Resumedini

Berlindung Diri Dari Lingkaran Setan

2024-08-25T20:40:00.011+07:00

Dalam kehidupan kita sehari-hari, kita sering menghadapi godaan dan masalah yang dapat mempengaruhi cara hidup kita. Salah satu tantangan terbesarnya adalah melindungi diri kita dari lingkaran setan, yaitu lingkungan atau hubungan yang berdampak negatif terhadap kita, baik secara fisik, emosional, atau spiritual.

Perubahan yang kejam ini bisa berupa hubungan buruk, kebiasaan buruk, atau pikiran buruk. Oleh karena itu, penting menjaga diri dari lingkaran setan bagi seorang muslim yang ingin hidup di jalan yang benar, berikut adalah beberapa sikap yang bisa dijadikan rujukan belajar agar tidak masuk dalam lingkaran setan: 1. Melindungi iman dan agama

Iman dan agama adalah kekuatan paling ampuh melawan godaan dan pengaruh negatif alam. Tuhan Yang Maha Esa berfirman dalam Al-Qur'an:

"Wahai orang-orang yang beriman! Bertakwalah kamu kepada Allah dan ucapkanlah perkataan yang benar," (QS. Al-Ahzab: 70)

Ayat ini mengajarkan pentingnya beribadah kepada Allah dalam berbicara dan berbuat baik. Melalui iman yang kuat, kita bisa terhindar dari kuasa jahat lingkaran setan yang ada di sekitar kita. 2. Memilih lingkungan dan teman yang tepat Lingkungan dan teman memegang peranan penting dalam membentuk kepribadian kita. Rasulullah SAW bersabda:

Dari Abu Musa, dari Nabi Muhammad, beliau bersabda: Perumpamaan teman yang baik dengan teman yang buruk bagaikan penjual minyak wangi dengan pandai besi, ada kalanya penjual minyak wangi itu akan menghadiahkan kepadamu atau kamu membeli darinya atau kamu mendapatkan aroma wanginya. Sedangkan pandai besi ada kalanya (percikan apinya) akan membakar bajumu atau kamu akan mendapatkan aroma tidak sedap darinya. (HR.Al-Bukhari: 5108, Muslim: 2628), Ahmad:19163)

Hadits ini mengingatkan kita bahwa sahabat dan lingkungan yang baik mendatangkan kebaikan dan sahabat yang buruk, dan lingkungan mendatangkan keburukan. Oleh karena itu, memilih teman yang baik dan lingkungan yang baik merupakan langkah penting untuk melindungi diri dari lingkaran setan.

3. Hindari kebiasaan buruk

Seringkali lingkaran setan disebabkan oleh kebiasaan buruk yang dibiarkan tumbuh dalam diri kita. Kebiasaan buruk seperti berbohong, malas atau malas akan membawa kita pada lingkungan yang buruk. Rasulullah SAW mengajarkan pentingnya meninggalkan kebiasaan buruk dan menggantinya dengan kebiasaan baik. Dalam sebuah hadits beliau berkata:

Takutlah kepada Allah di manapun engkau berada. Iringilah perbuatan jelek dengan perbuatan baik niscaya kebaikan itu akan menghapuskan kejelekan. Dan pergaulilah manusia dengan akhlak yang baik. (HR. Tirmidzi)

Dengan memperbaiki kebiasaan dan selalu berusaha beramal shaleh, maka kita tidak akan terjerumus ke dalam lingkaran setan.

4. Perbanyak Sholat dan Dzikir

Sholat dan Dzikir merupakan senjata seorang muslim dalam melawan godaan dan pengaruh jahat. Dengan memperbanyak jumlah salat dan zikir, kita melindungi Tuhan Yang Maha Esa dari segala macam marabahaya, baik yang terlihat maupun yang tidak terlihat. Nabi Suci, semoga Tuhan memberkatinya dan memberi kita kedamaian, mengajari kita doa yang sangat penting untuk dibaca setiap hari:

"Ya Allâh, sungguh aku berlindung kepada-Mu agar aku tidak jatuh dalam kesesatan atau disesatkan; agar tidak jatuh dalam ketergelinciran (kesalahan) atau digelincirkan, tidak berbuat zalim atau dizalimi, dan agar aku tidak berlaku seperti perbuatan orang-orang bodoh (menyakiti dan mengganggu) atau orang lain bertindak bodoh terhadapku". (HR. Abu Daud, At-Tirmidzi dan Ibnu Majah).

5. Mengingat Alam Semesta

Salah satu cara paling efektif untuk melindungi diri dari lingkaran setan adalah dengan selalu mengingat kehidupan setelah kematian. Dengan mengetahui hari kiamat dan bertanggung jawab kepada Tuhan Yang Maha Esa, kita akan lebih berhati-hati dalam bertindak. Tuhan Yang Maha Esa berfirman dalam Al-Qur'an:

"Dan bagi siapa yang takut akan saat menghadap Tuhannya ada dua surga." (QS. Ar-Rahman: 46)

Mengingat akhirat, seseorang lebih terpacu untuk menjauhi segala keburukan dan menjalani kehidupan yang diridhoi oleh Allah SWT.

Kesimpulan

Melindungi diri dari lingkaran setan memang tidak mudah, namun penting untuk dilakukan. Dengan menguatkan iman, memilih teman dan tetangga yang baik, menjauhi kebiasaan buruk, memperbanyak doa dan zikir, serta selalu berzikir di kehidupan selanjutnya, Insya Allah kita bisa menjaga diri dari kekuatan jahat dan tetap berada di jalan yang benar. Semoga Tuhan Yang Maha Esa memberkati kita agar selalu tekun dalam berbuat kebaikan dan terhindar dari segala keburukan. Amin. Referensi: https://quran.com/ https://almanhaj.or.id/11113-rasulullah-memohon-keamanan.html https://annur2.net/kebaikan-menghapus-kejelekan/ https://jatim.nu.or.id/keislaman/perumpamaan-teman-yang-baik-Bu9Yj

Teknis Penggantian Sholat Fardhu

2024-08-23T13:23:00.001+07:00

Dalam hal teknis penggantian sholat fardhu, sebenarnya aturannya sederhana sekali. Intinya cuma ada tiga prinsip mendasar, yaitu masalah jenis shalat, waktu penggantian dan jumlah penggantian.

1. Jenis Shalatnya Sesuai
Lakukanlah shalat penggantian sesuai dengan jenis shalat yang ditinggalkan. Bila Anda meninggalkan shalat shubuh, maka shalat penggantinya juga harus shalat shubuh. Tidak bisa dan tidak sah kalau diganti dengan shalat Dzhuhur, Ashar, Maghrib atau shalat Dhuha.

Prinsipnya shalat pengganti harus shalat yang sama. Bahkan meski diganti dengan shalat yang sama-sama wajib sekalipun, tetap saja tidak sah. Apalagi bila diganti dengan jenis shalat yang lebih rendah, tentu saja tidak dibenarkan.

Yang lebih parah lagi, ada orang yang berijtihad keliru dengan mengatakan bahwa shalat fardhu lima waktu cukup diganti dengan dzikir, sedekah atau amal shalih.

2. Waktu Penggantian
Waktu untuk melakukan penggantian shalat ini sebenarnya bebas tanpa aturan. Sehingga shalat penggantian ini bisa dilakukan kapan saja, tanpa harus terikat dengan waktu-waktu khusus.

Memang ada sebagian kalangan yang menyarankan agar waktu penggantian disesuaikan dengan waktu shalat yang ditinggalkan. Misalnya untuk mengganti shalat Maghrib maka lakukan pada waktu Maghrib. Untuk mengganti shalat Shubuh lakukan penggantiannya di waktu Shubuh.

Sebenarnya ini cuma saran untuk memudahkan, tetapi ini bukan ketentuan baku. Buktinya justru Rasulullah SAW sendiri malah tidak melakukannya. Beliau mengganti shalat yang terlewat justru bukan di waktu shalat itu.

Ketika beliau meninggalkan 4 waktu shalat, yaitu Dzhuhur, Ashar, Maghrib dan Isya' dalam peristiwa perang Khandaq di tahun kelima hijriyah, penggantiannya justru dilakukan pada tengah malam. Bahkan beliau melakukan penggantian itu dengan berjamaah, tanpa menunggul waktunya sesuai dengan shalat yang ditinggalkan.

Dan tatkala beliau dan para shahabat kesiangan shalat Shubuh sepulang dari Perang Khaibar di tahun keenam hijriyah, maka penggantian shalat Shubuh itu dilakukan di waktu Dhuha. Beliau tidak mengganti shalat Shubuh di waktu Shubuh.

Kesimpulannya, waktu untuk melakukan shalat penggantian tidak ada ketentuannya dan boleh dikerjakan kapan saja.

3. Jumlah Shalatnya Sesuai

Jumlah shalat pengganti harus sesuai dengan jumlah shalat yang ditinggalkan. Prinsip ini sangat masuk akal dan logis. Orang yang berhutang 1 juta maka wajib mengganti 1 juta. Maka hutang shalat lima waktu dalam sehari semalam, maka wajib diganti dengan shalat yang sama sebanyak shalat yang ditinggalkan dalam sehari semalam.

Yang seringkai jadi masalah, ada sementara orang yang sampai lupa berapa kali meninggalkan shalat. Mungkin sebabnya boleh jadi selama ini dia berpikir bahwa shalat yang ditinggalkan itu tidak perlu diganti. Tentu pemikiran ini termasuk pemikiran sesat dan menyesatkan. Entah siapa yang awalnya berfatwa macam ini, yang jelas jumhur ulama 4 mazhab semua sepakat bahwa shalat yang ditinggalkan wajib diganti.

Maka dalam hal ini yang diperlukan adalah melakukan penaksiran atau appraisal. Dalam dunia perbankan cara appraisal ini adalah suatu penaksiran harga pasar terhadap jaminan, yang mana akan digunakan oleh Bank sebagai harga jaminan.

Sedangkan kalau pakai bahasa syariah, yang harus dilakukan adalah muhasabah, sebagaimana perintah Umar bin Al-Khattab radhiyallahuanhu :

حاسبوا أنفسكم قبل أن تحاسبوا وزنوها قبل أن توزنوا

Hitung-hitunglah dirimu sendiri dulu sebelum nanti kamu dihitung. Dan timbang-timbanglah amal dirimu sendiri dulu sebelum nanti amal kamu ditimbang. (HR. At-Tirmizy)

Kalau dosa atau maksiat biasa, tentu agak sulit untuk menghitungnya. Karena dosa dan maksiat itu tidak berupa suatu bentuk pekerjaan yang utuh yang bisa dihitung jumlahnya. Lain halnya dengan shalat, shalat itu berwujud suatu ibadah yang bisa dihitung jumlahnya. Maka ketika seseorang meninggalkan shalat, khususnya shalat lima waktu, sesungguhnya mudah sekali untuk menghitungnya.

Maka coba perhitungkan kira-kira berapa kali Anda pernah meninggalkan shalat lima waktu selama dalam perjalanan hidup ini, setidaknya sejak awal mulai baligh dan wajib mengerjakan shalat. Tapi jangan dijawab dengan,"Wah, banyak sekali dan tidak terhitung".

Jawaban model ini adalah jawaban orang yang tidak berniat mau mengganti shalat. Atau setidaknya itu adalah jawaban khas orang-orang yang aslinya memang tidak mau shalat. Memang dasarnya malas dan ogah shalat, pada waktunya saja sudah tidak shalat, apalagi bicara penggantiannya, tentu saja sudah malas-masalan untuk menghitungnya. Dan itu adalah ciri orang munafik sebagaimana firman Allah SWT :

إِنَّ الْمُنَافِقِينَ يُخَادِعُونَ اللّهَ وَهُوَ خَادِعُهُمْ وَإِذَا قَامُواْ إِلَى الصَّلاَةِ قَامُواْ كُسَالَى

Sesungguhnya orang-orang munafik itu menipu Allah dan Allah akan membalas tipuan mereka . Dan apabila mereka berdiri untuk shalat mereka berdiri dengan malas. (QS. An-Nisa' : 142)

Hitung saja usia Anda sekarang ini berapa, lalu kurangi pada usia berapa Anda pertama kali memasuki usia baligh. Itu modal hitungan dasarnya. Misalnya saat ini Anda berusia 40 tahun dan pertama kali balligh di usia 15 tahun. Berarti Anda cuma tinggal menguranginya saja, 40-15=25 tahun.

Apakah selama 25 tahun itu Anda tidak pernah shalat sama sekali? Tentu saja Anda pernah shalat. Berapa kira-kira perbandingan antara shalat dengan tidak shalat? Adakah tidak shalatnya sampai 50 %? Ataukah tidak shalatnya di bawah itu, misalnya 40%, 30%, 20% atau 10%?

Silahkan dihitung-hitung dan ditimbang-timbang sendiri. Karena cuma Anda dan Allah SWT saja yang tahu. Dalam hal ini Anda boleh saja curang, itu hak Anda. Bahkan Anda boleh bilang bahwa sama sekali tidak punya hutang. Toh nanti curang atau tidak curang itu akan dibuktikan di akhirat. Tentu saja para malaikan punya catatan shalat Anda sepanjang hidup.

