UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.8K links
🦑 Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

Web & Services:
Undercode.help
Download Telegram
————- undercOde—-———

WANT MORE WA GRPS FROM undercOde (14 whatsapp groupes)

# Support & SHARE
> https://chat.whatsapp.com/HrFYL94B7Kx3uTUSWa7kKe
(Admins send)

> https://chat.whatsapp.com/JBVtuW3AnO4LEwTKGz7gAx
(Admins send)

>https://chat.whatsapp.com/GzkP126UuCxGEiUf8NqZvQ
(Admins send)

> https://chat.whatsapp.com/JNn6o7ByGRUDQwrvT0aTOZ
(All can send)

> Official admins send
https://chat.whatsapp.com/Bc54qusd5wq8giVb6KevnB

> telegram Groupes
(Anti-spam
Anti-malware
Auto-virus scan
Anti-phishing websites)

>T.me/UnderCodeTestingOfficial
+ Discussion @
>t.me/UnderCodeTestingSupport

—————UNDERCODE—————-
——————undercOde——————

🦑SECRET CARDING Methode Not patched ☠️☠️☠️☠️☠️
(Follow us instagram.com/UnderCodeTestingCompany)

🦑Amazon Carding New 2k18
March method
Fresh and New and Highly working Method created by top
carders in world.
Note: All other methods are patched...
This is the only working and didn’t patched method...
For sellers and teacher:
Price is too high. Don’t sell it for low prices otherwise this
method gets patched…
How to Card Amazon
Things you will need:
Quality CC/CVV to an address, full name, phone number, zip code, city, and
state (don’t get junk cards pay good money for good cards)
Socks 4/5 to the state and if you can the city since that would be perfect. This
sock must have never been used before so don’t be cheap and get a quality
sock. Socks are just as important as quality cards!
You will need programs to cleanup cookies and other flagging shit. Get
CCleaner- get the free version it has everything you need. Get the flash cookie
cleaner- it is free as well
Antidetect 7 or Fraudfox VM: These are not needed but they really increase
your carding success to almost 100% if used correctly and setup properly which
both are not very hard to do.
A drop address or if you’re carding digital items you don’t need that.
OK now let’s card
-------------------------

🦑---------------------------------
You just need a Diners Club international cc, Indian NON-VBV
or AMEX, Some Amex are still working
I’m listing some bins here which will work on Amazon.
542034542034 IN MASTERCARD CREDIT BANK OF INDIA
542086 IN MASTERCARD CREDIT ANDHRA BANK
376900 IN AMEX CREDIT AMERICAN EXPRESS
376901 IN AMEX CREDIT AMERICAN EXPRESS
376902 IN AMEX CREDIT AMERI EXPRESS
376903 IN AMEX CREDIT AMERI EXPRESS
#All are Non-VBV

