From 01aaea15a8eac0d6ab86dca75129274df514daaa Mon Sep 17 00:00:00 2001 From: Putra Ahmad Mudakir Date: Thu, 18 Jul 2024 15:14:48 +0700 Subject: [PATCH] Upload files to "/" --- Kode program.txt | 92 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 92 insertions(+) create mode 100644 Kode program.txt diff --git a/Kode program.txt b/Kode program.txt new file mode 100644 index 0000000..48393f6 --- /dev/null +++ b/Kode program.txt @@ -0,0 +1,92 @@ +Kode program dalam Implementasi Snort Untuk Mendeteksi Serangan DDOS Pada Jaringan Web Server adalah sebagai berikut: +a. Install LOIC di Kali Linux +1) # apt-get update +2) # git clone https://github.com/nicolargo/loicinstaller.git +3) # cd Downloads +4) # chmod 777 loic.sh +5) # ./loic.sh install +6) # ./loic.sh update +7) # cd LOIC-master +8) # ./loic.sh run + +b. Install Hping3 di Kali Linux +1) # sudo apt-get update +2) # sudo apt-get install hping3 +3) # hping3 –version + +c. Install Apache di Ubuntu +1) # sudo apt-get update +2) # sudo apt-get install apache2 +3) # sudo systemctl start apache2 +4) # sudo systemctl enable apache2 + +d. Install Snort 3 di Ubuntu +1) # sudo apt-get update +2) # apt install build-essential libpcap-dev libpcre3-dev libnet1-dev zlib1g-dev luajit hwloc libdnet-dev libdumbnet-dev bison flex liblzma-dev openssl libssl-dev pkg-config libhwloc-dev cmake cpputest libsqlite3-dev uuid-dev libcmocka-dev libnetfilter-queue-dev libmnl-dev autotools-dev libluajit-5.1-dev libunwind-dev libfl-dev -y +3) # git clone https://github.com/snort3/libdaq.git +4) # cd libdaq +5) # ./bootstrap +6) # ./configure +7) # cd +8) wget https://github.com/snort3/snort3/archive/refs/tags/3.1.43.0.tar.gz +9) # tar -xvzf 3.1.43.0.tar.gz +10) # cd snort3-3.1.43.0 ./configure_cmake.sh --prefix=/usr/local --enable-tcmalloc +11) # cd build +make +make install +ldconfig +12) # snort -V + +e. Penyerangan TCP Syn Flood +1) # sudo hping3 -S --flood -V -p 80 -–rand-source 192.168.0.199 + +f. Monitoring Apache Server Status +1) # sudo a2enmod status +2) # sudo nano /etc/apache2/sites-available/000-default.conf +3) # sudo systemctl restart apache2 + +g. Konfigurasi Network Interface +1) # ip link set dev enp0s3 pormisc on +2) # ip add sh enp0s3 +3) # ethtool -k enp0s3 | grep receive-offload +4) # ethtool -K enp0s3 gro off lro off + +h. Konfigurasi NIC Snort +1) # sudo nano /etc/systemd/system/snort3-nic.service +2) # sudo systemctl daemon-reload +3) # sudo systemctl start snort3-nic.service +4) # sudo systemctl status snort3-nic.service +5) # sudo systemctl enable snort3-nic.service +6) # sudo journalctl -u snort3-nic.service + +i. Konfigurasi Snort +1) # mkdir /usr/local/etc/rules +2) # wget -qO- https://www.snort.org/downloads/community/snort3-community-rules.tar.gz | tar xz -C /usr/local/etc/rules/ +3) # nano /usr/local/etc/snort/snort.lua +4) HOME_NET = '192.168.0.199' +EXTERNAL_NET = 'any' + +j. Konfigurasi Ruleset Snort +1) # nano /usr/local/etc/rules/local.rules +2) # snort -c /usr/local/etc/snort/snort.lua -R /usr/local/etc/rules/local.rules +3) # snort -c /usr/local/etc/snort/snort.lua -R /usr/local/etc/rules/local.rules -i enp0s3 -A alert_fast -s 65535 -k none + +k. Konfigurasi Systemd Service Snort +1. # nano /etc/systemd/system/snort3.service +2. # systemctl daemon-reload +3. # systemctl enable --now snort3 +4. # systemctl status snort3 + +l. Pengujian Snort Menggunakan Hping3 +1) # sudo systemctl start snort3-nic +2) # sudo systemctl status snort3-nic +3) # sudo hping3 -S --flood -V -p 80 192.168.0.199 +4) # tail -f /var/log/snort/alert_fast.txt +5) # snort -c /usr/local/etc/snort/snort.lua -R /usr/local/etc/rules/local.rules -i enp0s3 -A alert_fast -s 65535 -k none + +m. Install Cockpit +1. # sudo apt install cockpit +2. # sudo systemctl start cockpit +3. # systemctl status cockpit +4. https://192.168.189.70:9090 +