Anggaplah Anda jujur dan yakin sekali bahwa jumlah shalat yang ditinggalkan cuma 10% saja. Itu berarti 2,5 tahun alias 365 hari x 2,5 tahun = 913,5 hari. Kita bulatkan menjadi 915 hari. Dalam sehari ada 5 waktu yaitu Dzhuhur, Ashar, Maghrib, Isya' dan Shubuh.

Maka jumlah shalat yang wajib Anda ganti langsung ditemukan, yaitu 915 hari atau 4.565 kali shalat. Tentu saja Anda tidak mungkin menggantinya sekaligus dalam sehari. Mungkin Anda butuh waktu berhari-hari, bahkan berminggu-minggu lamanya untuk mengerjakan semuanya.

Oleh karena itulah shalat ini bisa dilaksanakan secara bertahap alias dicicil, sebagaimana kita mencicil pembelian sepeda motor, mobil, rumah, tanah dan lainnya.

Hacking Tools Repository

2022-05-03T17:05:00.004+07:00

Hacking Tools Repository

Passwords
Cain & Abel	Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network.
CacheDump	CacheDump, licensed under the GPL, demonstrates how to recover cache entry information: username and MSCASH.
John the Ripper	John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), Windows, DOS, BeOS, and OpenVMS.
FSCrack	GUI for John the Ripper. FSCrack is a front end for John the Ripper (JtR) that provides a graphical user interface (GUI) for access to most of JtR’s functions.
Hydra	A very fast network logon cracker which support many different services.Number one of the biggest security holes are passwords, as every password security study shows.
keimpx	keimpx is an open source tool, released under a modified version of Apache License 1.1. It can be used to quickly check for the usefulness of credentials across a network over SMB.
Medusa	Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible.
Ncrack	Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords.
Ophcrack	Ophcrack is a Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method.
RainbowCrack	RainbowCrack is a general propose implementation of Philippe Oechslin's faster time-memory trade-off technique.
phrasen\|drescher	phrasen\|drescher (p\|d) is a modular and multi processing pass phrase cracking tool. It comes with a number of plugins but a simple plugin API allows an easy development of new plugins.
LCP	Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003.
Crunch	Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. crunch can generate all possible combinations and permutations.
Fcrackzip	Naturally, programs are born out of an actual need. The situation with fcrackzip was no different... I'm not using zip very much, but recently I needed a password cracker.
Enumiax	EnumIAX is an Inter Asterisk Exchange version 2 (IAX2) protocol username brute-force enumerator. enumIAX may operate in two distinct modes; Sequential Username Guessing or Dictionary Attack.
Wyd	wyd.pl was born out of those two of situations: 1. A penetration test should be performed and the default wordlist does not contain a valid password. 2. During a forensic crime investigation a password protected file must be opened without knowing the the password.
Bruter	Bruter is a parallel network login brute-forcer on Win32. This tool is intended to demonstrate the importance of choosing strong passwords. The goal of Bruter is to support a variety of services that allow remote authentication.
The ssh bruteforcer	Is a tool to perform dictionary attacks to the SSH servers, it's a simple tool, you set the target server, target account, wordlist, port and wait..
Lodowep	Lodowep is a tool for analyzing password strength of accounts on a Lotus Domino webserver system. The tool supports both session- and basic-authentication.
SSHatter	SSHatter uses a brute force technique to determine how to log into an SSH server. It rigorously tries each combination in a list of usernames and passwords to determine which ones successfully log in.

Top

Scanning
Amap	Amap is a next-generation scanning tool, which identifies applications and services even if they are not listening on the default port by creating a bogus-communication and analyzing the responses.
VHostScan	A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
Dr.Morena	Dr.Morena is a tool to confirm the rule configuration of a Firewall. The configuration of a Firewall is done by combining more than one rule.
Firewalk	Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. Firewalk works by sending out TCP or UDP packets with a TTL one greater than the targeted gateway.
Netcat	Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts.
Ike Scan	Ike-scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPSec VPN servers. It is available for Linux, Unix, MacOS and Windows under the GPL license.
Nmap	Nmap ('Network Mapper') is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts.
Zenmap	Zenmap is the official Nmap Security Scanner GUI. It is a multi-platform (Linux, Windows, Mac OS X, BSD, etc.
Onesixtyone	onesixtyone is an SNMP scanner which utilizes a sweep technique to achieve very high performance. It can scan an entire class B network in under 13 minutes.
SuperScan 4	Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan
Autoscan	AutoScan-Network is a network scanner (discovering and managing application). No configuration is required to scan your network. The main goal is to print the list of connected equipments in your network.
Knocker	Knocker is a simple and easy to use TCP security port scanner written in C to analyze hosts and all of the different services started on them.
Nsat	NSAT is a robust scanner which is designed for: Different kinds of wide-ranging scans, keeping stable for days. Scanning on multi-user boxes (local stealth and non-priority scanning options).
OutputPBNJ	PBNJ is a suite of tools to monitor changes on a network over time. It does this by checking for changes on the target machine(s), which includes the details about the services running on them as well as the service state.
ScanPBNJ	ScanPBNJ performs an Nmap scan and then stores the results in a database. The ScanPBNJ stores information about the machine that has been scanned. ScanPBNJ stores the IP Address, Operating System, Hostname and a localhost bit.
glypeahead	By default the Glype proxy script has few restrictions on what hosts/ports can be accessed through it. In addition, the proxy script normally displays all cURL-related error messages.
Unicornscan	Unicornscan is a new information gathering and correlation engine built for and by members of the security research and testing communities.
TCP Fast Scan	A very very fast tcp port scanner for linux. Runs very quickly. Can scan a lot of hosts / ports + ranges at a time.
Multi Threaded TCP Port Scanner 3.0	This tool could be used to scan ports of certain IP. It also could describe each port with standard name (well-known and registered ports).
MingSweeper	MingSweeper is a network reconnaissance tool designed to facilitate large address space,high speed node discovery and identification.
Umap(UPNP Map)	Umap (UPNP Map) attempts to scan open TCP ports on the hosts behind a UPNP enabled Internet Gateway Device(IGD) NAT.
SendIP	SendIP has a large number of command line options to specify the content of every header of a NTP, BGP, RIP, RIPng, TCP, UDP, ICMP or raw IPv4 and IPv6 packet. It also allows any data to be added to the packet.
PortSentry	The Sentry tools provide host-level security services for the Unix platform. PortSentry, Logcheck/LogSentry, and HostSentry protect against portscans, automate log file auditing, and detect suspicious login activity on a continuous basis.
CurrPorts	CurrPorts will display the list of all currently opened TCP/IP and UDP ports on your PC. For each port in the list, information about the process that opened the port is also displayed.
Nscan	NScan itself is a port scanner, which uses connect() method to find the list of the host's open ports. The difference from the most of other portscanners is it's flexibility and speed.
NetworkActiv Scan	NetworkActiv Port Scanner is a network exploration and administration tool that allows you to scan and explore internal LANs and external WANs.
Blues Port Scanner	A good port scanner is just one of the basic tools anyone who is seriously interested in the internet needs. The BluesPortScan is, i think, the fastest scanner for 32Bit windows which you can found in the net.
ZMap	ZMap is an open-source network scanner that enables researchers to easily perform Internet-wide network studies. With a single machine and a well provisioned network uplink, ZMap is capable of performing a complete scan of the IPv4 address space in under 45 minutes, approaching the theoretical limit of gigabit Ethernet.
subdomain-bruteforcer	Subdomain-bruteforcer is a multi-threaded python tool for enumerating subdomains from a dictionary file. Particularily useful for finding admin panels or other dodgy web practices.
ircsnapshot	Ircsnapshot is a python tool that connects a bot to a server in order to fetch users' hostmasks, names, and channel affiliations; also supports the creation of a world map using the scraped data. Useful for reconnaissance on a IRC server full of suspected bots. Supports SOCKS and TOR.

Top

Sniffer
Wireshark	Wireshark is used by network professionals around the world for troubleshooting, analysis, software and protocol development, and education.
Chaosreader	A freeware tool to trace TCP/UDP/... sessions and fetch application data from snoop or tcpdump logs. This is a type of "any-snarf" program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG, ...), SMTP emails, ... from the captured data inside network traffic logs.
dsniff	dsniff is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data.
Ettercap	Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks.
NetworkMiner	NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc.
RawCap	RawCap is a free command line network sniffer for Windows that uses raw sockets.
Spike proxy	Not all web applications are built in the same ways, and hence, many must be analyzed individually. SPIKE Proxy is a professional-grade tool for looking for application-level vulnerabilities in web applications.
Tcpdump	Tcpdump prints out the headers of packets on a network interface that match the boolean expression.
Tcpreplay	Tcpreplay is a suite of BSD licensed tools written by Aaron Turner for UNIX (and Win32 under Cygwin) operating systems which gives you the ability to use previously captured traffic in libpcap format to test a variety of network devices
Pirni Sniffer	Pirni is the worlds first native network sniffer for iPhone. The iPhone's wifi has some major drawbacks in it's hardware design, thus we can not properly set the device in promiscious mode.
Ufasoft Snif	Ufasoft Snif is a network sniffer, designed for capturing and analysis of the packets going through the network. Using the packet driver, it requests all the packets from the network card driver (even the packets not addressed to this computer).

Top

Enumeration
dnsenum	The purpose of Dnsenum is to gather as much information as possible about a domain.
DumpSec	SomarSoft's DumpSec is a security auditing program for Microsoft Windows NT/XP/200x.
LDAP Browser	LDAP Browser is a premier Windows Explorer-like LDAP Directory client available for Win32 platforms.
NBTEnum	NetBIOS Enumeration Utility (NBTEnum) is a utility for Windows that can be used to enumerate NetBIOS information from one host or a range of hosts.
nbtscan	This tool that scans for open NETBIOS nameservers on a local or remote TCP/IP network, and this is a first step in finding of open shares.
wmi client	This DCOM/WMI client implementation is based on Samba4 sources. It uses RPC/DCOM mechanisms to interact with WMI services on Windows 2000/XP/2003 machines.
Dnsmap	Dnsmap is mainly meant to be used by pentesters during the information gathering/enumeration phase of infrastructure security assessments.
Dnsrecon	I wrote this tool back in late 2006 and it has been my favorite tool for enumeration thru DNS, in great part because I wrote it and it gives the output in a way that I can manipulate it in my own style. One of the features that I used the most and gave me excellent results is the SRV record enumeration.
Dnstracer	Dnstracer determines where a given Domain Name Server (DNS) gets its information from, and follows the chain of DNS servers back to the servers which know the data.

Top

Networking Tools
fragroute	fragroute intercepts, modifies, and rewrites egress traffic destined for a specified host.
hping	hping is a command-line oriented TCP/IP packet assembler/analyzer.
Scapy	Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more.
Stunnel	The stunnel program is designed to work as an SSL encryption wrapper between remote client and local (inetd-startable) or remote server.
tcptraceroute	tcptraceroute is a traceroute implementation using TCP packets. The more traditional traceroute(8) sends out either UDP or ICMP ECHO packets with a TTL of one, and increments the TTL until the destination has been reached.
tracetcp	tracetcp is a command line traceroute utility for WIN32 that uses TCP SYN packets rather than ICMP/UDP packets that the usual implementations use, thus bypassing gateways that block traditional traceroute packets.
Yersinia	Yersinia is a network tool designed to take advantage of some weakeness in different network protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems.
Nemesis	Nemesis is a command-line network packet crafting and injection utility for UNIX-like and Windows systems. Nemesis, is well suited for testing Network Intrusion Detection Systems, firewalls, IP stacks and a variety of other tasks. As a command-line driven utility, Nemesis is perfect for automation and scripting.

