▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑TOPIC FREE SECURITY UTILITIES :

https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker

https://github.com/mitchellkrogza/Ultimate.Hosts.Blacklist

https://github.com/mitchellkrogza/Stop.Google.Analytics.Ghost.Spam.HOWTO

https://github.com/mitchellkrogza/fail2ban-useful-scripts

https://github.com/mitchellkrogza/linux-server-administration-scripts

https://github.com/mitchellkrogza/Travis-CI-Nginx-for-Testing-Nginx-Configuration

https://github.com/mitchellkrogza/Travis-CI-for-Apache-For-Testing-Apache-and-PHP-Configurations

https://github.com/mitchellkrogza/Fail2Ban-Blacklist-JAIL-for-Repeat-Offenders-with-Perma-Extended-Banning

https://github.com/funilrys/funceble

https://github.com/funilrys/PyFunceble

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/jflyup/goMS17-010.git

2) cd goMS17-010

3) goMS17-010 detects if host(s) is vulnerable to SMB exploit(MS17-010), which is used by NSA hacking tools leaked by Shadow Brokers.

4) If it's vulnerable, then checks if the target machine is running the Double Pulsar SMB backdoor. Inspired by this Metasploit module, but doesn't depend on MSF or any framework, just run ms17-010.go or ms17-010.py with option(s).

5) Go version is preferred as it's very fast (credit goroutine for that! ) when scanning a network. The release is built from go code.

C O M M A N D S :

-i, detect single host

-n, scan a whole network in CIDR Notation, for example, 192.168.1.1/24

-h, show help

use for learn !!!!
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

time exploring the issue of CloudFront domain hijacking. This is not a new issue but I think it has gone mostly unnoticed for a few reasons ...

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑-}Cloud Hacking{-

Easily deploy static sites created using Hugo to any cloud instance of choice!
Easily deploy static sites created using Hugo to any cloud instance of choice!

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) download or clone https://github.com/souvikhaldar/cloudhack

2) Create a cloud instance and assign it your system's public SSH key (generally stored in ~/.ssh/id_rsa.pb)

3) Copy the public ssh key of this droplet to the GitHub account which has the contents for the site. (if the content is stored in local, it is advised to store it in Github as a repository).

4) Install Ansible on your machine. On Mac, you can install ansible using its brew package manager- brew

5) install ansible

6) cd into the cloned repo i.e cloudhack/ then add executable permission to deploy.sh and conf<OS> by running chmod +x deploy.sh and chmod +x confLinux.

7) ./conf<OS> -ip <ip> -repo <repo-url> eg confMac -ip <ip> -repo <repo-url> on Mac.
./deploy.sh

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Updated List free temporary-email-address-domains :

