🦑Cookie stealer which can then be used for session hijacking and Bypassing 2 Factor Authentication:

>> How Does it work?
Big-Papa utilizes malicious javascript code injection...and then makes a GET Request(with cookies) to the Python Web server running on the attacker machine

Note That you need to be man in the middle in order to inject the malicious javascript Code and then steal cookies of the website that the victim is currently visting

For testing purposes copy the Javascript code from the bgp.js file without the script tags and execute in the console of the browser

You can use Bettercap in-order to become man-in-the-middle using bettercap or use arp spoof and then run Big-Papa to inject Javascript

>> For HTTPS?
Big-Papa will work Perfectly against HTTP websites but For HTTPS you can use sslstrip to Downgrade it to HTTP and then utilize Big-Papa

*SSLstrip --> https://github.com/moxie0/sslstrip.git

Still some websites use HTTP and thus their data including Passwords can be read in Clear text but we need to steal cookies in some cases in order to Bypass 2-Factor-Authentication

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣ git clone https://github.com/vrikodar/Big-Papa.git

2️⃣cd Big-Papa

3️⃣chmod +x install.sh

4️⃣ ./install.sh

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🚨 Why Breaches Happen: Uncovering the Hidden Vulnerabilities

https://undercodenews.com/why-breaches-happen-uncovering-the-hidden-vulnerabilities/

@Undercode_News

🛡️ Shield Your Etsy Shop: A Guide to Outsmarting Scammers

https://undercodenews.com/shield-your-etsy-shop-a-guide-to-outsmarting-scammers/

@Undercode_News

A Glimpse into the Future: Innovation, Challenges, and #AI

https://undercodenews.com/a-glimpse-into-the-future-innovation-challenges-and-ai/

@Undercode_News

⚡️ The Wall Street Journal Launches a New Brand Campaign

https://undercodenews.com/the-wall-street-journal-launches-a-new-brand-campaign/

@Undercode_News

Climate Change and the Urgent Need for Action

https://undercodenews.com/climate-change-and-the-urgent-need-for-action/

@Undercode_News

Useful ?

🚨 A New Stealthy Threat: Borealis Stealer

https://undercodenews.com/a-new-stealthy-threat-borealis-stealer/

@Undercode_News

⚡️ #WhatsApp for #iOS 242580: A New Era for Photo and Video Albums

https://undercodenews.com/whatsapp-for-ios-242580-a-new-era-for-photo-and-video-albums/

@Undercode_News

Threads Surges: Daily Active Users Exceed 100 Million

https://undercodenews.com/threads-surges-daily-active-users-exceed-100-million/

@Undercode_News

🦑𝗦𝗢𝗣𝘀 (𝗦𝘁𝗮𝗻𝗱𝗮𝗿𝗱 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻 𝗣𝗿𝗼𝗰𝗲𝗱𝘂𝗿𝗲𝘀) / 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸𝘀 / 𝗥𝘂𝗻𝗯𝗼𝗼𝗸𝘀✨

A playbook, also known as a standard operating procedure (SOP), consists of a set of guidelines to handle security incidents and alerts in the SOC.

Incident response methodologies typically involve creating standard operating procedures (SOPs), playbooks, and runbooks to guide teams through the incident response process.

These gudelines provide easy to use operational incident best practices. These cheat sheets are dedicated to incident handling and cover multiple fields in which a CERT team can be involved.

Source: https://lnkd.in/eudq_jJi
Thanks to Societe Generale

✅Worm Infection: https://lnkd.in/ez-kq98Y
✅Social Engineering: https://lnkd.in/e_FJbxDP
✅Information Leakage: https://lnkd.in/eeN8KX8g
✅Insider Abuse: https://lnkd.in/ep4p_THk
✅Customer Phishing: https://lnkd.in/ekTfY7vz
✅Scam: https://lnkd.in/eUHwG3fF
✅Trademark infringement: https://lnkd.in/e3P3xfeb
✅Phishing: https://lnkd.in/eYTi3RQ8
✅Ransomware: https://lnkd.in/eRkctdQn
✅Large_scale_compromise: https://lnkd.in/eYFF43b4
✅3rd-party_compromise: https://lnkd.in/e8SAu5MT
✅Windows Intrusion: https://lnkd.in/eXCpcx9V
✅Unix Linux lntrusionDetection: https://lnkd.in/eHkm6MMe
✅DDOS: https://lnkd.in/eQ7zZzVt
✅MaliciousNetworkBehaviour: https://lnkd.in/ewVZy2cs
✅Website-Defacement: https://lnkd.in/eraNiHcH
✅WindowsMalwareDetection: https://lnkd.in/ewEx_C6Y
✅Blackmail: https://lnkd.in/eW3zGcPs
✅SmartphoneMalware.pdf: https://lnkd.in/ezjyY4G9

Ref:
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

EU Slams the Brakes on Russian Cyber Warfare

https://undercodenews.com/eu-slams-the-brakes-on-russian-cyber-warfare/

@Undercode_News

🛡️ Generative #AI: A Double-Edged Sword for Cybersecurity

https://undercodenews.com/generative-ai-a-double-edged-sword-for-cybersecurity/

@Undercode_News

The Remote Work Backlash: A Closer Look

https://undercodenews.com/the-remote-work-backlash-a-closer-look/

@Undercode_News

#AI: The Business Catalyst of 2025

https://undercodenews.com/ai-the-business-catalyst-of-2025/

@Undercode_News

🦑Free AI image to video + Offline models :

https://huggingface.co/collections/neox1969/image-to-video-65471876af5d7944323566f5

📱 #Apple Faces Criminal Charges Over Alleged Use of Conflict Minerals

https://undercodenews.com/apple-faces-criminal-charges-over-alleged-use-of-conflict-minerals/

@Undercode_News

#Samsung Gears Up for #Galaxy S25 Launch and Beyond

https://undercodenews.com/samsung-gears-up-for-galaxy-s25-launch-and-beyond/

@Undercode_News