--== A r V i X ==--

Third to the Last Post

2005-12-21T23:25:00.000+08:00

What defines me is what hurts me...

This is a true story; One day I was thinking to myself "These fools I work with doesn't have a clue on what I can really do, what networks I've gotten into, stuff that I'd done online. They don't know how good a hacker I've become. They just sit there waiting for their monthly salary, only imagining where they'll go drinking next. They don't understand that there's a world outside their own lives." Then it hit me. I too was living in my own little world. A world of networks, computers and technology. So again I decided I will try to explore beyond the box that this time I had inadvertently put myself into.

I've decided to stop hacking when the new year comes around. This time it's real.

As time passes by...

2005-07-24T22:49:00.000+08:00

Haven't been caught. Not yet anyway... :)

I think it's fitting that I post the following article here. A bit cheesy to the veteran hackers but definitely a must read to someone who visits here with no hacking experience but curious about hacking.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The following was written shortly after my arrest...

\/\The Conscience of a Hacker/\/

by

+++The Mentor+++

Written on January 8, 1986
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Another one got caught today, it's all over the papers. "Teenager
Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"...
Damn kids. They're all alike.

But did you, in your three-piece psychology and 1950's technobrain,
ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him?
I am a hacker, enter my world...
Mine is a world that begins with school... I'm smarter than most of
the other kids, this crap they teach us bores me...
Damn underachiever. They're all alike.

I'm in junior high or high school. I've listened to teachers explain
for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head..."
Damn kid. Probably copied it. They're all alike.

I made a discovery today. I found a computer. Wait a second, this is
cool. It does what I want it to. If it makes a mistake, it's because I
screwed it up. Not because it doesn't like me...
Or feels threatened by me...
Or thinks I'm a smart ass...
Or doesn't like teaching and shouldn't be here...
Damn kid. All he does is play games. They're all alike.

And then it happened... a door opened to a world... rushing through
the phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found.
"This is it... this is where I belong..."
I know everyone here... even if I've never met them, never talked to
them, may never hear from them again... I know you all...
Damn kid. Tying up the phone line again. They're all alike...

You bet your ass we're all alike... we've been spoon-fed baby food at
school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us willing pupils, but those few are like drops of water in the desert.

This is our world now... the world of the electron and the switch, the
beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and
you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us
and try to make us believe it's for our own good, yet we're the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is
that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me
for.

I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike.

+++The Mentor+++

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

See you all from the other side...

Update: Decided to simply append the following stuff instead of having a separate entry for it.

I kinda like this one too... :)

It happened again today. Another one sold out, sacrificing their dreams to the corporate security machine.

No one believes in a cause anymore.

Another potential computer genius was relegated to an existence of nothing more than than a 9-5 cubicle-dwelling promotional tool.

Damn yuppies, putting money before discovery.

Another kid was sentenced today for searching for a way to understand the world. Convicted and imprisoned, not because of what he did, but because of what others thought he could do.

Damn Whitehats - Fear keeps them in business.

The public, believing anything it hears from "reputed experts". Screaming for blood. Looking for something to blame for their lost hope. Their lost ability to seek out new knowledge. Fear consumes them. They cannot let go of their uncertainty and doubt because there is no meaning. They seek to destroy explorers, outlaws, curiosity seekers because they are told too. They are told these people that seek information are evil. Individuality is evil. Judgment should be made based upon a moral
standard set in conformity rather than resistance. Lives are ruined in the name of corporate profit and information is hoarded as a commodity.

I had an awakening. I saw the security industry for what is really is. I saw the corruption, the lies, the deceit, the extortion of protection money in the form of subscription services and snake-oil security consultants.

I wanted to know, I wanted to understand, I wanted to go further than the rest. I never want to be held down by contracts and agreements.

You say I should grow up. You say I should find better things to do with my time. You say I should put my talent to better use. You're saying I should fall in line with the other zombies and forget everything I believe in and shun those with my drive, my curiosity, tell them it's not worth it, deny them of the greatest journey they will ever experience in their lives.

I am not a blackhat. The term is insulting, it implies I am the opposite of you. You think i seek to defeat security, when I seek something greater. I will write exploits, travel through networks, explore where you are afraid to go. I will not put myself in the spotlight and release destructive tools to the public to attract business. I will not feed the fear and hysteria created by the security industry to increase stock prices. I can, and will, code and hack and find out everything I can for the same reasons I did years ago.

I am a Hacker, dont try to understand me, you lost all hope of that when you crossed the line. You fail to see the lies and utter simplicity behind the computer security industry. Once, you may have shared my ideals. You fail to see the fact that security is a maintenance job. Youve given up hope for something better. You fail to see yourself as worthless, fueling an industry whose cumulative result is nothing. I
dont hate you, I dont even really care about you - If you try to stop me, you will fail, because I do this out of love -- you do it for money.

This is our world now.. the world of the electron and the switch, the
beauty of the baud. We make use of a service already existing without paying for what could be dirt cheap if it wasn't run by profiteering gluttons, and you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat and lie to us and try to make us belive it is for our own
good, yet we're the ciminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.

I am a hacker, and this is my manifesto. You can't stop me, and you
certainly can't stop us all.

Triptomatic....

2005-07-18T21:49:00.000+08:00

I have a bad feeling about something. I may get caught within the next few days. Oh well.. (sigh)

I might as well comment on the PCIJ hack. I wasn't working for any political party, it was just something that I thought would be fun to do... (sigh)

Some of you may have seen the Mozcom and Digitelone tags that I did. Also was responsible for the DTI hack... (sigh)

And some people are so naive. Webservers are just the most visible way to prove that you hacked into a network... (sigh)

And there's so much more that I'm into... (sigh)

I guess I'm just someone who's into exploring... (sigh)

*slightly depressed*

Update:

Mozcom and Digitelone removed the tag pages. :)

Several days after I posted this entry, this came out. Well, like the guy said "the timing was uncanny" ;)

XSS BS....

2005-05-02T16:56:00.000+08:00

Did some XSS stuff...

Posted it on http://fnse.be.tt ...

Lame stuff...

Half-assed attempt at a serious advisory...

Half-assed attempt at being funny...

Makes a whole ass...

XSS is lame...

La lang...

Hind Site...

2005-04-30T15:55:00.000+08:00

Threw up a site for all of you. It's http://sysad.madpage.com Since I'm planning to planning to discontinue this blog in the near future, some of you might want to hang out there. Feel free to submit anything you want. It's on a free webhost (look ma, no banner ads!)so hax0r it all you want. Have fun!

The Salmon and the Werewolf....

2005-04-27T08:27:00.000+08:00

Edited out some ip's (even non-public ones) and some other stuff. Formatting sucks but it's readable...

******************************************************************************
ORACLE CONFIG
******************************************************************************

Foreground
AuthPort 1645
AcctPort 1646
LogDir /data/LOGFILE
DbDir /usr/local/etc/raddb
#SocketQueueLength 500000

<Log FILE>
Filename %L/%Y-%m-%d-%H-logfile.log
LogMicroseconds
Trace 4
</Log>
<Client localhost>
Secret ********
DupInterval 25
</Client>
<Client 210.14.**.*>
Secret ********
DupInterval 25
</Client>
<Client 210.14.**.**>
Secret *********
NoIgnoreDuplicates Access-Request
DupInterval 10
</Client>
<Client 202.57.***.***>
Secret ******
DupInterval 25
</Client>
<Client 202.57.***.**>
Secret ******
DupInterval 25
</Client>
<Client 210.14.*.**>
Secret *****
DupInterval 25
</Client>
<Client 210.14.*.**>
Secret ******
DupInterval 25
</Client>
<Client 210.14.**.*>
Secret ******
NoIgnoreDuplicates Access-Request
DupInterval 10
</Client>
#ip dial Malolos
<Client 10.255.*.*>
Secret ******
DupInterval 25
</Client>
#ip dial Cabanatuan
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial SFP
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Dagupan
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Baguio
<Client 10.255.*.***>
Secret ******
DupInterval 25
</Client>
#ip dial SFU
<Client 10.255.*.***>
Secret ******
DupInterval 25
</Client>
#ip dial Lucena
<Client 10.255.*.*>
Secret ******
DupInterval 25
</Client>
#ip dial Binakayan
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Batangas
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Iloilo
<Client 10.255.**.*>
Secret ******
DupInterval 25
</Client>
#ip dial Bacolod
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial GenSan
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Davao
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Tarlac
<Client 10.255.*.**>
Secret ******s
DupInterval 25
</Client>
#ip dial Cebu
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
#ip dial Calamba
<Client 10.255.*.**>
Secret ******
DupInterval 25
</Client>
<Client 202.57.***.***>
Secret ******
DupInterval 25
</Client>
<Client 210.14.**.**>
Secret *********
DupInterval 25
</Client>
<Client 210.14.**.***>
Secret *********
DupInterval 25
</Client>

<SessionDatabase SQL>
Identifier PREPAID
DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)
(HOST=192.168.***.***) (PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_prepaid
DBAuth ********
Timeout 200
FailureBackoffTime 90
AddQuery insert into RADONLINE(USERNAME, NASIDENTIFIER, NASPORT,ACCTSESSIONID,
TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE,CALLINGSTATIONID)
values ('%u', '%N', 0%{NAS-Port}, '%{Acct-Session-Id}',%{Timestamp}, '%{Framed-IP-Address}',
'%{NAS-Port-Type}','%{Service-Type}','%{Calling-Station-Id}')
</SessionDatabase>

<SessionDatabase SQL>
Identifier POSTPAID
DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)
(HOST=192.168.***.***) (PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth *************
Timeout 200
FailureBackoffTime 90
AddQuery insert into RADONLINE(USERNAME, NASIDENTIFIER, NASPORT,ACCTSESSIONID,
TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE,CALLINGSTATIONID,CALLEDSTATION)
values ('%u', '%N', 0%{NAS-Port}, '%{Acct-Session-Id}',%{Timestamp}, '%{Framed-IP-Address}',
'%{NAS-Port-Type}','%{Service-Type}','%{Calling-Station-Id}','%{Called-Station-Id}')
</SessionDatabase>

