Bioshock

2007
09/23
CATEGORY
Uncategorized
4 comments

Hamper Raya

If you want to buy hamper for raya, contact li3y4n4@yahoo.com.sg
or drop a comment here.


2007
09/17
CATEGORY
Uncategorized
Comments Off

Intruder!

Few weeks ago, I randomly scanned certain range of IP address.
With normal ping, this would be the result:

root@X-Program:~# ping 192.168.0.5
PING 192.168.0.5 (192.168.0.5) 56(84) bytes of data.
64 bytes from 192.168.0.5: icmp_seq=1 ttl=250 time=89.3 ms
64 bytes from 192.168.0.5: icmp_seq=2 ttl=250 time=68.2 ms
64 bytes from 192.168.0.5: icmp_seq=3 ttl=250 time=126 ms
64 bytes from 192.168.0.5: icmp_seq=4 ttl=250 time=52.7 ms— 192.168.0.5 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 3000ms
rtt min/avg/max/mdev = 52.741/84.220/126.547/27.677 ms

This might look normal for you guys, but to me, IT’S WAY F**KING WEIRD (to respect the Ramadhan month, I censored it).

I shouldn’t have that range of IP address, especially when I’ve configure the router to accept IP address from 192.168.1.2 until 192.168.1.254.
*note: 192.168.1.1 is gateway and 192.168.1.255 is broadcast*

So I’ve decide to enumerate this illegal hosts and this is the result:

root@X-Program:~# nmap 192.168.0.2-15 -sS -sV -P0 –osscan-guess
Starting Nmap 4.20 ( http://insecure.org ) at 2007-09-12 18:09 MYT
Stats: 0:00:30 elapsed; 0 hosts completed (5 up), 5 undergoing SYN Stealth Scan
SYN Stealth Scan Timing: About 3.49% done; ETC: 18:12 (0:02:19 remaining)
All 1697 scanned ports on 192.168.0.2 are filteredAll 1697 scanned ports on 192.168.0.3 are filtered

All 1697 scanned ports on 192.168.0.4 are filtered

Interesting ports on 192.168.0.5:
Not shown: 1689 closed ports
PORT STATE SERVICE VERSION
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
303/tcp filtered unknown
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1720/tcp filtered H.323/Q.931
4444/tcp filtered krb524
17300/tcp filtered kuang2

Interesting ports on 192.168.0.6:
Not shown: 1689 closed ports
PORT STATE SERVICE VERSION
23/tcp open telnet Cisco router
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1720/tcp filtered H.323/Q.931
4444/tcp filtered krb524
17300/tcp filtered kuang2

Service Info: OS: IOS; Device: router

Ok, now it’s much more weird and threaten my home network.
Check out the port name: “krb524″ and “kuang2″.
krb524: Kerberos v5/ CrackDown/ Prosiak/ Swift Remote more information
kuang2: Some old virus more information

Also, check out the device info: router.
Dude! It’s a freaking ROUTER with 2 trojan port!

Too weird for this exist at my home network and it’s superbly dangerous if it’s being ignored.
So I block IP address from 192.168.0.2 to 192.168.0.254 with port from 2 until 65530.

Here’s some screenshot of the Nmap.

2007
09/13
CATEGORY
Uncategorized
3 comments

Ramadhan month

Just wanna wish all of muslim, happy fasting!

|| the enumeration on intruder result I will post it up later on
|| as currently I’m having problem with my Ubuntu
|| (overheat due to high usage)

2007
09/12
CATEGORY
Uncategorized
2 comments

Compiz-Fusion

After a week plus trying to:

  1. install ATI (fglrx) driver
  2. enable direct rendering
  3. display correct fglrx information
  4. getting Compiz-Fusion run

I finally accomplish what I wanted for;
a cool nice desktop to “brighten” up my day whenever I’m bored.
Oh yeah~!


Compiz-Fusion

2007
09/10
CATEGORY
Uncategorized
1 comment