Top

Wireless
Aircrack-ng	Aircrack is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured.
Kismet	Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.
NetStumbler	NetStumbler delivers a tool that helps you detect 802.11 a/b/g WLAN standards. While wardriving is its main use, the application also facilitates the verifying of network configurations.
AirGrab WiFi Radar	AirGrab WiFi Radar is a tool to display information about Apple Airport base stations and other WiFi (802.11b/g/n) wireless access points.
AirMobile agent	Client application is downloaded in to your PDA or Windows cellular Phone where it will run in quite mode in the background. If the application finds a rouge access point it will investigate the AP and see if it posed a direct threat to your network.
AirRadar 2	AirRadar allows you to scan for open networks and tag them as favourites or filter them out. View detailed network information, graph network signal strength, and automatically join the best open network in range.
iStumbler	iStumbler is the leading wireless discovery tool for Mac OS X, providing plugins for finding AirPort networks, Bluetooth devices, Bonjour services and Location information with your Mac.
KisMAC	KisMAC is an open-source and free sniffer/scanner application for Mac OS X. It has an advantage over MacStumbler / iStumbler / NetStumbler in that it uses monitor mode and passive scanning.
KisMac2	KisMac2, is an active project to continue where original development of KisMac (link above) has stopped. The lead developer is Vitalii Parovishnyk (Korich) - http://IGRSoft.com
WirelessMon	WirelessMon is a software tool that allows users to monitor the status of wireless WiFi adapter(s) and gather information about nearby wireless access points and hot spots in real time.
Vistumbler	Vistumbler is a wireless network scanner written in AutoIT for Vista, Windows 7, and Windows 8. WiFiDB is a database written in php to store Vistumbler VS1 files. Keeps track of total access points w/gps, maps to kml, signal graphs, statistics, and more.
WaveStumbler	WaveStumbler is console based 802.11 network mapper for Linux. It reports the basic AP stuff like channel, WEP, ESSID, MAC etc.
Xirrus Wi-Fi Inspector	Xirrus Wi-Fi Inspector is a powerful tool for managing and troubleshooting the Wi-Fi on a Windows XP SP2 or later, Vista, or 7 laptop. Built in tests enable you to characterize the integrity and performance of your Wi-Fi connection.
AirMagnet VoFi Analyzer	AirMagnet VoFi Analyzer is the industry’s only solution for troubleshooting voice-over-WLAN problems in the field. VoFi Analyzer provides full analysis of encrypted WLAN traffic, scoring all calls in terms of call quality and proactively identifying all types of problems including phone issues, roaming issues, QoS issues, and RF.
Airpwn	Airpwn is a framework for 802.11 (wireless) packet injection. Airpwn listens to incoming wireless packets, and if the data matches a pattern specified in the config files, custom content is injected "spoofed" from the wireless access point. From the perspective of the wireless client, airpwn becomes the server.
WifiScanner	WifiScanner is a tool that has been designed to discover wireless node (i.e access point and wireless clients). It is distributed under the GPL License. It work with CISCO® card and prism card with hostap driver or wlan-ng driver, prism54g, Hermes/Orinoco, Atheros, Centrino, ... An IDS system is integrated to detect anomaly like MAC usurpation.

Top

Bluetooth
Haraldscan	A Bluetooth Scanner for Linux and Mac OS X. Harald Scan is able to determine Major and Minor device class of device, as well as attempt to resolve the device's MAC address to the largest known Bluetooth MAC address Vendor list.
FTS4BT	Frontline FTS4BT Bluetooth Protocol Analyzer. Developers and test engineers rely on FTS4BT to get them through the design, debug, test, verify, and qualification cycle.
BlueScanner	BlueScanner is a bash script that implements a scanner for Bluetooth devices. It's a tool designed to extract as much information as possible from Bluetooth devices without the requeriment to pair.
Blooover II	Blooover II is a tool for audit based on Java (J2ME). It exists in version Blooover II for audit J2ME mobiles and as a breeeder edition. Easy utility for vulnerability testing.
BTScanner	BTScanner for XP is a Bluetooth environment auditing tool for Microsoft Windows XP, implemented using the bluecove libraries (an open source implementation of the JSR-82 Bluetooth API for Java).
BlueSpam	BlueSpam searches for all discoverable bluetooth devices and sends a file to them (spams them) if they support OBEX. By default a small text will be send. To customize the message that should be send you need a palm with an SD/MMC card, then you create the directory /PALM/programs/BlueSpam/Send/ and put the file (any type of file will work .jpg is allways fun) you would like to send into this directory.
BTCrawler	An application used to to discover Bluetooth devices and the services they provide. Runs on J2ME enabled devices supporting MIDP 2.0 and JSR082 (Java API for Bluetooth)
Bluediving	Bluediving is a Bluetooth penetration testing suite. It implements attacks like Bluebug, BlueSnarf, BlueSnarf++, BlueSmack, has features such as Bluetooth address spoofing, an AT and a RFCOMM socket shell and implements tools like carwhisperer, bss, L2CAP packetgenerator, L2CAP connection resetter, RFCOMM scanner and greenplaque scanning mode (using more than one hci device).
Bluesnarfer	Bluesnarfer steals informations from a wireless device through a Bluetooth connection. The connection can be between mobile phones, PDAs or Laptops. You can access to a calendar, contact list, emails and text messages.

Top

Web Scanners
Arachni	Arachni is a fully automated system which tries to enforce the fire and forget principle. As soon as a scan is started it will not bother you for anything nor require further user interaction.
Burp Suite	Burp Suite is an integrated platform for performing security testing of web applications.
CAL9000	CAL9000 is a collection of web application security testing tools that complement the feature set of current web proxies and automated scanners. CAL9000 gives you the flexibility and functionality you need for more effective manual testing efforts.
CAT	CAT is designed to facilitate manual web application penetration testing for more complex, demanding application testing tasks.
CookieDigger	CookieDigger helps identify weak cookie generation and insecure implementations of session management by web applications. The tool works by collecting and analyzing cookies issued by a web application for multiple users.
DIRB	DIRB is a Web Content Scanner. It looks for existing (and/or hidden) Web Objects. It basically works by launching a dictionary based attack against a web server and analizing the response.
Fiddler	Fiddler is a Web Debugging Proxy which logs all HTTP(S) traffic between your computer and the Internet. Fiddler allows you to inspect all HTTP(S) traffic, set breakpoints, and 'fiddle' with incoming or outgoing data.
Gamja	Gamja will find XSS(Cross site scripting) & SQL Injection weak point also URL parameter validation error. Who knows that which parameter is weak parameter? Gamja will be helpful for finding vulnerability[ XSS , Validation Error , SQL Injection].
Grendel-Scan	A tool for automated security scanning of web applications. Many features are also present for manual penetration testing.
HTTrack	HTTrack is a free and easy-to-use offline browser utility. It allows you to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer.
LiLith	LiLith is a tool written in Perl to audit web applications. This tool analyses webpages and looks for html <form> tags, which often refer to dynamic pages that might be subject to SQL injection or other flaws.
Nikto2	Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6500 potentially dangerous files/CGIs.
OWASP ZAP	The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. Its also a great tool for experienced pentesters to use for manual security testing.
Paros	A program called 'Paros' for people who need to evaluate the security of their web applications. It is free of charge and completely written in Java.
Powerfuzzer	Powerfuzzer is a highly automated and fully customizable web fuzzer (HTTP protocol based application fuzzer) based on many other Open Source fuzzers available and information gathered from numerous security resources and websites.
ProxyScan.pl	proxyScan.pl is a security penetration testing tool to scan for hosts and ports through a Web proxy server. Features include various HTTP methods such as GET, CONNECT, HEAD as well as host and port ranges.
Ratproxy	A semi-automated, largely passive web application security audit tool, optimized for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic in complex web 2.0 environments.
ScanEx	This is a simple utility which runs against target site and look for external references and cross domain malicious injections. There are several vulnerable sites which get manipulated with these types of injections and compromised.
Scrawlr	Scrawlr, developed by the HP Web Security Research Group in coordination with the MSRC, is short for SQL Injector and Crawler. Scrawlr will crawl a website while simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities.
Springenwerk	Springenwerk is a free Cross Site Scripting (XSS) security scanner written in Python.
Sqlmap	sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.
Sqlsus	sqlsus is an open source MySQL injection and takeover tool, written in perl.
THCSSLCheck	Windows tool that checks the remote ssl stack for supported ciphers and version.
w3af	w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.
Wapiti	Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data.
Webfuzzer	Webfuzzer is a tool that can be useful for both pen testers and web masters, it's a poor man web vulnerability scanner.
WebGoat	WebGoat is a deliberately insecure J2EE web application maintained by OWASP designed to teach web application security lessons.
Websecurify	The Websecurify Suite is a web application security solution designed to run entirely from your web browser.
WebSlayer	WebSlayer is a tool designed for bruteforcing Web Applications, it can be used for finding not linked resources (directories, servlets, scripts, etc), bruteforce GET and POST parameters, bruteforce Forms parameters (User/Password), Fuzzing, etc. The tools has a payload generator and a easy and powerful results analyzer.
WhatWeb	WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.
Wikto	Wikto is Nikto for Windows - but with a couple of fancy extra features including Fuzzy logic error code checking, a back-end miner, Google assisted directory mining and real time HTTP request/response monitoring.
WSDigger	WSDigger is a free open source tool designed by McAfee Foundstone to automate black-box web services security testing (also known as penetration testing). WSDigger is more than a tool, it is a web services testing framework.
XSSploit	XSSploit is a multi-platform Cross-Site Scripting scanner and exploiter written in Python. It has been developed to help discovery and exploitation of XSS vulnerabilities in penetration testing missions.
Fireforce	Fireforce is a Firefox extension designed to perform brute-force attacks on GET and POST forms. Fireforce can use dictionaries or generate passwords based on several character types.
Netsparker	Netsparker is a web application security scanner, with support for both detection and exploitation of vulnerabilities. It aims to be false positive–free by only reporting confirmed vulnerabilities after successfully exploiting or otherwise testing them.
Havij	Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.

Top

Database Vulnerabilities
Berkeley DB	Oracle Berkeley DB is a family of open source, embeddable databases that allows developers to incorporate within their applications a fast, scalable, transactional database engine with industrial grade reliability and availability.
Database browser	Database browser is an universal table editor. This easy to use tool allows user to connect to any database and browse or modify data,run sql scripts, export and print data.
Db2utils	db2utils is a small collection of db2 utilities. It currently features three different tools db2disco, db2fakesrv and db2getprofile.
Oracle Auditing Tools	The Oracle Auditing Tools is a toolkit that could be used to audit security within Oracle database servers.
Oscanner	Oscanner is an Oracle assessment framework developed in Java. It has a plugin-based architecture and comes with a couple of plugins.
SQL Auditing Tools	SQLAT is a suite of tools which could be usefull for pentesting a MS SQL Server. The tools are still in development but tend to be quite stable. The tools do dictionary attacks, upload files, read registry and dump the SAM.
THC-ORACLE	THC presents a crypto paper analyzing the database authentication mechansim used by oracle. THC further releases practical tools to sniff and crack the password of an oracle database within seconds.
thc-orakelcrackert11g	OrakelCrackert is an Oracle 11g database password hash cracker using a weakness in the Oracle password storage strategy. With Oracle 11g, case sensitive SHA1 based hashing is introduced.
DBPwAudit	DBPwAudit is a Java tool that allows you to perform online audits of password quality for several database engines. The application design allows for easy adding of additional database drivers by simply copying new JDBC drivers to the jdbc directory.
MYSQLAudit	Python Script for basic auditing of common security misconfigurations in MySQL.
sqlininja	sqlininja exploits web applications that use Microsoft SQL Server as a database backend. Its focus is on getting a running shell on the remote host. sqlninja doesn't find an SQL injection in the first place, but automates the exploitation process once one has been discovered.
GreenSql	GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy and has built in support for MySQL and PostgreSQL.

Top

Vuln Scanners
Metasploit Framework	The Metasploit Framework is an advanced open-source platform for developing, testing, and using exploit code.
OpenVAS	OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
Nessus	Nessus detects, scans, and profiles numerous devices and resources to increase security and compliance across your network.
Porkbind	Porkbind is a multi-threaded nameserver scanner that can recursively query nameservers of subdomains for version strings. (i.e. sub.host.dom's nameservers then host.dom's nameservers)
Canvas	Immunity's CANVAS makes available hundreds of exploits, an automated exploitation system, and a comprehensive, reliable exploit development framework to penetration testers and security professionals worldwide.
Social-Engineer Toolkit (SET)	The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the http://www.social-engineer.org launch and has quickly became a standard tool in a penetration testers arsenal.
Acunetix	Acunetix web vulnerability scanner is a tool designed to discover security holes in your web applications that an at-tacker would likely abuse to gain illicit access to your systems and data. It looks for multiple vulnerabilities includingSQL injection, cross site scripting, and weak passwords.
RIPS	RIPS is a tool written in PHP to find vulnerabilities in PHP applications using static code analysis.
Rapid7 NeXpose	Rapid7 NeXpose is a vulnerability scanner which aims to support the entire vulnerability management lifecycle, including discovery, detection, verification, risk classification, impact analysis, reporting and mitigation. It integrates with Rapid7's Metasploit for vulnerability exploitation
VulnDetector	VulnDetector is a project aimed to scan a website and detect various web based security vulnerabilities in the website. Currently, VulnDetector can detect Cross Site Scripting (XSS) and SQL Injection (SQLI) vulnerabilities on a web based script, but has no easy to use interface.
Damn Small SQLi Scanner	DSSS supports blind/error SQLi tests, depth 1 crawling and advanced comparison of different attributes to distinguish blind responses (titles, HTTP status codes, filtered text only lengths and fuzzy comparison of contents itself). If you are satisfied with your commercial tool scanning results then I believe that you could even be more satisfied with this one.
CAT.NET	CAT.NET is a binary code analysis tool that helps identify common variants of certain prevailing vulnerabilities that can give rise to common attack vectors such as Cross-Site Scripting (XSS), SQL Injection and XPath Injection.
Peach Fuzzer	Peach is a SmartFuzzer that is capable of performing both generation and mutation based fuzzing. Peach requires the creation of PeachPit files that define the structure, type information, and relationships in the data to be fuzzed.
GFI LanGuard	GFI LanGuard is a network security and vulnerability scanner designed to help with patch management, network and software audits, and vulnerability assessments. The price is based on the number of IP addresses you wish to scan. A free trial version (up to 5 IP addresses) is available.
MBSA	Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool designed for the IT professional that helps small and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance.

