UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.9K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ key points of each level of Android software and related technologies:

(1) Operating system layer (OS)
Android uses Linux 2.6 as the operating system, Linux 2.6 is a standard technology, and Linux is also an open operating system. Android's use of the operating system includes two parts: the core and the driver. Android's Linux core is the standard Linux 2.6 kernel. Android needs more drivers related to mobile devices. The main drivers are as follows:
Display driver (DisplayDriver): commonly used Linux-based frame buffer (Frame Buffer) driver
Flash memory driver (FlashMemory Driver)
Camera driver (CameraDriver): commonly used Linux-based v4l (Video for) driver.
Audio Driver (AudioDriver): commonly used based on ALSA (Advanced Linux Sound Architecture, Advanced Linux Sound Architecture) driver
WiFi driver (CameraDriver): driver based on IEEE 802.11 standard
Keyboard driver (KeyBoardDriver)
Bluetooth Driver (BluetoothDriver)
BinderIPC driver: Andoid is a special driver that has a separate device node and provides the function of inter-process communication.
PowerManagement (energy management)


(2) Various libraries (Libraries) and Android runtime environment (RunTime)
This level corresponds to the general embedded system and is equivalent to the middleware level. This level of Android is divided into two parts, one is various libraries, and the other is the Android runtime environment. The content of this layer is mostly implemented in C++. Among them, various libraries include:
C library: The standard library of C language, which is also one of the lowest level libraries in the system. The C library is implemented through Linux system calls.
Multimedia Framework (MediaFrameword): This part of the content is the core part of Android multimedia, based on PacketVideo (PV) OpenCORE, functionally this library is divided into two parts, one part is the playback of audio and video (PlayBack), and the other One part is audio and video records (Recorder).
SGL: 2D graphics engine.
SSL: The SecureSocket Layer is located between the TCP/IP protocol and various application layer protocols to provide security support for data communication.
OpenGL ES 1.0: This part provides support for 3D.
Interface management tool (Surface Management): This part provides functions such as managing the display subsystem.
SQLite: a general embedded database
WebKit: the core of the web browser
FreeType: The function of bitmap and vector font.

(3) Application Framework (ApplicationFramework)
The Android application framework provides APIs for developers at the application layer. It is actually an application framework. Since the upper-level application is built in JAVA, the first level provided by this level includes the various controls needed in the UI program: for example: Views (view components) include lists (list), grids (grid), textboxes ( Text box), buttons (buttons), etc., and even an embedded Web browser. An Android application can make use of the following parts in the application framework: Activity, Broadcast IntentReceiver, Service, Content Provider.


(4) Application
Android applications are mainly user interface (UserInterface), usually written in JAVA program, which can also contain various resource files (placed in the res directory). After the JAVA program and related resources are compiled, an APK package will be generated. Android itself provides many core applications such as the home screen (Home), contacts (Contact), phone (Phone), browser (Browsers) and so on. At the same time, application developers can also use the API of the application framework layer to implement their own programs.

@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from UNDERCODE NEWS
Multiple vulnerabilities in Intel products.
#Vulnerabilities
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘STATUS CODES:

100
Continue ("continue");
101 Switching Protocols ("switching protocols");
102 Processing ("in progress");
103 Early Hints ("early meta-information");
2xx: Success:
200 OK ("good");
201 Created;
202 Accepted;
203 Non-Authoritative Information ("information is not authoritative");
204 No Content;
205 Reset Content;
206 Partial Content;
207 Multi-Status ("multi-status");
208 Already Reported;
226 IM Used.
3xx: Redirection:
300 Multiple Choices ("many choices");
301 Moved Permanently ("moved forever");
302 Moved Temporarily ("moved temporarily");
302 Found;
303 See Other;
304 Not Modified;
305 Use Proxy;
306 - reserved (code used only in earlier specifications);
307 Temporary Redirect ("temporary redirect");
308 Permanent Redirect.
4xx: Client Error:
400 Bad Request ("bad, invalid request");
401 Unauthorized ("not authorized (not introduced)");
402 Payment Required;
403 Forbidden ("prohibited (not authorized)");
404 Not Found;
405 Method Not Allowed;
406 Not Acceptable ("unacceptable");
407 Proxy Authentication Required;
408 Request Timeout;
409 Conflict ("conflict");
410 Gone ("deleted");
411 Length Required;
412 Precondition Failed;
413 Payload Too Large;
414 URI Too Long;
415 Unsupported Media Type;
416 Range Not Satisfiable;
417 Expectation Failed;
418 I'm a teapot ("I am a teapot");
419 Authentication Timeout (not in RFC 2616);
421 Misdirected Request;
422 Unprocessable Entity ("unprocessed instance");
423 Locked;
424 Failed Dependency;
425 Too Early ("too early");
426 Upgrade Required;
428 Precondition Required;
429 Too Many Requests ("too many requests");
431 Request Header Fields Too Large;
449 Retry With ("repeat with");
451 Unavailable For Legal Reasons ("not available for legal reasons").
499 Client Closed Request (client closed the connection);
5xx: Server Error:
500 Internal Server Error;
501 Not Implemented;
502 Bad Gateway ("bad, erroneous gateway");
503 Service Unavailable;
504 Gateway Timeout;
505 HTTP Version Not Supported;
506 Variant Also Negotiates;
507 Insufficient Storage ("storage overflow");
508 Loop Detected;
509 Bandwidth Limit Exceeded;
510 Not Extended;
511 Network Authentication Required;
520 Unknown Error;
521 Web Server Is Down;
522 Connection Timed Out;
523 Origin Is Unreachable;

