> build malware part 2

11)Port Scanner (byob.modules.portscanner): scan the local network for other online devices & open ports

12) Process Control (byob.modules.process): list/search/kill/monitor currently running processes on the host

13) iCloud (byob.modules.icloud): check for logged in iCloud account on macOS

14) Spreader (byob.modules.spreader): spread client to other hosts via emails disguised as a plugin update

15) Miner (byob.modules.miner): run a cryptocurrency miner in the background (supports Bitcoin & Litecoi

>https://github.com/malwaredllc/byob check out this code-modules

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Vulnerability in Zoom client could reveal Windows login credentials to attackers
t.me/undercodeTesting

1) Recently, the Zoom client for Windows has revealed a security vulnerability vulnerable to NUC path injection attacks. As an audio and video conference application, Zoom also allows users to communicate with each other by sending text messages on the chat interface. However, foreign media Bleeping Computer pointed out that an attacker could use the vulnerability of the chat module to steal the Windows login credentials of the user who clicked the relevant link.

2) When sending a chat message, all sent URLs will be converted so that other members of the group can click and then open the webpage in the default browser.

> However, security researcher @undercodeTesting found that the Zoom client turned the Windows network UNC path into a clickable link in the chat message.

> both the regular URL and the NUC path (\\ evil.server.com \ images \ cat.jpg) are converted into clickable links in the chat message

3) f the user clicks the UNC path link, Windows will attempt to connect to the remote site using the SMB file sharing protocol to open the cat.jpg file in the remote path.

By default, Windows will send the user's login name and NTLM password hash, but a less experienced attacker can use a free tool like Hashcat to do the reverse.

4) Security researcher Matthew Hickey (@ HackerFantastic) found that it can be successfully injected in Zoom and can be quickly cracked with the help of current civilian GPUs and CPUs.

In addition to stealing Windows login credentials, Hickey also revealed to Bleeping Computer that by clicking on the link, UNC injection is also suitable for starting programs on the local computer (such as the CMD command prompt).

5) Fortunately, Windows will prompt you whether to allow the program to run before it is executed. To plug this vulnerability, Zoom must prevent the UNC path translation feature of the Windows client (block some clickable hyperlinks).

It is reported that Hickey has sent a notice to Zoom official on Twitter about the security breach, but it is not clear what action the company has taken.

6) Security-conscious customers can restrict NTLM communication to remote servers through Group Policy before the official patch release (refer to the following operations):

Computer Configuration-> Windows Settings-> Security Settings-> Local Policies-> Security Options-> Network Security: Restrict NTLM-> NTLM traffic to remote servers (then all configured to deny).

7)Note that if you configure the above Group Policy on a computer that has joined the relevant domain, you may encounter problems when trying to access the share.

For Windows 10 Home users who do not have access to Group Policy settings, you can also use the Registry Editor to complete the relevant restrictions (dword is set to 2):

[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Lsa \ MSV1_0] "RestrictSendingNTLMTraffic" = dword: 00000002

8) To create this key correctly, Windows users remember to launch Registry Editor as an administrator.

If in the future it is necessary to restore the default Windows behavior of sending NTLM credentials, simply delete the corresponding RestrictSendingNTLMTraffic key.

WRITTEN BY UNDERCODE
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑TESTED WINDOWS 10 ALL VERSION LASTEST SERIALS :
instagram.com/undercodeTesting

