I’ve posted some articles about Oracle. How to connect Oracle to PHP (http://www.studiawan.blogspot.com/2007/06/php-connection-to-oracle.html), connect Oracle to ASP.NET (http://www.studiawan.blogspot.com/2007/06/asp-net-to-oracle-try-this.html), or splitting Oracle server (http://www.studiawan.blogspot.com/2007/07/splitting-oracle-server.html). In this blog you can find how to handle host credentials of your Oracle server (http://www.studiawan.blogspot.com/2007/06/host-credentials-of-your-oracle-hmmm.html) or optimizing Oracle server (http://www.studiawan.blogspot.com/2007/07/optimation-of-your-oracle-server.html).This article will talk about how to monitor Oracle server. It’s very sensitive for database administrator. Admin should make sure the server works well. To do it, he has to monitor time by time. There are some ways to do this job. We’ll try to use Oracle Entrepise Manager 10g. Let’s check it out:#1. Open your browser like Mozilla Firefox or Internet Explorer#2. Go to Oracle Entrepise Manager 10g by entering url address: http://localhost:5500/. 5500 is default port for the first database. If you have some database, port will be incremented automatically like 5501, 5502, …#2. Enter your username and password correctly.#3. On the first page, there are some menus: Home, Performance, Administration, and maintenance.#4. Home page is loaded directly. Information we can get are: - General (Server information in common points like: Status, Up Since, Availability etc) - Host CPU and Active Session displayed on graphics mode. So, we can analyze it quickly and easily. - High Availability and Space Usage - Diagnostic Summary and the last part is Alert. Alert shows Critical and Warning for system administrator.#5. Second menu is Performance. We can monitor: - Host - Session: Waiting and Working - Instance Throughput - Additional Monitoring links.Pay attention on Warning displayed on the screen. Analyze and diagnose it to prevent serious trouble on oracle server.Read more at: Knowledge to Share (http://studiawan.blogspot.com/2007/08/monitoring-oracle-10g-server.html)

Well, this might be a bit too late, but im gonna review it anyway. “Hackers In Wonderland” is a documentary-film produced and directed by Russel D which reveals a lot about Hackers’s Life in United Kingdom. This documentary-film contains some interviews with the hackers themselves ,revealing what drives them to hack , and it [...]Read more at: LifeDork (http://www.lifedork.com/hackers-in-wonderland.html)

Well, this might be a bit too late, but im gonna review it anyway. “Hackers In Wonderland” is a documentary-film produced and directed by Russel D which reveals a lot about Hackers’s Life in United Kingdom. This documentary-film contains some interviews with the hackers themselves ,revealing what drives them to hack , and it [...]Read more at: LifeDork (http://www.lifedork.com/hackers-in-wonderland.html)

No , this blog ’s not related to LifeHacker (don’t be disappointed man!) :P  , i’ve finally finished my theme, and now it’s the time to make this shitty blog works! well i hope i can provide you with useful informations about Computer Security , Geeky Things , and any other things which [...]Read more at: LifeDork (http://www.lifedork.com/welcome-to-hell.html)

Welcome to studiawan.com (http://studiawan.com). We’ll talk about blog, optimization, and thought. What’s thought? It’s something I wanna post. Thanks for visiting.Read more at: studiawan.com (http://studiawan.com/2007/08/31/hello-world/)

Want to build an enterprise network? which can accomodate multiple user? n offcourse we can’t forget the security factor.

I have some hints to build a network like that using windows server 2003 with several software installed to perform much reliable, secure network.

First i’ll explain about the feature of windows server 2003, Microsoft Windows Server 2003 Family have 3 version, Standar Edition, Enterprise Edition and Data Senter Edition. each version have same ability but have a few different on hardware support.for small use the standar edition may be the best choice, but if you have large type or enterprise server you can use the enterprise or Data center edition to support much more cpu, RAM and storage.

The Next, the main feature use often @ a network with multiple user :

• Active Directory
• DNS (Domain Name System)
• DHCP (Dynamic Host Configuration Protocol)
• File Sharing
• Terminal Server
• Windows Service Update Server

With 3rd party software from Symantec we can deliver an integrated anti-virus management system @ the network, @this hints i will use Symantec AntiVirus Corporate Edition for easier update n install.