Top

Vuln Apps
Damn Vulnerable Web Application (DVWA)	Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
Damn Vulnerable Linux	Damn Vulnerable Linux (DVL) is everything a good Linux distribution isn’t. Its developers have spent hours stuffing it with broken, ill-configured, outdated, and exploitable software that makes it vulnerable to attacks. DVL isn’t built to run on your desktop – it’s a learning tool for security students
Metasploitable	Metasploitable is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing techniques.
Kioptrix	This Kioptrix VM Image are easy challenges. The object of the game is to acquire root access via any means possible (except actually hacking the VM server or player). The purpose of these games are to learn the basic tools and techniques in vulnerability assessment and exploitation.
HoneyDrive	HoneyDrive is a virtual appliance (OVA) with Xubuntu Desktop 12.04 32-bit edition installed. It contains various honeypot software packages such as Kippo SSH honeypot, Dionaea malware honeypot, Honeyd low-interaction honeypot, Glastopf web honeypot along with Wordpot, Thug honeyclient and more.
Badstore	Badstore.net is dedicated to helping you understand how hackers prey on Web application vulnerabilities, and to showing you how to reduce your exposure.
OWASP Insecure Web App Project	InsecureWebApp is a web application that includes common web application vulnerabilities. It is a target for automated and manual penetration testing, source code analysis, vulnerability assessments and threat modeling.
VulnApp	VulnApp, is a BSD licensed ASP.net application implementing some of the most common applications we come across on our penetration testing engagements.
OWASP Vicnum	Vicnum is an OWASP project consisting of vulnerable web applications based on games commonly used to kill time. These applications demonstrate common web security problems such as cross site scripting, sql injections, and session management issues.
OWASP Broken Web Applications Project	The Broken Web Applications (BWA) Project produces a Virtual Machine running a variety of applications with known vulnerabilities
LAMPSecurity	LAMPSecurity training is designed to be a series of vulnerable virtual machine images along with complementary documentation designed to teach linux,apache,php,mysql security.
Virtual Hacking Lab	A mirror of deliberately insecure applications and old softwares with known vulnerabilities. Used for proof-of-concept /security training/learning purposes. Available in either virtual images or live iso or standalone formats.
WAVSEP	The Web Application Vulnerability Scanner Evaluation Project, is a vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be used to test the various properties of web application scanners.
Moth	Moth is a VMware image with a set of vulnerable Web Applications and scripts, that you may use for, testing Web Application Security Scanners, testing Static Code Analysis tools (SCA), giving an introductory course to Web Application Security
SecuriBench	Stanford SecuriBench is a set of open source real-life programs to be used as a testing ground for static and dynamic security tools. Release .91a focuses on Web-based applications written in Java.
NETinVM	NETinVM is a single VMware or VirtualBox virtual machine image that contains, ready to run, a series of User-mode Linux (UML) virtual machines which, when started, conform a whole computer network inside the VMware or VirtualBox virtual machine.

Top

Live CD
BackTrack	BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking.
Kali Linux	Kali Linux (formerly known as BackTrack) is a Debian-based distribution with a collection of security and forensics tools. It features timely security updates, support for the ARM architecture, a choice of four popular desktop environments, and seamless upgrades to newer versions.
BackBox	BackBox is a Linux distribution based on Ubuntu. It has been developed to perform penetration tests and security assessments. Designed to be fast, easy to use and provide a minimal yet complete desktop environment, thanks to its own software repositories, always being updated to the latest stable version of the most used and best known ethical hacking tools.
Samurai	The Samurai Web Testing Framework is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites.
Katana	Katana is a portable multi-boot security suite which brings together many of today's best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware Removal. Katana also comes with over 100 portable Windows applications; such as Wireshark, Metasploit, NMAP, Cain & Abel, and many more.
blackbuntu	Penetration Testing Distribution based on Ubuntu 10.10 which was specially designed for security training students and practitioners of information security.
Bugtraq	Bugtraq is a distribution based on the 2.6.38 kernel has a wide range of penetration and forensic tools. Bugtraq can install from a Live DVD or USB drive, the distribution is customized to the last package, configured and updated the kernel and the kernel has been patched for better performance and to recognize a variety of hardware, including wireless injection patches pentesting other distributions do not recognize.
Network Security Toolkit (NST)	This bootable ISO live CD/DVD (NST Live) is based on Fedora. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86/x86_64 platforms.
Pentoo	Pentoo is a penetration testing LiveCD distribution based on Gentoo. It features a lot of tools for auditing and testing a network, from scanning and discovering to exploiting vulnerabilities
BlackArch	BlackArch is an Arch-based security distribution. There are over 600 tools in BlackArch's package repository. The BlackArch live ISO comes with multiple window managers, including dwm, Awesome, Fluxbox, Openbox, wmii, i3, and Spectrwm. The BlackArch package repository is compatible with existing Arch installs.

String Manipulation
Encoding tools	Encoding tools is a graphical utility for putting text or binary data through an abritrary series of transforms. This tool can be useful for security researchers or programmers who need to encode or decode strings with multiple steps, e.g. to decode an obfuscated string in a URL path, you may need to perform multiple steps: String → URL decode → Base64 decode.
CyberChef	A simple, intuitive web app for analysing and decoding data without having to deal with complex tools or programming languages. CyberChef encourages both technical and non-technical people to explore data formats, encryption and compression.

Alma Linux 8.5 - Linux Cheat Sheet

2022-05-03T15:41:00.003+07:00

LINUX CHEAT SHEET – ALMALINUX 8, CENTOS 8, CENTOS 7, CENTOS 6, CENTOS 5

1. Basic System Commands

Search
TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Graphical configuration tools	system-config-*	system-config-*	gnome-control-center	gnome-control-center
Text-based configuration tools	system-config-*-tui	system-config-*-tui
Configure printer	system-config-printer	system-config-printer	system-config-printer	gnome-control-center
Configure network	system-config-network	system-config-network	nmcli nmtui nm-connection-editor	nmcli nmtui nm-connection-editor gnome-control-center
Configure system language	system-config-language	system-config-language	localectl	localectl gnome-control-center
Configure time and date	system-config-date date	system-config-date date	timedatectl date	timedatectl date gnome-control-center
Synchronize time and date	ntpdate /etc/ntp.conf	ntpdate /etc/ntp.conf	timedatectl /etc/chrony.conf ntpdate	timedatectl date /etc/chrony.conf chronyc
Configure keyboard	system-config-keyboard	system-config-keyboard	localectl	localectl gnome-control-center
Configure SSH	/etc/ssh/ssh_config /etc/ssh/sshd_config ~/.ssh/config ssh-keygen	/etc/ssh/ssh_config /etc/ssh/sshd_config ~/.ssh/config ssh-keygen	/etc/ssh/ssh_config /etc/ssh/sshd_config ~/.ssh/config ssh-keygen	/etc/ssh/ssh_config /etc/ssh/sshd_config ~/.ssh/config ssh-keygen

2. Server Basic Info

Search
TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
View version information	hostnamectl rpm -qa centos-release cat /etc/os-release cat/etc/centos-release	hostnamectl rpm -qa centos-release cat /etc/os-release cat/etc/centos-release	hostnamectl rpm -qa centos-release cat /etc/os-release cat/etc/centos-release	hostnamectl rpm -qa centos-release cat /etc/os-release cat/etc/centos-release
View system profile	sosreport dmidecode hwbrowser	sosreport dmidecode lstopo lscpu	sosreport dmidecode lstopo lscpu	sosreport dmidecode lstopo lscpu cat /proc/cpuinfo lshw

3. Boot & Kernel

Search
TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Single user/rescue mode	append 1 or s or init=/bin/bash to kernel cmdline	append 1 or s or init=/bin/bash to kernel cmdline	append 1 or s or rd.break or init=/bin/bash to kernel cmdline	append 1 or s or rd.break or init=/bin/bash to kernel cmdline
Shut down system	shutdown	shutdown	shutdown	shutdown
Power off system	poweroff	poweroff	poweroff systemctl poweroff	poweroff systemctl poweroff
Halt system	halt	halt	halt systemctl halt	halt systemctl halt
Reboot system	reboot	reboot	reboot systemctl reboot	reboot systemctl reboot
Configure default run level/target	/etc/inittab	/etc/inittab	systemctl set-default	systemctl set-default
Configure GRUB bootloader	/boot/grub/grub.conf	/boot/grub/grub.conf	/etc/default/grub grub2-mkconfig grub-set-default	/etc/default/grub grub2-mkconfig grub-set-default
Configure kernel module	modprobe	modprobe	modprobe	modprobe
View hardware configured	hwbrowser	lshw	lshw	lshw
Configure hardware device	udev	udev	udev	udev
View kernel parameters	sysctl -a cat /proc/cmdline	sysctl -a cat /proc/cmdline	sysctl -a cat /proc/cmdline	sysctl -a cat /proc/cmdline
Load kernel module	modprobe	modprobe	modprobe	modprobe
View kernel version	rpm -q kernel uname -r	rpm -q kernel uname -r	rpm -q kernel uname -r	rpm -q kernel uname -r
Remove kernel module	modprobe -r	modprobe -r	modprobe -r	modprobe -r

4. Software Installation

Search
TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
View software info	yum info yum groupinfo	yum info yum groupinfo	yum info yum group info	yum info yum group info
Install software	yum install yum groupinstall	yum install yum groupinstall	yum install yum group install	yum install yum group install
Upgrade software	yum upgrade	yum upgrade	yum upgrade	yum upgrade
Update software	yum update	yum update	yum update	yum update
Find package owning file	rpm -qf file-name yum provides file-name	rpm -qf file-name yum provides file-name	rpm -qf file-name yum provides file-name	rpm -qf file-name yum provides file-name
Configure software repository	subscription-manager repos /etc/yum.repos.d/*.repo	subscription-manager repos /etc/yum.repos.d/*.repo	subscription-manager repos /etc/yum.repos.d/*.repo	subscription-manager repos /etc/yum.repos.d/*.repo
View software version	rpm -q package-name	rpm -q package-name	yum list installed package-name rpm -q package-name	yum list installed package-name rpm -q package-name
View installed software	rpm -qa yum list installed	rpm -qa yum list installed	rpm -qa yum list installed	rpm -qa yum list installed
Install a module			yum module install module-name	yum module install module-name
View info on a module			yum module info module-name	yum module info module-name
List available modules			yum module list	yum module list

5. Server Services

Search
TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
List running services	service --status-all	service --status-all	systemctl -t service --state=active	systemctl -t service --state=active
List all services	chkconfig --list ls /etc/init.d/	chkconfig --list ls /etc/init.d/	systemctl -at service ls /etc/systemd/system/.service ls /usr/lib/systemd/system/.service	systemctl list-units -at service find /etc/systemd/ /usr/lib/systemd/ /run/systemd/ -name *.service"
Enable or disable service	chkconfig service-name on chkconfig name off	chkconfig service-name on chkconfig name off	systemctl enable name.service systemctl disable name.service	systemctl enable name.service systemctl disable name.service
Start or stop service	service service-name start service service-name stop	chkconfig service-name on chkconfig service-name off	systemctl enable name.service systemctl disable name.service	systemctl enable name.service systemctl disable name.service
Check if the service is enabled	chkconfig name --list	chkconfig name --list	systemctl is-enabled name	systemctl is-enabled name
View service status	service name status	service name status	systemctl status name.service	systemctl status name.service
Modify configuration or Create new service file	chkconfig --add	chkconfig --add	systemctl daemon-reload /etc/systemd/system/*.service	systemctl daemon-reload /etc/systemd/system/*.service
View run level/target	runlevel who -r	runlevel who -r	systemctl get-default who -r	systemctl get-default who -r
Change run level/target	/etc/inittab init run_level	/etc/inittab init run_level	systemctl isolate name.target systemctl set-default	systemctl isolate name.target systemctl set-default
Configure logging	/etc/syslog.conf	/etc/rsyslog.conf	/etc/rsyslog.conf /etc/rsyslog.d/*.conf /var/log/journal systemd-journald.service	/etc/rsyslog.conf /etc/rsyslog.d/*.conf /var/log/journal systemd-journald.service
Configure system audit	add audit=1 to kernel cmdline auditctl /etc/audit/auditd.conf /etc/audit/audit.rules authconfig /etc/pam.d/system-auth pam_tty_audit kernel module	add audit=1 to kernel cmdline auditctl /etc/audit/auditd.conf /etc/audit/audit.rules authconfig /etc/pam.d/system-auth pam_tty_audit kernel module	add audit=1 to kernel cmdline auditctl /etc/audit/auditd.conf /etc/audit/audit.rules authconfig /etc/pam.d/system-auth pam_tty_audit kernel module	add audit=1 to kernel cmdline auditctl /etc/audit/auditd.conf /etc/audit/audit.rules authconfig /etc/pam.d/system-auth tlog
View audit output	aureport /var/log/faillog	aureport /var/log/faillog	/var/log journalctl
Schedule tasks	cron at batch	cron at batch	cron at batch	cron at batch systemd-run --on-calendar
Find file by name	locate	locate	locate	locate
Find file by property	find	find	find	find
Create archive	tar cpio zip xz	tar cpio zip xz	tar cpio zip xz	tar cpio zip xz
View logs	/var/log	/var/log	/var/log journalctl	/var/log journalctl

