▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑How to remotely install applications on an Android smartphone :

Step 1. Open the Play Store in a browser
If you have a link to the app, you can follow it in a browser on any device and then go to step 3.

It usually starts with visiting the Play Store through the device's browser. If it's an iPhone or Mac, you can use the Safari browser. The store link looks like play.google.com/store.



Step 2. Find the app page in the store
You can jump directly to the application you want if you have a link to the page. Alternatively, you can search the store by name. It is possible to filter search results. For example, select only apps in a tab in the menu on the left. You can click "See More" next to the "Applications" section in the search results.



Step 3. Remote installation of the application
Click on the "Install" button. If the app is already installed on the device, this is reported. You need to sign in to your Google account, which is used on the Android device.

If you are already signed in and you are not using this Android device, you can change your account by clicking on your profile picture in the upper right corner.



You will see a list of Android devices associated with this account, including tablets and Android TVs. If the currently selected device is not where you will install the application, click on the name of the desired device in the drop-down menu. After selecting, click "Continue".


If this is the first time you do this, a window will appear asking when authorization is required. Whichever option you choose, a password is always required for a remote installation. You can also add the need to enter a password when shopping.

Select the option you want and click Save. After the download is complete, a message appears that the application is being installed.


Return to your smartphone and the installation of the application will begin. The duration depends on the connection speed.


@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑ENCRYPT EMAIL :
use PKI/CA certification to encrypt encrypted mail

1) Most of the current email encryption systems are based on this encryption method. PKI (Public Key Infrastructure) refers to the public key infrastructure, and CA (Certificate Authority) refers to the certification center.

2) PKI technically solves various obstacles to network communication security; CA solves the problem of network trust from multiple perspectives such as operation, management, regulation, law, and personnel. Therefore, people collectively referred to as "PKI/CA".

3) From the perspective of the overall structure, PKI/CA is mainly composed of end users, certification centers and registration agencies. The working principle of PKI/CA is to establish a trust network by issuing and maintaining digital certificates. Users in the same trust network complete identity authentication and security processing through the digital certificates they apply for.

4) The registration center is responsible for reviewing the true identity of the certificate applicant. After the review is passed, it is responsible for uploading user information to the certification center through the network, and the certification center is responsible for the final certification processing.

5) The revocation and renewal of the certificate also needs to be submitted by the registration agency to the certification center for processing. In general, the certification center is oriented to each registration center, and the registration center is oriented to the end user, and the registration agency is the intermediate channel between the user and the certification center. The management of public key certificates is a complex system.

6) A typical, complete and effective CA system should at least have the following parts: public key cryptographic certificate management; blacklist release and management; key backup and recovery; automatic key update; historical key management; support for cross-certification, etc. Wait. The PKI/CA certification system is relatively mature, but when it is applied to an email encryption system, there are also complex key management. It is necessary to exchange keys before encryption and decryption operations, etc. The well-known email encryption system PGP uses this encryption process for encryption. .

7) This encryption method is only suitable for enterprises, organizations and some high-end users. Because of the trouble to obtain CA certificates and cumbersome exchanges, this type of email encryption mode has been difficult to popularize.


@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑ANOTHER METHODE UNLOCK ENCRYPTED EXCEL:

Unlocking files with Microsoft Visual Basic for Applications
If you lose your password from Excel documents, one of the ways to recover it is to use the MS VBA program, which you need to download from the official Microsoft website.

Step 1: Run "VBA" and open the Excel spreadsheet, from which the passphrase is lost through the menu "File" - "Open"

Step 2: Click "Insert" in the toolbar and select the "Module" option

Step 3: Press the key combination "Alt + F11", then the "VBA" window will appear on the right

Step 4: Enter the command "VBA" in this window

Step 5: Next, you need to press "F5" to start the recovery process

Step 6: Wait a few minutes until the end of unlocking, after which a new window will appear with a set password, which can be used without restrictions for normal editing of our file
The only drawback of this method is that it is applicable only to one Excel sheet, and if there are several of them, you will have to repeat this procedure for each part of the table.