First Method (Most successful)
Restart the computer and make sure you have used ccleaner and flash cookie
cleaner and they are running. Used disk cleanup in windows as well.
Create a new account on Amazon using a fresh good socks. Modern protection
against carding tracks the user's behavior on the site. Therefore, you must act as
a typical buyer, not jump directly to your product. Use the search, see different
knick-knacks, add them to the cart, but do not buy. It should be quite different
items, not those that you want to card.
After the virtual shopping logout from Amazon, leave the computer, and stop
the activity on it. Put it to sleep. After 5 or more hours, go back to Amazon and
clean your cart. Now let’s card.
Now find the items falling into the limit of your card somewhere between $30
and $150. Using a credit card, pay for the goods that you selected. You may need
to wait for amazon to approve your order or not. Sometimes it’s random I swear.
Now the order should have been accepted and shipped. If not, then you either
have a shitty card worth less than what you trying to card or you threw a flag. Go
back and check your setup. This is pretty full proof way to card amazon. If
everything is in place and you have your bases covered, you should be in and
out. Make sure you check to see if you IP leaking cause that would throw a flag
as well: https://www.dnsleaktest.com
Now we can also speed up this order if it’s in processing just so it doesn’t get
charged back and flagged before it gets shipped. Send amazon an email from
the email that you created for this account. Gmail is preferred email for this setup
as it is much more trustworthy do to its security signed up measures. Use an
excuse to make them speed it up. There is excuse kind of tie into what you are
buying. So let’s say you want a 800 dollar cannon camera then tell them that you
it’s real person on the other end so make your excuse real and don’t go too in
depth.
Now they may ask to call you on the phone number associated with the CC
account. This happens maybe 30% of the time. Just say OK and hope no one
picks up the phone on the other end and luck I on your side. If they send you
another email saying they tried to contact, you but no answer then simply say- “I
am so sorry I changed my number and I haven’t update it with my CC company
yet” then give them a burner number where you can actually answer.
Now if all goes smooth then you have carded your first real item on Amazon.
Now that you have done that your account is trusted and you can place an order
between $500-$800 or until the card is maxed out. Stay below $2000 per order.
Max the card out as quick as you can but be inconspicuous and act like a real
buyer. The security for the most part are bots and the formulas they use are really
intense so when I say act like a real buyer I mean that or you will get limited and
blocked.
Just understand that these methods work 90% of the time and the majority of the
success of carding I on the carder himself and the setup he has. With Antidetect
or Fraudfox the carding success is closer to 95%. Amazon, eBay, and PayPal are
getting harder and harder to card and fraud every day and pretty soon it won’t
be possible so understand that you need to have everything in tip top setup and
stay ahead of bots.
-------------------------------------------X---------------------------------------------------
Second Method
This method is a little better for low level cards or just an easier method then
the above as the security is a little more lenient because the purchase amount is
less. This method is also not as successful as the above method.
Everything is the same as above except this time purchase an item worth
around $2.00. Get the lowest and cheapest delivery time as it throws less of a security flag.
Now once your order is approved just like the first one your account is now a
trusted account. I recommend using FedEx for your shipping method as it has
less security compared to UPS and USPS for the real order.
Now card a total of $600-$800 dollars and it should go right through.
You can also open a seller account and attach the CC to it and purchase
through a seller account. It is a little more work but your success will be greater.
Thank you and don’t forget if a payment is declined it’s 50% of the time the
card so make sure your cards are good.
----------------------------------X--------------------------------------------
Method (which I use) By
REMO
Use an old account must be 6-12 months older or you can use cracked
accounts too.
OR If u have a new and fresh account. Order a small and cheap product
at COD. Cancel it after some hours (5 hours) or let it be delivered.
YEP………Now Your account is verified. Now the real part begins...
Do it in fresh reboot
Use CCleaner to clean cookies. And delete all cookies and history. Use
Antidetect browser (Optional)
Use socks5 proxy or VPN of the CC owner’s location (USA preferred).
If doing with Indian CC, just connect with India location in VPN
Now open Amazon.com and Login to your verified account and add
the cc (Diners Club or Indian or AMEX) via the payment method. Add
billing address over there. Now logout from amazon.com.
Don’t clear anything or mix up. Wait for 15 Mins.
Be fully anonymous its necessary. Check your anonymity at
https://www.whoer.net , Make sure you check to see if you IP leaking
cause that would throw a flag as well: https://www.dnsleaktest.com
Now head towards Amazon.in and search some products act as a
typical buyer, not jump directly to your product. Use the search, see
different knick-knacks, add them to the cart, but do not buy. It should
be quite different items, not those that you want to card.
After the virtual shopping logout from Amazon, leave the computer,
and stop the activity on it. Put it to sleep. After 5 or more hours, go
back to Amazon and clean your cart. Now let’s card.
Now add your desired product in to your cart according to the cc limit.
Check it out. Done payment via the CC.
Now u successfully placed your order. To avoid cancellation “Archive
your order”
Now logout from that account.
After getting order confirmation.
Hurraaayyyy!!! U have successfully carded


🦑T.me/UnderCodeTestingOfficial


@ Steave(t.m)
—————-UNDERCODE——————-
UNDERCODE COMMUNITY pinned «——————undercOde—————— 🦑SECRET CARDING Methode Not patched ☠️☠️☠️☠️☠️ (Follow us instagram.com/UnderCodeTestingCompany) 🦑Amazon Carding New 2k18 March method Fresh and New and Highly working Method created by top carders in world. Note: All other methods…»
--------UNDERCODE-----

WEBSITE Full Vulnerability scan & EXPLOITE :
(Twitter.com/UnderCodeTC)

🦑Vulnerability Checks:

1)
DNS/HTTP Load Balancers & Web Application Firewalls.

