UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.8K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘How to compress a file with Gzip and keep the original file
We can use three options to keep the original file when using gzip:

1) Method 1: using the -k option

$ sudo gzip -k picture.img
or

$ sudo gzip --keep picture.img

2) Method 2: using the -c option

$ sudo gzip -c picture.img> picture.img.gz

3) For the gunzip command, you can use the same -c option to keep the original file.

4) Method 3: using shell redirection
$ sudo gzip <picture.img> picture.img.gz

5) How to compress all files
To compress all files in the current folder and subfolders use:

$ sudo gzip -kr.

6) How to compress all files and subfolders
Unlike the gzip command, the tar command by default preserves the original directories or files, use this option:
$ sudo tar -zcvf compressednewfile1.tar.gz directorytocompress
or

$ sudo tar -zcvf allfilesdirectories.tar.gz *

7) Select the required number of directories to compress:

$ sudo tar -zcvf directory1and2.tar.gz dir1 dir2

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Like a Ransomware :
πŸ” How to encrypt files on your Linux servers using gocryptfs
?

1) How to install gocryptfs
Since gocryptfs is in the standard repositories, you can install this tool with a single command.

2) On an Ubuntu based system, this command:

sudo apt-get install gocryptfs -y

3) If you are using a Red Hat based distribution, the command is:

sudo dnf install gocryptfs -y

4) How to create an encrypted directory
With gocryptfs installed, you can create your first encrypted directory.

5) Let's create a new directory using the command:

mkdir data_vault

6) Initialize this new directory with the command:
gocryptfs --init data_vault

7) You will be prompted to create a password for the new directory.

8) A new gocryptfs filesystem will be created in the directory, and then you will be presented with the master key for that filesystem.

9) This master key is used to decrypt the encrypted file system if it gets damaged or you forget your decryption password.

10) Please keep this key in a safe place.

11) We will now create a mount point for our new filesystem.

12) Let's create a directory named vault using the command:

> mkdir vault

13) Mount the encrypted filesystem to the mount directory using the command:
gocryptfs data_vault vault

14) You will be prompted for the encryption password you created when you initialized the data_vault directory.
After successful authentication, you will see the filesystem is mounted and ready.

15) Now you can add data to this directory.

16) When you add data to a mounted directory, it automatically syncs it with the file system.
Although the files in the mounted directory are viewable, they are encrypted on the file system.

17) After you've added all the files, unmount the directory with the command:

fusermount -u vault

18) At this point, nothing is found in the vault directory and everything in data_vault is encrypted.

19) To work with data_vault again, just mount it to the vault directory, work with your files, and then unmount it again.

Simple and safe.
With gocryptfs, you can easily protect your files and folders with a strong encryption layer.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘TIPS FOR BLOGGERS

1
. Crop images to improve composition
Sometimes you can take a photo that is almost perfect, but still requires some tweaking.

In these cases, a simple crop may be all you need to get your photos perfect.

By cropping, you can remove unnecessary background details to better define the main subject of your photos.

You can also use the free image cropping editor, which we will show next.

2. Adjust the exposure.
If you want to learn how to edit photos, you need to know about adjusting exposure.

First, you need to know that exposure is the amount of light your camera uses when taking a photo.

Both aperture and shutter speed affect exposure.

An overexposed photo may look washed out.

In contrast, an underexposed photo can appear dull and dark.

For this, a photo retouching program is suitable, you can easily adjust the exposure.

3. Perform color correction.
When taking photos, you should always properly adjust the white balance on your camera.

If your white balance is not properly adjusted, your photo may have a color cast that affects its contrast, saturation, and brightness.

Fortunately, you can easily fix any color problems during the editing process.

It takes some trial and error to master color grading.

But this is one of the most important skills to acquire if you really want to learn how to edit photos like a pro.

4. Removing unwanted stains
Sometimes you may need to make selective corrections to remove any blemishes, imperfections, etc.

One way to avoid making these adjustments is to make sure the camera lens is clean and free of dirt, grime and water droplets before shooting.

However, it would be nice to learn how to edit photos in order to eliminate these disadvantages.