To build this kind of network i’ll show the step by step to build it.:

1. Preparing the Server:
   1. Choose Server Edition that match your requirements
      • Standard Edition
      • Enterprise Edition (for me, i’ll choose this version coz it’s have different UI for management and have more support for large disk and memory but there will be less support for server service application can be install on its)
      • Data Center Edition
   2. Just Install it till finish. n offcourse use the original software from Microsoft ( @ this point i use Windows from MCA/ Microsoft Campus Agreement)
   3. Install all driver needed
   4. Patch it with an up to date Patch System. @ this moment Microsoft has released SP2 for Windows Server 2003 ( if u have installed the WSUS Server u can update from this server, for the tutorial about it i’ll post later)
2. Just Write down your requirement
3. Installing The Features:
   1. Active Directory & DNS
      1. Overview: if u decide to install this feature, u must install it in pair, u can’t install just one of it,because
         the Active Directory need a DNS Server to management the workstation,
         but if u decide not to install active directory u still can install the
         DNS.
      2. How To:
         • first step to install Active Directory is to decide the domain name, is this an independent domain or derived domain from its parent or maybe a delegation domain?
         • if its an independent domain / standalone domain, u can choose create a new forest, but if its derived domain from parent u can choose new tree from an existing forest. the simple difference is just for management domain, when its derived from its parent all management is derived from its parent,parents administrator (enterprise admins) can manage this domain/tree, but it’s still have ability to configure its own domain. when its independent all management is independent from its parent.
           • new forest => independent/standalone domain
             • eq. wafa.web.id => this is independent domain (forest)
           • new tree from existing forest => derived domain from its parent
             • eq. linux.wafa.web.id => this can be a new tree coz its derived from wafa.web.id forest ( but this can be another independent domain if u prefer not share / not integrate the management)
         • the second step, the usage of this server, is this a primary domain controller or just another backup / secondary domain controller server.
         • third step, define the Domain Name for your Domain, write down the Full Qualified Domain Name (eq. wafa.web.id => this is FQDN but later in domain name it’ll just use WAFA for domain name)
         • Set Administrator Password for Domain and set the Rescue Password if u want demote (remove this feature) the server in the future
      3. The Management:
         • Active Directory / Domain Controller accomodate both of users and computers.
           • a computer joined the domain called workstation
           • when a computer joined the domain,it’s need domain admins privilege to joining to the domain controller.
           • when a computer need to detach from domain, it’s also need domain admins privilege to detach from domain controller.
           • when a computer joined the domain, it’s add to the domain computer and also add to dns server.
         • Active Directory have this group policy to accomodate the user: (i just write the most used and general)
           • Domain Admins => have privilege administrators @ all the workstations and domain controllers, can manage everything.
           • Enterprise Admins => same like Domain Admins, but it’s have more privilege over another Tree in an Forest.
           • Domain Users => User privilege, can be use to logged in to all workstations joined the domain
           • Domain Guests => Guest privilege, limited access to workstation resource
      4. Some keyword @ Active Directory Installation:
         • Forest
         • Tree
         • Domain Name
         • ContextName
         • Organizational Unit
   2. DHCP
      1. Overview: DHCP Server used for mobile user, so they don’t need to set their IP Address and another network settings manually , this Server provide a collection of an IP Address called Address POOL for defined time called lease with some networking options called Router Options (nameserver,Domain Name,Gateway, etc..)
      2. How to Install :
         • Add this role feature from Server Management
         • Define new scope
         • Define address pools range
         • Define lease time ( how long the client can use its Network configuration/IP)
         • Define another options such as Gateway, Domain Name, DNS Server, etc.
         • Restart the service
   3. FileSharing (FileServer)
      1. Overview: by default Microsoft Windows Server have an ability to serve public file sharing, but this feature can be added for another ability and feature to the basic service.
      2. How to Install:
         • Same like another Role, add this feature from Server Management
         • to configure a new sharing folder, just add share name and browse the valid folder to share.
   4. Terminal Server
      1. Overview: by default Microsoft Windows Server have an ability for Remote Desktop User, but this feature have increase the performance and support ability for this service.
      2. How to Install:
         • Same like another Role, add this feature from Server Management
         • add some license rule for this terminal server
           • per user => used for per user connected
           • per device => used for per computer connected
         • for better support u can activate the terminal server license from Microsoft by obtaining your information, this can be activated when you have an internet connection.
   5. Windows Service Update Server
      1. Overview: this service is to accomodate local update service for all Microsoft product in the network, so it will safe more bandwidth coz all of Microsoft product not need to update directly to Microsoft update site
      2. How to Install:
         • the installer not package with the installation CD but u can obtain it from Microsoft download center. the installation tutorial shipped with the installer.
         • with this service installed, u just need to download all updates once for this server and the all computer can update from this server. just point the update site to this server.
           • to set ur workstation to point to WSUS Server, i have simple step:
             • just run : gpedit.msc @ run command
             • point to :
               • Local Computer Policy -> Computer Configuration -> Administrative Templates -> Windows Update
               • Enable Configure Automatic Updates
               • Enable Specify intranet Microsoft update service location, in this case just point to ur WSUS Server