<SessionDatabase SQL>
Identifier PLAN
DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)
(HOST=192.168.***.***) (PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth *************
Timeout 200
FailureBackoffTime 90
AddQuery insert into RADONLINE(USERNAME, NASIDENTIFIER, NASPORT,ACCTSESSIONID,
TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE,CALLINGSTATIONID,CALLEDSTATION)
values ('%u', '%N', 0%{NAS-Port}, '%{Acct-Session-Id}',%{Timestamp}, '%{Framed-IP-Address}',
'%{NAS-Port-Type}','%{Service-Type}','%{Calling-Station-Id}','%{Called-Station-Id}')
</SessionDatabase>

<Handler Calling-Station-Id = "">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d\d\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Calling-Station-Id = "/^\d\d\d\d\d\d\d\d$/">
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

<Handler Realm=admin.pldtvibe.com>
RewriteUsername s/^([^@]+).*/$1/
MaxSessions 1
AcctLogFileName %L/ADMIN/%Y-%m-%d-detail
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-Address} NAS-Port=%{NAS-Port}
User-Name=%{User-Name} Called-Station-Id=%{Called-Station-Id}
Calling-Station-Id=%{Calling-Station-Id}
Acct-Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type}
Acct-Session-Id=%{Acct-Session-Id} Framed-Protocol=%{Framed-Protocol}
Framed-IP-Address=%{Framed-IP-Address} Acct-Session-Time=%{Acct-Session-Time}
<AuthBy FILE>
Filename %D/pldtusers
</AuthBy>
</Handler>

<Handler Called-Station-Id = "101388">
AccountingHandled
MaxSessions 1
SessionDatabase PLAN
AcctLogFileName %L/PLAN/%Y-%m-%d-detail
#PasswordLogFileName %L/PLAN/%Y-%m-%d-password
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-Address} NAS-Port=%{NAS-Port}
User-Name=%{User-Name} Called-Station-Id=%{Called-Station-Id}
Calling-Station-Id=%{Calling-Station-Id} Acct-Status-Type=%{Acct-Status-Type}
Service-Type=%{Service-Type} Acct-Session-Id=%{Acct-Session-Id}
Framed-Protocol=%{Framed-Protocol} Framed-IP-Address=%{Framed-IP-Address}
Acct-Session-Time=%{Acct-Session-Time} Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID}
Acct-Terminate-Cause=%{Acct-Terminate-Cause}
#PreAuthHook file:"%D/roaming.hook"
<AuthBy SQL>
AuthSelect select trim(PASSWORD), EXPIRATION, DEFAULTREPLY,time_func3_roam_rnd(username),
time_func3_roam_rnd(username) from pps_ppaid.pps_SUBSCRIBER where ROAMING_FLAG = '1'
and USERNAME = '%n' and plantype > 0
#AuthSelect select trim(PASSWORD), EXPIRATION, DEFAULTREPLY, SESSIONREPLY, SESSIONREPLY
from pps_ppaid.pps_SUBSCRIBER where ROAMING_FLAG = '1' and USERNAME = '%n' and
plantype > 0
#AuthSelect select trim(ENCRYPTED_PASSWORD), EXPIRATION, DEFAULTREPLY, SESSIONREPLY,
SESSIONREPLY from pps_ppaid.pps_SUBSCRIBER where ROAMING_FLAG = '1' and USERNAME = '%n'
AuthColumnDef 0, User-Password, check
#AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, Expiration, check
AuthColumnDef 2, GENERIC, reply
AuthColumnDef 3, Session-Timeout, reply
AuthColumnDef 4, Ascend-Maximum-Time, reply

DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) (HOST=192.168.***.***)
(PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth *************
Timeout 10
FailureBackoffTime 90
AccountingTable pps_ppaid.ACCOUNTING
AccountingStopsOnly
AcctColumnDef USERNAME,User-Name
AcctColumnDef TIME_STAMP_DATE,Timestamp,formatted-date,to_date('%e %m %Y %H:%M:%S',
'DD-MM-YYYY HH24 MI SS')
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef NASIDENTIFIER,NAS-IP-Address
AcctColumnDef NASPORT,NAS-Port,integer
AcctColumnDef CALLINGSTATIONID,Calling-Station-Id
AcctColumnDef CALLEDSTATIONID,Called-Station-Id
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctFailedLogFileName %L/CLUSTER/testnetra.prepaid.log
AcctLogFileFormat %{User-Name}|%m %d %Y %H:%M:%S|%{Acct-Status-Type}||||%{Acct-Session-Id}
|%{Acct-Session-Time} |%{Acct-Terminate-Cause}|%{NAS-IP-Address}|%{NAS-Port}
|%{Calling-Station-Id}|%{Called-Station-Id}|||%{Framed-IP-Address}
</AuthBy>
</Handler>

<Handler Called-Station-Id = "101355">
AccountingHandled
MaxSessions 1
SessionDatabase PLAN
AcctLogFileName %L/PLAN/%Y-%m-%d-detail
#PasswordLogFileName %L/PLAN/%Y-%m-%d-password
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-Address} NAS-Port=%{NAS-Port}
User-Name=%{User-Name} Called-Station-Id=%{Called-Station-Id} Calling-Station-Id=
%{Calling-Station-Id} Acct-Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type}
Acct-Session-Id=%{Acct-Session-Id} Framed-Protocol=%{Framed-Protocol}
Framed-IP-Address=%{Framed-IP-Address} Acct-Session-Time=%{Acct-Session-Time}
Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID}
Acct-Terminate-Cause=%{Acct-Terminate-Cause}
#PreAuthHook file:"%D/plannew.hook"
<AuthBy SQL>
AuthSelect select trim(PASSWORD), EXPIRATION, CLI, DEFAULTREPLY, time_func3_plan_rnd(username),
time_func3_plan_rnd(username) from pps_ppaid.pps_SUBSCRIBER where CLI='%{Calling-Station-Id}'
and USERNAME = '%n' and plantype > 0
#AuthSelect select trim(PASSWORD), EXPIRATION, CLI, DEFAULTREPLY, SESSIONREPLY, SESSIONREPLY
from pps_ppaid.pps_SUBSCRIBER where CLI='%{Calling-Station-Id}' and USERNAME = '%n' and
plantype > 0
#AuthSelect select trim(ENCRYPTED_PASSWORD), EXPIRATION, CLI, DEFAULTREPLY, SESSIONREPLY,
SESSIONREPLY from pps_ppaid.pps_SUBSCRIBER where CLI='%{Calling-Station-Id}' and
USERNAME = '%n'
AuthColumnDef 0, User-Password, check
#AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, Expiration, check
AuthColumnDef 2, Calling-Station-Id, check
AuthColumnDef 3, GENERIC, reply
AuthColumnDef 4, Session-Timeout, reply
AuthColumnDef 5, Ascend-Maximum-Time, reply

DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) (HOST=192.168.***.***)
(PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth *************
Timeout 10
FailureBackoffTime 90
AccountingTable pps_ppaid.ACCOUNTING
AccountingStopsOnly
AcctColumnDef USERNAME,User-Name
AcctColumnDef TIME_STAMP_DATE,Timestamp,formatted-date,to_date('%e %m %Y %H:%M:%S',
'DD-MM-YYYY HH24 MI SS')
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef NASIDENTIFIER,NAS-IP-Address
AcctColumnDef NASPORT,NAS-Port,integer
AcctColumnDef CALLINGSTATIONID,Calling-Station-Id
AcctColumnDef CALLEDSTATIONID,Called-Station-Id
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctFailedLogFileName %L/CLUSTER/testnetra.prepaid.log
AcctLogFileFormat %{User-Name}|%m %d %Y %H:%M:%S|%{Acct-Status-Type}|||
|%{Acct-Session-Id}|%{Acct-Session-Time} |%{Acct-Terminate-Cause}|%{NAS-IP-Address}
|%{NAS-Port}|%{Calling-Station-Id}|%{Called-Station-Id}|||%{Framed-IP-Address}
</AuthBy>
</Handler>

<Handler Called-Station-Id = "101333">
AccountingHandled
MaxSessions 1
SessionDatabase PREPAID
#RewriteUsername tr/A-Z/a-z/
AcctLogFileName %L/PREPAID/%Y-%m-%d-detail
#PasswordLogFileName %L/PREPAID/%Y-%m-%d-password
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-Address} NAS-Port=%{NAS-Port}
User-Name=%{User-Name} Called-Station-Id=%{Called-Station-Id} Calling-Station-Id=%{Calling-Station-Id}
Acct-Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type} Acct-Session-Id=%{Acct-Session-Id}
Framed-Protocol=%{Framed-Protocol} Framed-IP-Address=%{Framed-IP-Address} Acct-Session-Time=%{Acct-Session-Time}
Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID} Acct-Terminate-Cause=%{Acct-Terminate-Cause}
#PreAuthHook file:"%D/prepaid.hook"
<AuthBy SQL>
AuthSelect select trim(ENCRYPTED_PASSWORD), EXPIRATION, DEFAULTREPLY,
time_func3_prepd_rnd(username), time_func3_prepd_rnd(username)
from pps_prepaid.SUBSCRIBERS where USERNAME = '%n' and STATUS = '1'
#AuthSelect select trim(ENCRYPTED_PASSWORD), EXPIRATION, DEFAULTREPLY, SESSIONREPLY, SESSIONREPLY
from pps_prepaid.SUBSCRIBERS where USERNAME = '%n' and STATUS = '1'
AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, Expiration, check
AuthColumnDef 2, GENERIC, reply
AuthColumnDef 3, Session-Timeout, reply
AuthColumnDef 4, Ascend-Maximum-Time, reply

DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) (HOST=192.168.***.***)
(PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_prepaid
DBAuth ********
Timeout 10
FailureBackoffTime 90
AccountingTable pps_prepaid.ACCOUNTING
AccountingStopsOnly
AcctColumnDef USERNAME,User-Name
AcctColumnDef TIME_STAMP_DATE,Timestamp,formatted-date,to_date('%e %m %Y %H:%M:%S',
'DD-MM-YYYY HH24 MI SS')
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef NASIDENTIFIER,NAS-IP-Address
AcctColumnDef NASPORT,NAS-Port,integer
AcctColumnDef CALLINGSTATIONID,Calling-Station-Id
AcctColumnDef CALLEDSTATIONID,Called-Station-Id
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctFailedLogFileName %L/CLUSTER/testnetra.prepaid.log
AcctLogFileFormat %{User-Name}|%m %d %Y %H:%M:%S|%{Acct-Status-Type}||||%{Acct-Session-Id}
|%{Acct-Session-Time} |%{Acct-Terminate-Cause}|%{NAS-IP-Address}|%{NAS-Port}
|%{Calling-Station-Id}|%{Called-Station-Id}|||%{Framed-IP-Address}
</AuthBy>
</Handler>

<Handler Called-Station-Id = "101300">
AccountingHandled
SessionDatabase POSTPAID
RewriteUsername tr/A-Z/a-z/
AcctLogFileName %L/POSTPAID/%Y-%m-%d-detail
#PasswordLogFileName %L/POSTPAID/%Y-%m-%d-password
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-Address} NAS-Port=%{NAS-Port}
User-Name=%{User-Name} Called-Station-Id=%{Called-Station-Id} Calling-Station-Id=%{Calling-Station-Id}
Acct-Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type} Acct-Session-Id=%{Acct-Session-Id}
Framed-Protocol=%{Framed-Protocol} Framed-IP-Address=%{Framed-IP-Address}
Acct-Session-Time=%{Acct-Session-Time} Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID}
Acct-Terminate-Cause=%{Acct-Terminate-Cause}
#PreAuthHook file:"%D/updatesessiontime.hook"
AuthByPolicy ContinueWhileReject
<AuthBy SQL>
AuthSelect select trim(ENCRYPTED_PASSWORD), EXPIRATION, CLI, DEFAULTREPLY,
time_func3_RND(cli), time_func3_RND(cli)
from pps_ppaid.pps_SUBSCRIBER where CLI='%{Calling-Station-Id}' and
USERNAME = '%n' and plantype = 0
#AuthColumnDef 0, User-Password, check
AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, Expiration, check
AuthColumnDef 2, Calling-Station-Id, check
AuthColumnDef 3, GENERIC, reply
AuthColumnDef 4, Session-Timeout, reply
AuthColumnDef 5, Ascend-Maximum-Time, reply

DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) (HOST=192.168.***.***)
(PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth *************
Timeout 10
FailureBackoffTime 90
AccountingTable pps_ppaid.ACCOUNTING
AccountingStopsOnly
AcctColumnDef USERNAME,User-Name
AcctColumnDef TIME_STAMP_DATE,Timestamp,formatted-date,to_date('%e %m %Y %H:%M:%S',
'DD-MM-YYYY HH24 MI SS')
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef NASIDENTIFIER,NAS-IP-Address
AcctColumnDef NASPORT,NAS-Port,integer
AcctColumnDef CALLINGSTATIONID,Calling-Station-Id
AcctColumnDef CALLEDSTATIONID,Called-Station-Id
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctFailedLogFileName %L/CLUSTER/testnetra.postpaid.log
AcctLogFileFormat %{User-Name}|%m %d %Y %H:%M:%S|%{Acct-Status-Type}||||%{Acct-Session-Id}
|%{Acct-Session-Time} |%{Acct-Terminate-Cause}|%{NAS-IP-Address}|%{NAS-Port}
|%{Calling-Station-Id}|%{Called-Station-Id}|||%{Framed-IP-Address}
</AuthBy>
<AuthBy SQL>
AuthSelect select trim(ENCRYPTEDPASSWD), DEFAULTREPLY, SESSIONREPLY, SESSIONREPLY from
pps_ppaid.SUBSCRIBERS where USERNAME='%n'
#AuthColumnDef 0, User-Password, check
AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, GENERIC, reply
AuthColumnDef 2, Session-Timeout, reply
AuthColumnDef 3, Ascend-Maximum-Time, reply

DBSource dbi:Oracle:(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) (HOST=192.168.***.***)
(PORT=1521)) (CONNECT_DATA=(SID=pps)))
DBUsername pps_ppaid
DBAuth **********
Timeout 10
FailureBackoffTime 90
AccountingTable pps_ppaid.ACCOUNTING
AccountingStopsOnly
AcctColumnDef USERNAME,User-Name
AcctColumnDef TIME_STAMP,Timestamp,integer
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef NASIDENTIFIER,NAS-IP-Address
AcctColumnDef NASPORT,NAS-Port,integer
AcctColumnDef CALLINGSTATIONID,Calling-Station-Id
AcctColumnDef CALLEDSTATIONID,Called-Station-Id
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctFailedLogFileName %L/CLUSTER/testnetra.postpaid.log.
AcctLogFileFormat %{User-Name}|%m %d %Y %H:%M:%S|%{Acct-Status-Type}||||%{Acct-Session-Id}
|%{Acct-Session-Time} |%{Acct-Terminate-Cause}|%{NAS-IP-Address}|%{NAS-Port}
|%{Calling-Station-Id}|%{Called-Station-Id}|||%{Framed-IP-Address}
</AuthBy>
</Handler>

<Handler>
<AuthBy FILE>
Filename %D/rejected.users
</AuthBy>
</Handler>

******************************************************************************
SQL DUMP (Not part of oracle config)
******************************************************************************

-- MySQL dump *.**
--
-- Host: localhost Database: adminDB
---------------------------------------------------------
-- Server version *.**.**

--
-- Table structure for table 'ACCOUNTING'
--

CREATE TABLE ACCOUNTING (
USERNAME char(50) NOT NULL default '',
TIME_STAMP int(11) default NULL,
ACCTSTATUSTYPE char(10) default NULL,
ACCTDELAYTIME int(11) default NULL,
ACCTINPUTOCTETS int(11) default NULL,
ACCTOUTPUTOCTETS int(11) default NULL,
ACCTSESSIONID char(30) default NULL,
ACCTSESSIONTIME int(11) default NULL,
ACCTTERMINATECAUSE int(11) default NULL,
NASIDENTIFIER char(50) default NULL,
NASPORT int(11) default NULL,
FRAMEDIPADDRESS char(22) default NULL,
CALLEDSTATIONID char(20) default NULL,
CALLINGSTATIONID char(20) default NULL,
KEY ACCOUNTING_I (USERNAME)
) TYPE=MyISAM;

--
-- Dumping data for table 'ACCOUNTING'
--

INSERT INTO ACCOUNTING VALUES ('*******',0,'Stop',NULL,NULL,NULL,'00001234',1000,NULL,'203.63.***.*',
1234,'202.163.***.***','123456789','987654321');

etc....

CREATE TABLE SUBSCRIBERS (
USERNAME char(15) NOT NULL default '',
PASSWORD char(30) default NULL,
ENCRYPTEDPASSWORD char(30) NOT NULL default '',
EXPIRATION char(12) binary default '*** * 2005',
DEFAULTREPLY char(200) binary default 'Service-Type = Framed-User,Framed-Protocol = PPP,
Framed-MTU = 1500,Framed-Compression = Van-Jacobson-TCP-IP',
FRAMEDIP char(20) binary default '0.0.0.0',
SESSIONREPLY char(7) default NULL,
USEDTIME int(11) default NULL,
MAXTIME int(11) default NULL,
STATUS char(1) binary default '0',
DATEACTIVATION date default NULL,
COMMENT char(100) default NULL,
COMPANYNAME char(50) default NULL,
UNIQUE KEY USERNAME_I (USERNAME)
) TYPE=MyISAM;

--
-- Dumping data for table 'SUBSCRIBERS'
--

INSERT INTO SUBSCRIBERS VALUES ('****','*********','**********','*** ** 2005','Service-Type = Framed-User,
Framed-Protocol = PPP, Framed-MTU = 1500,Framed-Compression = Van-Jacobson-TCP-IP',
'202.***.***.***',NULL,NULL,NULL,'1',NULL,NULL,'eREBZ');
INSERT INTO SUBSCRIBERS VALUES ('****','**********','**********','**** ** 2006','Service-Type = Framed-User,
Framed-Protocol = PPP,Framed-MTU = 1500, Framed-Compression = Van-Jacobson-TCP-IP',
'202.***.***.***',NULL,NULL,NULL,'1',NULL,NULL,'eREBZ');

etc....

Look at the moon. It's weird...

2005-04-26T21:00:00.000+08:00

--Well, the "project" has been called off. I gues none of us really wanted to push through with it. Why perpetuate the negative image of the hacker anyway, just to prove to ourselves the extent of control we have. Oh well..

--Choke Points in the Phil. Information Highway. Shut down the few major isp's we already have admin access to. Most isp's are quite dependent on the major ones anyway. And the rest are quite vulnerable too, especially to DDoS attacks. There are a lot of outdated routers out there. Not to mention TCP/IP flaws.

--So I guess I'm just going to fade away into the background. The fun was in learning stuff anyway. Once you get root or admin access there's really nothing much else to do. There's not much difference among linux distro's anyway. :) But I guess I'll always be a hacker. Besides, I still have to log on to my r00ted systems to check my logs and make sure everything is running smoothly. :)

--A friend gave me some wise advice about this blog. He said I was giving away too much personal info in here like, all the police have to do is search for the pc's which have ubuntu installed on them. Lolz. Sometimes I get so drunk, I want to to sms in my real name and address here, just for kicks. Lolz. Wonder how that would feel in the morning.

--So maybe I'll just do some more things before I really give up this blog. Like annoy some people. Lolz. I really don't know, maybe irritate some DOST guys, those ePLDT/Infocom people, whatever. Lolz. Somebody tell the sysad of the machine hosting the NBI site to view some pic in the /tmp! Hehehe. Maybe I'll put myself in the zone-h top 10. :) All I have to do is hit one of those hosting companies advertising "we have over 1,000 sites hosted". Hehe, I'll probably look into that but those networks are typically more secure than a government one. :) Oh, and maybe rant out against the "XSS is a vulnerability" people. XSS, IMHO, is not a serious vulnerability. Hehe.