5. Using PhotoMASTER
The free program PhotoMASTER has many possibilities in its functionality.

All of the above tips, you can implement using this tool.

The program is in Russian and has a simple and intuitive interface.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Brute SSH the remote server :

For brute-force attacks (brute-force attacks), we will use the Hydra tool , which is included with the Kali Linux distribution. SSH is present on any Linux or Unix server and is generally the primary use for administrators to access and control their systems.

Warning: Hydra is an attack tool

β€œ Use it only on your own systems and networks unless you have written permission from the owner. Otherwise, it is illegal . "

1) To implement the attack, use the command:

# hydra -s 22 -l root -P / usr / share / wordlists / fasttrack .txt 192.168.1.1 -t 4 ssh

2) Now let's analyze it:

- s - The flag indicates the port. It is worth noting that administrators can replace the default port 22 for the ssh service , in order to find out which port the service is running on, it is necessary to perform an initial scan of the target using the Nmap tool . We wrote about how to do this earlier in the article .

- l - the flag indicates the login, in our example we use root and admin. (we can provide a link to the dictionary here)

- P - the flag indicates the password, in our case we use the fasttrack .txt dictionary from the kali distribution , which is located in the / usr / share / wordlists / directory

3) It is worth noting that in order to effectively carry out a brute-force attack, it is worth paying due attention to the preparation of the dictionary, namely: taking into account geographical and linguistic peculiarities, including the name of the company, the names of its subsidiaries, the names of the services and applications running, the names of employees, etc.

192.168.1.1 - ip address of the target, since the target we are using has a white ip, it is smeared

- t - the flag indicates the number of simultaneously used threads. We indicate 4

ssh - used protocol

4) Based on the results of the team's work, we see that the passwords from the dictionary did not fit for the admin and root logins

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘GET ALL HARDWARE INFO ANY LINUX :

Installing HardInfo

1) HardInfo is the most popular graphical application and has been tested on Ubuntu / Mint, Debian, OpenSUSE, Fedora / CentOS / RHEL, Arch Linux and Manjaro Linux.

2) HardInfo is available for installation on all major Linux distributions from the default repository.

Installing HardInfo on Debian, Ubuntu and Linux Mint

$ sudo apt install hardinfo

Installing HardInfo on Fedora / CentOS Linux

3) For some reason, the Fedora team decided to stop packaging Hardinfo in the repository, so you will need to compile it from source as follows:

# dnf install glib-devel gtk + -devel zlib-devel libsoup-devel

$ cd Downloads

$ git clone https://github.com/lpereira/hardinfo.git

$ cd hardinfo

$ mkdir build

$ cd build

$ cmake ..

$ make

# make install

4) Installing HardInfo on Arch and Manjaro Linux

$ sudo pacman -S hardinfo

Installing HardInfo on OpenSUSE

$ sudo zypper in hardinfo

5) How to use HardInfo on Linux

After installation, open Hardinfo on your computer.

It is a graphical application and should be categorized as System named System Profiler and Benchmark in your distribution's launcher.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘2020 Instagram-Spam-Bot!

R E Q U I R E M E N T :

You will need the following for running this script-

1)Python3 installed in your system

2)Firefox web browser with Firefox webdriver

3)pip3

4)selenium

5)requests

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) Installing Python3
Visit the following url for details on how to install Python 3 for various Operating systems https://realpython.com/installing-python/#step-1-download-the-python-3-installer

2) Installing Firefox

cd

sudo apt-get -y install firefox

cd

wget https://github.com/mozilla/geckodriver/releases/
download/v0.26.0/geckodriver-v0.26.0-linux64.tar.gz

tar xzf geckodriver-v0.25.0-linux64.tar.gz

sudo mv geckodriver /usr/bin/geckodriver

3) Installing pip3

cd

apt install python3-pip

4) Installing Selenium and Requests

cd

pip3 install selenium

pip3 install requests

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Specify your own SSH port when using rdiff-backup :

1) rdiff-backup uses the standard SSH port when connecting to a remote host.