http://www.yopmail.com/en/
https://getnada.com/
https://www.throwawaymail.com/en
https://www.mohmal.com/en
https://www.guerrillamail.com/
https://www.e4ward.com/
https://temp-mail.org/
https://www.mailinator.com/
https://10minutemail.com/
https://www.emailondeck.com/
a-bc.net
afrobacon.com
ajaxapp.net
amilegit.com
amiri.net
amiriindustries.com
anonbox.net
anonymbox.com
antichef.com
antichef.net
antispam.de
baxomale.ht.cx
beefmilk.com
binkmail.com
bio-muesli.net
bobmail.info
bodhi.lawlita.com
bofthew.com
brefmail.com
broadbandninja.com
bsnow.net
bugmenot.com
bumpymail.com
casualdx.com
centermail.com
centermail.net
mailnull.com
mailshell.com
mailsiphon.com
mailslite.com
mailzilla.com
mailzilla.org
mbx.cc
mega.zik.dj
meinspamschutz.de
meltmail.com
messagebeamer.de
mierdamail.com
mintemail.com
moburl.com
moncourrier.fr.nf
monemail.fr.nf
monmail.fr.nf
msa.minsmail.com
mt2009.com
mx0.wwwnew.eu
mycleaninbox.net
mypartyclip.de
myphantomemail.com
myspaceinc.com
myspaceinc.net
myspaceinc.org
myspacepimpedup.com
myspamless.com
mytrashmail.com
neomailbox.com
nepwk.com
nervmich.net
nervtmich.net
netmails.com
netmails.net
netzidiot.de
neverbox.com
no-spam.ws
nobulk.com
noclickemail.com
nogmailspam.info
nomail.xl.cx
nomail2me.com
nomorespamemails.com
nospam.ze.tc
nospam4.us
nospamfor.us
nospamthanks.info
notmailinator.com
nowmymail.com
nurfuerspam.de
nus.edu.sg
nwldx.com
objectmail.com
obobbo.com
oneoffemail.com
onewaymail.com
online.ms
oopi.org
ordinaryamerican.net
otherinbox.com
ourklips.com
outlawspam.com
ovpn.to
owlpic.com
pancakemail.com
pimpedupmyspace.com
pjjkp.com
politikerclub.de
poofy.org
pookmail.com
privacy.net
proxymail.eu
prtnx.com
punkass.com
PutThisInYourSpamDatabase.com
qq.com
quickinbox.com
rcpt.at
recode.me
recursor.net
regbypass.com
regbypass.comsafe-mail.net
rejectmail.com
rklips.com
rmqkr.net
rppkn.com
rtrtr.com
s0ny.net
safe-mail.net
safersignup.de
safetymail.info
safetypost.de
sandelf.de
saynotospams.com
selfdestructingmail.com
SendSpamHere.com
sharklasers.com
shiftmail.com
shitmail.me
shortmail.net
sibmail.com
skeefmail.com
slaskpost.se
slopsbox.com
smellfear.com
snakemail.com
sneakemail.com
sofimail.com
sofort-mail.de
sogetthis.com
soodonims.com
spam.la
spam.su
spamavert.com
spambob.com
spambob.net
spambob.org
spambog.com
spambog.de
spambog.ru
spambox.info
spambox.irishspringrealty.com
spambox.us
spamcannon.com
spamcannon.net
spamcero.com
spamcon.org
spamcorptastic.com
spamcowboy.com
spamcowboy.net
spamcowboy.org
spamday.com
spamex.com
spamfree24.com
spamfree24.de
spamfree24.eu
spamfree24.info
spamfree24.net
spamfree24.org
SpamHereLots.com
SpamHerePlease.com
spamhole.com
spamify.com
spaminator.de
spamkill.info
spaml.com
spaml.de
spammotel.com
spamobox.com
spamoff.de
spamslicer.com
spamspot.com
spamthis.co.uk
spamthisplease.com
spamtrail.com
speed.1s.fr
supergreatmail.com
supermailer.jp
suremail.info
teewars.org
teleworm.com
tempalias.com
tempe-mail.com
tempemail.biz
tempemail.com
TempEMail.net
tempinbox.co.uk
tempinbox.com
tempmail.it
tempmail2.com
tempomail.fr
temporarily.de
temporarioemail.com.br
temporaryemail.net
temporaryforwarding.com
temporaryinbox.com
thanksnospam.info
thankyou2010.com
thisisnotmyrealemail.com
throwawayemailaddress.com
tilien.com
tmailinator.com
tradermail.info
trash-amil.com
trash-mail.at
trash-mail.com
trash-mail.de
trash2009.com
trashemail.de
trashmail.at
trashmail.com
trashmail.de
trashmail.me
trashmail.net
trashmail.org
trashmail.ws
trashmailer.com
trashymail.com
trashymail.net
trillianpro.com
turual.com
twinmail.de
tyldd.com
uggsrock.com
upliftnow.com
uplipht.com
venompen.com
veryrealemail.com
viditag.com
viewcastmedia.com
viewcastmedia.net
viewcastmedia.org
webm4il.info
wegwerfadresse.de
wegwerfemail.de
wegwerfmail.de
wegwerfmail.net
wegwerfmail.org
wetrainbayarea.com
wetrainbayarea.org
wh4f.org
whyspam.me
willselfdestruct.com
winemaven.info
wronghead.com
wuzup.net
wuzupmail.net
www.e4ward.com
www.gishpuppy.com
www.mailinator.com
wwwnew.eu
xagloo.com
xemaps.com
xents.com
xmaily.com
xoxy.net
yep.it

yogamaven.com
yopmail.com
yopmail.fr
yopmail.net
ypmail.webarnak.fr.eu.org
yuurok.com
zehnminutenmail.de
zippymail.info
zoaxe.com
zoemail.org