--So I guess I'll start with http://forum.domains.ph They already updated it, they said. :)

Maxi Pad...

2005-04-26T14:42:00.000+08:00

Some stuff sent in by ize****. This guy is building the foundation for future voip 0wnag3 in the Philippines. Hehehe.

Hoax for your opinion?

2005-04-21T16:20:00.000+08:00

er, Hoax = who asked. Hehe, bad pun, I'm not that imaginative today...

In the news today.

"We have no plans to go after the guy who did it. We just updated and patched the software. We're just going to make sure that this won't happen again."

[Hehe, good!]

This is funny as hell.

"This [defacement] is a hoax because there is no effect [on] our website" Pagkalinawan said.

(The hacker didn't touch the index page, he just installed his tag page.)

Hehe, in that case, I almost never hacked anything because almost eveything I've done "had no effect" on websites, everything was just a hoax.

Hehe, tadew!

Cisco po!

2005-04-18T14:45:00.000+08:00

To the one who requested the sample cisco config, here it is...
Edited out some ip's and some hashes... Any similarity to any existing config is strictly coincidental. :P

Current configuration : 11678 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname PHTEAM
!
boot system flash disk2:c7200-is-mz.122-13.ZD1.bin
enable secret 5
!
clock timezone PHT 8
aaa new-model
!
!
aaa group server radius infoddu
server 202.57.**.*** auth-port 1645 acct-port 1646
!
aaa group server radius infocom
server 203.172.**.*** auth-port 1645 acct-port 1646
server 202.163.**.*** auth-port 1645 acct-port 1646
server 203.172.**.*** auth-port 1645 acct-port 1646
!
aaa authentication login default line
aaa authentication login vty-con line
aaa authentication ppp infocom group infocom
aaa authentication ppp infoddu group infoddu
aaa authorization network infocom group infocom
aaa authorization network infoddu group infoddu
aaa accounting exec infocom start-stop group infocom
aaa accounting exec infoddu start-stop group infoddu
aaa accounting network infocom start-stop group infocom
aaa accounting network infoddu start-stop group infoddu
aaa session-id common
ip subnet-zero
!
!
ip cef
ip finger
ip domain name info.com.ph
ip name-server 203.172.25.21
ip name-server 202.57.96.4
!
vpdn enable
!
vpdn-group BACOLOD
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname BACOLOD_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group BAGUIO
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname BAGUIO_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group BATANGAS
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname BATANGAS_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group BINAKAYAN
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname TIGRIS_BINAKAYAN
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group CABANATUAN
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname expertcbn
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group CISCO-DAVAO
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname DVO_TIGRIS
lcp renegotiation on-mismatch
l2tp tunnel password 7
l2tp tunnel receive-window 64
!
vpdn-group DAGUPAN
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname DGP_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group EXPERT_TARLAC
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname experttarlc
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group GENSAN
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname GENSAN_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group ILOILO
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname ILOILO_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group LUCENA
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname LUCENA
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group MALOLOS
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname MLL-INFOCOM
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group PLDT-INFOCOM3
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname jne-infocom3
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group PLDT-INFOCOM4
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname jne-AS5300-2
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group SFP
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname SFP_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group SFU
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname SFU_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group SUBIC
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname INFOCOM_SUBIC
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
(whew! haba pla neto, hehe)
vpdn-group TARLAC
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname TARLAC_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group TIGRIS-CALAMBA
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname CALAMBA_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group TIGRIS-INFOCOMCEBU
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname CEBU_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group TIGRIS-MAKATI
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname MAKATI_TIGRIS1
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group TIGRIS-MAKATI2
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname MAKATI_TIGRIS2
lcp renegotiation on-mismatch
l2tp tunnel password 7
!
vpdn-group ZAMBOANGA
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname infoc_zambo
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group expertbats
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname expertbats
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group expertlpz
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname expertlpz
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group expertmalolos
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname expertmalolos
lcp renegotiation always
l2tp tunnel password 7
!
vpdn-group expertzbd
accept-dialin
protocol l2tp
virtual-template 6
terminate-from hostname expertzbd
lcp renegotiation always
l2tp tunnel password 7
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
mta receive maximum-recipients 0
!
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface GigabitEthernet0/2
description *** Connects to Chronicles GE4/6 ***
ip address 202.57.**.*** 255.255.255.224
duplex full
speed 1000
media-type gbic
negotiation auto
!
interface GigabitEthernet0/3
no ip address
shutdown
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface Virtual-Template1
no ip address
!
interface Virtual-Template5
description *** Dedicated Dialup ***
ip unnumbered GigabitEthernet0/2
no peer default ip address
ppp authentication pap infoddu
ppp authorization infoddu
ppp accounting infoddu
ppp ipcp dns 203.172.**.*** 202.57.**.***
!
interface Virtual-Template6
description ***PROVINCIAL IP-DIAL***
ip unnumbered GigabitEthernet0/2
ip mroute-cache
peer default ip address pool infocom-pool-provincial
ppp authentication pap infocom
ppp authorization infocom
ppp accounting infocom
ppp ipcp dns 203.172.**.*** 202.57.**.***
!
router ospf 100
log-adjacency-changes
auto-cost reference-bandwidth 1000
summary-address 202.163.240.0 255.255.255.0
summary-address 203.172.27.0 255.255.255.0
summary-address 203.172.15.0 255.255.255.0
summary-address 202.163.230.0 255.255.255.0
summary-address 202.163.249.0 255.255.255.0
summary-address 203.131.73.0 255.255.255.0
summary-address 222.126.65.0 255.255.255.0
summary-address 222.126.66.0 255.255.255.0
summary-address 222.126.67.0 255.255.255.0
summary-address 222.126.68.0 255.255.254.0
summary-address 222.126.70.0 255.255.254.0
summary-address 222.126.77.0 255.255.255.0
redistribute connected subnets
redistribute static subnets
network 202.57.124.0 0.0.0.255 area 0
!
ip local pool infocom-pool-provincial 203.172.27.1 203.172.27.254
ip local pool infocom-pool-provincial 203.172.15.1 203.172.15.254
ip local pool infocom-pool-provincial 202.163.249.1 202.163.249.254
ip local pool infocom-pool-provincial 202.163.230.1 202.163.230.254
ip local pool infocom-pool-provincial 203.131.73.1 203.131.73.254
ip local pool infocom-pool-provincial 222.126.65.1 222.126.65.254
ip local pool infocom-pool-provincial 222.126.66.1 222.126.66.254
ip local pool infocom-pool-provincial 222.126.67.1 222.126.67.254
ip local pool infocom-pool-provincial 222.126.68.1 222.126.69.254
ip local pool infocom-pool-provincial 222.126.70.1 222.126.70.254
ip local pool infocom-pool-provincial 222.126.71.1 222.126.71.254
ip local pool infocom-pool-provincial 222.126.77.1 222.126.77.254
ip classless
no ip http server
!
!
!
access-list 44 deny any
access-list 45 permit 202.57.125.200
access-list 77 permit 202.57.124.9
access-list 88 permit 202.163.253.134 log
access-list 88 permit 202.163.253.131 log
access-list 88 permit 203.172.25.2 log
access-list 88 permit 202.57.124.10 log
access-list 88 permit 202.57.124.9
access-list 88 permit 203.172.11.230 log
access-list 88 permit 202.163.234.8 log
access-list 88 permit 203.172.11.193 log
access-list 88 permit 203.172.11.220 log
access-list 88 permit 202.57.96.80 log
access-list 88 permit 202.57.101.85 log
access-list 88 permit 202.57.96.85 log
access-list 88 permit 202.57.96.84 log
access-list 88 permit 202.57.96.90 log
access-list 88 permit 203.172.31.177 log
access-list 88 permit 202.57.96.89 log
access-list 88 permit 210.14.16.25 log
access-list 88 deny any
access-list 99 permit 203.172.11.64 log
access-list 99 permit 202.57.124.10 log
access-list 99 permit 202.57.124.9 log
access-list 99 permit 202.163.234.8 log
access-list 99 permit 202.57.124.27 log
access-list 99 permit 192.168.1.254 log
access-list 99 permit 203.172.11.244 log
access-list 99 permit 203.172.11.220 log
access-list 99 permit 202.57.96.84 log
access-list 99 deny any
access-list 109 permit ip 203.131.75.0 0.0.0.255 any
access-list 111 permit ip any any
!
route-map proxy-redir permit 10
match ip address 109
set ip default next-hop 203.172.11.217
!
route-map proxy-redir permit 20
match ip address 111
!
snmp-server community RO 99
snmp-server community RO 99
snmp-server community RO 77
snmp-server enable traps tty
!
radius-server host 202.57.**.*** auth-port 1645 acct-port 1646 key 7
radius-server host 203.172.**.*** auth-port 1645 acct-port 1646 key 7
radius-server host 203.172.**.*** auth-port 1645 acct-port 1646 key 7
radius-server host 202.163.**.*** auth-port 1645 acct-port 1646 key 7
radius-server authorization permit missing Service-Type
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
gatekeeper
shutdown
!
banner login ^C
******************************* WARNING!!! ***********************
This is a private property of eREBZ, Inc. If you have accessed this facility by mistake, please disconnect immediately. Unauthorized access to this system may subject you to disciplinay action and criminal prosecution.
*****************************************************************************

P H T E A M

^C
!
line con 0
password 7
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 88 in
exec-timeout 5 0
password 7
!
ntp authentication-key 1 md5
ntp authenticate
ntp trusted-key 1
ntp clock-period 17179982
ntp access-group peer 45
ntp access-group serve 44
ntp update-calendar
ntp server 202.57.**.*** key 1
!
end

(whew!, haba!)

Packs, not Nacks...

2005-04-15T10:11:00.000+08:00

Interesting info, get it here.