$ rdiff-backup --print-statistics ~ / Projects / personal /

2) rdiff-backup@backup.example.org :: / rdiff-backup / repositories / personal
ssh: connect to host backup.example.org port 22: Connection refused
Fatal Error: Truncated header string (problem probably originated remotely)

Couldn't start up the remote connection by executing

ssh -C rdiff-backup@backup.example.org rdiff-backup --server

3) Remember that, under the default settings, rdiff-backup must be installed in the PATH on the remote system. See the man page for more information on this. This message may also be displayed if the remote version of rdiff-backup is quite different from the local version (2.0.0).

$ rdiff-backup --print-statistics --remote-schema "ssh -C -p 2222 % s rdiff-backup --server" ~ / Projects / personal / rdiff-backup@backup.example.org :: / rdiff- backup / repositories / personal

-------------- [Session statistics] --------------
StartTime 1599393121.00 (Sun Sep 6 11:52:01 2020)
EndTime 1599393121.48 (Sun Sep 6 11:52:01 2020)
ElapsedTime 0.48 (0.48 seconds)
SourceFiles 11
SourceFileSize 10543 (10.3 KB)
MirrorFiles 1
MirrorFileSize 0 (0 bytes)
NewFiles 10
NewFileSize 10543 (10.3 KB)
DeletedFiles 0
DeletedFileSize 0 (0 bytes)
ChangedFiles 1
ChangedSourceSize 0 (0 bytes)
ChangedMirrorSize 0 (0 bytes)
IncrementFiles 0
IncrementFileSize 0 (0 bytes)
TotalDestinationSizeChange 10543 (10.3 KB)
Errors 0
--------------------------------------------------
That's all

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Best video recorder for android :

https://play.google.com/store/apps/details?id=com.duapps.recorder

https://play.google.com/store/apps/details?id=com.hecorat.screenrecorder.free&hl=en

https://play.google.com/store/apps/details?id=com.ezscreenrecorder

https://play.google.com/store/apps/details?id=screenrecorder.recorder.editor

https://play.google.com/store/apps/details?id=com.capturerecorder.receditor.screenrecorder

https://play.google.com/store/apps/details?id=com.i.video.recorder

https://play.google.com/store/apps/details?id=com.REC.recscreen.screenrecorder.gamescreenrecorder

https://id=com.recorder.video.magic.capture.gameplay

https://play.google.com/store/apps/details?
id=com.REC.screenrecorder.screen.recording

https://play.google.com/store/apps/details?id=com.tianxingjian.screenshot

https://play.google.com/store/apps/details?id=com.apowersoft.screenrecord

https://play.google.com/store/apps/details?id=com.camera.recorder.hdvideorecord

https://play.google.com/store/apps/details?id=com.blogspot.byterevapps.lollipopscreenrecorder

https://play.google.com/store/apps/details?id=com.screenrecorder.recordingvideo.supervideoeditor

https://play.google.com/store/apps/details?id=com.littlea.ezscreencorder

https://play.google.com/store/apps/details?id=com.zenaapps.backgroundvideorecorder

https://play.google.com/store/apps/details?id=com.kimcy929.secretvideorecorder

https://play.google.com/store/apps/details?id=com.rsupport.mobizen.sec

https://play.google.com/store/apps/details?id=https://play.google.com/store/apps/details?id=tv.shou.rec

https://play.google.com/store/apps/details?id=com.mobzapp.recme.free

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the different benefits of using a proxy server?

1) hide your IP address

in certain situations in some organizations, the server can also prevent a person from accessing certain websites.

When used in these cases, a proxy server is useful as it allows you to visit and access a website without any identification of your IP address.

On a broader scale, there are countries that block the access of their residents to certain websites or online content.

Using a reliable proxy server, you can easily confuse the filter and access information on the Internet, plus you can use mobile proxies as well .

2) filter requests
A proxy server can not only be used as a means of accessing blocked websites, but it can also be used to restrict access to websites for individuals using the network.

Businesses can use proxy servers to prevent employees from accessing websites that could damage a company's network or reduce overall performance.

3) Protection and Security
If you browse the Internet directly from an IP address that does not have a tool to act as an intermediary, then the security level of your computer is relatively low.