the last is about the security and antivirus management..
for this purpose i use the Symantec Antivirus Corporate 10 edition, for installation just follow the instruction.
but i have a few notes for installation:

• install this feature before installing the terminal service feature
• install as server mode
• after install the server antivirus, u can install symantec system console to manage ur client later.
  • from this management console u can deploy to your client remotely, this feature quite simple for your domain network, coz u only need domain admins and u can deploy it to all ur workstation
  • u can manage and categorized ur network into groups
  • a group can have different policy
  • u can do mass virus definition update to all ur client when the server has finished update its definition
  • u can schedule download of the update

for another information and the advance tutorial, i’ll write down later in another version.

with loves, with efforts, with knowledges
knowing the best for ur best
illuminator

Technorati Tags: myNote Win2K3 Server Networking

After i write down all my knowledges bout the “Dark Game”, this time i’ll explain how to break down and tracking the Intruder who play this Game.

This knowledges, i discover by my self, coz a long time ago i didn’t know about a blog or resource which covering this action.

in this action we will cover a few point to break down and track down the intruder, such as:

1. IDS or Intrussion Detection System (sniffing the net)
• Overview :
• IDS or known as Intrussion Detection System, used by system or network administrator to check all anomaly usage on the network, to a server or the whole network
• The main action of an IDS is sniffing all packet through the network, and auditing all the packet, is there something strange or unusual or matching with intrussion pattern
• Give a complete report to system/network administrator ’bout the anomaly and the intruder
2. Tools:
• SNORT, the most known IDS application is Snort => http://www.snort.org , snort will cover all u need for this purpose
• Symantect Client Security, for third party which need some extra money to get is Symantect Client Security, but this packet software is intregated with the firewall and i can say this is the perfect one for an individual computer on the net, not covering all the network but perfect on single workstation
• HoneyNet, this tools has basic purpose to sniff the net but don’t have ability to report an intruder.
• WireShark a.k.a Ethereal same function with HoneyNet with much interesting GUI and much more Function to auditing packet
3. Network Traffic
• Overview:
• from the network traffic we will know is there an anomaly usage @ our network or not, coz with the normal traffic, i think there is a small possibilities there will be an intruder @ our network, but if there is an intruder @ our network the network traffic will fluctuated.
• an anomaly behaviour will be there if intruder want to know more about our network or our resource
4. Tools:
• NetLoad
• NetStat
• Iptraff
• most the tools is designed for nix system, but i’ll try to find the tools for win32 environment
5. Log Forensics
• Overview:
• from log you’ll know everything more detail bout your box and your network
6. Tools
• log reader or something like that
• i don’t have any experience bout tools which can make me happy with a bunch of log file, coz i love to read it manually
7. IPS
• Overview :
• Intrussion Prevention System, the extended system of IDS, which make your jobs more lighter, more simple, this system will help you securing the network and the machine automatically. coz this system have the ability of an IDS + Tough Firewall system and some script to configure it.
8. Tools :
• i recommend u symantec client security for individual box on the network.
• for the network u can use the Snort master and an snortsam + iptables
9. Firewall
• Overview:
• this system ability is to protect ur network from intruders, securing your network and your  machine, keep your network safe from DoS (Denial of Service)
• filtering user for accessing your resource
• and make sure all packet flow on your network is harmless
10. Tools :
• Netfilter
• Iptables
• Ipchains
• et