Shoutoutz to:

b** - php guru, one of the nicest and most talented persons i've met on irc.

iz***** - the only person i know who has physical access to a Single System Image cluster

e-*** - refreshing talks on how to hack using packet injection

phteam crue - punkass attitude

Bite the Clouds...

2005-04-11T08:57:00.000+08:00

Decided to revert to my old configuration of having only 3 OS's installed on my hard disk namely win2k, Red Hat, and probably FreeBSD. It's only a 10 gig hd and it's not practical for me to install another OS like Ubuntu since I'm running out of space. I need the win2k for Photoshop, Autocad, Acid, Leaf Drums and all the other apps that's windows based. Not to mention the mp3's and p0rn :). I might not even install the fbsd anymore, the version i have is only 4.3 and it really sucks when compared to the linux I have. One cool thing about it though is the Enlightenment window manager, which is one weird mother.

The Ubuntu install hosed my windows OS. I can mount it from linux but I can't boot into it. It looked something like this. Apparently, they designed the 2.6 kernel to nuke any windows installed on the same hard disk. :) The solution posted there didn't work for me and playing around with sfdisk eventually screwed up my partition table.

Had fun over the weekend. Played around with some sites. Something like this

Blogger has been acting weird lately...

untitled

2005-04-10T02:21:00.000+08:00

Partition nuked. This shit is killing me. I'll have to reinstall everything. Damn geometry bug.

untitled

2005-04-08T22:02:00.000+08:00

In a bar, drunk :) :P Ksama ko isang bading ska isang tsik. Sna d ako malasing myado bka marape :)

Big Mac...

2005-04-06T17:50:00.000+08:00

-- Hehehe, funny day at work. Our supervisor decided to deny internet access to certain people at the office since he thought that they were spending too much time online instead of working. One of my co-workers had been caught chatting when one message popped up on his screen while the supervisor was beside him discussing something. I myself had been warned not to work on the "unofficial" website I was making for the company during work hours.The supervisor talked to our IT guy and I overheard the IT guy said that the only way to be selective in denying access to certain people would be to physically unplug the network cable(!). I got the idea to just block ceratin mac addresses at our modem, which had this feature. I didn't tell anyone at first and decided to test it on the supervisor's pc. Pretty soon the IT guy was called in by the supervisor to fix his "internet outage". I watched him go to the sup's office, try something, go to another workstation, check if indeed the rest of the office was online, go back to the sup's pc, go back out again. He even borrowed an antivirus installer from me since he thought that some kind of virus must have trashed the sup's pc. Anyway, after several hours of watching him go back and forth I decided to restore the sup's connection. Later on I found out from the IT guy that I wasn't on the list of people whose internet access was about to get pulled. He asked me if I knew how to selectively block access to the internet. Lolz. I volunteered my help and asked him for the list of people to block and reconfigured the modem again. He wanted to know how I did it but I didn't want to tell him since that way my access can't be arbitrarily blocked by him. I also don't quite trust him to reconfigure the modem on his own since he looked blank when I mentioned ARP, he doesn't even know what mac addresses are. I told him to google for "big mac". Lolz.

-- My home system is trashed ( karma? :) ). I was trying to fit win2k, win98(since I can boot in to this also from the win2k boot menu), Freebsd, Red Hat, and Ubuntu on a 10 gig hard disk! Lolz. I broke several installs running out of disk space since I miscalculated the sizes I would need when I partitioned the disk. Hehehe. Ubuntu is my newest distro and also my first debian based system. Once I repartition and sucessfully reinstall it anyway. Heh.

-- wtf. Some messages I've been sms'ing in didn't appear on this blog. ftw.

-- Hehehe. Holiday this coming saturday. Sleep. Go out. Meth up. Hang out. Sarap. I've been working straight through this past few weeks. Usually I'd be absent one or two days out of a week. Which is why I got suspended. Lolz.

fuck you, fuck me, fuck everybody. Lolz.

untitled

2005-04-04T06:29:00.000+08:00

Small world. Pisay sucks. Masay rules. Lolz. SJ k rin pla. Cno prime ngaun? Tagal n ko d npunta UP

Rebwisited...

2005-03-31T18:26:00.000+08:00

I just revisted the WebAPP site. They've patched the flaws that were present last time. Although they missed a XSS hole. Basically registered users can put something like this " <img src="http://www.web-app.org/images/forum/smilies/grin.gif" onload='alert("Rebarz99 got your cookies"+document.cookie)'> " as their signature in their profile. When they post a comment in any of the forums, anyone who views the comments will have their cookies pop up. Webapp filters <script> tags but this kind of filtering can be bypassed. I haven't examined the latest version they've put out. Some vulnerabilities may still be left. :P

Misc: http://www.dilg.gov.ph/index.cfm?fuseaction=<script>alert('Eat_my_fucking_shorts!')</script>

http://www.ncc.gov.ph/announcements.php?seq=235'<iframe%20width="100%"%20height=100%"%20src=http://rebarz99.blogspot.com/>

untitled

2005-03-29T20:14:00.000+08:00

yomama sofat

Lenora....

2005-03-28T18:15:00.000+08:00

Lenora. I was going to install Gforge on my pc. I wanted to know how it works since I'm targetting a foreign development machine which had Gforge installed on it. Bad vibes right from the start. I couldn't download the latest version since it won't fit on a diskette. Lolz. I had to settle for the 3.* release which is far behind the current 4.* release. The thing had a psql backend for its database which sucks since I mostly work with mysql. I ended up spending some time puzzled why the postmaster won't open any ports. Apparently you have to specify the -i switch when starting the daemon manually from the command line so that it will accept tcp/ip connections. Gforge is quite picky too when it comes to the web root. It won't easily settle for an rb9.com/rb9/test/gforge/www, it wants the rb9.com/ root dir. I ended up setting a vhost for it although with a few hiccups. When I got it installed half the page was filled with php warnings about some missing non-essential file in the include dir. I edited php.ini to set the error level. I think I can set the php error reporting in the apache config specific to the site. I need full error warnings for the other software I'm, er, testing. Anyway, by the time it looked good I decided to go to sleep. Heh. Btw. If anybody's up to it, try to gain access to http://starship.python.net/. Lots of serious developers in there. This may help you out.

Update: http://sourceport.dost.gov.ph/project/showfiles.php?group_id=<iframe%20width="100%"%20height=100%"%20src=http://rebarz99.blogspot.com/> . I guess this site is running gforge. Lolz.

Arenola. Wordpress blogging software bug. Read it here . You can test it here, there, somewhere, or most any other wordpress blog. Wordpress seems to be popular among pinoy techies. :)

Areola. Made some headway in the lisp variant thang I was doing. :) Emailed it an acquaintance for testing. Which is why I'm online today. Lolz. Inq7 news feed seems to be holding up. If anybody wants it for their site just stick something like " <span ><script type="text/javascript" src="http://www.pilnet.com/news.htm"></script></span> " into your html code. Oh, and if you hack the site hosting the script, you can make something like "Rebarz99 Sucks!" appear on this blog. Lolz. That would be so fucking cool. Heh.

Ebola. Busy with work. Need to finish lots of stuff. Need beer. :) Sometimes I wonder why I wonder why I bother with the tech/hack stuff. I mean, I'm not an IT grad so I won't be able to shift careers since nobody in their right minds would hire me for IT work. Oh well. At least I'm learning stuff.

Just rambling. As always.

Gotta get drunk...

2005-03-26T23:28:00.000+08:00

Weird. When I don't feel like it, somebody's always inviting me to go drinking. Now that I want to get drunk, there's nobody to get drunk with. Heh. Sometimes I wish it was like in the States where you could just go to a bar alone and get drunk. Here, if you get seen drinking alone, they assume you have an "unbearable problem". Heh.

Warriors

2005-03-26T01:23:00.000+08:00

Warriors don't go into battle because they wish to die. Rather it's because they recognize what they are and accept their fate.

untitled

2005-03-25T18:56:00.000+08:00

Hmm, shops are closed. Weird vibe on the streets, people w/ nothing to do or places to go to.

untitled

2005-03-24T21:59:00.000+08:00

*edited out* (Wrong send, hehehe)

untitled

2005-03-23T08:27:00.000+08:00

Good morning to all. Here in the ofc, already on my 2nd cup of coffee :)Gotta work on dis LISP thang

untitled

2005-03-22T23:22:00.000+08:00

Malupa... I bring a sense of earthiness. Not a yuppie. Balls, brains, ethics, hunger. Gutter Hacker.

untitled

2005-03-22T21:56:00.000+08:00

NBI site got hacked. Went thru ptt.net.ph/forum/ hosted on same servr. :) on d bus and bloggng. geek!

untitled

2005-03-22T21:43:00.000+08:00

Hehe, this is cool, blogging w/ my cellfone. :) All the BS aside, this s why I hack. I luv the tech.

Haxomeni...

2005-03-22T18:34:00.000+08:00

Hehehe, my sms blog entry got published. No messing with with wap or gprs.Although I think it's time to have my imei changed. I have it changed regularly. There's a limited amount of characters when blogging through sms, although that way I can be more spontaneous with my entries.

Been busy this past few days(weeks?). Actually, I got suspended from work for several days due to tardiness and too many AWOL's. I blame it on the late nights spent studying :) . Trouble was my work piled up during the times I wasn't at work so I had a lot of pending stuff. When my supervisor warned me I might get suspended I said "Ok, you can suspend me but I'll work without pay just to clear my pending activities." And that's what happened. My officemates were laughing saying when I'm supposed to go to work, I don't, but when I'm not supposed to be at work, I show up at the office anyways. I still find it quite funny though that the infraction of not showing up for work carries the penalty of being forced not to show up at work at all. It's like, if I get caught for hacking, my punishment would be to do more hacking. :)

Our company hired an IT guy, a fresh grad from AMA. Doesn't know linux, of course :). He's doing the company network. Talked to him, he said that he preferred using a router instead of just a hub in our lan. Turns out he was after the DHCP capabilities of the router because he doesn't know how to set ip addresses manually. Decision's still up in the air, but word is we might get an internet connection in our office. woohoo! I plan on downloading all the iso's I want :) and p0rn... Lolz

Been updating this blog's layout. Added some scripts, links, etc. I wanted a news feed from inq7 but they don't seem to offer any on their site. So I made a script which will parse their site and spit out blog-friendly links. Except that it is so fucking screwed, too dependent on what inq7 puts on their site, that a simple formatting error will screw it up. I've been having trouble with new lines :( The script is hosted at http://www.pilnet.com/ which was "kind" enough to volunteer their site. Lolz.