Windows 10 Enterprise N 4CPRK-NM3K3-X6XXQ-RXX86-WXCHW
Windows 10 Enterprise QFFDN-GRT3P-VKWWX-X7T3R-8B639
Windows 10 Professional N VK7JG-NPHTM-C97JM-9MPGT-3V66T
Windows 10 Education DCPHK-NFMTC-H88MJ-PFHPY-QJ4BJ
Windows 10 Enterprise 2018 LTSB YTMG3-N6DKC-DKB77-7M9GH-8HVX7
Windows 10 Home Key 2F77B-TNFGY-69QQF-B8YKP-D69TJ
Windows 10 Enterprise 2018 LTSB N DXG7C-N36C4-C4HTG-X4T3X-2YV77
Windows 10 Professional WNMTR-4C88C-JK8YV-HQ7T2-76DF9
Windows 10 Enterprise 2018 LTSB N WYPNQ-8C467-V2W6J-TX4WX-WT2RQ
Windows 10 Enterprise G DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4
Windows 10 Home Singe Language YNMGQ-8RYV3-4PGQ3-C8XTP-7CFBY
Windows 10 Pro 44RPN-FTY23-9VTTB-MP9BX-T84FV
Windows 10 Enterprise 2016 LTSB 84NGF-MHBT6-FXBX8-QWJK7-DRR8H
Windows Pro N for Workstations NW6C2-QMPVW-D7KKK-3GKT6-VCFB2
Windows 10 Home Single Language 8PTT6-RNW4C-6V7J2-C2D3X-MHBPB
Windows 10 Professional Workstation YVWGF-BXNMC-HTQYQ-CPQ99-66QFC
Windows 10 S GJTYN-HDMQY-FRR76-HVGC7-QPF8P
Windows 10 Home Country Specific YYVX9-NTFWV-6MDM3-9PT4T-4M68B
Windows 10 Education N XGVPP-NMH47-7TTHJ-W3FW7-8HV2C
Windows 10 Enterprise Evaluation NPPR9-FWDCX-D2C8J-H872K-2YT43
Windows 10 Home + Office 2016 Professional Key MNXKQ-WY2CT-JWBJ2-T68TQ-YBH2V
Windows 10 Enterprise NW6C2-QMPVW-D7KKK-3GKT6-VCFB2
Windows 10 Pro + Office 2016 Professional Key MNXKQ-WY2CT-JWBJ2-T68TQ-YBH2V
Windows 10 Education N DCPHK-NFMTC-H88MJ-PFHPY-QJ4BJ
Windows 10 Education Key WYPNQ-8C467-V2W6J-TX4WX-WT2RQ
Windows 10 Education QFFDN-GRT3P-VKWWX-X7T3R-8B639
Windows 10 Enterprise Key 84NGF-MHBT6-FXBX8-QWJK7-DRR8H
Windows 10 Pro N 2F77B-TNFGY-69QQF-B8YKP-D69TJ
Windows 10 Pro Key VK7JG-NPHTM-C97JM-9MPGT-3V66T
Windows 10 Home WNMTR-4C88C-JK8YV-HQ7T2-76DF9

@UndercodeTesting
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑WHATSAPP SERVER SLOWING DOWN AGAIN 2/APR/2020

> UNKNOW REASON TILL NOW

> ERROR DESCRIPTION : Voices & Pictures


🦑IN :

IRAN

LEBANON

SPAIN

ARGENTINA

DETECTED TILL NOW

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 6 best external drives
>If you need extra storage space for your files or want to back up your system, these discs will help improve your digital life.
t.me/undercodeTesting

🦑 𝕃𝔼𝕋𝕊 𝕊𝕋𝔸ℝ𝕋 :

1) Fast drive

Samsung T5 Portable SSD

Very fast and compact
The most durable

2) The most durable

>Adata SD700 3D NAND SSD

Protection against water, dust and vibration

3) Most protected

>iStorage diskAshur2 Encrypted Hard Drive

Password protected

4) Wireless

WD My Passport Wireless Pro

Avoid annoying wires and carry storage with you

5) Best value

>Seagate Expansion Desktop HDD

Large storage at a low price

WRITTEN BY UNDERCODE
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 Before buying storage you must know :
twitter.com/undercodeNews

🦑 What to look for :

1) Repository . The average user can be content with a volume of 64 GB, especially if only photos and documents are stored. For storage of larger files at a fairly affordable price, solid state drives with a capacity of 1-2 TB are offered. For gamers and professional users with document storage, some hard drives provide up to 24 TB. True, they can be very expensive.

2) Speed . Hard drives usually offer data access speeds of around 100-200 Mb / s. SSDs are at least twice as fast with an average speed of 400 Mb / s. This shows how quickly you can access files stored on disk.

3) The HDD . Hard drives are inexpensive compared to solid state drives and they have more space. The disadvantage is that they are much larger. In addition, they can be more fragile. If you move the hard drive while it is reading or writing to a file, it may be damaged and information will become inaccessible.

4) The SSD . SSDs are faster, smaller, and more expensive. Their volume is usually smaller, but for simple needs they are better suited. However, there are drives up to 5 TB. If you need storage that you can take with you, some SSDs will fit in the palm of your hand.

