Anti-Anonymous, Pro-FBI Hacker Takes Credit for Attack on The Pirate Bay

A hacker that goes by the name of Anonymous Saint, or Nyre, has taken credit for the attack that disrupted the activity of The Pirate Bay. He claims he is “Anonymous, but no longer supports Anonymous.”

Nyre hates Anonymous

“You must be wondering why did I attacked The Pirate Bay. I am Nyre. I am highly against Anonymous. I do not support Anonymous anymore. I sometimes help the feds,” he explained.

“The Pirate Bay was a press-release website for Anonymous, then I had a idea, why not take it down? Why not make it impossible for Anonymous? Get on your knees, Anonymous. I am a one-man army. I am not a hacker. I am a security killer,” he added.

It’s uncertain if this guy is really the one that has single-handedly managed to take down the famous torrent site, but one thing’s certain. He doesn’t like Anonymous at all.

While in his initial statement he claimed that he would try to keep The Pirate Bay down for a week, a few hours ago he changed his mind and allegedly stopped the attack, considering that he made his point.

“ThePirateBay was a main-press release point of Anonymous – Why not [upset] Anonymous when you got a chance?” he wrote a few hours ago. “Nuff’ attacking TPB, You can start sailing your ships now, Anonymous.”

As we’ve said before, we cannot verify if Nyre’s claims are true, but these days if you control a large enough botnet, there are a lot of things you can accomplish.

However, we would have expected something like a government, or the motion picture industry to be behind the attack on The Pirate Bay, not a single Anonymous-hater hacker.

In the meantime, while TPB is back online and functioning properly, another massive DDOS attack has been launched at WikiLeaks. The site has been experiencing difficulties for over 80 hours now.

ISPconfig migration using Rsync

hey wassup?

the other day we were migrating our (ISPCONFIG) FTP server  to new physical server. we did Google a lot but couldn’t find a cool tutorial. so just used some of our simple strategies:

1. stop MySQL server

2. stop Apache / httpd

3. stop FTP server you use

4. cp /etc/passwd and append just the users to /et/passwd on new server

5. do as above for /etc/group & /etc/shadow

6. dump dbispconfig & import it to new server

7. just “rsync -avHz -e ssh /var/www/  root@x.x.x.x:/var/www”

and that it .

Disable Windows (Default)(Hidden) Administrative Shares : C$, D$

The system automatically creates hidden “administrative shares” for its logical drives C:, D:, and so forth which it names C$, D$ and so forth. It also creates the admin$ hidden share for to the \winnt folder. These shares are designed for remote access support by domain administrators. By default, if you delete these admin shares, they will be recreated when you reboot. To disable permanently so they will not be recreated on the next reboot, use the following Windows NT / Windows 2000 / Windows XP registry hack:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer for servers
Name: AutoShareWks for workstations
Type: REG_DWORD
Value: 0

For background: Q156365. For details on disabling in Windows XP, see Q314984. In Windows 2000 and Windows XP, you disable the shares via

  • Start
  • Settings
  • Control Panel
  • Systems Tools panel
  • Shared Folders
  • Double-click the Shared Folders branch to expand it
  • Click Shares
  • In the Shared Folder column, right-click the share you want to disable
  • Click Stop sharing
  • Cick OK.

NOTE: If you disable an administrative share that you have created, it will not be automatically enabled after you restart your computer, and you will need to recreate the share.

Perhaps the best approach to protect hard drive resources on workstations is to disable the server service if you can. There are a few workstation applications that need server service running, in particular, some SNA emulation packages.

راه اندازی فایروال csf

این فایروال در واقع همون (آي‌پی تیبلز IPTABLES)  هستش اما خیلی ساده تر و بهتر .

برای نصب اول دانلودش کنید
از اینجا
بعد از حالت فشرده در بیاریدش:

# tar  -xvzf  csf.tgz

سپس وارد پوشه بشید

# cd csf/

بعد براحتی نصبش کنید

# sudo sh install.sh

اگه احیانا (ارور Error)  زیر رو داد

# Checking Perl modules…
Can’t locate LWP/UserAgent.pm in @INC …

کافیه اینا رو نصب کنی

# sudo apt-get / yum install libwww-perl

خوب تموم

سرویس رو استارت کن

# sudo /etc/init.d/csf  start

بعد یا csf -h میتونی فرمان های اصلی رو ببینی و حالش رو ببری.

راستی فایل اصلی که میتونی پورت ها و خلی چیزای دیگه رو تغییر بدی اینجاست

# etc/csf/csf.conf

امیدوارم بکار بیاد

DDoS Attack Tool Comes to Android

DDoS Attack Tool Comes to Android
source: http://blogs.mcafee.com/mcafee-labs/…-south-america
McAfree has reported that the common Low Orbit Ion Cannon (LOIC) denial of service (DoS) tool has been ported to Android. ‘Ported’ might be too strong of a word as this mobile device version is in fact a wrapper around the Javascript version. Nonetheless, this is an interesting advancement in the ubiquity of hacking tools.
Hacktivism (hacking as political or social protest) is becoming increasingly popular with groups like Anonymous using hacking tools to launch distributed denial of service attacks on organizations all over the world. LOIC, one such tool used by the hackers, was originally developed to stress-test websites, however it has now been effectively used by hackers to take websites offline by sending a flood of TCP/UDP packets which overwhelms the server and makes it inaccessible.
Originally written in C#, LOIC inspired the creation of an independent JavaScript version. This version allowed a DoS attacked to be launched from a web browser. In conjunction with PasteHTML, which allows anyone to post HTML onto the web anonymously (no pun intended), and the free AppsGeyser service, which converts web pages into an App, an Android App has been created which encapsulates the Javascript version of LOIC in an Android app. Specifically, the version spotted by McAfee, targets the Argentinian government, but theoretically an Android app can be created to attack any web site. When the app is launched a WebView component is used to run the JavaScript that sends 1,000 HTTP requests with the message “We are LEGION!” as one of the parameters.
“Creating Android applications that perform DoS attacks is now easy: It requires only the URL of an active web LOIC–and zero programming skills–thanks to automated online tools,” wrote Carlos Castillo for McAfee.