2) Checks for Joomla, WordPress and Drupal

3) SSL related Vulnerabilities (HEARTBLEED, FREAK, POODLE, CCS Injection, LOGJAM, OCSP Stapling).

4) Commonly Opened Ports.

5) DNS Zone Transfers using multiple tools (Fierce, DNSWalk, DNSRecon, DNSEnum).

6) Sub-Domains Brute Forcing.

7)Open Directory/File Brute Forcing.

8) Shallow XSS, SQLi and BSQLi Banners.

9) Slow-Loris DoS Attack, LFI (Local File Inclusion), RFI (Remote File Inclusion) & RCE (Remote Code Execution).

> & more...

🦑Requirements

1)
Python 2.7

2) Kali OS (Preferred, as it is shipped with almost all the tools)

3)For other OS flavours, working on a docker support.

🦑INSTALLISATION& RUN:

1) Download the script and give executable permissions

> git clone https://github.com/skavngr/rapidscan

2) wget -O rapidscan.py https://raw.githubusercontent.com/skavngr/rapidscan/master/rapidscan.py

3)chmod +x rapidscan.py

4) python rapidscan.py


Written by Steave(tm)
-----UNDERCODE------
-------UNDERCODE------

CREDIT CARD HACK ON TERMUX(For eductational purposes)
(Instagram.com/UnderCodeTestingCompany)


🦑INSTALLISATION & RUN:

> Credit Card Information Generate Hacking Tool to Termux

1) pkg update

2) pkg upgrade

3) pkg install python

4) pkg install git

5) git clone https://github.com/INDOnimous/Card-Number

6) cd Card-Number

7) ls

8)chmod 777 Card.sh

9)./Card.sh

[#]Count : 10
[#] Delay : 2

@ Steave(t.m)
--------UNDERCODE-----
————-UNDERCODE—————-

NEW UPDATE IN C I A BREAKED THEN SHARED HACK TOOL ☠️☠️EXPERT
+ CIA ACCESS SERVER BY CIA ITSELF
(T.me/UnderCodetestingOfficial)

🦑INSTALLISATION:

🦑 Running docker image

1) Docker repository : https://hub.docker.com/r/hack23/cia/

2) docker run hack23/cia:2019.10.3 -p 28443:8443

3) Access server at https://localhost:28443/cia/ , register new user to get admin access

🦑Installing Debian/Ubuntu package:

1) Currently only build a debian package, works with debian and ubuntu 14.04,16.04,16.10

2) Installing database(postgres) and openjdk

> sudo apt-get install openjdk-11-jdk postgresql-11 pgadmin3

3) Postgresql on Ubuntu
> sudo apt-get install postgresql-11 postgresql-contrib postgresql-11-pgaudit

4) Create empty database
Below description set the default username/password and database name used for development, recommend using custom credentials and update the configuration at /opt/cia/webapps/cia/WEB-INF/database.properties to define your own username/password and database name.

5) sudo su - postgres

6) psql

> postgres=# CREATE USER eris WITH password 'discord';

> postgres=# CREATE DATABASE cia_dev;

> postgres=# GRANT ALL PRIVILEGES ON DATABASE cia_dev to eris;

7) Modify postgres setting, enable prepared transactions and extensions used pg_stat_statements, pgaudit, pgcrypto

8) Edit file "/etc/postgresql/11/main/postgresql.conf" set

9) max_prepared_transactions = 100
shared_preload_libraries = 'pg_stat_statements, pgaudit, pgcrypto'
pgaudit.log = ddl
pg_stat_statements.track = all
pg_stat_statements.max = 10000
Modify postgres setting Edit file "/etc/postgresql/11/main/pg_hba.conf" add line

10) host all all ::1/128 md5
Restart postgres

11) service postgresql restart
Get cia debian package and

12) wget https://oss.sonatype.org/content/repositories/releases/com/hack23/cia/cia-dist-deb/2019.10.3/cia-dist-deb-2019.10.3.deb

13) install debian package

>sudo dpkg -i cia-dist-deb-2019.10.3.deb

14) Access the server at https://localhost:28443/cia/ .

Written by Steave(t.m)
————-UNDERCODE—————-
------UNDERCODE------

BEST TOOL FOR Gether informations
(in my point better than redhawk)
(Instagram.com/UnderCodetestingCompany)

🦑INSTALLISATION&RUN:
(Kali/termux(root)...

