November 17, 2006

MyVI TRD Bodykit (Passo)

by Matnet @ 9:09 pm in Automotive

Sesaja surf2 tgk harga bodykit utk myvi akhirnya jumpa jugak.. mmg cun insyallah tak lama lagik myvi ku akan macam dibawah tp tatau la bila.. moga2 murah rezki selalu.
Tgk harga ok lah just RM1199 utk :

1. ONE FRONT BUMPER,
2. ONE REAR BUMPER
3. TWO SIDE SKIRT
4. ONE TRD TYPE REAR SPOILER
5. ONE FRONT BONNET SPOILER.

Kalu di sg petani bumper TRD depan sahaja dah RM350.

Source : KakiMotor




View All Images
November 14, 2006

DWORD encoding ?

by Matnet @ 10:20 pm in WWW

I try to lookup "dword" from google and the result is only this :

Definitions of dword on the Web:

Double word. A data element that is 2 words, 4 bytes, or 32 bits in size.
www.ti.com/sc/docs/products/msp/intrface/usb/terms.htm


Before this i had posted regarding phishing technic that used dword to encode the real IP at the URL. So now i'll discuss how 66.117.217.154 translate to 1115019674

From the definition on google dword is 4 bytes or 32 bits, yes of course IPV4 is 32bits so the definition is true. But how the IP translated to usual decimal number ?

OK now lets take a look our first octet :

notes* : 0x is prefix for hex , 0b prefix for binary

Decimal value : 66
Binary value : 0b1000010
Hex value : 0x42

second octet :

Decimal value : 117
Binary value : 0b1110101
Hex value : 0x75

third octet :

Decimal value : 217
Binary value : 0b11011001
Hex value : 0xd9

Fourth octet :

Decimal value : 154
Binary value : 0b10011010
Hex value : 0x9a

Ok now lets take a look at Hex value.

66.117.217.154 will be 0x42.0x75.0xd9.0x9a

so

0x42.0x75.0xd9.0x9a = 0x4275d99a

ok now translate the hex value to decimal, we will get :

0x4275d99a = 1115019674

That's all

p/s :-

- Feel free to access my blog using this dword - http://3393926802

- i'm using this calculator to compute all calculation http://www.microcontroller.com/Embedded.asp?did=92

November 14, 2006

mod_evasive ??

by Matnet @ 10:02 pm in BSD & *NIX

One way to stop one of the more basic attacks on a server is mod_evasive. This how-to will walk though the process of installing and configuring mod_evasive. This apache module will help protect against people sending too many requests to the webserver in an attempt to flood it. If it detects too many connections the offending ip will be blocked from the accessing apache for This is especially useful when the server is continuously getting attacked. With this default configuration it will block the offending ip for 10 minutes. If it continues to try and flood mod_evasive will automatically add more time to this.

let's install it ~!!!

Follow this section for Apache 1.3.x.

-----command-----
cd /usr/local/src
wget http://www.nuclearelephant.com/projects/mod_evasive/mod_evasive_1.10.1.tar.gz
tar -zxf mod_evasive_1.10.1.tar.gz
cd mod_evasive
/etc/httpd/bin/apxs -cia mod_evasive.c
-----command-----



Follow this section for Apache 2.0.x.
-----command-----
up2date -i httpd-devel
cd /usr/local/src
wget http://www.nuclearelephant.com/projects/mod_evasive/mod_evasive_1.10.1.tar.gz
tar -zxf mod_evasive_1.10.1.tar.gz
cd mod_evasive
/usr/sbin/apxs -cia mod_evasive20.c
-----command-----

If you are adding the is module to apache 1.3.x the following lines need to be added to the httpd.conf below the AddModule section.


DOSHashTableSize 3097
DOSPageCount 5
DOSSiteCount 100
DOSPageInterval 2
DOSSiteInterval 2
DOSBlockingPeriod 600




If you are using apache 2.0.x you need to scroll to below the LoadModule section in the httpd.conf and add the following:


DOSHashTableSize 3097
DOSPageCount 5
DOSSiteCount 100
DOSPageInterval 2
DOSSiteInterval 2
DOSBlockingPeriod 10
DOSBlockingPeriod 600


Exit and save out of the httpd.conf

Now it should be ready to go. Exit out of pico and restart apache.
-----command-----
service httpd restart
-----command-----


November 14, 2006

gath@kedahonline - October 28 2006

by Matnet @ 9:08 pm in Events

gath@kedah ? it's so enjoyable and warm with supporting from all participates. It is around 50-60 users have come to the gathering. Of course it's less than gath we done before but this gath is too happening.

A lot of apperciated to my mama dakuza from aussie..u make it happen mama. Thanks for joining us here.

Attached some picture from the event. wanna more ? feel free to surf my buddy fotopages @ http://thecreech.fotopages.com/





View All Images
November 13, 2006

Yahoo Redirection Used in Phishing Email

by Matnet @ 10:10 pm in WWW

Today, I got a phishing email using a Yahoo redirection. People who claim redirection isn’t a problem read on. Indeed, the URL also uses Dword encoding to further make the URL obfuscated. Here’s the URL:

http://rds.yahoo.com/_ylt=A0LaS
V66fNtDg.kAUoJXNyoA;_ylu=X3oDMTE2ZHVuZ3E3
BGNvbG8DdwRsA1dTMQRwb3MDMwRzZWMDc3IEdnRpZANGNjU1Xzc1/SIG=148vsd1jp/EXP=
1138544186/**http%3a//1115019674/www.paypal.com/us/webscr.php?cmd=_login-run


Notice the Dword there? 1115019674 That translates to 66.117.217.154

How someone could ever figure out what that URL was without clicking on it who wasn’t already familiar with phishing schemes, I’ll never know. Phishing is partly social engineering, and my trust in Yahoo is what makes me think, “Sure, I believe that Yahoo could theoretically have some arrangement with other companies to redirect traffic.” The fact that mega companies with known brands have these holes makes this a big problem.




:: Shout Me ::



:: About Me ::



They call me : Yachiru
Name : Yachiru Kusajishi
Birthday : February 12
Working Field : Shinigami lieutenant - 11th Division
E-mail : matnet80 [at] yahoo [dot] com


:: Calendar ::

March 2010
S M T W T F S
1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31