@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Change PHP's default Fastcgi mode to ISAPI mode (only run in Windows environment)

1) Download the ZIP file package of PHP at http://www.php.net (note that the version should correspond)

2) Copy the php4isapi.dll in the sapi directory to the c:\php directory

3) Enter the virtual host "Website Management"-"Virtual Host" of the management platform--In the server settings, modify the PHP mapping to change the original:
.php,C:\PHP\php.exe,5,GET,HEAD,POST,TRACE|
Change Into:
.php,C:\PHP\php4isapi.dll,5,GET,HEAD,POST,TRACE|

4) (Required only for IIS 6) Open the IIS manager, click Web service extension, click the properties of php, "Required File"---Add in--Select "C:\PHP\php4isapi.dll", after confirming, PHP can call.

@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑How to find the Sniffer ?

> biggest danger of Sniffer Sniffer is that it is difficult to find. It is relatively easy to find a Sniffer in a stand-alone situation. It can be realized by checking all the programs currently running on the computer. Of course, this is not necessarily reliable.

1) The following command can be used under UNIX system: ps-aux. This command lists all current processes, the user who started these processes, the time they occupy the CPU, how much memory they occupy, and so on.

2) In the Windows system, you can press Ctrl+Alt+Del to view the task list. However, even if the Sniffer with high programming skills is running, it will not appear here.

3) Another method is to search the system to find suspicious files. But the invaders may use their own programs, so this makes it difficult to find Sniffer. There are many tools that can be used to check whether your system is in promiscuous mode, so as to find out if there is a Sniffer running.

> However, it is very difficult to detect which host is running Sniffer under network conditions, because Sniffer is a passive attack software. It does not send data packets to any host, but just runs quietly, waiting to be captured. The packets go through.

@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Termux hacking tools :

aircrack-ng pkg install root-repo
pkg install aircrack-ng


bettercap pkg install root-repo
pkg install bettercap


metasploit pkg install unstable-repo
pkg install metasploit


nmap pkg install nmap
pkg install root-repo

tshark
pkg install tshark
pkg install unstable-repo

sqlmap
pkg install sqlmap
pkg install x11-repo

wireshark-gtk
pkg install wireshark-gtk

@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑GPU-based Onion hash generator :

At a high level, Scallion works like this:

Generates RSA key using OpenSSL on the CPU

Sends a key to the GPU

Increases the public exponent of the key

Hashes the key

E fusion hashed key is not a partial collision, proceeds to step 3

If the key does not pass the health checks recommended by PKCS


DOWNLOAD:

https://github.com/lachesis/scallion/archive/gpg.zip

USAGE:

> $ mono scallion / bin / Debug / scallion.exe -d 0 prefix

Cooking up some delicious scallions ...
Using kernel optimized from file kernel.cl (Optimized4)
Using work group size 128
Compiling kernel ... done.
Testing SHA1 hash ...

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑NMAP BASIC COMMANDS :

function options can be used in combination. Some function options can only be used in a certain scan mode. Nmap will automatically identify invalid or unsupported function option combinations and issue a warning message to the user.
　　
> If you are an experienced user, you can skip the example section at the end. You can use nmap -h to quickly list the list of function options.

