🦑LIVECCN ✅✅

5439979006730365|06|2021|536 CCN MATCHED
5439979006736263|06|2021|584 CARD
5439979006732387|06|2021|381 CCN MATCHED
5439979006730837|06|2021|781 CCN MATCHED
5439979006735000|06|2021|556 CCN MATCHED
5439979006738004|06|2021|176 CCN MATCHED
5439979006734847|06|2021|683 CCN MATCHED
5439979006738053|06|2021|762 CCN MATCHED
5439979006733021|06|2021|124 CCN MATCHED
5439979006730837|06|2021|512 CCN MATCHED

(verified only by undercode)

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 topic for Termux-Linux :
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣ git clone https://github.com/CISOfy/lynis

2️⃣cd lynis

3️⃣ cd lynis; ./lynis audit system

4️⃣$ ./lynis audit system --quick --auditor "The Auditor"

 this example we tell Lynis to audit (command), with the target system (argument). By using the --quick (option), we tell it not to wait. We used --auditor (option) and defined it as "The Auditor" (argument).

5️⃣HostIDs

>During the security audit, Lynis attempts to assign two identifiers to the system. They can be compared as fingerprints and can be used in other tools and to link data to an existing system.

6️⃣Identifiers: hostid and hostid2
The first identifier is named hostid and has a length of 40 characters. The MAC address of the system is typically used its data input. The second identifier is hostid2. It is 64 characters long and typically uses a public SSH key a data input.

7️⃣lynis show hostids
Overriding the identifiers
In case your system can not generate the host identifiers automatically, then you can specify them in your custom profile (custom.prf). This can also be useful when systems are short-lived, yet you want to link the same data to such instance.

8️⃣lynis configure settings hostid=$(head -c 64 /dev/random | sha1sum | awk '{print $1}'):hostid2=$(head -c 64 /dev/random | sha256sum | awk '{print $1}')

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑A Few #GETVPN 2020 References

- [Cisco Group Encrypted Transport VPN Configuration Guide](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html)

- [GETVPN G-IKEv2](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn-gikev2.html)

- [GETVPN White Paper](https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport-vpn/deployment_guide_c07-624088.html)

- [GETVPN Design Guide](https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_version_2_0_External.pdf)

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Storage backup-usb hard drive on rh9Using a USB hard drive on rh9-
Special for old users :

This is verified on redhat9.0, you try it!
1) Test system:
#uname -a
i686 mobile hard disk is Keshuo hard disk box

2) View and modify /usr/src/linux-2.4.20-8/Makefie

to start the file The value of "EXTRAVERSION =XXXX" is changed to "EXTRAVERSION =-8".
It is very important to pay attention to this step, otherwise you will be prompted like me that the version does not match when you finally load it, you must rebuild the kernel! (Because I am 2.4.20-8, so I changed to -8).

3) Modify /usr/src/linux-2.4.20-8/drivers/usb/storage/unusual_devs.h to

find:
UNUSUAL_DEV( 0x05e3, 0x0702, 0x0000, 0x0001,
"EagleTec",
"External Hard Disk",
US_SC_SCSI, US_PR_BULK , NULL,
US_FL_FIX_INQUIRY ),

changed to the following form:
UNUSUAL_DEV( 0x05e3, 0x0702, 0x0000, 0x9999,
"EagleTec",
"External Hard Disk",
US_SC_SCSI, US_PR_BULK, NULL,
US_FL_FIX_INQUIRY | US_FL_MODE_XLATE | US_FL_START_STOP ),

4) Run the command
#cp /boot/config-2.4.20-8 /usr/src/linux-2.4.20-8/. config
#make mrproper (if you originally compiled the kernel, add this sentence)
#make oldconfig
#make dep
#make modules (this step is a long time)

5) Run
#cp /usr/src/linux-2.4.20 -8/drivers/usb/storage/usb-storage.o /lib/modules/2.4.20-8/kernel/drivers/usb/storage/ After
this step, you can connect the hard disk.

6) Execute:
#modprobe -r usb-storage
#modprobe usb-storage (if the previous Makefile file is modified correctly, this step will not go wrong)
Then you wait patiently for a while before running the next step.

7) fdisk -l Here you can see your hard disk. (My hard drive is /dev/sda1 and the USB drive is /dev/sdb1.)

8) Load
#mount -t vfat -o iocharset=cp936 /dev/sda1 /mnt/usb-hd
usb-hd is the directory I created first, you can use your own.
Now everyone should be able to use a USB hard drive!

Written by Undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Full exploiting tutorial

- - - - - U҉N҉D҉E҉R҉C҉O҉D҉E҉- - - -

🦑 NewHow to hack a website using Termux (2020 release)


🦑INSTALLISATION & RUN:

Hackerpro - All in One Hacking Tool for Linux & Android (Termux)

A) Installation for Android

1) install termux

2) apt update

3) apt upgrade

4) apt install git

5) apt install pythongit clone https://github.com/technicaldada/hackerpro.git

cd hackerpro

6) python hackerpro.py

B) Installation for Linux

1) git clone https://github.com/technicaldada/hackerpro.git

2) cd hackerpro

3) python hackerpro.py python hackerpro.py

🦑Features:


Information Gathering
Password Attacks
Wireless Testing
Exploitation Tools
Sniffing & Spoofing
Web Hacking
Private Web Hacking
Post Exploitation
Install The HACKERPRO