This means that your computer and server are vulnerable to hackers.

When using a proxy server, external servers are not sure which server is your direct IP and thus you will be better protected.

Some proxy servers are used as firewalls for added security, providing additional protection for computers from hackers.

4) performance and efficiency
Some proxies use cached data; however, it probably means nothing to you and makes you wonder what benefits a caching proxy can offer?

There is a simple answer to this question.

Let's say that a person is using the same network that you are using and wants to visit the same page that you have already visited, then the proxy does not need to visit any target website.

It can extract information from already received cached data.

This increases the speed of information transfer, speeds up work and reduces the volume of traffic coming from the server of the target site.

5) anonymity when using the Internet
If you want to surf the Internet anonymously, then it is most beneficial to use a proxy server.

If you think that hackers are the only people using proxies for anonymity reasons, then you are greatly mistaken.

In many cases, people choose to hide their IP and therefore their identity on the Internet.

6) business location
International companies may want to present different content depending on the user's location.

To do this, they will need to use a proxy server.

A proxy server can locate a visitor's IP address and load appropriate pages for a specific visitor according to need or desire.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the disadvantages of proxy servers?

1) identity theft
The proxy server cache can store a lot of sensitive data such as usernames and passwords.

While this may seem harmless at first, since proxy servers can block external servers from receiving this information, it can be unfortunate if the person associated with the proxy server is not responsible for the stored information.

In this situation, a malicious person can easily obtain sensitive data that could compromise your online identity.

It is for this reason that you should use a reputable internet service provider to buy proxy servers.

2) Incompatibility
Although the use of proxy servers can be very beneficial, there are problems that can arise if the proxy server is not compatible with the local network of servers.

Proxies are independent systems that operate according to their own configurations; hence, you can purchase a proxy that suits your local server, or configure one to match the other.

This is another reason why you should hire a reliable internet provider that offers convenient proxy servers.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ email2phonenumber: get the target's phone number just by having their email address :
This tool helps automate the discovery of someone's phone number by exploiting the design flaws of password reset and public data.


Supports 3 main functions:

1) "Scrape" - scrape websites for phone numbers, initiating a password reset using the recipient's email address

2) Generate - Generates a list of valid phone numbers based on the publicly available country phone numbering plan information.

3) Bruteforce - Loops through a list of phone numbers and initiates a password reset on various websites to retrieve associated masked emails and match them to the victim's address

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) git clone https://github.com/martinvigo/email2phonenumber.git

2) pip install BeautifulSoup requests

Scan sites for phone numbers

python email2phonenumber.py scrape -e target@email.co

3) Create a dictionary of valid phone numbers based on the phone number mask

4) python email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt

5) Find the target's phone number by resetting passwords on websites that do not alert the target using a phone number mask and proxy to avoid captchas and other anti-abuse remedies.

6) python email2phonenumber.py bruteforce -m 555XXX1234 -e target@email.com -p /tmp/proxies.txt -q

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁


πŸ¦‘β˜οΈ How to keep the application running after closing Putty?


So, you have an application on a remote VPS server.

You connect to it via Putty and launch an application (for example) with a script.

After closing Putty, your application crashes.
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”

1) For
users who have the same problem, we will show the necessary steps on how to use screen:

First of all, install it:

sudo apt-get install screen

2) You can now start a new screen session by simply typing screen at the command line.

3) You will be shown some information about the screen.

4) Press Enter and you will see the usual prompt.

5) To disconnect (but leave the session enabled)

Hit Ctrl + A and then Ctrl + D in immediate succession. You will see the message [detached]
It's all!

6) After the [detached] message, your application will start after you close putty.
Some additional commands

7) To reconnect to an already running session

screen -r

To reconnect to an existing session or create a new one if it doesn't exist

screen -D -r

8) To create a new window within a screen session
Hit Ctrl + A and then C in immediate succession. You will see a new prompt.

9) To switch from one screen to another

Hit Ctrl + A and then Ctrl + A in immediate succession.

10) To list open windows:

Hit Ctrl + A and then W in immediate succession

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