Merdeka!

Selamat Menyambut Hari Kemerdekaan ke-50, MalaysiaKu Gemilang! I'm proud to be Malaysian!

:)

Exploit Lab

Today and tomorrow i will attend an Exploit Lab Training from Sk. The training is about teaching me how to create and exploit from buffer overflow and etc. It's a good training to get an idea how exploiter find a vulnerability in some application by using reverse engineering. Really glad that i can join and learn this training from Sk for free. This training also been presented in BlackHat USA 2007 and also at HITBSecConfKL2007. If you interest in joining this training in HITBSecConfKL2007, click here for more details.

Overview:

This workshop shall introduce how buffer overflow vulnerabilities arise in programs and how they get exploited. The workshop will take you deep inside how programs are loaded and execute within memory, how to spot buffer overflow conditions and how exploits get constructed for these overflow conditions. By exposing the inner mechanisms of such exploits, we will understand how to prevent such vulnerabilities from arising.

The workshop will cover analysis of stack overflows, heap overflows and format string vulnerabilities. Examples of vulnerabilities shall be provided on both the Windows as well as the Unix platform. The class is highly hands-on and very lab intesive. The hands-on lab provides real-life examples of programs containing vulnerabilities, and participants are required to analyse and exploit these vulnerabilities.

Who should attend

Pen-testers, developers, just about anyone who wants to understand how exploits work.

Key learning objectives

Understanding error conditions.
Categories of error conditions - stack overflow, heap overflow, off-
by-one, format string bugs, integer overflows (this class will deal
only with stack, heap and format string)
Unix process memory map
Win32 process memory map
Writing shellcode
Real life exploit construction
Secure coding practices
Kernel level protection mechanisms

Attendees will require:

A working knowledge of operating systems, Win32 and Unix
Ability to compile programs using GCC
Ability to use vi/pico/joe editors
Understanding of C programming would be a bonus

The important notes is:

This class requires you to sign a code-of-ethics document, which is to ensure appropriate use of such techniques.

:)

Best News Eva!

Today, i got the best news in my whole life from my lovely wife! I'm so happy + a lil' bit nervous hehe, but really I'm so happy for the news and grateful about it.

Soon to be announce!

:)

Spr.Gov.My

Huu, SPR dah update data aku setelah sekian lama aku daftar kat booth SPR kat klcc hari tu (alamak, kantoi baru daftar). Nampaknya memang pilihan raya dah dekat, sebab tu jadi efisyen semacam. So kawan2 semua, mari la kita menunaikan tanggungjawab kita memilih pemimpin kita pada masa akan datang.

Aku undi ape? Undi adalah rahsia! Ermm, rahsia ke? Jeng!



"Marilah mari, pergi mengundi,
Jangan lupa kewajipan pada negara~"

:P

>;( & :)

Hmm, kadang2 aku pelik la, macamana la diorang ni manage buat keje? Kejap jadi, kejap x jadi, pastu kang tetiba jadi balik. Wei, aku pun ada benda nak buat la, plan la betul2. Plan awal2, jangan nak menyusahkan orang je. Kalau kene balik kat aku, memang cilaka la. Aku dah tangguh semester, pastu x jadi, aku cancel tangguh, kalau kene gak, terpaksa tangguh balik, bodoh betul. Semua nak lepas diri sendiri. Semua pentingkan diri sendiri. Serius, kalau mende ni jadi kat aku balik, aku nekad dah ape aku nak buat.

>;(

Kelmarin balik Seremban. Ahad register semester september dan amik modul. Nama aku ada dalam senarai penerima PTPTN sebab aku layak, pointer semester lepas atas 2.0 so tak payah bayar masa pendaftaran. So settle dah register OUM. Tapi tutorial 1 maybe aku tak dapat datang, sebab ikut plan, aku ikut wife aku pergi Lumut, dia ada event kat sana. Kene apply A.L la nampaknya.

Hari ni, 1st service kereta baru wife aku. Meter dah cecah 1200km, huu. Service lama sikit sebab kereta banyak. Anyway, puas hati gak la rasa service diorang ni, banyak menda dia check.

Tadi tengahari, Abang a.k.a Abang Jane belanja makan kenny rogers sempena bonus dia paling banyak antara department aku ni, hahaha (jangan marah bang). Terima kasih banyak2 sebab sudi belanja makan, hehe.

Dah, tu je.

:)

Album Preview

Really the puas hati.

:)

All piccas here is belongs to me and Digital Syndicate, no permission given to anyone to publish it or copy it or what ever you want to do with this piccas. Please, don't do it.

