▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 Support & Share: t.me/undercodecommunity

This is the hub for Ethical Hackers and tech enthusiasts:

》Topics We Cover:

1️⃣ CVE News & Databases

2️⃣ Hacker & Tech News

3️⃣ Cybersecurity, Hacking, and Secret Methods

🌟 Our Mission:
Share your knowledge, collaborate, and grow together in a community designed for innovation and learning.

🔗 Join now: bit.ly/joinundercode

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Popular Exploit development library:

》Pwntools (https://github.com/Gallopsled/pwntools) is a popular CTF (Capture The Flag) framework and exploit development library written in Python. It provides tools and features that streamline the process of writing, testing, and executing exploits, especially for binary exploitation challenges.

Key Features:

- Automated Exploit Scripts**: Easily interact with remote or local binaries.

- ROP (Return Oriented Programming): Simplifies creating ROP chains.

- Tubes: Abstraction for handling sockets, SSH, or processes.
- Assembler/Disassembler: Integrates tools like Capstone and Keystone.

- Debugging Utilities: Interfaces with GDB for dynamic analysis.

- Custom Shellcodes: Generate shellcode tailored to your needs.

Requirements:
Pwntools is compatible with Python 3 and can be installed via pip:

pip install pwntools
Example Usage:
Here’s a basic example of using Pwntools to exploit a binary:
from pwn import *

# Connect to the remote service
conn = remote('example.com', 1337)

# Send payload
payload = b'A' * 64 + b'\xdeadbeef'
conn.sendline(payload)

# Interact with the shell
conn.interactive()
Check out the repository for detailed documentation and examples.

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑C++ scanner that retrieves tuples from a PostgreSQL database and scans them for malware:

Here’s a simple C++ scanner that connects to a PostgreSQL database to retrieve tuples and checks them for malware. In this example, I'll assume the tuples are strings that need to be compared against a predefined list of known malware signatures.

- Security: This example does not implement secure credential handling (such as using a .pgpass file) and lacks measures to protect against SQL injection.

- Malware Detection: The method for detecting malware here is quite basic. In a real application, you would want to employ more advanced techniques, potentially involving hash checks against a comprehensive database of malware signatures.

- Error Handling: It’s important to include proper error handling for code intended for production use.

- Dependencies: Make sure you have the libpqxx library installed, which provides the C++ API for PostgreSQL.

Ref: Maximilian Feldthusen
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔒 A Year Later: #Tesla Sweden Defies Blockades, Leaving Unions Frustrated

https://undercodenews.com/a-year-later-tesla-sweden-defies-blockades-leaving-unions-frustrated/

@Undercode_News

🤖 Smart TV Automation with Modes and Routines: Elevate Your Viewing Experience

https://undercodenews.com/smart-tv-automation-with-modes-and-routines-elevate-your-viewing-experience/

@Undercode_News

🟠 Wazifa System 10: Cross-Site Scripting (XSS), #CVE-2024-12001 (MEDIUM)

https://dailycve.com/wazifa-system-10-cross-site-scripting-xss-cve-2024-12001-medium/

@DailyCVE

🔴 1000 Projects Library Management System 10, SQL Injection, #CVE-2024-12188 (Critical)

https://dailycve.com/1000-projects-library-management-system-10-sql-injection-cve-2024-12188-critical/

@Daily_CVE

🔴 PHPGurukul Complaint Management System 10: Critical SQL Injection (#CVE-2024-12230)

https://dailycve.com/phpgurukul-complaint-management-system-10-critical-sql-injection-cve-2024-12230/

@Daily_CVE

🔴 WeiYe-Jing datax-web 211: Remote Code Execution (#CVE-2024-12358) - Critical

https://dailycve.com/weiye-jing-datax-web-211-remote-code-execution-cve-2024-12358-critical/

@Daily_CVE

🔴 TP-Link VN020 F3v(T) SOAP Request Handler Buffer Overflow (#CVE-2024-12343) - Critical

https://dailycve.com/tp-link-vn020-f3vt-soap-request-handler-buffer-overflow-cve-2024-12343-critical/

@Daily_CVE

🔴 Online Class and Exam Scheduling System 10, SQL Injection, #CVE-2024-12360 (Critical)

https://dailycve.com/online-class-and-exam-scheduling-system-10-sql-injection-cve-2024-12360-critical/

@Daily_CVE

🟠 TOTOLINK EX1800T Stack Overflow Vulnerability (#CVE-2024-12352) - Medium

https://dailycve.com/totolink-ex1800t-stack-overflow-vulnerability-cve-2024-12352-medium/

@Daily_CVE

🔴 Online Notice Board Unrestricted Upload Vulnerability (#CVE-2024-12233 - Critical)

https://dailycve.com/online-notice-board-unrestricted-upload-vulnerability-cve-2024-12233-critical/

@Daily_CVE

🟠 SourceCodester Phone Contact Manager System 10, Improper Input Validation, #CVE-2024-12353 (Medium)

https://dailycve.com/sourcecodester-phone-contact-manager-system-10-improper-input-validation-cve-2024-12353-medium/

@Daily_CVE

🔴 PHPGurukul Complaint Management System 10: Critical SQL Injection (#CVE-2024-12228)

https://dailycve.com/phpgurukul-complaint-management-system-10-critical-sql-injection-cve-2024-12228/

@Daily_CVE

🔴 SourceCodester Petrol Pump Management #Software 10 Unrestricted File Upload (#CVE-2024-2059) - Critical

https://dailycve.com/sourcecodester-petrol-pump-management-software-10-unrestricted-file-upload-cve-2024-2059-critical/

@Daily_CVE

🟠 SourceCodester Best House Rental Management System 10, File Inclusion Vulnerability, #CVE-2024-12357 (Medium)

https://dailycve.com/sourcecodester-best-house-rental-management-system-10-file-inclusion-vulnerability-cve-2024-12357-medium/

@Daily_CVE

🟠 SourceCodester Phone Contact Manager System, Improper Input Validation, #CVE-2024-12355 (Medium)

https://dailycve.com/sourcecodester-phone-contact-manager-system-improper-input-validation-cve-2024-12355-medium/

@Daily_CVE

🟠 Tenda Router Vulnerability: Null Pointer Dereference (#CVE-2024-12002) - MEDIUM

https://dailycve.com/tenda-router-vulnerability-null-pointer-dereference-cve-2024-12002-medium/

@Daily_CVE

🟠 Checkmk Exchange Plugin for MikroTik (#CVE-2024-38861): Medium Severity Certificate Validation Vulnerability

https://dailycve.com/checkmk-exchange-plugin-for-mikrotik-cve-2024-38861-medium-severity-certificate-validation-vulnerability/

@DailyCVE

🔵 #Apple #iOS, iPadOS, #macOS, watchOS, tvOS: Kernel Vulnerability (#CVE-2024-44169)

https://dailycve.com/apple-ios-ipados-macos-watchos-tvos-kernel-vulnerability-cve-2024-44169/

@Daily_CVE