I think this few overview is enough for you to get prepare from the intruder, next post i’ll try to explain how to break this secure system and armed the network from intruders.

with loves, with efforts, with knowledges
knowing the best for ur best
__illuminator__

Tags: myNote, Networking, Hacking

long time not play this “game”… after several month not update my collection, last week some boy ask me about my collection and my suggestion ’bout this “game”.. after digging my burried stuff, reading and googling  i found this site :
http://www.darknet.org.uk   and bring me back to my lost site http://sectools.org/  .

after i read that blog and searching2 on thus site, i found that all my collection listed there, i didn’t notice that coz in long2 time ago i never read thus site.

after updating my collection, i re-write  all my step for playing this kind of game:

1. First Step : Discovering
• Overview :
• doing this step, u will try to finding the whole network, to map the network, to know the routing map, to know what behind the router machine, to know how clever the network administrator
• this step to  uncover how  large is the internal network, and the network map
2. Tools:
• FoundStone Superscan4 (win32)
• IP Angry Scanner            (win32)
• Nmap                             (nux+win32)
• GFI Languard                  (win32)
• Cheops NG                     (linux)
• SNMP-utils
3. Second Step : Identifiying n Gathering Information
• Overview :
• after you know how large the network, the network map and the routing table, next thing to do is identifying and gathering information.
• this step needed to know the network more details,  about the router information and firewall behind the router.
• also to let you choose your potensial target
4. Tools:
• Nmap                              (nux+win32)
• Nessus                            (nux+win32)
• GFI Languard                   (win32)
• Cheops NG                      (linux)
5. Third Step : Check The Target Vulneralbility
• Overview:
• after you know your target, u need to know more details about your target.
• the difference from previous step is this step is more to individual target rather to a whole network.
6. Tools:
• Nmap                              (nux+win32)
• Nessus                            (nux+win32)
• GFI Languard                   (win32)
• Cheops NG                      (linux)
• Nikto
7. Fourth Step : Execute the Stuff
• Overview:
• after gathering information about the target and it’s vulnerability, now is your turn to play the game
• choose your powerfull exploits (choose The Framework or Individual Exploit)
• remember, don’t use your own node to do this. find another node to jump to your target.
8. Tools:
• Metasploit Framework
• Canvas
• Core Impact
• or Individual Exploits
9. Fifth Step : Securing the Action
• Overview:
• after successfully break into the target, remember always choose a action which not leave an evidance can be use to track you down.
• suggestion: just bind a shell and create a listening port on target
• remember, don’t use your own node to do this. find another node to jump to your target.
10. Tools:
• use TFTP protocol (tftp server + client) most OS support this protocol
11. Sixth Step : Plant  the stuff
• Overview:
• After Successfully get into your target, do what u want there, but always remember not do this on your node, find another jumper place to do this.
12. Tools:
• Windows Registry => play fun with this stuff, just doing right thing with that , or u will crashing the target on next restart.
• Windows Registry + Windows Service => choose an usual name or general name to covering your track
• Root Kit for Linux, for this stuff i can’t tell much ’bout it, u can try to find it on the net
13. Seventh Step :Covering the Action
• Overview:
• After Successfully get into your target, do what u want there, but always remember not do this on your node, find another jumper place to do this.
• remember, don’t use your own node to do this. find another node to jump to your target.
• don’t learn to hack, but hack to learn

i think this step is enough to play with this kind of “GAME”, do it for your own responsibility, i can’t guarantee for this stuff and this action.

with loves, with efforts, with knowledges
knowing the best for ur best
illuminator