Bonus&Album

Bonus
Alhamdulillah, dapat dah bonus setelah 4 bulan tertunda, fuh, lama gila. Walau apa pun, walau sikit mana pun dapat, aku tetap bersyukur atas rezeki yang datang. Daripada tak dapat langsung, atleast ada juga. Terima kasih banyak2 kepada Bos aku En. WSWI dan kepada top2 management, CEO, CSO etc. atas pemberian bonus ni.

Album
Oh, album gambar majlis pernikahan aku dah siap oleh professional photographer yang aku hired haritu. Baru je amik tadi kat dia, dah settle bayar balance payment. So, segala perbelanjaan untuk kahwin aku dah settle semuanya. Sebab album je yang paling last skali nak kene bayar, kira penutup la, hehe. Besh2. Memang puas hati la dengan hasil kerja diorang ni. 5 star aku bagi. Kalau korang berminat, bleh hired diorang gak, bleh tengok hasil kerja mereka di Digital Syndicate. Besh! Thanks to Azam and Dell for being our official photographer and give the besh you have. Memang cun!

Aku akan preview sedikit2 gambar dari lens mereka nanti dalam next post, insyaAllah.

:)

Honeymoon:Bali

Here the piccas of our honeymoon at Bali Island, Indonesia on 10-13 July 2007, just 3 days after our reception ceremony at Seremban, hehe. Enjoy!


Our hotel where we staying. It's at Amlapura Candidasa area, quite far from the airport.


My wife seriously looking at the map of Bali to start our adventure journey, ngeh ngeh!


Wifey near to Mount Agong (The largest active volcano at Bali Island). We are actually on the way to Mount Batur (a small active volcano) at Kintamani.


Wifey posing at the painting place near, ermm, i'm not sure where, but it's near to Ubud and Mas. Well, we bought 1 painting but until now, we don't know where to place the painting yet, huu.

p/s: More piccas soon, ok!

:)

Hezli's Baby

Congratulation too to my good friend, Hezli for his new born baby girl last week (27/07/2007:4.50pm)with weight of 3kg. Hari ni, lepas pergi kenduri Pejai dan Hainey, aku dan wifey cargas pi rumah mak mertua Hezli to visit his new baby. Nama dah ada, tapi tak register lagi katanya, Hana Safiya. She is such a cute baby and got a very nice name. Hehe.

Well bro, congratulation again, you need to learn to be a good daddy right now, not just playing with your games, but need to feed your daughter too, not only with milk and food but with ilmu, iman and takwa. Welcome to a new life that make you not enough of sleep bro, hehe.

p/s: I wish i wanna joining your club too bro, soon! InsyaAllah, if Allah give me rezeki.

:)

Pejai's Wedding

First of all, congratulation to you bro and sis! Welcome to the club! Hehe. Semalam ialah majlis akad nikah sahabat baik aku sejak zaman sekolah dulu, Mr. Pejai a.k.a Tojeng (kwang3) a.k.a Faizal Hassan Mokhtar with his new wife, Puan Hainey hoho. Both of them were in the same school with me before.

Petang tadi, me and my wife pergi menghadiri majlis bersanding mereka berdua ni di Wisma Sejarah, Jalan Ampang, Kuala Lumpur. Atas permintaan mereka berdua, aku diminta jadi photographer lompat (actually, they already got their own photographer, kira aku menyibuk je sebenarnya, hehe). Tapi sayang, aku x dapat duk lama join sampai petang kerana aku dan wife aku ada hal lepas tu, malam pulak aku kerja, so, to Pejai and Hainey, i am really sorry about that, i hope i can but i can't joining both of you.


Anyway, congratulation again for your wedding and i wish you both live happily ever after, murah rezeki dan dikurniakan anak2 yang soleh serta solehah hendaknya. Once again, welcome to the club bro!

p/s: I wish i can come to your reception ceremony at your parents home too bro! InsyaAllah. I will upload and email the piccas to you soon, it's not that good but bolehla kot :P.

:D

IDS&FW Teaching

Fuh, akhirnya, settle ajar 3 orang pak arab dari Riyadh. Mereka semua ialah staff dari CITC. Well, aku ditugaskan untuk mengajar IDS dan Firewall bersama dengan Radzi. Pak arab yang ni ok la, budak2 muda, ada yang memang nak belajar, ada yang nak melancong je, ada yang berlagak terel. Haha, macam2 karekter korang boleh kenal dalam masa 2 hari. Lawak pun ada. Ada sorang tu suka kat amoi, pekejadah la.

Anyway, I think this is the stepping stone to improve my personal relationship and also the english when speak to other people, my rules are simple, don't be shy if you not good in english, theres a lot of people who don't know english better then you. Just try and you never know how much improvement you can make.

Okeh, nanti bleh claim training, yey!

:)