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Detailed fresh Proxies List


https://pastebin.com/ytxeSdfH

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Social Engineering helpful tutorials :

* [The Limits of Social Engineering](https://www.technologyreview.com/s/526561/the-limits-of-social-engineering/) - MIT, Technology Review

* [The 7 Best Social Engineering Attacks Ever](http://www.darkreading.com/the-7-best-social-engineering-attacks-ever/d/d-id/1319411) - DarkReading

* [Social Engineering: Compromising Users with an Office Document](http://resources.infosecinstitute.com/social-engineering-compromising-users-using-office-document/) - Infosec Institute

* [The Persuasion Reading List](http://blog.dilbert.com/post/129784168866/the-persuasion-reading-list) - Scott Adams' Blog

* [How I Socially Engineer Myself Into High Security Facilities](https://motherboard.vice.com/en_us/article/qv34zb/how-i-socially-engineer-myself-into-high-security-facilities) - Sophie Daniel

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Tracking phone calls for marketing
#FastTips

1) Demonstrates lead generation
Inbound offers are usually the last step in the buyer's journey. Before using the call tracking service, marketers could not pinpoint the exact origin of a call.

Lead tracking is limited to sponsored links and web forms. However, with tracking phone calls, it just isn't a solution anymore. By adding a unique advertising or tracking number to your ad or to your website, you can now track the origin of a call for a specific campaign.

With call tracking metrics, you can not only prove where the lead came from, but also show your post-sale marketing input.

2) Recover Lost Leads
Now that you've taken a big step in identifying which of your phone calls are leads, we suggest you take a step forward and identify which of those leads turn into a sale or an appointment.

If a lead isn't turning into a sale or an appointment, we want to know why. With call tracking, you can see why your leads aren't converting and what you can do to improve them.

🦑Here are some ways to recover lost leads:



Call your customers back
By calling the client back, you have a new chance to capture a lead. Ask a customer about his or her requirements, incentivize the customer with a coupon, or provide exceptional service.

Even if the lead doesn't convert, you can end up with a positive customer experience. There is a high probability that they will call back in the future.

Training your customers and sales representatives
Even if you haven't regained past leads, you still have a chance to get new leads. By training your account agents and sales representatives, you can help them increase the number of customers they convert and the sales they make.

As marketers, we all understand that revenue growth is a key metric. Lost revenue opportunities arise when marketing is not part of the sales conversation in terms of a prospect's journey through the funnel.


3) Tracks multichannel campaigns
Like most organizations, you probably do more than one type of advertising. You are trying to reach customers wherever they are:

In their house
At work
In their cars
In social networks
Wherever!

4) improves paid search and organic SEO
If you are investing time, money, and energy in creating search engine marketing plans, you definitely want the investment to pay off.

While a simple link to your website can help, tracking phone calls has many benefits.

By assigning a different phone number to each ad group, there's no guesswork. You will know for sure the Google, Yandex ad group or the keyword that triggered the call.

With this data, you can:

increase your return on investment
improving your messages
buy ads based on real-time marketing tags


@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑BEST 2020 WIN OPTIMIZERS & CLEANERS :
FREE PAID & TRIALS :)

http://www.jdoqocy.com/click-3783426-14065701

https://purchase.iobit.com/aff/en/asc/2020ascgeneralb/index.php?aff=118621

https://systweak.cleverbridge.com/305/cookie?affiliate=51172&x-at=pc-cleaner-software&redirectto=https%3a%2f%2fwww.systweak.com%2fadvanced-system-optimizer

https://secure.ccleaner.com/502/cookie?affiliate=51172&expiry=90&redirectto=https%3A%2F%2Fsecure.ccleaner.com%2F502%2Fpurl-ccpub%3Fcart%3D214156%26x-coupon%3Dcoupon

https://9c98ahp3s4ojpbjzyci75f4p6o.hop.clickbank.net/?tid=PC_CLEANER

https://www.jdoqocy.com/click-3783426-13605524

https://www.microsoft.com/en-us/p/total-pc-cleaner-free-disk-space-clean-up-optimize-memory-windows-system/9nb3xctl0rwd?activetab=pivot:overviewtab

https://www.ashampoo.com/en/usd/lpa/partner6106?x-source=cj&x-mid=cj&utm_source=cj&utm_medium=cj&utm_campaign=cj&coupon=VF2-ETK-QDD

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Be aware of this new CVE 2020-0674 in Internet Explorer 11
#Vulnerabilities

THE NEW INTERNET Explorer CVE

https://pastebin.com/qC1nEFE8

USE FOR LEARN !!!