6. User operations

TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Create user account	useradd	useradd	useradd	useradd
Graphical user management	system-config-users	system-config-users	system-config-users	system-config-users gnome-control-center
Delete user account	userdel	userdel	userdel	userdel
View or change user account details	usermod /etc/passwd vipw id	usermod /etc/passwd vipw id	usermod /etc/passwd vipw id	usermod /etc/passwd vipw id
Create user group	groupadd	groupadd	groupadd	groupadd
Change group details	groupmod /etc/group	groupmod /etc/group	groupmod /etc/group	groupmod /etc/group
Delete user group	groupdel	groupdel	groupdel	groupdel
Change user password	passwd	passwd	passwd	passwd
Change user permissions	usermod visudo	usermod visudo	usermod visudo	usermod visudo
Change group permissions	visudo groupmod	visudo groupmod	visudo groupmod	visudo groupmod
Change password policy	chage	chage	chage	chage
View user sessions	w	w	w	w

7. Volumes, File systems, Storage

TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Default file system	ext3	ext4	xfs	xfs
Format disk partition	mkfs.filesystem_type (ext3) mkswap	mkfs.filesystem_type (ext3) mkswap	mkfs.filesystem type (ext3) mkswap ssm create	mkfs.filesystem type (ext3) mkswap ssm create
Create or modify disk partitions	parted fdisk	parted fdisk	fdisk gdiskparted ssm create	parted fdisk gdisk ssm_create
Mount storage	mount /etc/fstab	mount /etc/fstab	mount /etc/fstab ssm mount	mount /etc/fstab ssm mount
Mount and activate swap	/etc/fstab swapon -a	/etc/fstab swapon -a	/etc/fstab swapon -a	/etc/fstab swapon -a
Configure static mounts	/etc/fstab	/etc/fstab	/etc/fstab	/etc/fstab
View logical volume	lvdisplay lvs vgdisplay vgs pvdisplay pvs	lvdisplay lvs vgdisplay vgs pvdisplay pvs	lvdisplay lvs vgdisplay vgs pvdisplay pvs	lvdisplay lvs vgdisplay vgs pvdisplay pvs
Create physical volume	pvcreate	pvcreate	pvcreate ssm create	pvcreate ssm create
Create volume group	vgcreate	vgcreate	vgcreate ssm create	vgcreate ssm create
Create logical volume	lvcreate	lvcreate	lvcreate ssm create	lvcreate ssm create
Extend volume	vgextend lvextend resize2fs	vgextend lvextend resize2fs	vgextend lvextend xfs_growfs ssm resize	vgextend lvextend xfs_growfs ssm resize
Shrink volumes	resize2fs lvreduce vgreduce	resize2fs lvreduce vgreduce
Repair file system	fsck	fsck	fsck ssm check	fsck ssm check
View NFS share	showmount -e mount	showmount -e mount	showmount -e mount	showmount -e mount
Configure NFS share	/etc/exports service nfs reload	/etc/exports service nfs reload	/etc/exports systemctl reload nfs.service	/etc/exports systemctl reload nfs.service
Change file attributes	chattr	chattr	chattr	chattr
Change file permissions	chmod chown chgrp umask	chmod chown chgrp umask	chmod chown chgrp umask	chmod chown chgrp umask
Change access control list	setfacl	setfacl	setfacl	setfacl

8. Networking & routing

TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Configure name resolution	/etc/hosts /etc/resolv.conf	/etc/hosts /etc/resolv.conf	/etc/hosts /etc/resolv.conf nmcli con mod	/etc/hosts /etc/resolv.conf nmcli con mod
Configure hostname	/etc/sysconfig/network	/etc/sysconfig/network	hostnamectl /etc/hostname nmtui	hostnamectl /etc/hostname nmtui
Network interface details	ip addr ifconfig brctl	ip addr ifconfig brctl	ip add nmcli dev show teamdctl brctl bridge	ip add nmcli dev show teamdctl brctl bridge
View routes	ip route	ip route	ip route	ip route
Configure routes	ip route add system-config-network /etc/sysconfig/route-iface	ip route add system-config-network /etc/sysconfig/route-iface	ip route add nmcli nmtui nm-connection-editor /etc/sysconfig/route-iface	ip route add nmcli nmtui nm-connection-editor /etc/sysconfig/route-iface

9. Security Management

TASK	CentOS5	CentOS6	CentOS7	CentOS8/AlmaLinux8
Server security	/etc/selinux/config chcon restorecon semanage setsebool system-config-selinux	/etc/selinux/config chcon restorecon semanage setsebool system-config-selinux	/etc/selinux/config chcon restorecon semanage setsebool system-config-selinux	/etc/selinux/config chcon restorecon semanage setsebool system-config-selinux
LDAP, SSSD, Kerberos	authconfig authconfig-tui authconfig-gtk	authconfig authconfig-tui authconfig-gtk	authselect	authselect
Network users	getent	getent	getent	getent

10. Process Management

TASK	CentOS5	CentOS6	CentOS7
Trace library calls	ltrace	ltrace	ltrace
Trace system calls	strace	strace	strace
Change process run location	taskset	taskset	taskset
Change process priority	nice renice	nice renice	nice renice
Kill process	kill pkill killall	kill pkill killall	kill pkill killall
View system usage	top ps sar iostat netstat vmstat mpstat numastat	top ps sar iostat netstat ss vmstat mpstat numastat tuna	top ps sar iostat netstat ss vmstat mpstat numastat tuna

Sumber Rujukan: https://www.seimaxim.com/kb/common-administrative-commands-in-almalinux-8-and-centos-8#Basic_System_Commands

Standar Keamanan Sistem Informasi dan Jaringan

2019-07-10T11:11:00.003+07:00

Berbicara terkait sistem informasi, data dan jaringan dibidang teknologi informasi maka hal tersebut tidak lepas dari adanya unsur pengamanan, maksud dan tujuan dari pengamanan ialah menjaga kelangsungan operasional sistem agar tidak adanya perubahan, pencurian maupun penyalahgunaan data-data dari orang yang melakukan pelanggaran hak akses.

Sebelum masuk ke tabel-tabel standarisasi keamanan informasi, maka berikut ialah definisi mengenai keamanan informasi :

Menurut Sarno dan Iffano keamanan informasi adalah suatu upaya untuk mengamankan aset informasi terhadap ancaman yang mungkin timbul. Sehingga keamanan informasi secara tidak langsung dapat menjamin kontinuitas bisnis, mengurangi resiko-resiko yang terjadi, mengoptimalkan pengembalian investasi (return on investment). Semakin banyak informasi perusahaan yang disimpan, dikelola dan di-sharing-kan maka semakin besar pula resiko terjadi kerusakan, kehilangan atau tereksposnya data ke pihak eksternal yang tidak diinginkan (Sarno dan iffano : 2009).
Menurut G. J. Simons, keamanan informasi adalah bagaimana kita dapat mencegah penipuan (cheating) atau, paling tidak, mendeteksi adanya penipuan di sebuah sistem yang berbasis informasi, dimana informasinya sendiri tidak memiliki arti fisik.
Keamanan informasi merupakan perlindungan informasi dari berbagai ancaman agar menjamin kelanjutan proses bisnis, mengurangi risiko bisnis, dan meningkatkan return of investment (ROI) serta peluang bisnis (Chaeikar, etc., 2012)

Dari pengertian diatas, sudah selayaknya dalam mengamankan sistem informasi, data dan jaringan, kita memiliki standarisasi. Berikut pemetaan standard keamanan yang perlu diperhatikan oleh IT Security Officer dalam tugasnya menjaga agar sistem informasi, data dan jaringan kita aman dari unsur-unsur peretasan.

1. Standard keamanan: autentikasi dan otorisasi

Kategori	Standard yang Tersedia	Organisasi
Autentikasi dan Otorisasi	RFC 5246 Secure Sockets Layer (SSL)/ Transport Layer Security (TLS)	IETF
	RFC 3820: X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile	IETF
	RFC5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile	IETF
	RFC 5849 OAuth (Open Authorization Protocol)	IETF
	ISO/IEC 9594-8:2008 \| X.509 Information technology — Open Systems Interconnection — The Directory: Public-key and attribute certificate frameworks	ISO/IEC & ITU-T
	ISO/IEC 29115 \| X.1254 Information technology — Security techniques — Entity authentication assurance framework	ISO/IEC & ITU-T
	FIPS 181 Automated Password Generator	NIST
	FIPS 190 Guideline for the Use of Advanced Authentication Technology Alternatives	NIST
	FIPS 196 Entity Authentication Using Public Key Cryptography	NIST
	OpenID Authentication	OpenID
	eXtensible Access Control Markup Language (XACML)	OASIS
	Security Assertion Markup Language (SAML)	OASIS

2. Standard keamanan: kerahasiaan (confidentiality)

Kategori	Standard yang Tersedia	Organisasi
Kerahasiaan	RFC 5246 Secure Sockets Layer (SSL)/ Transport Layer Security (TLS)	IETF
	Key Management Interoperability Protocol (KMIP)	OASIS
	XML Encryption Syntax and Processing	W3C
	FIPS 140-2 Security Requirements for Cryptographic Modules	NIST
	FIPS 185 Escrowed Encryption Standard (EES)	NIST
	FIPS 197 Advanced Encryption Standard (AES)	NIST
	FIPS 188 Standard Security Label for Information Transfer	NIST

3. Standard keamanan: integritas (integrity)

Kategori	Standard yang Tersedia	Organisasi
Integritas	XML signature (XMLDSig)	W3C
	FIPS 180-4 Secure Hash Standard (SHS)	NIST
	FIPS 186-4 Digital Signature Standard (DSS)	NIST
	FIPS 198-1 The Keyed-Hash Message Authentication Code (HMAC)	NIST

4. Standard keamanan: manajemen identitas

Kategori	Standard yang Tersedia	Organisasi
Manajemen identitas	X.idmcc Requirement of IdM in Cloud Computing	ITU-T
	FIPS 201-1 Personal Identity Verification (PIV) of Federal Employees and Contractors	NIST
	Service Provisioning Markup Language (SPML)	OASIS
	Web Services Federation Language (WS-Federation) Version 1.2	OASIS
	WS-Trust 1.3	OASIS
	Security Assertion Markup Language (SAML)	OASIS
	OpenID Authentication 1.1	OpenID Foundation

5. Standard keamanan: monitoring keamanan dan respon insiden

Kategori	Standard yang Tersedia	Organisasi
Monitoring Keamanan dan Respon Insiden	ISO/IEC WD 27035-1 Information technology — Security techniques — Information security incident management — Part 1: Principles of incident management	ISO/IEC
	ISO/IEC WD 27035-3 Information technology — Security techniques — Information security incident management — Part 3: Guidelines for CSIRT operations	ISO/IEC
	ISO/IEC WD 27039; Information technology — Security techniques — Selection, deployment and operations of intrusion detection systems	ISO/IEC
	ISO/IEC 18180 Information technology – Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 (NIST IR 7275)	ISO/IEC
	X.1500 Cybersecurity information exchange techniques	ITU-T
	X.1520: Common vulnerabilities and exposures	ITU-T
	X.1521 Common Vulnerability Scoring System	ITU-T
	PCI Data Security Standard	PCI
	FIPS 191 Guideline for the Analysis of Local Area Network Security	NIST

6. Standard keamanan: kendali keamanan

Kategori	Standard yang Tersedia	Organisasi
Kendali Keamanan	Cloud Controls Matrix Version 1.3	CSA
	ISO/IEC 27001:2005 Information Technology – Security Techniques Information Security Management Systems Requirements	ISO/IEC
	ISO/IEC WD TS 27017 Information technology — Security techniques — Information security management – Guidelines on information security controls for the use of cloud computing services based on ISO/IEC 27002	ISO/IEC
	ISO/IEC 27018 Code of Practice for Data Protection Controls for Public Cloud Computing Services	ISO/IEC
	ISO/IEC 1st WD 27036-4 Information technology – Security techniques – Information security for supplier relationships – Part 4: Guidelines for security of cloud services	ISO/IEC

7. Standard keamanan: manajemen kebijakan keamananStandard keamanan: ketersediaan (availability)

Kategori	Standard yang Tersedia	Organisasi
Manajemen Kebijakan Keamanan	ATIS-02000008 Trusted Information Exchange (TIE)	ATIS
	FIPS 199 Standards for Security Categorization of Federal Information and Information Systems	NIST
	FIPS 200 Minimum Security Requirements for Federal Information and Information Systems	NIST
	ISO/IEC 27002 Code of practice for information security management	ISO/IEC
	eXtensible Access Control Markup Language (XACML)	OASIS

8. Standard keamanan: ketersediaan (availability)

Kategori	Standard yang Tersedia	Organisasi
Ketersediaan	ATIS-02000009 Cloud Services Lifecycle Checklist	ATIS
	ISO/PAS 22399:2007 Societal security – Guideline for incident preparedness and operational continuity management	ISO

Semoga bisa menjadi referensi dan bermanfaat

Referensi :

Menambahkan Repository Ubuntu Dengan Mudah

2018-05-28T15:38:00.000+07:00

Ada beberapa hal ketika kita baru selesai menginstall suatu Operating System Open Source, salah satunya ialah melakukan update system dan sebelumnya yaitu menambahkan repository.