🦑 How is the selection and evaluation

> Browsers reviewed 10 information sources, such as Digital Trends , Tech Radar , PC Mag , and 22,000 user reviews. As a result, they chose the 6 best external drives this year. Consumer rating is the percentage of users who rated products at least 4 on a 5-point system in retail stores like Amazon, Walmart, and on manufacturers' websites.

WRITTEN BY UNDERCODE
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁


🦑 Main reasons why DotVPN is better than VPN :
t.me/undercodeTesting

1) Access to all websites, video and audio streaming services, social networks.

2) Optimized network gives you unlimited speed and bandwidth.

3) Encryption with 4096 bit key is 2 times greater than banking standards.

4) Save up to 30% of your traffic with integrated compression.

5) Simply one tap and connect to VPN in any country.

6) Privacy and protection of your identity under our IP addresses.

7) TOR inside gives you an opportunity to surf .onion websites in your favorite browser.

8) Integrated firewall blocks all inbound connections to your device.

9) No ads in application.

10) Permanent Free Plan.

11) Free VPN account gives you 80% of all features.

11) 24 powerful Data Centers in 12 countries.

source wiki
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑List of changes in Android 11
instagram.com/undercodeTesting

🦑 𝕃𝔼𝕋𝕊 𝕊𝕋𝔸ℝ𝕋 :

1 Conversations section in the notification panel
At the top of the notification panel, the “Conversations” section has appeared. It contains all the notifications from messengers so that you do not need to look for them among others. There is a transparent barrier between each section to make it easier to find notifications.

Alerts in the “Conversations” section have additional settings when you make a gesture to the left and click on the gear icon. Remind Me disables default notifications for an hour. Show Bubble causes an alert from this app to appear in a floating bubble

2) Built-in screen recording
Google advertised this in Android 10, but in the end, the built-in screen recording will appear in Android 11. It is located in the quick settings section and opens a simple user interface where you can activate audio recording and displaying touches on the screen. In the status bar, a countdown is activated. You can stop recording using a notification or a tile in the quick settings.

3) Sending images in responses via notifications
When you reply to a message in the notification panel using the "Reply" button, it is possible to attach an image.

4)Wireless debugging
In Android 11, you can send ADB and fastboot commands wirelessly without a USB cable. Although this requires an updated version of the tools, this functionality allows you to connect to a computer wirelessly using a QR code or a pairing code when the mobile device and the computer are on the same network. ADB commands can be sent as usual.

5) New interfaces for 5G
Android 11 introduces three new application programming interfaces to improve 5G connectivity.

6) Hinge Angle for Flexible Devices
More and more flexible mobile devices will appear on sale. Google adds a new application programming interface that allows applications to use the loop angle sensor. This interface resembles Samsung Flex Mode and Microsoft Peek. They change the picture on the screen depending on the angle at which it is located.

7) Google Pixel 4a or 5 wireless reverse charging
There is information that references to wireless reverse charging are found in the Android 11 code. It allows you to recharge other devices from your smartphone. Such an opportunity is now on the devices Samsung and Huawei. It requires special components that may appear on Pixel 4a or Pixel 5 smartphones.

8) The application "Files" will receive new features
The default file manager on Android was known as Files Go, and will now be called Files by Google. This new conductor has a number of features that were not there before. Including the ability to clear unused files and send files via Wi-Fi Direct.

9) Using Bluetooth Headphones in Airplane Mode
In previous versions of Android, activating Airplane mode turned off Bluetooth accessories, even if you were listening to audio at that moment. In Android 11, this will change. When you connect an audio device via Bluetooth, Airplane mode will not disable it.

This functionality is not available in the first preliminary version for developers. However, it is mentioned in the Android Open Source Project under the heading Context-aware Bluetooth airplane mode. This means that the function should appear in Android 11.

The Dynamic Meteredness API can be used by applications to see if your rate is unlimited. If so, the application will use more 5G traffic to improve the quality of multimedia content.
Bandwidth Estimator API gives applications a tool to check the speed of incoming and outgoing connections without having to make a request to the network. This improves accuracy and simplifies data tracking.
The 5G status interface allows applications to quickly detect if the user is on 5G New Radio or Non-Standalone networks. An app can use this information to alert you to how 5G improves its performanc

> all news tips android 11

10) Scrolling screenshots
Another feature that is under development, but is still inactive. This is a new interface with support for scrolling screenshots. At this interface, the “Expand” button appears after you take a screenshot. The button allows you to shoot multiple pages and combine them into one long screenshot.