I was going to replace the grub splash image of my pc at home. I decided it would be cool to have a BSD logo alongside the RH logo so I decided to look for BSD-ish images in my BSD partition. Except that I can't fucking mount it. About a month ago i thoroughlly hosed my linux system playing around with a binary injecting prog, which i was gonna use for the rootkit I was planning to build. My system got screwed so i had to reinstall. I recompiled the kernel because the release I had had only a 2.4 kernel and I wanted to use a 2.6 which is way faster. I used a .config file which I had generated before, which was my "everything stripped down" config file so it didn't have support for BSD file systems. Nyah.

untitled

2005-03-22T17:44:00.000+08:00

Blogging w/ my 3310 Hey, I'm taking a shit and blogging at the same time! :)

Vibe Network....

2005-03-14T19:18:00.000+08:00

This is the kind of knowledge a hacker wants but what the isp's don't really give out. A network diagram of a working system.

viberb9.ppt

Internal report : A Repost...

2005-03-13T20:25:00.000+08:00

This was originally posted on a forum site I set up which briefly existed a while ago...

======================================================

Hacking

Toshi and ELS met with ePLDT’s technical team regarding the hacking incident. Toshi and ELS expressed their disappointment on ePLDT for not replying to their emails.

ePLDT reportedly still uses Telnet rather than the more secure SSL to access the servers.

Toshi also reported that GRIC failure due to the firewall. This resulted to 4 days of GRIC revenue lost.Dennis Villanueva will be handling security for Vitro.

Army websiteArmy website was hacked again. It was agreed that RRC will check if Army’s billing is current. If not, the Army website will be turned off. We then move them to a more secure server once they settle.

TMG staff will be requested to stay away from hacker sites and avoid releasing any information that may compromise our network’s security.

ELS will provide CBL with a summary of all of our comments and complaints to be forwarded to ePLDT heads.

*ELS = Edwin L. Santos, guy in charge of network security

======================================================

Some other non-hacking related company stuff included in the report...

Leftovers...

2005-03-13T20:12:00.000+08:00

Leftover tag pages from a server...

Standard tag page on all of them..

Co-hosting: One hack fits all.

http://e.marikina.gov.ph/marikina.htm
http://www.lra.gov.ph/lra.htm
http://www.netopia.ph/netopia.htm

Hacker Crackdown...

2005-03-11T23:07:00.000+08:00

Original artcle posted here.

So, what else is new? There's always a standing order to go after hackers. Several investigations are already underway. They think that a press release like this one will scare off hackers? How naive of them. Reyes, like many others, simply do not know much about the underground hacker culture and how much of the Phil. cyberspace is already Own3d. This is just a lot of B.S. intended to drum up support for the cybercrime law amendments which, when it do get passed, will have no realistic impact on securing the nation's cyberspace whatsoever.

Misc:

D:\INETPUB\WWWROOT\SERVERS\PRODATA\WEB\DILG\

Further Down the Path...

2005-03-11T19:47:00.000+08:00

Another decision made...

Because I cannot deny what I am...

Because I cannot ignore my fate...

My right to explore cannot be inhibited by anyone...

My desire to learn overrides laws set by man...

My addiction, my joy, my blackness,
my being, my void, my clarity,

My sacrifice...

I don't have anything to prove anymore...

This time it will be pure...

Leggo My Eggo...

2005-03-09T17:40:00.000+08:00

-- Installed hits counter on this blog, I'm curious as to how many people really do visit this blog. I might also add a poll. I'm curious as to how many pepole think....

-- Mountain Dew is addictive? I must have drunk 10 bottles a day sometimes... Drunk 3 straight cups of coffee yesterday at the office. I was bouncing off the freaking walls. I was singing ...

--Linkin Park songs. I was zoning out on them for the past two weeks. Especially "Breaking the Habit". I might post the lyrics on ....

--rb9security.com. I keep wanting to install some type of portal on this domain. Trouble is it might get cancelled at any time, so all my effort to improve the site just might go down the drain. I want to post links on this site regarding...

--Hacking. Oh, and the site on my previous post is just an old tag. I don't really work there. Read the small print. Hehehee

Update:

-- rb9security.com got cancelled. :(
-- installed a second message board since tag-board seems to be always down.
-- registered a new doamin for free. It's http://supersuck.it.tt/ Lolz. Nice name ain't it?

I mean business...

2005-03-07T20:18:00.000+08:00

I have a new job!
www.business.gov.ph

Hehehe, nah, just one of my old tag pages.

I Misc. You...

2005-03-07T00:00:00.000+08:00

Some misc. stuf...

- Downloaded ubuntu live cd, got home , found the image was corrupted probably during downloading :(

- Somebody gave me a CC on irc. I thought it was one of those invalid ones. I tried registering a domain and just typed in the first thing that came to my head. I didn't even record the CC details. But it worked! So now I'm stuck with http://rb9security.com. I couldn't even add some services I wanted because I get asked for some of the CC details which I don't have. If anybody wants an email add of you@rb9security.com, ask me for it. I have 25 alloted to me, I think. You could probably use it for a week since carded domains usually gets cancelled once the CC owner discover it.

- On a related subject, a lot of hackers look down on carding which is a totally different side of hacking. I don't do it myself except just to try something new once in a while. I have never carded any items in my life. Those who know me can attest to this. But I don't condone it. I've suffered enough from being judged by people who do not understand the reasons behind the hacking stuff that I did, so who am I to pass judgement on the people who do stuff I don't really like doing myself. A lot of my online friends are carders and they're all nice people. I'd like them to stop carding but maybe I just don't fully understand their motivations for carding.

- For some strange reason I keep daydreaming about Baler beach in Aurora and how I'd like to go back there. It's the best beach I've ever been to. Didn't get the chance to surf there. It was COLD in the evening, and it's one of the windiest beach in the country. Travel to and fro there was an adventure in itself. The mayor, which we met, said he sleeps on the floor at night, probably as a "makamasa ako" gimmick. Nice fellow though, got us drunk.

- Went to Luneta just to get some feel of open space, it gets really crowded here in manila. Threw rocks at the pigeons, didn't get to hit any :(

La Salsalista...

2005-03-06T23:55:00.000+08:00

http://www.dls-csb.edu.ph/

Unprotected site some local hackers have been playing around with. Went offline during the weekend. Either the admin discovered the flaw or the machine got unplugged for the weekend.

Update:

The admin fixed it. Next time I'm posting screen shots. :) Actually, it was me who hacked it. Just put in some greetz to the PHTEAM members.

Random Telnets...

2005-03-06T23:49:00.000+08:00

telnet 203.177.58.33 and hit enter. Type "h" for help. Some kind of modem/router thingy.

Device : LA-110 , RAD Data Communication,Ltd.
Name : LA110
Date : MAR. 06, 2005
Time : 17:46:23
ATM port interface : SHDSL
System clock : Internal
Board revision : LA-111 REV 0.0
Loopback : none
Boot version : 2.31.0.0
Software version : 2.38 SHDSL

Several of these on the subnet.

Hmm, I wonder if this can be classified as hacking?

I can handle the truth....

2005-02-27T20:12:00.000+08:00

Hmm, a lot of people seem pissed off at me. I wonder why. I mean, aside from hacking into their servers and expressing my amusement at some people, I've really done nothing to gain their anger towards me.

So I'm gonna ask ALL of you who visit this blog;

What do you really think of me?

Tell me the truth, and please give the reason/s why you came to your particular judgement. You can leave anonymous comments but I would really appreciate it if you leave your name or nickname. I respect a lot of you and I would really take it seriously if one of the people I respect told me some things that I haven't realized about myself. You can post negative or positive comments. Be honest.

Bwahahahaha......

2005-02-26T17:19:00.000+08:00

Wala maisip mablog, hehehehe

Hey You's...

2005-02-24T21:20:00.000+08:00

These are addressed to different persons...

Hey you, that shit you pulled sure backfired didn't it? What, you thought you could frame me for that? It just made me stronger, asshole.

Hey you, make a move damnit. Naiinip na talaga ako, sa totoo lang. I've left you enough clues already. Yeah sure, some of them are false clues, like the Informatics sticker in the christmas greetz pic, or the file info in the qmile pic, or the 222.126.3*.** ip add, or the 203.161.2**.*** ip add, and god knows what else I've forgotten, some edited logs maybe. But I did leave enough clues. Idiots.

Hey you, why the fuck do you keep on reading this blog? You won't learn anything about me here.

argh...

2005-02-24T21:10:00.000+08:00

Had a lousy day at work. Nothing bad happened but I'm really getting bored and fed up in the office. Petty jealousies, everyone so engrossed in their own little world, they're simply not interesting enough to talk to anymore. I want to talk about philosophy damnit, and there's no one to talk to. I don't know, sometimes I don't care about anything lately. Nothing interesting happens. I've had this saying of always let people underestimate you, just surprise them in the end. It's served me well so far. Shit, just rambling... I's like I'm always pissed off lately. It's like I want to get into a fight and punch somebody in the face and get punched back.

Guitarless....