Ditulisan kali ini saya akan menghadirkan bagaimana kita menambahkan repository dengan mudah, berikut langkah-langkahnya :

1. Ketahuilah versi Ubuntu yang selesai diintsall, atau telah diinstall di server, dengan perintah :

a. lsb_release -a, atau

No LSB modules are available.Distributor ID: UbuntuDescription: Ubuntu 16.04.4 LTSRelease: 16.04Codename: xenial

b. cat /etc/*release

DISTRIB_ID=UbuntuDISTRIB_RELEASE=16.04DISTRIB_CODENAME=xenialDISTRIB_DESCRIPTION="Ubuntu 16.04.4 LTS"NAME="Ubuntu"VERSION="16.04.4 LTS (Xenial Xerus)"ID=ubuntuID_LIKE=debianPRETTY_NAME="Ubuntu 16.04.4 LTS"VERSION_ID="16.04"HOME_URL="http://www.ubuntu.com/"SUPPORT_URL="http://help.ubuntu.com/"BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"VERSION_CODENAME=xenialUBUNTU_CODENAME=xenial

2. Buka link https://repogen.simplylinux.ch/index.php, dan sesuaikan dengan kebutuhan anda .
3. Copy paste, script yang sudah di-generate, dan paste kan yang dilingkari di gambar dibawah ini ke CLI.

4. Hasilnya ialah ketika kita cek dengan perintah less /etc/apt/sources.list ialah sesuai dengan apa yang telah ter generate. :

Demikian, semoga bermanfaat

Solusi Error The Signature Verification

2018-05-28T15:17:00.000+07:00

Pernahkan anda mendapati error sperti dibawah ini kah?

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.cloud.google.com/apt kubernetes-xenial InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6A030B21BA07F4FB
W: Failed to fetch http://apt.kubernetes.io/dists/kubernetes-xenial/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6A030B21BA07F4FB
W: Some index files failed to download. They have been ignored, or old ones used instead.

Pesan error diatas ditemui ketika saya akan melakukan update system, error system yang saya temui kali diatas ialah di OS Ubuntu 16.04.4 LTS. Solusi dari kasus diatas ialah sangat sederhana sekali.

Nha apakah solusi dari permasalahan di atas, berikut ialah solusi nya :

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 6A030B21BA07F4FB

Bilamana sukses dan key yang dimasukan valid maka hasilnya seperti dibawah ini :

Kemudian lakukan update system, dan hasilnya ialah :

Demikian solusi mengenai error the signature verification , Semoga Bermanfaat.

Instalasi Zabbix Server Versi 2.4 di CentOS 6

2018-05-28T13:38:00.001+07:00

Zabbix ialah suatu perangkat lunak yang bersifat open source dengan skala enterprise yang dirancang dan dibangun untuk memantau dan melacak jaringan server dan aplikasi secara real time.
Bagi seorang sistem administrator metode pengumpulan data-data jaringan server dan aplikasi sangat diperlukan untuk membuat suatu keputusan dalam pengembangan jaringan yang di kelolanya, jenis data-data yang dihasilkan oleh zabbix dapat berupa data grafik, kinerja ouput atau tren muatan beban, dan lain sebagainya.

Bagaimana langkah-langkah dalam instalasi zabbix server di CentOS 6 khususnya, berikut langkah-langkah nya :

1. Install httpd (webserver), php and MySQL (database)

yum install php php-cli php-common php-devel php-pear php-gd php-mbstring php-mysql php-xml httpd httpd-devel mysql mysql-server -y

2. Mempersiapkan paket Zabbix, diambil dari sumber repo.zabbix.com

wget http://repo.zabbix.com/zabbix/2.2/rhel/6/x86_64/zabbix-release-2.2-1.el6.noarch.rpm

rpm -Uvh zabbix-release-2.2-1.el6.noarch.rpm

3. Install Zabbix server

yum install zabbix-agent zabbix-web-mysql zabbix-server-mysql zabbix-java-gateway -y

4. Konfigurasi PHP Frontend Zabbix

php_value max_execution_time 300
php_value memory_limit 128M
php_value post_max_size 16M
php_value upload_max_filesize 2M
php_value max_input_time 300
php_value date.timezone Asia/Jakarta

5. Restart zabbix dan buat zabbix start saat boot

service zabbix-server start

6. Setup Zabbix database :

mysql> create database zabbix character set utf8 collate utf8_bin;
mysql> grant all privileges on zabbix.* to zabbix@localhost identified by 'zabbix';
mysql> flush privileges;
mysql> exit

7. Import initial schema dan data

cd /usr/share/doc/zabbix-server-mysql-2.2.5/create
mysql -u zabbix -p zabbix < schema.sql
mysql -u zabbix -p zabbix < images.sql
mysql -u zabbix -p zabbix < data.sql

8. Start zabbix installation wizard

http://resumedini.ccy/zabbix/setup.php

9. Edit konfigurasi database di zabbix_server.conf

DBHost=localhost
DBName=zabbix
DBUser=zabbix
DBPassword=password

10. Buka port port yang support zabbix :

vi /etc/sysconfig/iptables
-A INPUT -m state --state NEW -m tcp -p tcp --dport 10051 -j ACCEPT
service iptables restart

11. Uji layanan zabbix :

http://resumedini.ccy/zabbix
Default username dan password untuk Zabbix ialah Admin dan zabbix.

Demikian, semoga bermanfaat

Kustom Zimbra Mail - 1

2017-10-15T08:26:00.001+07:00

Zimbra Collaboration Suite (ZCS) adalah sebuah produk groupware produk Zimbra, Inc, yang terletak di San Mateo, California, Amerika Serikat. Perusahaan ini dibeli oleh Yahoo! pada September 2007 ^[1]. Perangkat lunak ini terdiri dari komponen klien dan server. Zimbra tersedia dalam dua versi: versi sumber terbuka, dan versi yang didukung secara komersial ( "Zimbra Network") dengan komponen sumber komersil. Versi perangkat lunak ini tersedia dari Zimbra untuk diunduh dan digunakan dengan bebas, serta dari mitra resmi Zimbra.

Pertanyaannya bagaimana ketika kita akan mengkustom header dan hal-hal lainnya setelah instalasi selesai dilakukan?
Berikut salah satunya langkah-langkah untuk mengkustome header khususnya meta description di zimbra mail :

Cek keberadaan mailbox, dengan perintah : su - zimbra -c "zmprov -l gas mailbox"
Masuk sebagai user zimbra : su - zimbra
Masuk ke file /opt/zimbra/jetty/webapps/zimbra/WEB-INF/classes/messages/ZmMsg.properties
Edit "zimbraLoginMetaDesc =[new value]"
Restart mailbox service : zmmailboxdctl restart
Pastikan bahwa semua server seperti MailBox, MailArchive sudah terkustome.

Semoga bermanfaat..

Referensi :
https://id.wikipedia.org/wiki/Zimbra
https://wiki.zimbra.com/wiki/Changing_the_Page_Title
https://github.com/EmailConsortium/zimbra-vietnamese/blob/master/messages/ZmMsg.properties

27 Hal Paska Install CentOS 7

2017-07-20T15:56:00.002+07:00

Semoga bermanfaat :
1. Register and Enable Red Hat Subscription
   # yum install subscription-manager register
   # subscription-manager register --username your_username --password your_password
   # subscription-manager unregister --> untuk unregister
   # subscription-manager list -available --> melihat daftar
   # subscription-manager subscribe --pool=Pool ID number --> aktivasi
   # subscription-manager list –consumed --> melihat status
   # subscription-manager list --> cek enable
   # subscription-manager remove --all --> menhapus keaktifan
    # subscription-manager unsubscribe --serial=Serial number --> menhapus keaktifan
   # subscription-manager service-level --list
   # subscription-manager service-level --set=self-support
   # subscription-manager repos --list --> enable repolist

2. Configure Network with Static IP Address
   # yum install net-tools             [Provides ifconfig utility]
   # ip addr show
   # vi /etc/sysconfig/network-scripts/ifcfg-eth0
       TYPE=Ethernet
       BOOTPROTO=static
       NAME=eth0
       UUID=a487343f-625a-4408-97ad-ac6745726316
       DEVICE=eth0
       ONBOOT=yes
       NM_CONTROLLED=yes
       IPADDR=192.168.20.61
       PREFIX=24
       GATEWAY=192.168.20.2
       DNS1=192.168.20.1
   # service network restart.1
   # ip addr show
   # ping -c4 google.com

   CREATE VHOST CentOS 7
   # cd /etc/httpd/
   # mkdir sites-available sites-enabled
   # vi conf/httpd.conf --> tambahkan IncludeOptional sites-enabled/*.conf
   # vi /etc/httpd/sites-available/rheltest.lan.conf --> isikan sperti dibawah ini :
       <VirtualHost *:80>
           ServerName rheltest.lan
           DocumentRoot "/var/www/rheltest.lan"
           <Directory "/var/www/rheltest.lan">
           Options Indexes FollowSymLinks MultiViews
           # AllowOverride controls what directives may be placed in .htaccess files.
           AllowOverride All
           # Controls who can get stuff from this server file
           Order allow,deny
           Allow from all
           </Directory>
           <IfModule mpm_peruser_module>
           ServerEnvironment apache apache
           </IfModule>
           ErrorLog /var/log/httpd/rheltest.lan-error.log
           CustomLog /var/log/httpd/rheltest.lan-access.log combined
       </VirtualHost>
   # mkdir -p /var/www/rheltest.lan
   # nano /usr/local/bin/a2ensite --> isikan :
           #!/bin/bash
           if test -d /etc/httpd/sites-available && test -d /etc/httpd/sites-enabled ; then
               echo "-----------------------------------------------"
               else
               mkdir /etc/httpd/sites-available
               mkdir /etc/httpd/sites-enabled
           fi

           avail=/etc/httpd/sites-available/$1.conf
           enabled=/etc/httpd/sites-enabled/
           site=`ls /etc/httpd/sites-available/`
           if [ "$#" != "1" ]; then
               echo "Use script: a2ensite virtual_site"
               echo -e "\nAvailable virtual hosts:\n$site"
               exit 0
           else
               if test -e $avail; then
                   sudo ln -s $avail $enabled
               else
                   echo -e "$avail virtual host does not exist! Please create one!\n$site"
               exit 0
               fi
               if test -e $enabled/$1.conf; then
                   echo "Success!! Now restart Apache server: sudo systemctl restart httpd"
               else
                   echo -e "Virtual host $avail does not exist!\nPlease see available virtual hosts:\n$site"
               exit 0
               fi
           fi

   # nano /usr/local/bin/a2dissite --> isikan :
       #!/bin/bash
       avail=/etc/httpd/sites-enabled/$1.conf
       enabled=/etc/httpd/sites-enabled
       site=`ls /etc/httpd/sites-enabled/`
       if [ "$#" != "1" ]; then
           echo "Use script: a2dissite virtual_site"
           echo -e "\nAvailable virtual hosts: \n$site"
       exit 0
       else
           if test -e $avail; then
               sudo rm $avail
           else
               echo -e "$avail virtual host does not exist! Exiting!"
           exit 0
           fi
           if test -e $enabled/$1.conf; then
               echo "Error!! Could not remove $avail virtual host!"
           else
               echo -e "Success! $avail has been removed!\nPlease restart Apache: sudo systemctl restart httpd"
           exit 0
           fi
       fi

   # chmod +x /usr/local/bin/a2*
   # a2ensite vhost_name
   # a2disite vhost_name
   # a2ensite rheltest.lan
   # systemctl restart httpd
   # buka browser test rheltest.lan


3. Set Hostname of Server
   # echo $HOSTNAME
   # vi /etc/hostname

4. Update or Upgrade CentOS Minimal Install
   # yum update && yum upgrade

5. Install Command Line Web Browser
   # yum install links --> install commandline browser

6. Install Apache HTTP Server
   INSTALL WebServer
   # yum install httpd
   # /etc/httpd/conf/httpd.conf --> mengganti port 80 ke port lain ==> LISTEN 331
   # firewall-cmd --add-service=http --> aktifkan fw
   # firewall-cmd -permanent -add-port=331/tcp
   # firewall-cmd --reload
   # systemctl restart httpd.service
   # systemctl start httpd.service --> automatis on ketika boot
    # systemctl enable httpd.service --> automatis on ketika boot
   # links 127.0.0.1 --> verifikasi apache

7. Install PHP
   INSTALL PHP
   # yum install php
   # systemctl restart httpd.service
   # echo -e "<?php\nphpinfo();\n?>" > /var/www/html/phpinfo.php --> verifikasi PHP
   # links http://127.0.0.1/phpinfo.php --> view PHP