> KALI LINUX INSTALL:

1) git clone https://github.com/1N3/Sn1per

2) cd Sn1per

3) bash install.sh

🦑UBUNTU/DEBIAN/PARROT INSTALL:

1)sudo bash install_debian_ubuntu.sh

🦑DOCKER INSTALL:

From a new Docker console, run the following commands.

1) Download https://raw.githubusercontent.com/1N3/Sn1per/master/Dockerfile
docker build -t sn1per-docker .
docker

> run -it sn1per-docker /bin/bash

@ Mr.Botnet
----UNDERCODE----
SHARE OUR CHANNEL WITHOU.YOUR FRIENDS t.me/UnderCodeTestingOfficial 👍
———-UNDERCODE———-

WANNACRY THE FAMOUS RANSOMWARE REVERSE ENGENEER TOOL BY NSA : FOR EXPERTS HACKERS HOW Does Undercode DECRYPT it :
GUIDE BY undercOde:
(Twitter.com/UnderCodeTC)

🦑INSTALLISATION & RUN:

FOLLOW STEPS CAREFULLY OR YOU LOST YOUR FILES:

1) Make sure to turn off the Windows Defender before you install WannaCry and download an outdated Windows 10 VM.
Once you run the WannaCry.exe, this is how you will be welcomed with the infamous WannaCry screen.

2) Let’s load WannaCry executable into Ghidra and see what’s inside 😉
Download WannaCry zip file

> OFFICIAL SITE:
https://www.ghidra.ninja/samples/wannacry.zip

3) UNZIP

THEN OPEN PROJECT (wannacry)
(If you want edit some line for special configuration)

In any reverengeneer tool or (netbeen aw well)

4) After this double click on WannaCry to open in code browser. The code browser looks convenient though. On the left, you get to see the disassembly view and on the right, you get to see the decompile view.

5)Start with analyzing the executable and you might have to check/enable few options, Decompiler Parameter ID and WindowsPE x86 Propagate External Parameter option as the additional analyzer.

6) Once done, hit analyze and ignore warnings if any. This is how the Ghidra looks after analyzing.


7) Once done, we can start digging into the binary and look for the main function or the main entry function.

8) We don’t see any main() function or WinMain() function. But I see a function with label entry. Let’s see what’s inside the function with label entry, which is, of course, the function first called when executable is launched. This is the default entry code generated for windows executables.


9) WinMain() is the C entry point function of any windows application. Like normal DOS/console based application which has main() function as C entry point, in windows we have WinMain() instead. WinMain() is a function which is called by system during creation of a process.
If you have never heard of WinMain() functions here is a nice article on WinMain() function and how it works.


10)If you notice carefully, there at the bottom of this file, there’s a call to another function (Line 64).

11) If I open the same in Function Call Graph, here is what the call from entry function looks like

12) The function Call graph tool is really cool and convenient to see which function calls are being called from a particular function. I checked all the functions and really didn’t find anything useful except for the function FUN_00408140.

13) Checking the function call graph for FUN_00408140 reveals the other functions its calling.

14) Example renamed the function FUN_00408140() to something_interesting().
Once you open the function something_interesting(), one can see the strange string

15) From the function call graph, it makes clear that it's making a call to two functions InternetOpenA() and InternetOpenUrlA(). Let’s see what these two functions do.

> Microsoft’s documentation says that
InternetOpenA() function is used to initialize the application’s use of the WinINet functions!
And InternetOpenUrlA() function is used for opening a resource specified by a complete FTP or HTTP URL. Which makes sense! 🤔

16) Make sure to check out Microsoft's documentation for InternetOpenA() and InternetOpenUrlA().
Let’s change the function signature for both of these functions.

17) Now, we change the function signature for InternetOpenUrlA(), we get the error saying “Cannot Resolve the datatype HINTERNET”, it’s because this returns the type HINTERNET which is nothing but a void pointer.

18) Now I create the new typedef called HINTERNET.

19) Now you are good to change the function signature.
Once we change the function signature, this is how the decompiled code looks like20) Looking at line 23 this makes it obvious that it’s making a request to the strange URL we saw earlier! Line number 24 hints us that, if the request fails, it returns the null handle and then it closes the handle and calls the function FUN_00408090(). This is where all the exciting things are happening. Let me rename that to real_things_happens_here().
If the request doesn’t fail, it simply closes the handle and quits the program. (Line 30–32)🦑

21) Now, if you are wondering, what is this URL, this is the infamous killswitch. This was initially discovered by a hacker Marcus Hutchins aka MalwareTech. He worked on to reverse Engineer the WannaCry and discovered that the ransomware checks for the above URL.

