lain:

1. User enumeration
2. Scan sqli, blind sqli, lfi dan rfi pada tiap web yang dihost di server yang sama
3. Scanning CGI dan struktur path umum web
4. Port Scan
5. Auto Dictionary Attack setelah user enumeration
6. Auto sql inject setelah ditemukan bug mysql injection (mencari panjang kolom otomatis)
7. Tambahan fungsi proksi
8. Tambahan Verbositas
9. Fitur ip dan geo checking

Perkembangan projek di sourceforge:
http://sourceforge.net/projects/darkjumper/

Untuk penggunaanya, tinggal ekstrak darkjumper-xxx.tar.gz kemudian jalankan darkjumper.py.

tar xzvf darkjumper-xxx.tar.gz
cd darkjumper
./darkjumper.py -t http://target.com -m full

Silakan menikmati Injeksi SQLnya. Seluruh posibility user yang didapat dari hasil blind injection sql akan ditaruh di file darkjumperlog.txt

Intipadi.com

How to Access MySQL via SSH Tunnel

Read also the related articles:

Mudah mengompresi folder di linux dengan Tar

Read also the related articles:

Membuat Block baru untuk Moodle

Random Posts

Virus Generic Dropper.QQ

Read also the related articles:

W32/Rontokbro.b@MM

Read also the related articles:

Software Compilation 4.4 for Windows

Read also the related articles:

Free Linux Disk Cloning Software

Read also the related articles:

MySpace Activity And Content Stream

Read also the related articles:

No more Google Gears for Safari

Read also the related articles:

darkjumper – Python Blind SQL Injection tools

Read also the related articles: