UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.9K links
๐Ÿฆ‘ Undercode Cyber World!
@UndercodeCommunity


1๏ธโƒฃ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2๏ธโƒฃ Cyber & Tech NEWS:
@Undercode_News

3๏ธโƒฃ CVE @Daily_CVE

โœจ Web & Services:
โ†’ Undercode.help
Download Telegram
- - - - - Uฬทฬ…NฬธอDฬดอEฬทฬRฬธฬ‰Cฬธฬ•Oฬธอ† ฬคฬžDฬทอ›Eฬตฬ - - - - -

๐Ÿฆ‘How to Make Android as Secure as Possible By UndercOde:
(instagram.com/UnderCodeTestingCompany)

๐Ÿฆ‘Leฬฒtฬฒsฬฒ ฬฒSฬฒtฬฒaฬฒrฬฒtฬฒ:ฬฒ

1) Enable Two-Factor Authentication On Your Google Account

> A secure Android phone starts with a secure Google account, because thatโ€™s where all your synced data is storedโ€”and the more Google services you use, the more crucial this step is.

> If you havenโ€™t already, start by enabling two-factor authentication (2FA) on your Google account. There are several options for that second factor, be it a simple text message (which is inherently the least secure of all 2FA methods, but still better than nothing) to adding a U2F key like Googleโ€™s Titan Key bundle.

> You can find Googleโ€™s 2FA settings in My Account

> 2-Step Verification

2) Use a Secure Lock Screen

3) Make Sure Find My Phone is On

> Losing your phone is a gut-wrenching feeling, so you also want to make sure you have a way to track it and, worse case scenario, remotely reset your phone if thereโ€™s no chance of getting it back.

> Fortunately, Google has a tracking system in place for Android phones. Itโ€™s called Find My Phone, and it should be enabled by default on all modern Android phones. To double check, jump into Settings > Google > Security > Find My Phone.

4) Consider using apps that provide end-to-end encryption:

> This is entirely optional, as Android already has Gmail pre-installed (and emails might be the most sensitive information you transmit on your phone, outside of financial transactions). If youโ€™re twitchy about your privacy when sending SMS messages, you may opt to use a third-party app to encrypt them. Apps such as Signal, Dust, Telegram, and WhatsApp (among others) could just be what youโ€™re looking for.

5 ) Turn off Bluetooth and WiFi when youโ€™re not using them:

> Doing so not only decreases the likelihood of mobile attacks (not to mention pranks) taking advantage of Bluetooth technology and WiFi, but it also helps with your smartphoneโ€™s battery life.

6) Be wary of (unofficial) apps that bank on other appsโ€™ popularity, or on seasons and events:

> Weโ€™ve seen apps appear in the Play Store pretending to be something related to [famous app here], but cheaper, with more features, or some other too-good-to-be-true scenario. For example, WhatsApp is no stranger to copycat apps. In late November 2017,

> one supposed WhatsApp update used Unicode to slip under Googleโ€™s defenses. Weโ€™ve also seen fake apps that take advantage of popular events, like the Winter Olympics.

7) Weigh the odds when it comes to free public WiFi:

> Ah, coffee shop WiFiโ€”to connect or not connect? Well, it depends. Is the WiFi you want to connect to even legitimate? Approach a coffee shop employee and ask for the WiFiโ€™s name and password.

> If thereโ€™s a password, itโ€™s a bit safer to connect. (If not, consider any browsing you do in the coffee shop to be open season for criminals.)


๐Ÿฆ‘ Things Google Already Does to Make Sure Your Phone is Secure:

1 ) Google Play Protect
Starting with Android 8.0 (Oreo), Google baked in a feature named Play Protect.

2 ) On-Device Encryption:

> In the earliest days of Android, encryption wasnโ€™t even an option. Google added it later, though you had to enable it manually, and that was a hassle. These days, Android is encrypted by default on all modern devices, and you canโ€™t turn it off.

Written By Mr. BotNet (t.m.)
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘NETWORKING TRICKS:
(t.me/UnderCodeTestingOfficial)

๐Ÿฆ‘๐Ÿ„ป๐Ÿ„ด๐Ÿ…ƒ ๐Ÿ…‚ ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ…๐Ÿ…ƒ:

RDPY is an RDP Security Tool in Twisted Python with RDP Man in the Middle proxy support which can record sessions and Honeypot functionality.

> RDPY is a pure Python implementation of the Microsoft RDP (Remote Desktop Protocol) protocol (client and server side). RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA authentication (through ntlmv2 authentication protocol).

๐Ÿฆ‘โ’พโ“โ“ขโ“ฃโ“โ“›โ“›โ“˜โ“ขโ“โ“ฃโ“˜โ“žโ“ & โ“‡โ“คโ“:

1) dOWNLOAD https://github.com/citronneur/rdpy/archive/v1.3.2.zip

2) unzip

3) RDPY Hacking RDP Binaries

open terminal and type fter going to dir

4) rdpy-rdpclient.py [-u username] [-p password] [-d domain] [-r rss_ouput_file] [...] XXX.XXX.XXX.XXX[:3389]
1

5) rdpy-rdpclient.py [-u username] [-p password] [-d domain] [-r rss_ouput_file] [...] XXX.XXX.XXX.XXX[:3389]

6) You can use rdpy-rdpclient in a Recorder Session Scenario, used in rdpy-rdphoneypot.
rdpy-vncclient

> rdpy-vncclient is a simple VNC Qt4 client.

7) rdpy-vncclient.py [-p password] XXX.XXX.XXX.XXX[:5900]


8) rdpy-vncclient.py [-p password] XXX.XXX.XXX.XXX[:5900]

rdpy-rdpscreenshot

rdpy-rdpscreenshot saves login screen in file.
9) rdpy-rdpscreenshot.py [-w width] [-l height] [-o output_file_path] XXX.XXX.XXX.XXX[:3389]


10) rdpy-rdpscreenshot.py [-w width] [-l height] [-o output_file_path] XXX.XXX.XXX.XXX[:3389]

rdpy-vncscreenshot

rdpy-vncscreenshot saves the first screen update in file.

11) rdpy-vncscreenshot.py [-p password] [-o output_file_path] XXX.XXX.XXX.XXX[:5900]


12) rdpy-vncscreenshot.py [-p password] [-o output_file_path] XXX.XXX.XXX.XXX[:5900]

rdpy-rdphoneypot

rdpy-rdphoneypot is an RDP honey Pot. Use Recorded Session Scenario to replay scenario through RDP Protocol.

13) rdpy-rdphoneypot.py [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] rss_file_path_1 ... rss_file_path_N

14) rdpy-rdphoneypot.py [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] rss_file_path_1 ... rss_file_path_N

The private key file and the certificate file are classic cryptographic files for SSL connections. The RDP protocol can negotiate its own security layer. If one of both parameters are omitted, the server use standard RDP as security layer. You can specify more than one files to match more common screen size.

๐Ÿฆ‘ now rdpy-rssplayer:

> rdpy-rssplayer is use to replay Record Session Scenario (rss) files generates by either rdpy-rdpmitm or rdpy-rdpclient binaries.

15) rdpy-rssplayer.py rss_file_path


16 ) rdpy-rssplayer.py rss_file_path

Written by ฬตอŠ Mฬตอrฬถอ—.ฬทฬ„ ฬธฬBฬตอƒoฬธอ’tฬดฬšNฬธอ˜eฬธอŠtฬทอ‘ ฬธฬ‹(ฬด ฬ…อ„tฬถฬ•.ฬทฬmฬทฬ‘ ฬ“ฬƒ)ฬตอ˜

- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘How To Add Firewall In Any Android:

> The method is quite simple and straight and you just need a cool Android app that will allow you to add the Firewall feature that will help you to ensure the security of your Android device
(instagram.com/UnderCodeTestingCompany)

๐Ÿฆ‘๐Ÿ„ป๐Ÿ„ด๐Ÿ…ƒ๐Ÿ…‚ ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ…๐Ÿ…ƒ:

1) First of all, you need to download and install the cool android app that is NoRoot Firewall the app that will allow you to add firewall feature to your device.
> https://play.google.com/store/apps/details?id=app.greyshirts.firewall

2) Now you need to launch the app after installing it in your device. Now you need to click on โ€œStartโ€

3) Now you need to allow the connection, simply tap on โ€œOKโ€ to continue

4) Now you need to move over the โ€œPending Accessโ€ tab and there you will see all the apps that require connecting to the internet. Simply allow them or deny them as per your wish

5) Thatโ€™s it! you are done, now your Android has a Firewall that will be securing your device from various threats.

๐Ÿฆ‘Methode 2:

> Using Mobiwol:

Mobiwol NoRoot Firewall can be used to save battery, reduce data usage so you stay within your data plan, and secure your privacy by limiting the network access permissions required by apps.
> https://play.google.com/store/apps/details?id=com.netspark.firewall

1) First of all, you need to download and install Mobiwol on your Android device. Once installed, launch the app.

2) Now you will see the screen like below. Wait for few second until the app loads.

3) Now you need to turn on the Firewall Status.

4) Now it will ask you to grant the permission to set up a VPN connection that will allow the app to monitor the network traffic. Simply tap on โ€œOkโ€ to continue.

5) Now in the next step, you need to tap on the Firewall Rules. There you will see all the apps that require connecting to the internet. Simply allow them or deny them as per your wish.

6) You can even set Firewall settings according to your wish.

7) So, this is how you can use Mobiwol to add a firewall to your Android device.

๐Ÿฆ‘SIMILARS:

1)#1DroidWall โ€“ Android Firewall
>https://play.google.com/store/apps/details?id=com.googlecode.droidwall.free&hl=de&gl=de

2) #2 NetGuard โ€“ no-root firewall
>https://play.google.com/store/apps/details?id=eu.faircode.netguard

3) #3 Firewall Gold
>https://play.google.com/store/apps/details?id=com.anstudios.androidfirewall&hl=de&gl=de

@ฬทฬˆ ฬตอŠ Mฬตอrฬถอ—.ฬทฬ„ ฬธฬBฬตอƒoฬธอ’tฬดฬšNฬธอ˜eฬธอŠtฬทอ‘ ฬธฬ‹(ฬด ฬ…อ„tฬถฬ•.ฬทฬmฬทฬ‘ ฬ“ฬƒ)ฬตอ˜

- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - -

๐Ÿฆ‘Best DDos Tools 2019
(t.me/UnderCodeTestingOfficial)

๐Ÿฆ‘1) LOIC (Low Orbit Ion Canon)

> LOIC is one of the most popular DOS attacking tools freely available on the Internet. This tool was used by the popular hackers group Anonymous against many big companiesโ€™ networks last year. Anonymous has not only used the tool, but also requested Internet users to join their DDOS attack via IRC.

>https://sourceforge.net/projects/loic/

2) XOIC

> XOIC is another nice DOS attacking tool. It performs a DOS attack an any server with an IP address, a user-selected port, and a user-selected protocol. Developers of XOIC claim that XOIC is more powerful than LOIC in many ways


>http://anonhacktivism.blogspot.com/2017/11/new-xoic-ddos-tool-download.html

3) HULK (HTTP Unbearable Load King)

> HULK is another nice DOS attacking tool that generates a unique request for each and every generated request to obfuscated traffic at a web server. This tool uses many other techniques to avoid attack detection via known patterns.

> http://packetstormsecurity.com/files/112856/HULK-Http-Unbearable-Load-King.html

4) DDOSIMโ€”Layer 7 DDOS Simulator
DDOSIM is another popular DOS attacking tool. As the name suggests, it is used to perform DDOS attacks by simulating several zombie hosts. All zombie hosts create full TCP connections to the target server.

> This tool is written in C++ and runs on Linux systems.

>These are main features of DDOSIM

๐Ÿฆ‘Features:
Simulates several zombies in attack
Random IP addresses
TCP-connection-based attacks
Application-layer DDOS attacks
HTTP DDoS with valid requests
HTTP DDoS with invalid requests (similar to a DC++ attack)
SMTP DDoS
TCP connection flood on random port
Download DDOSIM here: http://sourceforge.net/projects/ddosim/

> Read more about this tool here: http://stormsecurity.wordpress.com/2009/03/03/application-layer-ddos-simulator/

5) R-U-Dead-Yet:

> R-U-Dead-Yet is a HTTP post DOS attack tool. For short, it is also known as RUDY. It performs a DOS attack with a long form field submission via the POST method. This tool comes with an interactive console menu. It detects forms on a given URL and lets users select which forms and fields should be used for a POST-based DOS attack.

> Download RUDY: https://code.google.com/p/r-u-dead-yet/

6) Torโ€™s Hammer

> Torโ€™s Hammer is another nice DOS testing tool. It is a slow post tool written in Python. This tool has an extra advantage: It can be run through a TOR network to be anonymous while performing the attack. It is an effective tool that can kill Apache or IIS servers in few seconds.

> Download TORโ€™s Hammer here: http://packetstormsecurity.com/files/98831/

7) PyLoris:

> PyLoris is said to be a testing tool for servers. It can be used to perform DOS attacks on a service. This tool can utilize SOCKS proxies and SSL connections to perform a DOS attack on a server. It can target various protocols, including HTTP, FTP, SMTP, IMAP, and Telnet. The latest version of the tool comes with a simple and easy-to-use GUI. Unlike other traditional DOS attacking tools, this tool directly hits the service.

> Download PyLoris: http://sourceforge.net/projects/pyloris/

8) OWASP DOS HTTP POST
It is another nice tool to perform DOS attacks. You can use this tool to check whether your web server is able to defend DOS attack or not. Not only for defense, it can also be used to perform DOS attacks against a website.

> Download here: https://code.google.com/p/owasp-dos-http-post/

9) DAVOSET
>DAVOSET is yet another nice tool for performing DDOS attacks. The latest version of the tool has added support for cookies along with many other features. You can download DAVOSET for free from Packetstormsecurity.

> Download DavoSET: http://packetstormsecurity.com/files/123084/DAVOSET-1.1.3.html

10) GoldenEye HTTP Denial Of Service Tool
GoldenEye is also a simple but effective DOS attacking tool.
It was developed in Python for testing DOS attacks, but people also use it as hacking tool.
> Download GoldenEye: http://packetstormsecurity.com/files/120966/GoldenEye-HTTP-Denial-Of-Service-Tool.html

Written By Mr. BotNet (t.m.)
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - -

๐Ÿฆ‘iOS Apps Wireless Installation guide 2019 Lastest update:
(t.me/UnderCodeTestingOfficial)

๐Ÿฆ‘๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ:

1) git clone https://github.com/vineetchoudhary/AppBox-iOSAppsWirelessInstallation

2) You can install AppBox by running following command in your terminal -

> curl -s https://getappbox.com/install.sh | bash

๐Ÿฆ‘Manual install:

If you face any issue using above command then you can manually install AppBox by downloading it from here

>http://tryappbox.com/download
After that, unzip AppBox.app.zip and move AppBox.app into /Applications directory.

3) Link your Dropbox account with AppBox.

4) Select and upload the iOS application "OR" select project/workspace to archive and upload the iOS application.