22) Once he registered the domain for himself, it turned out that WannaCry was shut down. It so happened that the domain was unregistered and inactive. Once the ransomware checked the URL and found that it was active, the ransomware was shut down.

This is how basically how it worked!

Don t Copy Our Tutorial Without Permission
@ Mr.BotNet(t.m)
————-UNDERCODE————
--------UNDERCODE-----

🦑 bypass proxy server in LAN:
(T.me/UnderCodeTestingOfficial)

🦑Method 1:

1) Bypassing Via Browsers
When everything else seems all right, the only thing you have to do is disable the proxies in your web browsers.

2) In Firefox, go to “Options -> Advanced -> Connection Settings.”

3) Enable no proxy access, refresh your browser and surf the websites.

4) Chrome users should visit “Settings -> Advanced -> System.” Here, click on “Open Proxy Settings.”


5) A new “Internet Properties” window will open. Click “LAN Settings” and uncheck everything in the second window.

6) Refresh the Chrome browser and surf the website.

🦑Methode 2:

>Command Line Tracert

1) If the above method did not work for you, it means the URLs have been blocked.

2) In such cases you can try accessing the website through its IP address.

> Go to command line, type tracert www.url.com and hit Enter.

3) Soon the website will return its IP address. Enter the IP address on the address bar to access the website.

4)In some admin settings, you might not be able to access the command file. In such a case, simply run

>cmd as a batch file.

5) Open Notepad, type the words cmd and save it as “cmd.bat” in “All files.” This should now run as your command file.

🦑Method 3: Chrome VPN Extensions


1) For Chrome users, another method to bypass the settings is to use VPN extensions. Free VPN is one of the reliable extensions which works well.

2) You can choose from hundreds of extensions and not have to worry about slow speed ad bandwish

🦑Method 4: Fresh Proxies

1) Network administrators have a habit of blocking external proxies. However, that is where “fresh proxies” come in real handy.

2( You can do a simple Google search for them. I personally find “free-proxy.cz” quite useful in discovering new proxy servers.

3) Simply look for a reliable proxy, and note down its IP address and port number.

4) Go back to the LAN settings again, except this time you must check the box for “use a proxy server for your LAN.”

5) Then, insert the values into the required fields and start accessing the website.

🦑Method 5: Use Tor:

1) The Tor browser is one of the best ways to get around proxy restrictions. Freely available, you can surf anonymously and not leave a trace revealing your browsing activities.

2) Tor browsers are also malware-free,but you might want to hide it somewhere if on a shared computer.

🦑Hack Methods/

1) While these methods do not qualify as proxy bypasses, they are quite useful in helping you access what you want.
Use Google Translate: Go to Google Translate and convert the website into another language.

2) Once done, all you have to do is see the “original.” This way you can read the content in English under a new URL. 

3) You can also use Microsoft’s Bing translation service.

@ Mr. BotNet(t.m)
-------UNDERCODE------
————undercOde———-

🦑Hack WordPress WebSites Tested
(instagram.com/UnderCodeTestingCompany)

🦑INSTALLISATION & RUN:

1) git clone https://github.com/n00py/WPForce

2)cd WPForce

3)Yertle requires the requests libary to run.
http://docs.python-requests.org/en/master/user/install/

4)python wpforce.py -i usr.txt -w pass.txt -u "http://www.[website].com"

5)For Using i Prefere to get Wordlist at Files SENDED BELow bt UnderCode (4 gb Torrent)

🦑TESTED ON:

1)Ubanto

2) Debian

3) Kali

4) Parrot

🦑FEATURES:

1) Brute Force via API, not login form bypassing some forms of protection

2) Can automatically upload an interactive shell

3) Can be used to spawn a full featured reverse shell

4) Dumps WordPress password hashes

5) Can backdoor authentication function for plaintext password collection

6) Inject BeEF hook into all pages

7) Pivot to meterpreter if needed

Written by Mr. BotNet(t.m.)
———undercOde———
crackstation.txt.gz.torrent
42.3 KB
4 Gb WordlIST crack Torrent @UnderCodeTestingOfficial