Tongxin UOS General Manager: The desktop ecosystem has the potential to replace Windows 7.
#Updates

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 brute force directories and files in webservers :

Fast
Easy and simple to use
Multithreading
Wildcard responses filtering (invalid webpages)
Keep alive connections
Support for multiple extensions
Support for every HTTP method
Support for HTTP request data
Support for raw request
Extensions excluding
Reporting (Plain text, JSON, XML, Markdown, CSV)
Recursive brute forcing
Target enumeration from an IP range
Sub-directories brute forcing
Force extensions
HTTP and SOCKS proxy support
HTTP cookies and headers support
HTTP headers from file
User agent randomization
Proxy host randomization
Batch processing
Request delaying
429 response code detecting
Multiple wordlist formats (lowercase, uppercase, capitalization)
Default configuration from file
Option to force requests by hostname
Option to add custom suffixes and prefixes
Option to whitelist response codes, support ranges (-i 200,300-399)
Option to blacklist response codes, support ranges (-x 404,500-599)
Option to exclude responses by sizes
Option to exclude responses by texts
Option to exclude responses by regexp(s)
Option to exclude responses by redirects
Options to display only items with response length from range
Option to remove all extensions from every wordlist entry
Quiet mode
Debug mode
🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/maurosoria/dirsearch.git

2) cd dirsearch

3) python3 dirsearch.py -u <URL> -e <EXTENSIONS>

4) To can use SOCKS proxy or work with ../ in the wordlist, you need to install pips with requirements.txt: pip3 install -r requirements.txt

If you are using Windows and don't have git, you can install the ZIP file here. Dirsearch also supports Docker

Dirsearch requires python 3 or greater

5) dirsearch.py [-u|--url] target [-e|--extensions] extensions [options]

Example:

root/
index.%EXT%
Passing the extensions "asp" and "aspx" (-e asp,aspx) will generate the following dictionary:

root/
index
index.asp
index.aspx
For wordlists without %EXT% (like SecLists), you need to use the -f | --force-extensions switch to append extensions to every word in the wordlists, as well as the "/". And for entries in the wordlist that you do not want to force, you can add %NOFORCE% at the end of them so dirsearch won't append any extension.
Example:

admin
home.%EXT%
api%NOFORCE%

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Unpatched Maxthon browser (Windows client) has dll hijacking vulnerability:

https://dailycve.com/unpatched-maxthon-browser-windows-client-has-dll-hijacking-vulnerability

🔵McAfee Agent authorization issue vulnerability (DC: 219-2021)

https://dailycve.com/mcafee-agent-authorization-issue-vulnerability

Phantom Green of the Galaxy S21 can become the next exclusive color of Samsung.
#Technologies

Microsoft's application to support the SpaceX Starlink Internet satellite group in an FCC lawsuit failed.
#bugs

Hack mobile with rats

Meitar has announced the addition of nine new partners.
#International

Trump's supporter's favorite SNS to resume service, three facts found in AWS suit.
#International

🔵Information leakage vulnerability due to improper implementation of Java API in Apache Tomcat (DC: 220-2021)

https://dailycve.com/information-leakage-vulnerability-due-improper-implementation-java-api-apache-tomcat

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Support & Share undercode telegram links:

T.me/UndercodeUpdates

T.me/UndercodeTesting

T.me/DailyCve

T.me/UndercodeNews

t.me/UndercodeChat

T.me/Undercode_Testing

Enjoy & Stay safe !
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Theonedev OneDev security vulnerability ((DC:221-2021)) :

https://dailycve.com/theonedev-onedev-security-vulnerability

🔵Unpatched/An SQL injection vulnerability exists in the website building system of Cixi Youcheng Network Technology Co., Ltd.:

https://dailycve.com/unpatchedan-sql-injection-vulnerability-exists-website-building-system-cixi-youcheng-network