I've noticed during testing against Anti-Virus over the years that each is different and each prioritize PE signatures differently, whether the signature is valid or not. There are some Anti-Virus vendors that give priority to certain certificate authorities without checking that the signature is actually valid, and there are those that just check to see that the certTable is populated with some value

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Ways To Hack An API (And How To Defend):

1) Reverse Engineering
2 h
https://www.youtube.com/watch?v=a2EkORFcSZo

2) User Spoofing
9 min
https://www.youtube.com/watch?v=VjguxR97xC0

3) Man in the Middle Attack
21 min
https://www.youtube.com/watch?v=3aiREf5u48Q

4) Session Replays
2 h
https://www.youtube.com/watch?v=bj8kkgLCHaw

5) Social Engineering
1 h
https://www.youtube.com/watch?v=O5lXUSMGQ2I


▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Support & Share ❤️👍🏻

T.me/UndercodeTesting

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑BEST FREE GPS LOCATION &TRACKING FOR ANDROID :

https://play.google.com/store/apps/details?id=com.androidauthority.app

https://play.google.com/store/apps/details?id=com.sygic.aura&hl=en_IN

https://apps.apple.com/us/app/sygic-gps-navigation-maps/id585193266

https://play.google.com/store/apps/details?id=com.jkfantasy.gpsmapcamera&hl=en_IN

https://apps.apple.com/us/app/gps-camera-55-field-survey/id1439730560

https://play.google.com/store/apps/details?id=com.vecturagames.android.app.gpxviewer&hl=en_IN

https://play.google.com/store/apps/details?id=it.carfind&hl=en_IN

https://play.google.com/store/apps/details?id=org.findmykids.app&hl=en_IN

https://apps.apple.com/us/app/findmykids-gps-phone-tracker/id994098803

https://play.google.com/store/apps/details?id=mg.locations.track5&hl=en_IN

https://apps.apple.com/us/app/phone-tracker-by-number/
id1470943827

https://play.google.com/store/apps/details?id=com.waze&hl=en_IN

https://apps.apple.com/us/app/waze-navigation-live-traffic/id323229106

https://play.google.com/store/apps/details?id=com.life360.android.safetymapd&hl=en_IN

https://apps.apple.com/us/app/life360-safety-for-families/id384830320

https://play.google.com/store/apps/details?id=com.prime.studio.apps.route.finder.map&hl=en_IN

https://play.google.com/store/apps/details?id=com.mictale.gpsessentials&hl=en_IN

https://play.google.com/store/apps/details?id=com.mobiletracker.mobileapp&hl=en_IN

https://play.google.com/store/apps/details?id=com.wondershare.famisafe&hl=en_IN

https://apps.apple.com/us/app/famisafe-parental-control-app/id1385417904

https://play.google.com/store/apps/details?id=com.fsp.android.c&hl=en_IN

https://play.google.com/store/apps/details?id=com.isharing.isharing&hl=en_IN

https://play.google.com/store/apps/details?id=com.google.android.apps.maps&hl=en_IN

https://apps.apple.com/us/app/google-maps-transit-food/id585027354

https://play.google.com/store/apps/details?id=com.ilyabogdanovich.geotracker&hl=en_IN

https://play.google.com/store/apps/details?id=com.mapquest.android.ace&hl=en_IN

https://apps.apple.com/us/app/mapquest-gps-navigation-maps/id316126557

https://play.google.com/store/apps/details?id=com.alienmanfc6.wheresmyandroid&hl=en_IN

https://play.google.com/store/apps/details?id=com.safe365.safe365app&hl=en

https://apps.apple.com/us/app/safe365-eldercare-app/id622546357

ENJOY 👍🏻❤️
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