5) Send the link to your testers, clients, friends or even use it yourself.

6) Open the link in the browser on the device and click on install.

๐Ÿฆ‘FEATURES:

> Auto App Signing

>rocket Auto Upload on Dropbox or AppStore after Archive

>link Keep same installation link for the same app

> paperclips Install previous version with same installation link

>email Auto E-Mail App Distribution Link
electric_plug Auto Shutdown Mac after Distribution

>package Maximum Upload Size - Equal to your Dropbox account storage

>date Uploaded App Expiration - Until you delete from your Dropbox
sparkles Unlimited app installations

>fire Auto Restart Upload After Network Change or Failure
tophat Easy setup assistant to get started in a few minutes

>wrench Slack, Microsoft Teams and Hangout Chat Webhook Integration

>kissing_heart Dashboard

>rocket Fastlane support read more

>ship Jenkins Support read more

>dark_sunglasses Dark Theme

Written By Mr. BotNet (t.m.)
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘Gmail Hack by Hak9
(facebook.com/UnderCodeTestingCompanie)

๐Ÿฆ‘๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ:

1) git clone https://github.com/xHak9x/gmailhack.git

2) cd gmailhack

3) python gmailhack.py

๐Ÿฆ‘A linux operating system. We recommend :

1) Kali Linux

2) Cyborg

3) Parrot

4) BackTrack

5) Backbox

@ ๐Ÿ„ผ๐Ÿ…. ๐Ÿ„ฑ๐Ÿ„พ๐Ÿ…ƒ๐Ÿ„ฝ๐Ÿ„ด๐Ÿ…ƒ (๐Ÿ…ƒ.๐Ÿ„ผ)
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘-RED IBM Cloud Starter Application 2019 lastest update:
(t.me/UndercodeTestingOfficial)

๐Ÿฆ‘Node-RED application that can be deployed into IBM Cloud with only a couple clicks. Try it out for yourself right now by clicking

๐Ÿฆ‘How does this work?

> When you click the button, you are taken to IBM Cloud where you get a pick a name for your application at which point the platform takes over, grabs the code from this repository and gets it deployed.

>It will automatically create an instance of the Cloudant service and bind it to your app. This is where your Node-RED instance will store its data.

>When you first access the application, you'll be asked to set some security options to ensure your flow editor remains secure from unauthorised access.

>It includes a set of default flows that are automatically deployed the first time Node-RED runs.

๐Ÿฆ‘๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ:

1) git clone https://github.com/ibmets/node-red-bluemix-starter

2) he default flows are stored in the defaults directory in the file called flow.json

> cd node-red-bluemix-starter
> run vi node comm

3) When the application is first started, this flow is copied to the attached Cloudant instance. When a change is deployed from the editor, the version in cloudant will be updated - not this file.

4) The web content you get when you go to the application's URL is stored under the public directory.

5) If you want to change the name of the Cloudant instance that gets created, the memory allocated to the application or other deploy-time options, have a look in manifest.yml.


Written By Mr. BotNet (t.m.)
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘The Famous Script hidden eye have new release :
PHISHING | KEYLOGGER | INFORMATION_COLLECTOR | ALL_IN_ONE_TOOL | SOCIALENGINEERING
(instagram.com/UnderCodeTestingCompany)

๐Ÿฆ‘๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ:

WORK tERMUX(root)/Kali

๐Ÿฆ‘BlackArch official repository

1) sudo pacman -S hidden-eye
to run just use

2) sudo hidden-eye

CLONE
git clone https://github.com/DarkSecDevelopers/HiddenEye.git

3) chmod 777 HiddenEye

4) sudo apt install python3-pip

5) cd HiddenEye

6) sudo pip3 install -r requirements.txt

7) python3 HiddenEye.py

OR

./HiddenEye.py

๐Ÿฆ‘RUNNING (Arch Linux or Manjaro)

1) After cloning

2) chmod 777 HiddenEye

3) sudo pacman -Syu

4) sudo pacman -S python-pip

5) cd HiddenEye

6) sudo pip3 install -r requirements.txt

7) sudo python3 HiddenEye.py

OR

sudo ./HiddenEye.py

๐Ÿฆ‘FOR ANDROID USERS:

1) INSTALLING IN (USERLAND APP)
>Install userland app from playstore.