🦑Information Gathering

Nmap
Setoolkit
Port Scanning
Host To IP
wordpress user
CMS scanner
XSStrike
Dork - Google Dorks Passive Vulnerability Auditor
Scan A server's Users
Crips

🦑Password Attacks

Cupp
Ncrack

🦑Wireless Testing

reaver
pixiewps
Fluxion

🦑Exploitation Tools

ATSCAN
sqlmap
Shellnoob
commix
FTP Auto Bypass
jboss-autopwn

🦑Sniffing & Spoofing

Setoolkit
SSLtrip
pyPISHER
SMTP Mailer

🦑Web Hacking

Drupal Hacking
Inurlbr
Wordpress & Joomla Scanner
Gravity Form Scanner
File Upload Checker
Wordpress Exploit Scanner
Wordpress Plugins Scanner
Shell and Directory Finder
Joomla! 1.5 - 3.4.5 remote code execution
Vbulletin 5.X remote code execution
BruteX - Automatically brute force all services running on a target
Arachni - Web Application Security Scanner Framework

🦑Private Web Hacking

Get all websites
Get joomla websites
Get wordpress websites
Control Panel Finder
Zip Files Finder
Upload File Finder
Get server users
SQli Scanner
Ports Scan (range of ports)
ports Scan (common ports)
Get server Info
Bypass Cloudflare

🦑Post Exploitation

Shell Checker
POET
Weeman


- - - - - U҉N҉D҉E҉R҉C҉O҉D҉E҉- - - -

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Some Topic 2020 Exploit & More tools :


Gtfo - Search For Unix Binaries That Can Be Exploited To Bypass System Security Restrictions

- SWFPFinder - SWF Potential Parameters Finder

- laravelN00b - Automated Scan .env Files And Checking Debug Mode In Victim Host

- Andriller - Software Utility With A Collection Of Forensic Tools For Smartphones

- LAVA - Large-scale Automated Vulnerability Addition

- Heapinspect - Inspect Heap In Python

- CHAPS - Configuration Hardening Assessment PowerShell Script

- Karonte - A Static Analysis Tool To Detect Multi-Binary Vulnerabilities In Embedded Firmware

- IotShark - Monitoring And Analyzing IoT Traffic

- LNAV - Log File Navigator

- TuxResponse - Linux Incident Response

✅git sources 2020
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Carding and black boxes: how ATMs are hacked today by UndercodeTesting

1️⃣REQUIREMENTS :

>A typical ATM is a set of ready-made electromechanical components located in one building. ATM manufacturers build their iron creations from a banknote dispenser,

>card reader, and other components already developed by third-party vendors.

> A kind of designer LEGO for adults.

> Finished components are placed in the ATM case, which usually consists of two compartments: the upper compartment (“cabinet” or “service area”), and the lower compartment (safe). All electromechanicaL components are connected via USB and COM ports to the system unit, which in this case acts as a host. On older ATM models, you can also find connections via the SDC bus.

2️⃣ The evolution of ATM carding :

> ATMs with huge amounts inside, invariably attract carders to themselves. At first, carders only exploited gross physical defects of ATM protection - they used skimmers and shimmers to steal data from magnetic strips; fake pin pads and pincode cameras; and even fake ATMs.


> Then, when ATMs began to be equipped with a unified software that works according to common standards, such as XFS (eXtensions for Financial Services), carders began to attack ATMs with computer viruses.


> Among them are Trojan.Skimmer, Backdoor.Win32.Skimer, Ploutus, ATMii and other numerous named and nameless malware that carders plant on the ATM host either via a bootable USB flash drive or through a remote control TCP port.

3️⃣HACK ATM PROCESS :


> Having captured the XFS subsystem, the malware can issue commands to the banknote issuer without authorization.

>Or give commands to the card reader: read / write the magnetic strip of a bank card and even retrieve the transaction history stored on the EMV card chip.

> Of particular note is the EPP (Encrypting PIN Pad; encrypted pinpad). It is generally accepted that the PIN code entered on it cannot be intercepted. However, XFS allows using the EPP pinpad in two modes:


1) open mode (for entering various numerical parameters, such as the amount to be cashed);

2) safe mode (EPP switches to it when you need to enter a PIN code or encryption key). This feature of XFS allows the carder to carry out a MiTM attack: intercept the safe mode activation command, which is sent from the host to the EPP, and then inform the EPP pinpad, that work should continue in open mode. In response to this message, EPP sends keystrokes in clear text.

ATM attack via remote access

5️⃣Antiviruses, firmware update blocking, USB port blocking and hard disk encryption - to some extent protect the ATM from virus attacks by carders. But what if the carder does not attack the host, but connects directly to the periphery (via RS232 or USB) - to a card reader, pin pad or cash dispenser?

🦑 The first acquaintance with the "black box" :


> using the so-called. "Black boxes" are specifically programmed single-board microcomputers, like the Raspberry Pi. Black Boxes empty ATMs in a completely magical (from the point of view of bankers) way.

> Carders connect their magic device directly to a banknote dispenser; to extract from it all the available money. Such an attack bypasses all protection software deployed on the ATM host (antiviruses, integrity monitoring, full disk encryption, etc.).

Black Box based on Raspberry Pi