Scan type-
　　
1) sT
　　TCP connect() scan: This is the most basic TCP scan method. connect() is a system call provided by the operating system to open a connection. If the target port is monitored by a program, connect() will return successfully, otherwise the port is unreachable. The biggest advantage of this technology is that you don't need root privileges. Any UNIX user can freely use this system call. This type of scanning is easy to detect, and a large number of connection requests and error messages are recorded in the log of the target host.
　
2) 　-sS
　　TCP Synchronous Scanning (TCP SYN): Because it is not necessary to open all TCP connections, this technique is usually called half-open. You can send out a TCP synchronization packet (SYN) and wait for a response. If the other party returns a SYN|ACK (response) packet, it means that the target port is listening; if it returns a RST packet, it means that the target port has no listener; if it receives a SYN|ACK packet, the source host will immediately send a RST (reset) ) The data packet disconnects from the target host, which is actually done automatically by our operating system kernel. The biggest advantage of this technology is that few systems can record this in the system log. However, you need root privileges to customize SYN packets.
　
3) 　-sF -sF -sN
　　Secret FIN packet scan, Xmas Tree, Null scan mode: use it even if SYN scan cannot be determined. Some firewalls and packet filtering software can monitor SYN packets sent to restricted ports, and some programs such as synlogger and courtney can detect those scans.
>These advanced scanning methods can escape these interferences. The theoretical basis of these scanning methods is: closed ports need to respond to your probe packets with RST packets, and open ports m
> FIN scanning uses exposed FIN packets to detect, while Christmas tree scanning turns on the FIN, URG, and PUSH flags of the packets. Unfortunately, Microsoft decided to ignore this standard altogether and start anew. So this scanning method is invalid for Windows95/NT. However, from another perspective, you can use this method to distinguish two different platforms. If you can find open ports using this scanning method, you can be sure that the target is not running a Windows system. If scanning with -sF, -sX or -sN shows that all ports are closed, and scanning with SYN shows that there are open ports, you can be sure that the target host may be running a Windwos system. Now this method is not very useful, because nmap has a built-in operating system detection function. There are several other systems that use the same processing methods as windows, including Cisco, BSDI, HP/UX, MYS, and IRIX. When a data packet should be discarded, these systems all send out reset packets from the open ports.
　4) 　-sP
　　Ping scan: Sometimes you just want to know which hosts are running on the network at this time. By sending ICMP echo request packets to each IP address in the network you specify, nmap can accomplish this task. If the host is running, it will respond. Unfortunately, some sites such as: microsoft.com block ICMP echo request packets. However, by default, nmap can also send TCP ack packets to port 80. If you receive a RST packet, it means that the host is running. The third technique used by nmap is to send a SYN packet and then wait for a RST or SYN/ACK packet. For non-root users, nmap uses the connect() method.
　　By default (root user), nmap uses ICMP and ACK technologies in parallel.

Note that nmap will perform a ping scan under any circumstances, and only the target host is running before subsequent scans will be performed. This option is only used if you just want to know whether the target host is running, and do not want to perform other scans.
　　
5) -sU
　　UDP scanning: If you want to know which UDP (User Datagram Protocol, RFC768) services are provided on a certain host, you can use this scanning method. Nmap first sends a 0-byte UDP packet to each port of the target host. If we receive an ICMP message that the port is unreachable, the port is closed, otherwise we assume it is open.
　　Some people may think that UDP scanning is meaningless. However, I often think of the recent solaris rpcbind defect. rpcbind is hidden on an undisclosed UDP port, the port number is greater than 32770. So even if port 111 (the well-known port number of portmap) is blocked by the firewall, it matters. But can you find out which port greater than 30000 has a program listening? Use UDP scanning! The backdoor of cDc Back Orifice is hidden in a configurable UDP port on the Windows host

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑good HACKING » WireSpy allows attackers to set up quick honeypots to carry out MITMAs. Monitoring and logging functionality is implemented in order to keep records of the victims' traffic/activities. Other tools can be used together with Wirespy to conduct more advanced attacks.

F E A T U R E S :

Capture victims' traffic.

MAC address spoofing.

Set-up honeypot and evil twin attacks.

Show the list of in range access points.

Wireless adapter|card|dongle power amplification.

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/aress31/wirespy.git

2) cd wirespy

3) $ chmod +x wirespy.sh

4) $ sudo ./wirespy.sh
Attacks:
eviltwin > launch an evil twin attack
honeypot > launch a rogue access point attack

Commands:
clear > clear the terminal
help > list available commands
quit|exit > exit the program
apscan > show all wireless access points nearby
leases > display DHCP leases
powerup > power wireless interface up (may cause issues)
start capture > start packet capture (tcpdump)
stop capture > stop packet capture (tcpdump)
status > show modules status


@UndercodeTesting
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

For Facbeook users, you can share link or anything related to hacking on facebook.com/groups/UndercodeTesting

Support & Share :

T.me/UndercodeTesting