This week I learned about enumeration. Enumeration is the process of extracting user names, machine names, network resources, shares and services from a system. The gathered information is used to identify the vulnerabilities or weak points in system security and tries to exploit in the System gaining phase.

Some tools for enumerating such as DumpSec, Hyena, NessusWX, which have GUI and wpscan, TheHarvester, Nmap and nbtScan. But not all of them is available in Kali, so some we must install it ourselves. We are also taught how to install a tool in kali linux step by step, so in the class we installed nbtScan together. NbtScan itself is a tool which can be use to scan a range of ip addresses for enumeration.

This week i think is the hardest, since fingerprinting and footprinting is very confusing. I learned that footprinting is more to outer layer of information level and fingerprinting is more to the inner layer. The difference is footprinting is about the social information of the server like their relations, while fingerprinting is more to it’s IP or OS running on the system which is a crucial information to take over the server.

One of the tools for fingerprinting is nmap, it tests the response of the remote system to undefined combinations of TCP flags, TCP Initial Sequence Number (ISN) sampling, determining the default setting of the DF bit, TCP initial windows size, ToS setting, fragmentation handling, types and order of TCP options those such as DF, Tos, ISN is an IPID.

This week is more exciting, since we start to use the tools in Kali Linux. The tools we used are for searching information on our target, these information such as email, phone number, and sub domains related to our target is very useful for further step of pentesting.

The first tool is theHarvester which is very easy to use. to use theHarvester, we just need to type ‘theharvester’ followed by ‘-d’ followed by our target’s domain, then ‘-b’ followed by the source where theHarvester will try to crawl for informations on our target (may be google, facebook, twitter). There’s also additional functions such as ‘-l’ to specify the limit of results we want to display.

Another tool is whois, it is more to get the information on who owns our target and their social information.

Another useful tool with better GUI than theHarvester is maltego, maltego is more graphical than theHarvester due to it’s GUI, but we need to sign up first to use maltego.

For my Construct 2 Project, we were told to make a educational game, so we made a chemistry game. In this game you can basically mix up substances to form new substance. So there will be a goal on what you should make, and for every successful substance you make, you get 100 points, but if you submit the wrong substance your life will be deducted by 1 (you have 3 lifes in total).

My team consist of:

• Kevin Tarada
• Longlong Tjandra
• Arnold Widjaja

Here’s a photo of our game:

So what I contributed in this project is on the game logic, I set the logic for the potion/substance mixtures (it’s basically hardcoded with Construct 2 ‘if’ logic), and i also help set the logic so when you put 1 substance in the mixture machine on the left of the screen, it will first check the number of potions variable, if it’s 0 which means the machine isn’t storing any potion at the time, it will store the current substance’s name and when you put another substance, it will first check the machine’s number of potions variable, if it’s 1, then using the hardcoded ‘if’ logic, it will give you the result based on what you put in next and store the result directly to the player’s potion variable not in the machine’s potion variable. Which means the machine will always store 1 potion only at max.

Here’s the logic page:

That’s all from my team’s Construct 2 Project. I’ll try to keep update about further project, and thank you for reading this report.

For my midterm Final Project, I’m asked to make a game using Construct 2, the game must be an educational game about science, so it’s either about Biology, Physics or Chemistry. For this project we’ll be forming a group of 3, which in my case, my group consist of…

• Kevin Tarada (Me)
• Longlong Tjandra
• Arnold Widjaja

We are planning to make a Chemistry game using Construct 2. So since what we know about Chemistry is that it is related to atoms, in our games you’ll be able to combine several atoms which will fuse up and result to something else. Those combinations will of course be limited but we will try to make various combinations.

That’s all for our Construct 2 Project plan. If we found a better idea to add up to this project, I’ll definitely post it.

So for my second semester Database Management System course final project, my group decided to make a database system for a laptop store.

My group consist of:

• Kevin Tarada (Me)
• Longlong Tjandra
• Arjasa V

Our store later on will have 5 databases:

• Laptops database = contain laptops details
• Laptop’s spare parts database = contain laptops spare parts’ details
• Customer database = store information about the customer (name, address, phone number)
• Transaction database = store the transaction made by the customer, it basically connect the customer database, the item database and employee database
• Employee database = contain the details of the employee

And lastly here’s how we’ve planned to divide our works:

• Laptop database = Kevin T (Me)
• Laptop’s spare parts database = Kevin T (Me)
• Customer database = Longlong T
• Employee database = Arjasa V
• Transaction database = Longlong T
• Visual Studio = Arjasa V

Welcome to Binusian blog.
This is the first post of any blog.binusian.org member blog. Edit or delete it, then start blogging!
Happy Blogging 🙂