8. Install MariaDB Database
INSTALL DATABASE
   # yum install mariadb-server mariadb
   # systemctl start mariadb.service --> automatis on ketika boot
   # systemctl enable mariadb.service --> automatis on ketika boot
   # firewall-cmd --add-service=mysql
   # /usr/bin/mysql_secure_installation

9. Install and Configure SSH Server
   INSTALL SSH
   # SSH -V
   # vi /etc/ssh/ssh_config -->
       Protocol 2,1 (Original)
       Protocol 2 (Now)
       PermitRootLogin yes (Original)
       PermitRootLogin no (Now)
   # systemctl restart sshd.service

10. Install GCC (GNU Compiler Collection)
   INSTALL GCC
   # yum install gcc
   # gcc --version

11. Install Java
   # yum install java
   # java -version

12. Install Apache Tomcat
   # yum install tomcat
   # systemctl start tomcat
   # /usr/sbin/tomcat version
   # firewall-cmd --zone=public --add-port=8080/tcp --permanent
   # firewall-cmd --reload
   # vi /etc/tomcat/tomcat-users.xml --> kustome
       <tomcat-users>
       ....
       </tomcat-users>
       <role rolename="manager-gui"/>
       <role rolename="manager-script"/>
       <role rolename="manager-jmx"/>
       <role rolename="manager-status"/>
       <role rolename="admin-gui"/>
       <role rolename="admin-script"/>
       <user username="tri" password="tri" roles="manager-gui,manager-script,manager-jmx,manager-status,admin-gui,admin-script"/>
       </tomcat-users>
   # systemctl stop tomcat
   # systemctl start tomcat
   # systemctl enable tomcat.service

13. Install Nmap to Monitor Open Ports
   INSTALL NMAP & MONIT PORT
   # yum install nmap
   # nmap 127.0.01
   # firewall-cmd --list-ports

14. FirewallD Configuration
   FIREWALLD KONFIGURASI
   # systemctl status firewalld
   # firewall-cmd --get-zones
   # firewall-cmd --zone=work --list-all
   # firewall-cmd --get-default-zone
   # firewall-cmd --set-default-zone=work
   # firewall-cmd --list-services
   # firewall-cmd --add-service=http
   # firewall-cmd –reload
   # firewall-cmd --add-service=http --permanent
   # firewall-cmd --reload
   # firewall-cmd --remove-service=http --> keaddan meremove
   # firewall-cmd --reload
   # firewall-cmd --zone=work --remove-service=http --permanent --> keaddan meremove
   # firewall-cmd --reload
   # firewall-cmd --add-port=331/tcp --> ALLOW PORT 331
    # firewall-cmd --reload
   # firewall-cmd --add-port=331/tcp --permanent --> ALLOW PORT 331 PERMANENT
    # firewall-cmd --reload
   # firewall-cmd --remove-port=331/tcp --> BLOCK PORT 331
   # firewall-cmd --reload
   # firewall-cmd --remove-port=331/tcp --permanent --> BLOCK PORT 331 PERMANENT
   # firewall-cmd --reload
   # systemctl stop firewalld --> DISABLED FIREWALLD
   # systemctl disable firewalld --> DISABLED FIREWALLD
   # firewall-cmd --state --> DISABLED FIREWALLD
   # systemctl enable firewalld --> ENABLED FIREWALLD
   # systemctl start firewalld --> ENABLED FIREWALLD
   # firewall-cmd --state --> ENABLED FIREWALLD

15. Installing Wget
   INSTALL WGET
   # yum install wget

16. Installing Telnet
   INTSALL TELNET
   # yum install telnet
   # telnet google.com 80

17. Installing Webmin
   Optional

18. Enable Third Party Repositories EPEL
   INSTALL EPEL REPO
   # yum install epel-release
   # rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm --> ADD KOMUNITAS EPEL

19. Install 7-zip Utility
   INSTALL KOMPRES
   # yum install p7zip

20. Install NTFS-3G Driver
   none

21. Install Vsftpd FTP Server
   INSTALL FTP SERVER
   # yum install vsftpd
   # vi /etc/vsftpd/vsftpd.conf
       anonymous_enable=NO
       local_enable=YES
       write_enable=YES
       chroot_local_user=YES
   # firewall-cmd --add-port=21/tcp
   # firewall-cmd --reload
   # systemctl restart vsftpd
   # systemctl enable vsftpd

22. Install and Configure sudo
   INSTALL & KONFIG SUDO
   # visudo
        tri   ALL=(ALL)    ALL --> memberikan akses pebuh untuk tri
       cmnd_Alias nopermit = /sbin/shutdown, /sbin/reboot
       tri   ALL=(ALL)    ALL,!nopermit
       cmnd_Alias permit = /usr/sbin/useradd, /usr/sbin/userdel --> Give permission to a group (say debian) to run a few root privilege command say (add user and delete user) .
       debian ALL=(ALL) permit --> after add the permission to group debian.


23. Install and Enable SELinux
   INSTALL SELINUX
   # yum install selinux-policy
   # getenforce
   # setenforce 0 --> untuk permissive
   # setenforce 1 --> untuk enforcing

24. Install Rootkit Hunter
   INSTALL ROOTKIT HUNTER
   # yum install rkhunter
   # rkhunter --check

25. Install Linux Malware Detect (LMD)
   Install Linux Malware Detect
   # wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
   # tar -xvf maldetect-current.tar.gz
   # ls -l | grep maldetect
   # ./install.sh
   # vi /usr/local/maldetect/conf.maldet
       email_alert=1
       email_addr=gacanepa@localhost
       email_subj="Malware alerts for $HOSTNAME - $(date +%Y-%m-%d)"
       quar_hits=1
       quar_clean=1
       quar_susp=1
       clam_av=1
   # vi /etc/yum.repos.d/dag.repo:
       [dag]
       name=Dag RPM Repository for Red Hat Enterprise Linux
       baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag/
       gpgcheck=1
       gpgkey=http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
       enabled=1
   # yum update && yum install clamd
   # maldet --scan-all /var/www/
   # maldet --scan-all /var/www/*.zip
   # maldet --report 021015-1051.3559
   # maldet --clean SCANID

26. Server Bandwidth Testing with Speedtest-cli
   $ sudo apt-get install python-pip
   $ sudo pip install speedtest-cli
   $ sudo pip install speedtest-cli --upgrade
   $ wget https://github.com/sivel/speedtest-cli/archive/master.zip
   $ unzip master.zip
   $ cd speedtest-cli-master/
   $ chmod 755 speedtest_cli.py
   $ sudo mv speedtest_cli.py /usr/bin/
   $ speedtest_cli.py
   $ speedtest_cli.py --bytes --> hasilnya by bits
   $ speedtest_cli.py --simple -->info praktis
   # speedtest_cli.py --share --> download image

27. Password Protect GRUB
   # cp /boot/grub2/grub.cfg /boot/grub2/grub.cfg.old
   # cp /etc/grub.d/10_linux /etc/grub.d/10_linux.old
   # vi /etc/grub.d/10_linux
       cat <<EOF
       set superusers=”tri”
       Password tri@123
       EOF
   # grub2-mkconfig --output=/boot/grub2/grub.cfg
   # /etc/grub.d/10_linux --> enkripsi password
       cat <<EOF
       set superusers=”tri”
       Password_pbkdf2 tri
       grub.pbkdf2.sha512**************************************************
       EOF

Solusi Error "bringing up interface eth0 error connection activation failed.." CentOS 7

2017-07-20T14:11:00.001+07:00

Konfigurasi dibawah ini, bisa mengakibatkan error system khususnya di kondisi remote. Hal ini akan ditengarai ketika server melakukan proses restarting network. Dan bagaimana solusinya :

[root@srv1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0

TYPE=Ethernet
BOOTPROTO=static
NAME=eth0
UUID=a487343f-625a-4408-97ad-ac6745726316
DEVICE=eth0
ONBOOT=yes
IPADDR=192.168.2.61
PREFIX=24
GATEWAY=192.168.20.2
DNS1=192.168.20.1

Berikut ialah solusinya :

[root@srv1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0

TYPE=Ethernet
BOOTPROTO=static
NAME=eth0
UUID=a487343f-625a-4408-97ad-ac6745726316
DEVICE=eth0
ONBOOT=yes
IPADDR=192.168.2.61
PREFIX=24
GATEWAY=192.168.20.2
DNS1=192.168.20.1

NM_CONTROLLED=no ---> tambahkan NM_CONTROLLED

Sederhana dan semoga bermanfaat.

Menemukan Zombie dan Menghapusnya Dari Sistem Linux

2017-02-20T10:26:00.001+07:00

Hal-hal apa saja yang dapat kita lakukan ketika sistem linux kita mengalami proses yang bgitu lambat, yang utama dan pertama ialah melakukan pengecekan, pengecekan secara alamiah di sistem bisa menggunakan perintah "top", jika ditemukan "zombi" disaat kita melakukan pengecekan, berikut langkah-langkah kita untuk mencari service yang sedang jalan dan menon-aktifkan nya :

[root@svr-vps1/]# ps axo stat,ppid,pid,comm | grep -w defunct
Z 1609 4693 host-deny.sh <defunct>
Z 1609 4694 firewall-drop.s <defunct>

Perintah menonaktifkan/mengakhiri process dari host-deny.sh

[root@svr-vps1/]# sudo kill -s SIGCHLD 1609

Semoga bermanfaat

Mengamankan Akses Website Menggunakan .htacces

2017-01-04T09:15:00.002+07:00

Berikut ialah panduan praktis untuk mengamankan aplikasi berbasis website kita dengan menggunakan .htaccess :

Konfigurasi ulang utk webserver anda, untuk tutorial ini menggunakan webserver apache

# vi /etc/httpd/conf/httpd.conf

<Directory "/var/www/html">
#
# Possible values for the Options directive are "None", "All",
# or any combination of:
#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
#
# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.
#
# The Options directive is both complicated and important. Please see
# http://httpd.apache.org/docs/2.2/mod/core.html#options
# for more information.
#

# Mengamankan akses ke folder
    Options Indexes FollowSymLinks
#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
#   Options FileInfo AuthConfig Limit
#
   # aktifkan .htaccess
    AllowOverride All

#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
#   Options FileInfo AuthConfig Limit
#
    AllowOverride None

#
# Controls who can get stuff from this server.
#
    Order allow,deny
    Allow from all
</Directory>
Buat file .htaccess dan tempatkan di dalam direktori website anda
AuthName "Restricted Area"
AuthType Basic
AuthUserFile /home/mysqlweb/public_html/.htpasswd
AuthGroupFile /dev/null
require valid-user
Buat file .htpasswd, bisa menggunakan htpasswd generator online seperti http://aspirine.org/htpasswd_en.html atau http://htpasswdgenerator.net/ dan lain sebagainya :
#admin PasswordAdminWebsite
admin:$apr1$2aUZu.iI$jpny/50c8lP6vA4FrBtRl/
Semoga bermanfaat..

Block the Microsoft “Auto IP-Listening” Service

2016-12-30T04:28:00.000+07:00

Pernahkan anda berpikir jika sofware OS windows yang anda pakai, dapat digunakan sbg "Spy Tools"..? Pertanyaannya tsb kemungkinan besar dapat di jawab dengan jawaban "bisa dan itu sesuatu hal yang mungkin terjadi..".

Tips berikut adalah bagaimana agar Bagaimana Suatu Sistem Operasi yang ada di komputer kita khususnya Sistem Operasi Windows tidak dapat mendapatkan IP Address kita tanpa adanya perijinan dari kita, berikut langkah-langkahnya :

1) Buka REGEDIT dan tekan Enter

2) HKEY_LOCAL_MACHINE

4) SYSTEM

5) CurrentControlSet

6) Services

7) NLaSvc

8) Parameters

9) Internet

10) “EnableActiveProibing” dan Set menjadi Bernilai “0”

Semoga bermanfaat..