11) Synchronized IME Transition
Android 11 brings a new set of interfaces that let you synchronize how the software keyboard is displayed on the screen. The animation will become smoother.

12) New permissions
The Android 11 permission system will be new. The option “Ask every time” appears. This function is available for all permissions when using the system settings. In pop-ups, it appears only when the application requests access to the camera, microphone or location.

If applications ask for such permissions, the window contains three answers: “Only this time”, “When the application is used” and “Reject”. If you select “Only this time,” the next time the application needs access to this data, the request will be repeated. For other permissions, the window will display “Allow” or “Reject”. The first option will give the application permanent access.

written by undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 BEST FREE VIRTUAL-VALID CREDIT CARD FOR TRANSFERE AND TRIALS...
fb.com/undercodeTesting

🦑 𝕃𝔼𝕋𝕊 𝕊𝕋𝔸ℝ𝕋 :

1) https://www.netspend.com/

2) https://link.10besty.com/Payoneer

3) https://www.americanexpress.com/us/payment-solutions/amex-go-virtual-cards/index.html

4) https://link.10besty.com/Neteller

5) https://link.10besty.com/Neteller

6) https://www.walmartmoneycard.com/

7) https://www.netspend.com/prepaid-debit/features/virtual-cards/

8) https://www.freecharge.in/mobile/freecharge-go

9) https://www.kotak.com/en/personal-banking/cards/prepaid-card/kotak-netcard.html

10) https://dhanipay.in/
written by undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁]

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁]

🦑 How to Create a Virtual Credit Card For Netflix Trial In Ewire :
instagram.com/undercodeTesting

🦑 𝕃𝔼𝕋𝕊 𝕊𝕋𝔸ℝ𝕋 :

1) First, go to the play store and download the Ewire Rupay application.
>https://play.google.com/store/apps/details?id=in.MadMoveGlobal.CashierCard

2) Sign up with your mobile number on the Ewire mobile app, and you are ready to go.

3)To top-up your virtual card, you need to add money to your card by u sing a different bank account.

4) Now pay any online bills and payment using this Ewire(cashier) virtual card.

🦑 Features of Ewire Virtual Credit Card :

>Simple and secure transaction
>Compliant domestic and cross-border payments in a single platform
>Provide MasterCard Vcc which is acceptable in most of the merchant website
>Does not require any document submission process

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁]

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁]

🦑 Do not get caught! How to protect your hard drive from law enforcement by undercode :
t.me/undercodeTesting

1) Download and burn DBAN
> https://sourceforge.net/projects/dban/files/dban/dban-2.2.6/dban-2.2.6_i586.iso/download
You can download beta 2.2.6 from Sourceforge . When you have at your disposal an .ISO image,

2) all that remains to be done is to burn it to a blank CD / DVD disc. Insert the disc into the CD-ROM and restart the computer. Most computers are configured primarily to boot from a CD and only the second one checks whether the system can boot from a hard drive. If this is not the case and your computer does not boot from CDs, then you will need to go into the BIOS settings and change the order of boot priorities.

3) Boot and work
After starting from the CD
>Just press Enter to start DBAN interactively. The main menu, shown in the screenshot below, should display your hard drive, over which it is supposed to carry out the data stripping procedure.

4) The following screenshot shows that DBAN is ready to get started. By default, the DoD Short wipe method is used, and it is perfect for our purposes.

5) To select this method, just press the spacebar and DBAM will begin its dirty work of cleaning your data. DoD cleanup will take some time, especially on large hard drives. But in any case, it is still not as long as a prison term.

>Finally
DBAM is a great tool for cleaning hard drives. We advise you to always carry a copy of such a CD in your laptop bag. It works faster, easier and better than most of the other tools that we had to use. Be careful (thanks, Cap!), Because after such cleaning the hard drive, data recovery is impossible. Therefore, do not mistake the discs!