Tags: myNote, Networking, Hacking, Server, Linux

long time not play this “game”… after several month not update my collection, last week some boy ask me about my collection and my suggestion ’bout this “game”.. after digging my burried stuff, reading and googling  i found this site :
http://www.darknet.org.uk   and bring me back to my lost site http://sectools.org/  .

after i read that blog and searching2 on thus site, i found that all my collection listed there, i didn’t notice that coz in long2 time ago i never read thus site.

after updating my collection, i re-write  all my step for playing this kind of game:

1. First Step : Discovering
• Overview :
• doing this step, u will try to finding the whole network, to map the network, to know the routing map, to know what behind the router machine, to know how clever the network administrator
• this step to  uncover how  large is the internal network, and the network map
• Tools:
• FoundStone Superscan4 (win32)
• IP Angry Scanner            (win32)
• Nmap                             (nux+win32)
• GFI Languard                  (win32)
• Cheops NG                     (linux)
• SNMP-utils
2. Second Step : Identifiying n Gathering Information
• Overview :
• after you know how large the network, the network map and the routing table, next thing to do is identifying and gathering information.
• this step needed to know the network more details,  about the router information and firewall behind the router.
• also to let you choose your potensial target
• Tools:
• Nmap                              (nux+win32)
• Nessus                            (nux+win32)
• GFI Languard                   (win32)
• Cheops NG                      (linux)
3. Third Step : Check The Target Vulneralbility
• Overview:
• after you know your target, u need to know more details about your target.
• the difference from previous step is this step is more to individual target rather to a whole network.
• Tools:
• Nmap                              (nux+win32)
• Nessus                            (nux+win32)
• GFI Languard                   (win32)
• Cheops NG                      (linux)
• Nikto
4. Fourth Step : Execute the Stuff
• Overview:
• after gathering information about the target and it’s vulnerability, now is your turn to play the game
• choose your powerfull exploits (choose The Framework or Individual Exploit)
• remember, don’t use your own node to do this. find another node to jump to your target.
• Tools:
• Metasploit Framework
• Canvas
• Core Impact
• or Individual Exploits
5. Fifth Step : Securing the Action
• Overview:
• after successfully break into the target, remember always choose a action which not leave an evidance can be use to track you down.
• suggestion: just bind a shell and create a listening port on target
• remember, don’t use your own node to do this. find another node to jump to your target.
• Tools:
• use TFTP protocol (tftp server + client) most OS support this protocol
6. Sixth Step : Plant  the stuff
• Overview:
• After Successfully get into your target, do what u want there, but always remember not do this on your node, find another jumper place to do this.
• Tools:
• Windows Registry => play fun with this stuff, just doing right thing with that , or u will crashing the target on next restart.
• Windows Registry + Windows Service => choose an usual name or general name to covering your track
• Root Kit for Linux, for this stuff i can’t tell much ’bout it, u can try to find it on the net
7. Seventh Step :Covering the Action
• Overview:
• After Successfully get into your target, do what u want there, but always remember not do this on your node, find another jumper place to do this.
• remember, don’t use your own node to do this. find another node to jump to your target.
• don’t learn to hack, but hack to learn

i think this step is enough to play with this kind of “GAME”, do it for your own responsibility, i can’t guarantee for this stuff and this action.

_____
with loves, with efforts, with knowledges
knowing the best for ur best
__illuminator__

Tags: myNote, Networking, Hacking, Server, Linux

Original post by wafa

It’s very important to make blog staying up to date. Search engine like Google like to visit blog with update content. But there is one problem: we don’t have enough time to blogging or sometimes we lazy to write a post. There are some solutions but I want to discuss about Newsreel page element. I try to use Page Element provided by blogger because I use blogger. Here are the tips:#1. Sign to your blog on blogger.#2. Pick Template menu, choose Page Element and Click Add Page Element.#3. Scroll down the window and choose Newsreel widget, click “Add to Blog”.#4. Configure Newsreel and customize based on your style. #5. Click Save Changes button to save this changes.Preview your blog and make it stay update!Read more at: Knowledge to Share (http://studiawan.blogspot.com/2007/08/make-blog-stay-update.html)