Gadgets Security

Keep your mobile gadget secure

Secure Your Server

We must study how to harder our servers

Internet Security

Secure your computer, Secure your browser, and enjoy to browsing to internet

This is default featured post 4 title

Go to Blogger edit html and find these sentences.Now replace these sentences with your own descriptions.

Monitor your System Network

Make your network in your hand and under control

Showing posts with label Forensics. Show all posts
Showing posts with label Forensics. Show all posts

Wednesday, July 20, 2011

Mengaktifkan & Menonaktifkan Regedit

Kesal kan apabila regedit hilang karena perbuatan virus?
Atau mungkin juga teman-teman anda sering mengutak-atik registry anda?
Karena itu saya ada sebuah trik nih, yang berfungsi untuk menampilkan dan menyembunyikan regedit, yaitu dengan sebuah sedikit sihiran javascript, simple, bahkan orang awam pun bisa membuat program seperti ini.
Caranya?ketik script dibawah ini di notepad.


--------------------------------------------------------
// Program Sederhana Mengamankan Regedit
// Nama Program: regedit_java.js
var vbCancel = 2;
var vbYesNoCancel = 3;
var vbYes = 6;
var vbNo = 7;
var vbQuestion = 32;
var vbInformation = 64;
var natan = WScript.CreateObject("WScript.Shell");
var pesan1 = "Pilihan Pengaman Regedit:\n\n"+
"[Yes] untuk Nonaktifkan Regedit.\n"+
"[No] untuk Aktifkan Regedit.\n"+
"[Cancel] untuk Keluar.\n\n"+
"[shinigamirulez]\n"+
"Bangkitlah TI untuk masa depan\n\n"+
"-> Nonaktifkan Regedit sekarang?"
var tanya = natan.popup(pesan1,0,"Pengaman Regedit",vbYesNoCancel+
vbQuestion);
if (tanya == vbYes)
{
natan.RegWrite("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion"+
"\\Policies\\System\\DisableRegistryTools",1,"REG_DWORD");
pesan2 = "Regedit Dinonaktifkan!"
natan.popup(pesan2,0,"Pengaman Regedit",vbInformation);
}
else if (tanya == vbNo)
{
natan.RegWrite("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion"+
"\\Policies\\System\\DisableRegistryTools",0,"REG_DWORD");
pesan3 = "Regedit Diaktifkan!"
natan.popup(pesan3,0,"Pengaman Regedit",vbInformation);
}
else
{
natan.popup("Thanks Bro.",0,"Pengaman Regedit",vbInformation);
}
--------------------------------------------------------



Setelah selesai diketik, jangan lupa periksa setiap kata, jangan sampai ketinggalan 1 kata pun, bahkan tanda petik (“) nya juga, karena kalo tanda petik nya kurang atu aja gag bisa jalan tuh program.
Kalo sudah yakin benar, simpan notepad tersebutdengan ektensi *.js.
Setelah disimpan jalankan javascript tersebut, klik yes untuk nonaktifkan, dan klik no untuk mengaktifkan. Apabila program tersebut tidak bisa jalan, ya koreksi ulang deh ketikan anda sampai semuanya bear…heehe..moga bermanfaat ya……

Friday, July 15, 2011

ksymhunter – Routines For Hunting Down Kernel Symbols

Routines for hunting down kernel symbols from from kallsyms, System.map, vmlinux, vmlinuz, and remote symbol servers.
Examples:
$ ./ksymhunter prepare_kernel_cred
[+] trying to resolve prepare_kernel_cred...
[+] resolved prepare_kernel_cred using /boot/System.map-2.6.38-gentoo
[+] resolved prepare_kernel_cred to 0xffffffff81061060
And..
$ ./ksymhunter commit_creds
[+] trying to resolve commit_creds...
[+] resolved commit_creds using /boot/System.map-2.6.38-gentoo
[+] resolved commit_creds to 0xffffffff81060dc0
You can download ksymhunter v1.0 here:
ksymhunter.tar.gz