WRITTEN BY UNDERCODE
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Trusted - working spy apps :
twitter.com/undercodeNews


1) mSpy - has many exclusive features, so it is considered the best in terms of price and quality.

2)Mobistealth spy is an almost complete analogue of the previous utility.

3) FlexiSpy - in addition to all standard options for tracking mobile equipment, it has the function of recording voice calls and surrounding conversations, but such features are available only if the most expensive tariff plan is selected.

4) XNSpy is the newest application of all the listed. The main advantage of XNSpy is its lower price compared to its competitors.

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 LAST 24 h undercode posts :

1) 6 best external drives

2) External drives against the cloud
+ Before buying storage you must know ...

3) Main reasons why DotVPN is better than VPN

4) Full List of changes in Android 11

5) BEST FREE VIRTUAL-VALID CREDIT CARD FOR TRANSFERE AND TRIALS...

6) How to Create a Virtual Credit Card For Netflix Trial In Ewire

7) Trusted - working spy apps android-ios

8) Best file encryption apps before uploading to the cloud

9) How to protect your hard drive from law enforcement by undercode


E N J O Y
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑VIRTUAL PHONE NUMBERS
t.me/UnderCodeTesting

To receive your messages of confirmation!

⁩⁩1. Receivefreesms.net
2. Sms-receive.net
3. Receive-a-sms.com⁩
4. ⁦Hs3x.com⁩
5. Receive-sms-now.com - (There are Russian numbers)
6. Smsreceivefree.com
7. Receivesmsonline.com
8. Getsms.org - (Рус.номера)
9. Tempsms.ru - (Rus.number)
10. Numberforsms.com - (There are Russian numberps)
11. Sonetel.com
12. Smska.us - (Rus.number)
13. Sellaite.com
14. Sms.ink - (Rus.numera)
15. Proovl.com
16. Onlinesim.ru
17. Zadarma.com - (There are Russian numbers)
18. Smsc.ru - (You need to register, there are Russian and Ukrainian numbers)
19. Freevirtualnumber.skycallbd.com
20. Getfreesmsnumber.com
21. Receive-smsonline.net - Yearly design 
22. Receivefreesms.com
23. Receivesmsverification.com
24. Sms-online.co
25. Ireceivesmsonline.com
26. Receive-sms-online.com - (There are a number of scores)
27. Receive-sms-free.com
28. Esendex.com.au - (Registration required)
29. Receivesmsonline.in

@kadrino
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Java 14 is coming, why are so many people sticking to Java 8?
twitter.com/undercodeNews:

🦑 𝕃𝔼𝕋𝕊 𝕊𝕋𝔸ℝ𝕋 :

1) Since Java 9, the release of the Java version has been dazzling.

2) Every 6 months, a new version comes out, Java 10, Java 11, Java 12, Java 13, and by March 2020, Java 14 starting.

3) To be honest, such frequent releases are a bit tiring. Every time I see an article introducing a new version of Java, I have no interest in reading articles.

4) Among so many versions, only Java 8, Java 11 and future Java 17 are long-term support versions (LTS) . Oracle will support 3 years, others will only support 6 months. Once the new version comes out, the old version will be abandoned Technical support.

🦑 Is this quick release good?

1) Have! Small steps and fast running have always been a tool for our software development. Iterative method is used to release a part of the function each time, and it is pushed to the developer to verify, a typical agile idea.

2) However, this benefit is more conducive to JDK developers . It is too difficult for individuals and companies using Java to keep up with the pace of upgrading every six months. JDK is a very core infrastructure. In addition to security holes, who has nothing to do to upgrade the JDK in the production environment? Who is responsible if something goes wrong?

3) So, in principle, everyone will find those LTS versions to upgrade, such as Java 11, but it turns out that most people are still sticking to Java 8:

4) This survey shows that up to 80% of companies and programmers use Java 8. Why? Why don't you upgrade to Java 11?

> I personally think the main reason is that there are few major feature upgrades that are good for development, and they are not attractive enough

🦑version Important features
Java 9
Modular system system

Java Shell: interactive command line console

Java 10 Local variable type derivation
Java 11
Various enhancements: Stream, String, Collection

Standardized HTTP Client

ZGC

Java 12 Switch expression expansion
Java 13
Reimplement Socket API

Text block (multi-line string)

written by undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