Solusi Kirim Email Di Framework CI "fsockopen()"

2016-12-23T22:16:00.000+07:00

Solusi ketika anda dihadapkan oleh pesan error

Asumsi disini bahwa konfigurasi mail sudah sesuai :

public function lupa_password(){
        $email = $this->input->post('email');
        $data_user = $this->m_lapor_api->check_email($email)->result();
        if(count($data_user)>1){
            foreach($data_user as $data){
                $this->load->library('email');
                $email = $data->email;
                $config = Array(
                    'protocol' => "smtp",
                    'smtp_host' => "domain.com",
                    'smtp_port' => 465,
                    'smtp_user' => "admin@domain.com",
                    'smtp_pass' => "passwordUserMail",
                    'smtp_crypto' => "ssl", //can be 'ssl' or 'tls' for example
                    'mailtype' => "html",
                    'smtp_timeout' => "4",
                    'charset' => "iso-8859-1",
                    'wordwrap' => TRUE
                );
                $this->email->initialize($config);
                $this->email->set_newline("\r\n");
                // Set to, from, message, etc.
                $this->email->to($email);
                $this->email->from("admin@domain.com","Layanan Email");
                $this->email->bcc("admin@domain.com");
                $this->email->subject("Layanan Lupa Password");
                $this->email->message("password anda ".$data->password);

                if(! $this->email->send()){
                    echo "sukses";
                }else{
                    echo "gagal";
                }
            }
        }
        echo $this->email->print_debugger();
    }

Jika script diatas dicoba maka akan muncul pesan error diatas, bagaimana solusinya, solusinya ialah mengganti :

'protocol' => "smtp"

Dengan :

'protocol' => "sendmail",

Demikian solusi praktis dari kasus "fsockopen()... ", Semoga Bermanfaat

Solusi "The requested URL /zabbix was not found on this server"

2016-12-05T18:24:00.000+07:00

Ketika zabbix anda di update versi nya terutama dari versi 2.xx ke 3.xx, maka suatu ketika server zabbix anda akan error dengan error "The requested URL /zabbix was not found on this server", bagaimana solusinya, berikut langkah-langkah solusi untuk kasus tersebut :

Cek paket zabbix terinstall

yum list installed | grep zabbix

output dari perintah tsb :

fping.x86_64                 2.4b2-16.el6      @zabbix-non-supported
zabbix-agent.x86_64          3.0.3-1.el6       @zabbix
zabbix-release.noarch        3.0-1.el6         installed
zabbix-server-mysql.x86_64   3.0.3-1.el6       @zabbix
zabbix-web.noarch            3.0.3-1.el6       @zabbix
zabbix-web-mysql.noarch       3.0.3-1.el6       @zabbix

Copikan :

cp /usr/share/doc/zabbix-web-3.5.3/httpd22-example.conf /etc/httpd/conf.d/zabbix.conf

Restart webserver :

service httpd restart

Semoga Bermanfaat

Solusi "Lack of free swap space" di Zabbix Server

2016-11-29T19:42:00.001+07:00

Berikut ialah langkah-dlangkah ketika di monitoring zabbix server mendapati pesan notifikasi "Lack of free swap space" :

dd if=/dev/zero of=/var/swapfile bs=1k count=1048

dd if=/dev/zero of=/var/swapfile bs=1M count=1048

chmod 600 /var/swapfile

mkswap /var/swapfile

echo /var/swapfile none swap defaults 0 0 | sudo tee -a /etc/fstab

swapon -a

Semoga bermanfaat

Mengaktifkan Repo EPEL di CentOS 6

2016-11-27T12:01:00.004+07:00

EPEL (Extra Packages for Enterprise Linux) adalah open source dan free community berbasis Project Repository dari tim Fedora yang menyediakan 100% kualitas tinggi add-on paket perangkat lunak untuk distribusi Linux termasuk RHEL (Red Hat Enterprise Linux), CentOS, dan Scientific Linux. Proyek Epel bukan merupakan bagian dari RHEL / Cent OS tetapi dirancang untuk distribusi Linux utama dengan menyediakan banyak paket open source seperti jaringan, admin sys, pemrograman, pemantauan dan sebagainya. Sebagian besar paket Epel dipelihara oleh Fedora repo.

Beberapa alasan menggunakan Repo EPEL diantaranya :

Menyediakan banyak paket open source untuk menginstal melalui Yum.
Epel repo adalah 100% open source dan bebas untuk digunakan.
Tidak menyediakan inti duplikat paket dan tidak ada masalah kompatibilitas.
Semua paket Epel dipelihara oleh Fedora repo.

Cara Mengaktifkan Repo EPEL :

## RHEL/CentOS 6 32-Bit ##
# wget http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
# rpm -ivh epel-release-6-8.noarch.rpm
## RHEL/CentOS 6 64-Bit ##
# wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
# rpm -ivh epel-release-6-8.noarch.rpm

# yum repolist

Loaded plugins: downloadonly, fastestmirror, priorities
Loading mirror speeds from cached hostfile
* base: centos.aol.in
* epel: ftp.cuhk.edu.hk
* extras: centos.aol.in ....

## Sebagai contoh akan mendapatkan informasi mengenai zabbix, sebagai awal instalasi zabbix

# yum --enablerepo=epel info zabbix

Available Packages
Name       : zabbix
Arch       : i386
Version    : 1.4.7
Release    : 1.el5
Size       : 1.7 M
Repo : epel
Summary    : Open-source monitoring solution for your IT infrastructure
URL        : http://www.zabbix.com/
License    : GPL
Description: ZABBIX is software that monitors numerous parameters of a network.

## Instalasi paket zabbix menggunakan Repo EPEL

# yum --enablerepo=epel install zabbix

Semoga Bermanfaat.

Instalasi OpenVAS di CentOS

2016-11-12T05:33:00.002+07:00

Berbicara mengenai perangkat keamanan sistem, maka openVAS (Open Vulnerability Assessment System ) bisa dijadikan alat bantu untuk mengamankan sistem anda, selain sifatnya non-komersil / tdak diperdagangkan, alat bantu ini sangat membantu dalam pemindaian suatu kerentanan dalam sistem anda.

Bagaimanakah langkah-langkah instalasinya, berikut step by step nya :

wget -q -O - http://www.atomicorp.com/installers/atomic |sh

yum install openvas

openvas-setup

openvas-certdata-sync

openvasmd --rebuild

openvasmd

Setelah selesai dalam hal instalasi dan konfigurasi, buka :

http://localhost:9392

Jika terjadi error seperti berikut :

error: openvasmd: undefined symbol: sqlite3_errstr

Solusinya ialah :

vi /etc/init.d/openvas-manager

start() {

echo "Starting $progname:"

#daemon --pidfile=/var/run/$prog.pid $prog $OPTIONS

$prog --listen=127.0.0.1

RETVAL=$?

echo

[ $RETVAL -eq 0 ] && touch $lockfile

return $RETVAL

}

yum install atomic-sqlite-sqlite-devel.x86_64

Untuk Tools yang lain, yang insyaAlloh akan dibahas di blog ini, bisa di intip ke http://tools.x.org/tools-listing

Demikian, semoga bermanfaat

Solusi Mengatasi "Error: xz compression not available"

2016-11-12T04:56:00.001+07:00

Instalasi atau pembaruan menggunakan perintah yum kadang kala mengalami "Error: xz compression not available". Bagaimanakah mengatasi permasalahan tersebut, berikut langkah-langkahnya :

yum remove epel-release

rm -rf /var/cache/yum/x86_64/6/epel

yum -y install epel-release

Menambahkan User dan Akses Pembatasan Root

2016-11-06T10:59:00.004+07:00

1. Menambahkan user baru

sudo adduser newuser

2. Menetapkan password user baru

sudo passwd newuser

3. Grant Akses Terhadap Root

sudo /etc/sudoers

4. Meambahkan dan mematika akses root

#root ALL=(ALL) ALL

newuser ALL=(ALL) ALL

5. Menghapus user beserta file yang lama atau berstatus inactive

sudo userdel -r olduser

6. Mengaktifkan permited root dan pembatasan akses user ke root

vi /etc/sshd/sshd_config

# Authentication:

PermitRootLogin no

StrictModes yes

MaxAuthTries4

MaxSessions 2

Semoga bermanfaat

Menambahkan User dan Akses Pembatasan Root

2016-11-06T10:59:00.003+07:00

1. Menambahkan user baru

sudo adduser newuser

2. Menetapkan password user baru

sudo passwd newuser

3. Grant Akses Terhadap Root

sudo /etc/sudoers

nano /usr/local/etc/sudoers ==> untuk FreeNAS

4. Meambahkan dan mematika akses root

#root ALL=(ALL) ALL

newuser ALL=(ALL) ALL

5. Menghapus user beserta file yang lama atau berstatus inactive

sudo userdel -r olduser

6. Mengaktifkan permited root dan pembatasan akses user ke root

vi /etc/sshd/sshd_config

# Authentication:

PermitRootLogin yes

StrictModes yes

MaxAuthTries 6

MaxSessions 4

Semoga bermanfaat

Serba serbi Mengenai MySQL

2016-09-03T15:55:00.002+07:00

Show versi, daftar process, thread
SHOW VARIABLES LIKE "%version%";

SHOW FULL PROCESSLIST;

SHOW PROCESSLIST;

SHOW STATUS LIKE 'Thread%';
Solusi ketika membuat user keluar pesan kesalahan "ERROR 1054 (42S22): Unknown column 'password_last_changed' in 'mysql.user' "
mysql_upgrade -u root -p

/etc/init.d/mysqld restart
Lakukan drop user, flush privileges, kemudian lakukan pembuatan user dan tentukan grant dan flush privileges nya.
Cek dan Un-Install password authentication plug-in di MySQL
mysql> select * from information_schema.plugins where plugin_name='validate_password';
Empty set (0.05 sec)

mysql> show variables like 'validate_password%';
Empty set (0.00 sec)

install plugin validate_password soname 'validate_password.dll';
Query OK, 0 rows affected (0.00 sec)
Verifikasi jika plug in telah terinstall :

select * from information_schema.plugins where plugin_name='validate_password'\G
Menampilkan plug in terhadap variabel-variabel :

show variables like 'validate_password%';

+--------------------------------------+--------+
| Variable_name                       | Value |
+--------------------------------------+--------+
| validate_password_dictionary_file         |        |
| validate_password_length                     | 5      |
| validate_password_mixed_case_count   | 1      |
| validate_password_number_count       | 1      |
| validate_password_policy                    | MEDIUM |
| validate_password_special_char_count | 1      |
+--------------------------------------+--------+
Kustomisasi mengenai nilai :

# SET GLOBAL validate_password_length = 5;
# SET GLOBAL validate_password_number_count = 0;
# SET GLOBAL validate_password_mixed_case_count = 0;
# SET GLOBAL validate_password_special_char_count = 0;
Uninstall plugin :

mysql> uninstall plugin validate_password;
Query OK, 0 rows affected (0.02 sec)

mysql> select * from information_schema.plugins where plugin_name='validate_password'\G
Empty set (0.01 sec)

mysql> show variables like 'validate_password%';
Empty set (0.00 sec)

Demikain, Semoga bermanfaat

Memperbesar Ukuran LVM - HDD di Linux CentOS

2016-08-31T17:37:00.000+07:00

Media penyimpanan data kadang kala bisa membuat kita-kita sebagai pengelola server menjadi "galau" ketika media penyimpanan tersebut penuh atau mendekati batas maksimal. Bagaimanakah solusinya jika kita mendapati hal tersebut, ada dua hal yang bisa dilakukan yaitu menambah ukuran atau akan mengurangi/menghapus data yang sudah tersimpan, bagaimana kalu data-data tersebut dinilai penting semua, maka tindakan yang pertama yaitu menambah ukuran penyimpanan menjadi satu-satunya solusinya.

Berikut ialah tahapan tahapan ketika kita menambahkan suatu media penyimpanan di mesin virtualisasi dengan OS Linux CentOS dan LVM sebagai manajemennya :

Cek Partisi
[root@mysqldb ~]# fdisk -l

Disk /dev/xvda: 50 GB
Lakukan Partisi HDD
fdisk /dev/xvda
n {new partition}
p {primary partition}
3 {partition number}

t {change partition id}
8e {Linux LVM partition}
w
Reboot dan Cek Ulang Partisi
[root@mysqldb ~]# fdisk -l

Disk /dev/xvda: 30 GB, ... Disk identifier: 0x000a5262

    Device Boot      Start         End      Blocks   Id System
/dev/xvda1   *           1          64      512000   83 Linux
Partition 1 does not end on cylinder boundary.
/dev/xvda2              64        6527    51915103+ 8e Linux LVM
/dev/xvda3            6528       78325   576717435   8e Linux LVM
Buatlah Partisi Fisik
pvcreate /dev/xvda3
Lakukan perluasan ukuran di Volume Group, cek nama Volume Group dgn perintah " vgdisplay ", untuk server saya nama Volume Groupnya "VolGroup"
vgextend VolGroup /dev/xvda3
Lakukan perluasan terhadap Logical Volume, untuk pengecekan LV Path nya silakan menggunakan perintah "lvdisplay"
lvextend /dev/VolGroup/lv_root /dev/xvda3
Untuk langkah terakhir yaitu resize file system ke Logical Volume
resize2fs /dev/VolGroup/lv_root
Verifikasi file sistem dengan perintah " df -h "

Demikian semoga bermanfaat..

Menonaktifkan Interface virbr0 NAT di Linux Ubuntu

2016-08-01T13:59:00.002+07:00

Definisi :
Virtualisasi Network Interface atau biasa yang dituliskan virbr0 adalah suatu ethernet virtualisasi yang digunakan sebagai NAT yang mana difungsikan ketika seorang guest diijinkan dalam mengakses sebuah sistem.

Ketika anda dikagetkan oleh adanya interface tersebut dengan nama virbr0 di server virtual anda, maka berikut langkah-langkahnya dalam menonaktifkan interface tersebut :

Periksa Konfigurasi Interfacenya
ifconfig
Output dari perintah diatas :
Cek default interface
virsh net-list
Output dari perintah diatas
Langkah-langkah utk menonaktifkan virbr0, sebagai berikut :
# virsh net-destroy default
# virsh net-undefine default
# /etc/init.d/libvirt-bin restart
# ifconfig
Sekian, semoga bermanfaat