@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from UNDERCODE NEWS
Vietnam accuses foreign companies such as Netflix and Apple of evading taxes for unfair domestic companies.
#international
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘πŸ“¦ ThreatHunt: PowerShell Repository for Teaching Threat Search Skills :

A) Application scenario
Let's say you've just started your threat hunting career, or you've already been hunting for threats, but your organization has implemented Endpoint Detection Response (EDR) or SIEM.

In both cases, you need a safe haven where you can issue safety warnings and start analyzing the data.

This is where ThreatHunt can come in handy, as it doesn't have any malicious files and it just simulates a lot of suspicious activity.

B) πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :


ThreatHunt has been tested on Windows 10 1809+. However, it is likely that it will work with most versions of Windows 10.

The script is based on the Microsoft Defender ATP (Attack Protection, Antivirus and Endpoint Detection Response (EDR) package).

ThreatHunt doesn't teach you about hacking. Therefore, some scenarios require domain credentials (username, password), IP ranges, and O365 email credentials (email address and password).

> git clone https://github.com/MiladMSFT/ThreatHunt.git

run then choose option from numbers

@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘πŸ–§ How to limit / decrease rsync transfer speed on Linux:

A) If you are using the rsync utility to synchronize your backups between servers or your local computer, you might want to prevent the script from using too much network bandwidth.

The point of limiting bandwidth is to keep your backup scripts from clogging up your network connection.

B) Naturally limiting the bandwidth your backups use will make them run slower.

Here's a common rsync command:

$ rsync –avz -e 'ssh' / path / to / source user @ remotehost: / path / to / dest /
What you need to do is use the –bwlimit parameter with a KB / s value, for example:
$ rsync –bwlimit = [kb / second] –avz -e 'ssh' / path / to / source user @ remotehost: / path / to / dest /
Thus, if you want to limit the transfer rate to 10,000 KB / s (9.7 MB / s), enter:
$ rsync –bwlimit = 10000 –avz -e 'ssh' / path / to / source user @ remotehost: / path / to / dest /
Here's a real world example:

rsync –bwlimit = 10000 –avz -e 'ssh' / backup / root@192.168.0.51: / backup /
In this example rsync will be capped at 10,000 kbps, or about 9.7 MB / s.
Using trickle

C) There is an alternative to the -bwlimit option.

You can also use the "trickle" command to limit the bandwidth of any application you run.

The trickle command syntax is:

$ trickle -u | -d [uploadLimit | downloadLimit] [app]
Where:

-u uploadLimit -> limits the upload bandwidth
-d downloadLimit -> limits the download bandwidth
app -> this is the application for which you want to limit the bandwidth, for example Rsync .
Thus, in our case, we will limit the bandwidth usage of the rsync command to 10,000KB / s using the following commands:
$ trickle -s -u 10000 -d 10000 rsync –avz -e 'ssh' / backup / root@192.168.0.51: / backup /


@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Should you use the Raspberry Pi 3 Model B + IN NETWORK HACKING ?
This model is also suitable for the purposes described above, since the Pi 3 Model B + has even more power compared to its younger brother, but we chose the Orange Pi Zero for the following reasons:

1) the cost of this gadget is almost 2 times lower than that of the Pi 3 Model B +, with similar characteristics, so its loss in case of detection or failure will not be as significant

2) the connection to the target router will be made via an Ethernet port, which the Pi Zero does not have, but here you can configure a gigabit network connection via a USB 2.0 port by purchasing an Ethernet-USB adapter

3) during testing, Orange Pi Zero shows much better performance compared to Raspberry Pi Zero, surpassing the Raspberry Pi 2 model, which has a larger form factor, in all respects, despite the fact that the price of these devices is about the same

@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from UNDERCODE NEWS
MELSEC iQ-R Series PLC CPU unit resource exhaustion vulnerability.
#Vulnerabilities
Forwarded from UNDERCODE NEWS
Apple plans to destroy its mini-tablet, replacing it with a super-modern iPhone.
#Technologies
Forwarded from UNDERCODE NEWS
PS5 is finally available! Expert: Sony will make money mainly on it in the future.
#Technologies
Forwarded from UNDERCODE NEWS
YouTube suffered a global downtime, all video playback errors reported.
#Updates
Forwarded from UNDERCODE NEWS
All Microsoft Windows Users should update their systems.
A New Dangerous Microsoft Windows Print Spooler Vulnerability
#Vulnerabilities
Forwarded from UNDERCODE NEWS
Line app for iPad introduces FIDO-based passwordless login function.
#Updates