Archive for March, 2009

Directory Snapshot Alpha

Monday, March 30th, 2009

Check out a alpha version of Directory Snapshot application I develop used to validate the integrity of the system. I develop this as a way for me to validate the integrity of the files in the system after running a malware or any application I want to monitor. This application is useful for me since I analyze malware daily and need a quick way to validate system integrity. The application should be fairly easy to use. If there’s any pointer on improving this application, bug found, or feature wanted, please let me know. You can download it at here.

Feature planning on next release:

  • Add drag and drop
  • Use Sleuthkit to access Filesystem.

Known bug:

  • SHA256 is not working

My new baby

Friday, March 27th, 2009

Just pick up my new baby today, check it out.

(more…)

Iphone meet concrete

Friday, March 27th, 2009

Yesterday I accidentally drop my Iphone on the road, face first. Well, the result is not what I expected since I had drop it many time. Here’s the picture.

(more…)

The old new way malware part 1

Saturday, March 21st, 2009

The old:

A few month ago, I receive an e-mail from a spammer with a title of “Video of Angelia Jolie XXX video,” knowingly what expected in the url, I click safely on the url. The site look similar every standard video player website like youtube. The video listed contain an explicit picture which only waiting for me to click on the play button to get the next frame. So I clicked. Once I click, a message pop up asking me to download Adobe_Player9.exe. So what else for me to do? I click it.

(more…)

Saying good bye

Saturday, March 21st, 2009

After two year of being together and 23 three miles side by side. It’s finally time for me to say good bye to my beautiful girl. She was a great first girl, even though at time she did snap hard at me, which cause me to fall left and right. But in the end she was always great and responsive when in need, she always be there for me when I need her the most. To my first love.

By her self
Her beautiful face
With her bigger friend

Update with site

Saturday, March 21st, 2009

I am finally have the time to update the website nsways.com, though not much content added. Check out PortMonitor in here and tell me what you think. Thanks.

Yara - identify and classify malware samples toolkit

Thursday, March 12th, 2009

This is a nice project start by Victor Alvarez which can be found at http://code.google.com/p/yara-project.

This project describe as a tool aimed at helping malware researchers to identify and classify malware samples.  This tool work similar to IDS system with a nice scripting support which allow the user to add complex signature to the rule set.

slave fix script wtf

Wednesday, March 11th, 2009

Our DBA found a script created by one of our engineer, this script is use to fix our database slave error problem.   Thought he should share this script with everyone, so for those who need this fix script, cheer.
(more…)

php wtf code

Wednesday, March 11th, 2009

Well, I am not a php guy but I thought this code seem pretty interesting, I hope someone can enlighten me on logic since I know this is not a typical code. I saw this piece of code in our new system.

$count = $this->count();
if ($count !== false) {
  $string .= sprintf("Sub-id count: %d\n", $count);
  foreach ($this->subfrauds as &$sub) {
     ob_start();
     echo $sub;
     $string .= ob_get_clean() . "\n";
  }
}

return $string