2) Set up app and install kali from app.Set ssh username(anyname) and password.

3) When kali will run it'll ask for password type the ssh password.Then do su.

4) After that kali will run on your device wothout root and do apt update

5) apt install python3 python3-pip unzip php git

6) git clone https://github.com/DarkSecDevelopers/HiddenEye.git

7) chmod 777 HiddenEye

8) cd HiddenEye

9) pip3 install -r requirements.txt

10) python3 HiddenEye.py

๐Ÿฆ‘ INSTALLING IN (TERMUX APP)

1) First install { Termux } from Playstore.

2) pkg install git python php curl openssh grep

3) pip3 install wget

4) git clone -b Termux-Support-Branch https://github.com/DarkSecDevelopers/HiddenEye.git

5) chmod 777 HiddenEye

6) cd HiddenEye

7) python HiddenEye.py

or

./HiddenEye.py

๐Ÿฆ‘ONE LINE COMMAND TO INSTALL IN TERMUX(ANDROID). Just copy/paste this single command and hit Enter .. ALL DONE

1) First install { Termux } from Playstore.

2) After opening Copy and run this Single Command.

3) pkg install git python php curl openssh grep && pip3 install wget && git clone -b Termux-Support-Branch https://github.com/DarkSecDevelopers/HiddenEye.git && chmod 777 HiddenEye && cd HiddenEye && python HiddenEye.py

wฬฝอ“rฬฝอ“iฬฝอ“tฬฝอ“tฬฝอ“eฬฝอ“nฬฝอ“ ฬฝอ“bฬฝอ“yฬฝอ“ ฬฝอ“Mฬฝอ“rฬฝอ“.ฬฝอ“ ฬฝอ“Bฬฝอ“oฬฝอ“tฬฝอ“Nฬฝอ“eฬฝอ“tฬฝอ“ ฬฝอ“(ฬฝอ“tฬฝอ“.ฬฝอ“mฬฝอ“.ฬฝอ“)ฬฝอ“

- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

๐Ÿฆ‘CVE : CVE-2018-2019
DarkNet Trick:
(t.me/UnderCodeTestingOfficial):
# Category: webapps

1) Description:

> Certain Secure Access SA Series SSL VPN products (originally developed by

> Juniper Networks but now sold and supported by Pulse Secure, LLC) allow
privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000
5.1R5 (build 9627) 4.2 Release (build 7631). This occurs because
appropriate controls are not performed.


2) How Do Lattack?
Proof of Concept

> It is possible to change the administrator user password from readonly user

> because the appropriate controls are not performed. Save the page
/dana-admin/user/update.cgi in local, change the "user" value and save
changes.


3) Solution:

This version is deprecated. Keep Updating to latest version of this product.

@ฬถฬ ฬธฬ› ฬฬนMฬถฬ†rฬตฬ‡.ฬถฬ อ›อ ฬดฬBฬตฬ… ฬนoฬตอ’tฬท ฬ›อ‘nฬถฬ ฬอ“eฬดอ‘tฬดฬŽ อŒฬ (ฬตอ’tฬด อ’ฬฝ.ฬธอ„mฬถฬ’ ฬ‘อ–.ฬทฬ‘
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - - -

DARK NET TRICK:

๐Ÿฆ‘Telegram Desktop (aka tdesktop) version 1.3.14 might allow attackers to cause a denial of service
(assertion failure and application exit) via an โ€œEdit color paletteโ€ search that triggers an โ€œindex out of rangeโ€ condition.
(instagram.com/UnderCodeTestingCompany)

> Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a
denial of service (assertion failure and application exit) via an "Edit
color palette" search that triggers an "index out of range" condition.