2005-02-23T18:13:00.000+08:00

There was a kid named Marcus. He grew up listening to the radio but he never felt any connection to the music that was being played. Until one time he heard a guitar driven blues song. He fell in love with the sounds the guitar made. It made him want to learn guitar playing himself. But he didn't have a guitar and couldn't afford to buy one. His school had several guitars but they were off limits to him and was reserved for use only during music classes where his teacher would demonstrate some of the things learned by rote during his college music major days. Marcus, just on a whim, decided to sneak out one of the guitars and take it home with him. He went to the store room where the guitars were kept and snuck one out the window and hid it in the bushes where he later picked it up. Back home messing with the guitar he found he had a natural talent for playing guitar. He found he could express himself in a way he was never able to before. The night seemed to pass quickly and when the morning came he snuck the guitar back into the school. This became a regular habit, he memorized the schedule when the guitar would be used and made sure that it would be in its proper place when the time came. None of the teachers even knew that he was using the guitar without permission. Marcus read everything he could about the technicalities of how to play the guitar properly. He found he had a passion not only for the guitar but for music in general. It made him feel alive. He learned the difference in emotion between a minor and major key. He learned to use the limited number of notes in the pentatonic scale and combine them into an arrangement which spoke of his feelings about the world. And he found new friends through music. He found that he was not alone in his love for music and became friends with people with varied ages, backgrounds and social classes, all united by a common bond, the genuine love for music. When he became more confident he would demonstrate his newfound skills for his friends knowing that they would appreciate the effort he put into it. Yet when performing for his friends he always held something back. He felt that playing his heart out in front of other people would leave him emotionally open and vulnerable. Back at school no one knew how good he had become in playing the guitar. During the day he suffered through classes where his music teacher was explaining basic things such as time signatures. At night he explored the depths of music that could never be taught at school but could only be discovered by having a honest curiosity about it. Time passed. He saved up enough money to buy a secondhand guitar of his own. He was graduating from school and had less time to play the guitar anymore. Even when he found the time to play he couldn't feel the exhilaration he felt before and felt that somehow, by playing the guitar mechanically he was betraying the purity of music. He made the conscious decision to stop playing altogether. Yet he knew that no matter what happened the music would always be in his soul.

Huh?

2005-02-22T18:17:00.000+08:00

These are comments from ISAW;

"I read some emails that Wilson Chua communicated with PI. I don't know if PI knew but most of the information he gave to Wilson were immediately forwarded to Infocom.

PI was correct when he said he does not trust emails.

-phcore-"

[ I did not post this. Somebody's using the name phcore. However, this doesn't necessarily mean that the information he gave was false. There are a lot of good hackers out there. ]

"null or r00tkitty is from Antique he is regularly going to Iloilo for business trips (or the other way around?). He is a stakeholder of an ISP. He has been tagged as one of the hackers that attack government sites.

Ingat dre, you will the next victim hahaha

- CIDG Insider"

[ Null and rootkitty are two different persons, dumbass. Null works for an isp and rootkitty is a un*x / security enthusiast. These two won't attack government sites, they don't have the ballz. Lolz. Just kidding, hi teejz! ]

Memory loss...

2005-02-21T18:54:00.000+08:00

http://www.dreamchum.ph/main.htm

I forgot I hacked this site. I was searching for some local pc parts and the site seemed familiar. Heh.

Money Shot...

2005-02-21T18:26:00.000+08:00

I was watching "The Color of Money" yesterday. For those who haven't seen it yet it's about hustling and billiards/pool. The hardest hustle shot is when you intentionally scratch the cue ball while sinking the nine ball at the same time. What does this have to do with hacking? You figure it out.

just some stuff...

2005-02-19T18:35:00.000+08:00

--My gmail account has been activated. It's rebarz99@gmail.com

--One of my tag pages have shown up on a search engine. Would have been no big deal except that they think they had already secured their system. It was actually a re-hack on my part(just before I retired). Look for control.htm if you know the site I'm refering to.

--Couldn't come to the hip-hop awards last night. And it wasn't because I'm more into rock music. I'd like to apologize to my date(except that she doesn't read this blog)

--It's not true that I could remotely lock out cellphones. I only had access to the NTC database of blocked IMEI's (still do) and could insert any IMEI I want but it doesn't really lock out the cellphones. Too bad NTC disabled the web interface , it was a nice trick to display on irc :)

--I had some Globe ki's(about a thousand) and some info on the auth center they supposedly came from. Unfortunately, I lost access on the server I uploaded it into. They were encrypted(I think) and based on the file date stamp, old. It was also my understanding that for them to be of any use, I would still need to get the switch algo. And I don't have the hardware knowledge to mod a cellphone to use them. Would have been nice though to eavesdrop on some calls. :)

--*yawns* It's not a blog, it's a blaghh. :)

quotes for the day

2005-02-18T18:28:00.000+08:00

Had a nice day at work, me and my office mates had a good time.
These are quotes which came up during the day.

"Sarap mambato ng bus"

"Sa payat ba naman nun, ubos na pati pwet, san pa kukuha ng lakas yun?"

"Memo, memo"

"Sino tumae sa CR? Amoy hopia"

"Umalis na si R***, kinakati na yung buni"

"Si B****, manyakis"

"Makapagtrabaho na nga, friday na"

Beyond Words...

2005-02-17T17:56:00.000+08:00

We don't know each other
And I doubt that we have much in common
All we have
are words to judge each other by
You read what is written about me
or the things that I myself had written
And base your feelings for me on that
Yet words are limited
and cannot fully express
my happiness
my sadness
my passion
my regrets
And definitions of words
like persons themselves
change over time
and cannot be held as absolute truths
All I ask for
is for you to get to know me
beyond words

The Profiler...

2005-02-16T19:17:00.000+08:00

This is a conversation I had on irc roughly during the time I hacked into www.army.mil.ph.
You be the judge on who social engineered who.

<rebarz99> oi
<rebarz99> nakita mo pla rootkit ko :)
<]\[osferatu> hindi ako
<rebarz99> cno?
<]\[osferatu> ewan
<rebarz99> ows
<]\[osferatu> nakita ko lang yon
<]\[osferatu> sa pastebin
<rebarz99> kaw ba nagtanggal nung e-commerce page sa army.mil.ph?
<]\[osferatu> hindi ah
<rebarz99> ganun ba?
<rebarz99> bibilib na sna ako sa yo :)
<]\[osferatu> kaso hindi nga eh
<rebarz99> either may nagtsutsu dun sa admin
<rebarz99> or nahack ng iba
<]\[osferatu> baka me nauna sa yo
<rebarz99> hopefully, nahack ng iba
<rebarz99> wla naman problema sakin ung ganun
<]\[osferatu> ahhhh
<]\[osferatu> isaw ka?
<rebarz99> lolz, hindi no
<rebarz99> kaw ba?
<]\[osferatu> hindi ah
<rebarz99> er, pulis ka? :)
<]\[osferatu> hindi
<]\[osferatu> ano number mo?
<rebarz99> sysad?
<]\[osferatu> lalong hindi
<rebarz99> lolz, bakit mo kailangan number ko?
<]\[osferatu> tatawagan kita
<]\[osferatu> para di ka na matakot
<]\[osferatu> o mangamba
<rebarz99> matakot saan?
<]\[osferatu> sa pulis
<rebarz99> lolz
<rebarz99> tingin mo takot ako sa pulis
<rebarz99> hawak mo rin ba ung afp.mil.ph?
<]\[osferatu> eh tinanong mo kung pulis ako eh di takot ka sa pulis
<]\[osferatu> ano yon?
<rebarz99> di ako takot sa pulis, di kc kita kilala kya nagtatanong ako
<]\[osferatu> ikaw nga kilala ko
<]\[osferatu> ako hindi
<]\[osferatu> heh
<rebarz99> anyway, if ever na malaman mo ung nagtanggal nung e-commerce page, pakisabi congrats
<]\[osferatu> sure pag nalaman ko
<]\[osferatu> so ibibigay mo na cell number mo?
<]\[osferatu> punta ka sa eb nang oneball?
<rebarz99> or, ung nakakita nung rootkit ko, pakisabi congrats na rin
<rebarz99> eb ng oneball, baka pumunta ako
<]\[osferatu> ahhhh
<]\[osferatu> ako hindi ko sure mukhang me nbi
<]\[osferatu> heh
<rebarz99> lols
<rebarz99> anyway, ingat na lang
<]\[osferatu> ok
<rebarz99> more power to ur hacking career :)
<]\[osferatu> ako hindi ah
<]\[osferatu> profiler ako
<rebarz99> anong profiler?
<]\[osferatu> taga profile nang tao
<rebarz99> tapos?
<]\[osferatu> ilan taon ka na?
<rebarz99> pag na profile mo na, ano ginagawa mo dun sa info mo?
<]\[osferatu> tapos yon na
<]\[osferatu> for future reference
<rebarz99> ic
<]\[osferatu> me trabaho ka na ba?
<rebarz99> anyway, good luck on whatever it is that u do :)
<]\[osferatu> ayaw mo naman sagutin tanong ko
<rebarz99> lols
<rebarz99> ayoko ma profile :)
<]\[osferatu> ahhhh... either way malalaman ko rin naman. pero mas mabuti kung ikaw na magbibigay.
<]\[osferatu> baka mali ibigay nilang info
<]\[osferatu> ikaw rin
<rebarz99> :)
<rebarz99> good luck sa info gathering mo :)
<]\[osferatu> sige na ilang taon ka na
<rebarz99> ikaw, ilang taon ka na?
<]\[osferatu> 30 bakit?
<]\[osferatu> ikaw?
<rebarz99> may work ka na?
<]\[osferatu> OO naman
<]\[osferatu> ikaw me work ka na?
<rebarz99> so ano job mo?
<]\[osferatu> profiler nga
<rebarz99> ows, professional profiler ka?
<]\[osferatu> oo
<]\[osferatu> pero di mo pa ko sinasagot sa mga tanong ko
<rebarz99> kumikita ka jan?
<]\[osferatu> oo naman
<rebarz99> magkano? paano? may job opening ba jan? :)
<]\[osferatu> 10,000 tapos meron pang weekly
<]\[osferatu> gusto mo ba magtrabaho dito?
<rebarz99> san ba yan?
<rebarz99> oo ba, kailangan ko pera eh
<]\[osferatu> send ka nang resume sa akin
<rebarz99> ano address?
<]\[osferatu> lexpastor@yahoo.com
<rebarz99> ung snail mail add? wla kc ako pic na na scan eh, wla pic pag email ko papadala
<]\[osferatu> ok lang kahit walang pic
<]\[osferatu> hindi ko alam yung po box namin
<rebarz99> ano magiging trabaho ko jan?
<]\[osferatu> ikaw ano gusto mo
<]\[osferatu> programmer,profiler,hacker?
<rebarz99> pwede lahat? :)
<]\[osferatu> isa lang
<rebarz99> ano pangalan ng company nyo?
<]\[osferatu> baka di mo kayanin ang load
<rebarz99> legal ba yan?
<]\[osferatu> legal syempre
<rebarz99> ano pangalan ng company nyo?
<]\[osferatu> saka ko na sasabihin pag nagpadala ka nang resume
<rebarz99> ngek
<]\[osferatu> baka i exploit mo lang
<]\[osferatu> sayang
<rebarz99> sabihin mo man lang ung company name
<rebarz99> di ko iexploit
<]\[osferatu> veritas
<rebarz99> aling veritas?
<]\[osferatu> VERITAS INFORMATION PROVIDERS
<rebarz99> ah
<rebarz99> bakit sa yahoo ako mag eemail?
<]\[osferatu> So I'll expect your resume or you will backout?
<]\[osferatu> wala naman mailserver kami
<rebarz99> hanap mun ako scanner, pra may nka attach na pic
<rebarz99> rsume lang papadala ko?
<rebarz99> paano ung application process sa inyo?
<]\[osferatu> ok lang kahit walang picture. di ka naman marketting na haharap sa tao :)
<]\[osferatu> resume then interview
<]\[osferatu> i review yon for a month
<]\[osferatu> then we call pag tanggap ka
<rebarz99> er, san ung interview? nsa tarlac pa ako eh
<]\[osferatu> hmmmm tanong ko lang kung me branch sa tarlac
<]\[osferatu> wala pa pero sabi nung kasama ko pwede by phone
<rebarz99> wla yta, kung meron man ditong veritas nalaman ko na
<rebarz99> kokonti lang it company na based d2
<]\[osferatu> phone interview, taglish ang conversation
<rebarz99> halos lahat na applyan ko na
<]\[osferatu> i.c.
<rebarz99> ah phone interview
<rebarz99> ano number nyo?
<]\[osferatu> mobile number
<]\[osferatu> nakiki-pbx lang ang company rito.
<rebarz99> ano #?
<]\[osferatu> 0919270360*
<rebarz99> sa yo yan?
<]\[osferatu> company mobile phone
<]\[osferatu> Dyan lang incoming namin
<rebarz99> cno hahanapin ko pag tumawag ako?
<]\[osferatu> si lex pastor
<rebarz99> kelan ba eb ng oneball?
<]\[osferatu> hindi ko alam ke Mhegz
<rebarz99> punta kc ako
<rebarz99> drop by na lang ako sa ofc nyo pra isang byahe
<rebarz99> san ba ofc nyo?
<]\[osferatu> makati pa
<rebarz99> ano address?
<]\[osferatu> Villaflor BLDG. #57 Sen. Gil Puyat Avenue, Palanan Makati City
<rebarz99> k, wait lang ha, may dumating na bsita
<rebarz99> brb agad ako
<]\[osferatu> ok. sure.

Woohoo! A Reprint...

2005-02-15T20:54:00.000+08:00

--it's nice to be wanted by somebody... even if it's by the police

--if i had this kind of attention during my child actor days nag bloom sana career ko

--i wonder if conjugal visits extends to girlfriends...

--free room and board for at least one year...

--i'll probably install linux on the prison computer...

--note to self: remember to pack knoppix....

--what!? hacking is illegal?

--Am I rebarz99? you mean the cutest, most elite hacker in the country? Nope, never heard of him.

--ok, i'll come with you to the police station. Can i check my email first?

--trade you a root shell if you'll let me go...

--It wasn't me. It was the one-armed hacker...

--what's a hacker? isn't that some kind of biscuit?

--i didn't know it was proprietary software i was downloading. i thought it was porn...

--I swear, I just found that list of passwords on the street...

--arrest me and i'll fill your gmail account with spam...

--officer, do you even know what a system call is?

--hi, Jay G. nice to meet you. we'll be sharing a cell?

--i didn't do it. somebody must have spoofed my ip, identity, fingerprint, dna...

--you're looking for rebarz99? sorry, i'm rebarz98...

--if i was attention-hungry dapat member na ako ng ISAW...

:) Smile, it's not you they're after.

Commentz on your commentz

2005-02-15T19:06:00.000+08:00

Ehehehe, this is some of the commentz on the ISAW blog regarding the emails I posted there. Commentz enclosed in brackets are mine

************************************************************************************
Rebz,

[ Yo! ]

I personnally have no idea how you can tap into ***.info.com.ph mail system--among other systems you 'owned'.

[ I personally have no idea what other systems you're talking about. wink, wink ]

Were it not illegal, you would have our utmost respect.

[Were it not illegal, your message would be absolutely pointless. Wait, it still is... ]

Sayang, because you have the skills.

[ The skillz that make you illz, give you the chillz, run for the hillz ]

But its not yet too late for you. There is still a way for you to avoid jail.

[ It is too late for me, I've already started blogging damnit ]

I would suggest you get in touch with Col Sosa or USEC Puruganan and strike some sort of a deal. ASAP.

[ Hey, I love those guys, I love their show, they're the ones in ASAP? I thought they were in SOP ]

Manong Art has their cps.

[ Who the hell is Manong Art? Sounds like what we use to call the janitor at school ]

This is no BS.

[ CS? PS? HS? What the hell is it then? ]

Its not a question of whether or not you will get caught. In the end, they will find you.

[ Hey, that's what I keep thinking about true love ]

Dont make the same mistake of the other guy.

[ Er, other guy? You mean Pi right? ]

PI knows where this post came from and who I am.

[ Hehehe, I knew that other guy was Pi ]

************************************************************************************

rebz nagpunta ka ba nang ga nung dec 18? sayang 2 upuan lang layo ko sayo heheheh

[ heheheheh, nope ]

************************************************************************************
hey rebarz99!

[ Yo! ]

yah right as just what you have said on your so-called post (on another site).

[ damnit, you gonna criticize my so-called posts, you better give the url. Googling for these so-called posts on so-called sites is hard ]

pretentions . . . too much pretentions! and a good example of such pretentions is getting information from so-called insiders!

[ Actually, I was just pretending to be pretending. But they knew I was pretending. Unless they were pretending to be pretending ]

damn you!a true hacker never reveals his ways of how he hacks into systems!

[ Wait, I know you! You're the guy who asked me how to hack into systems! Dude, I told you a true hacker never reveals his ways of how he hacks into system! ]

i heard of you talking to admins of ISPs and giving out your way of entries!

[ Admin : What is your way of entry?
Rebz : ssh, telnet ]

hahaha, too bad bro, you're making yourself the laughing stock of the black hat community!

[ No, we're actually laughing at you. Really. Even the white hat community is laughing at you. The purple hat community doesn't like you either. ]

************************************************************************************

hey rebarz99!!!

[ Yo! ]

yah right! like you posted on your so-called life . . . .pretentions, too much pretentions! and a good example of that pretention is getting so-called sensitive informations from insiders! damn you!a real black hat hacker does not reveal any information on how he got into the system and informing the admins of such ways! well, for everybody's information, our friend rebarz99 here is always talking to admins of ISPs about how he got into their systems! a bad idea bro!

[ What the... this is the same old shit as the comment above ]

a SHAME to the black hat community!!!

[ hey, you changed the line where you said the the black hat community was laughing at me. You reposted that your comment just to change that one line? sheesh ]

3n912IE

[ nice nick, how do you pronounce that? ]

************************************************************************************

Ang corny nyo lahat..

[ Actually, I think I'm corny. Most of the others are just stupid ]

So rebz got into infocom's system, so what?! Big deal.

[ dude, I really hope you're working for the CIDG ]

Id be amazed if he can make big money out of his skills. Now that's the real thing.

[ Uhm, you actually work for the CIDG don't you? ]

Fact is, he's just playing around unsecured and unpatched servers.

[ yeah well, these ISP's are so poor they can't afford to secure and patch their servers, much less hire the best admins in the country. don't be so hard on them. ]

And bitstop bros, threats dont work.

[ wouldn't mind getting "threats" from those bitstop sis however, I'm lonely ]

If you really want to catch rebz, penetrate the underground.

[ And if you really want to catch the undeground, penetrate Rebz ]

Stop making lousy pleas.

[ Like the one you just made? ]

************************************************************************************

Hey, I'm actually blogging....

2005-02-15T18:47:00.000+08:00

Man, I used to think blogging is one of the greatest time waster on the internet right now. If this doesn't convince you all that I've stopped hacking I am so gonna fucking kick your ass. Oh, and I'm gonna change the layout in the future if I have the time.

--==** A r V i X **==--

Third to the Last Post

As time passes by...

Triptomatic....

XSS BS....

Hind Site...

The Salmon and the Werewolf....

Look at the moon. It's weird...

Maxi Pad...

Hoax for your opinion?

Cisco po!

Packs, not Nacks...

Bite the Clouds...

untitled

untitled

Big Mac...

untitled

Rebwisited...

untitled

Lenora....

Gotta get drunk...

Warriors

untitled

untitled

untitled

untitled

untitled

untitled

Haxomeni...

untitled

Vibe Network....

Internal report : A Repost...

Leftovers...

Hacker Crackdown...

Further Down the Path...

Leggo My Eggo...

I mean business...

I Misc. You...

La Salsalista...

Random Telnets...

I can handle the truth....

Bwahahahaha......

Hey You's...

argh...

Guitarless....

Huh?

Memory loss...

Money Shot...

just some stuff...

quotes for the day

Beyond Words...

The Profiler...

Woohoo! A Reprint...

Commentz on your commentz

Hey, I'm actually blogging....

--== A r V i X ==--