NOTE: this issue is disputed by multiple third parties because the
described attack scenario does not cross a privilege boundary.

๐Ÿฆ‘โ“ˆโ“ฃโ“”โ“Ÿโ“ข โ“ฃโ“ž โ“กโ“”โ“Ÿโ“กโ“žโ““โ“คโ“’โ“” :

1. Open Telegram

2. Launch theme editor

3. Save the file in some location

4. The tdesktop then open "Edit color palette"

5. Type "Hello World" in search <press enter>

6. The tdesktop gets crash

Crashes, ASSERT failure in QVector<T>::operator[]: "index out of range",
file /usr/local/tdesktop/Qt-5.6.2/include/QtCore/qvector.h, line 431
Aborted (core dumped)

๐Ÿฆ‘Backtrace:

1) gdb ./Telegram
GNU gdb (Ubuntu 8.1-0ubuntu3) 8.1.0.20180409-git

2) License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html

This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.

3) This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.

4) Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".

5) Type "apropos word" to search for commands related to "word"...
Reading symbols from ./Telegram...(no debugging symbols found)...done.
(gdb) r

6) Starting program: /home/input0/Desktop/Telegram/Telegram
[Thread debugging using libthread_db enabled]

7) Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff40e5700 (LWP 8743)]
[New Thread 0x7ffff32ca700 (LWP 8744)]
[New Thread 0x7ffff2ac9700 (LWP 8746)]
[New Thread 0x7ffff19fa700 (LWP 8747)]
[New Thread 0x7ffff11f9700 (LWP 8748)]
[Thread 0x7ffff19fa700 (LWP 8747) exited]
[New Thread 0x7ffff19fa700 (LWP 8749)]
[New Thread 0x7fffd4da1700 (LWP 8750)]
[New Thread 0x7fffcb25c700 (LWP 8751)]
[Thread 0x7fffcb25c700 (LWP 8751) exited]
[New Thread 0x7fffcb25c700 (LWP 8752)]
[New Thread 0x7fffcb25c700 (LWP 8753)]
[Thread 0x7fffcb25c700 (LWP 8752) exited]
[New Thread 0x7fffcaa5b700 (LWP 8754)]
[New Thread 0x7fffca25a700 (LWP 8755)]
[New Thread 0x7fffc9a59700 (LWP 8756)]
[Thread 0x7fffc9a59700 (LWP 8756) exited]
(Telegram:8739): libappindicator-CRITICAL **: 13:18:28.549:
app_indicator_set_icon_full: assertion 'IS_APP_INDICATOR (self)' failed
[New Thread 0x7fffc9a59700 (LWP 8757)]
[New Thread 0x7fffc9258700 (LWP 8758)]
[New Thread 0x7fffc8a57700 (LWP 8759)]
[New Thread 0x7fffb3fff700 (LWP 8760)]
[New Thread 0x7fffb37fe700 (LWP 8761)]
[Thread 0x7fffb3fff700 (LWP 8760) exited]
[New Thread 0x7fffb3fff700 (LWP 8762)]
[New Thread 0x7fffb2ffd700 (LWP 8763)]
[Thread 0x7fffb37fe700 (LWP 8761) exited]
[Thread 0x7fffc9258700 (LWP 8758) exited]
[Thread 0x7fffc8a57700 (LWP 8759) exited]
[New Thread 0x7fffc8a57700 (LWP 8764)]
[New Thread 0x7fffc9258700 (LWP 8765)]
[New Thread 0x7fffb37fe700 (LWP 8766)]
[Thread 0x7fffc9258700 (LWP 8765) exited]
[Thread 0x7fffb37fe700 (LWP 8766) exited]
[Thread 0x7fffc8a57700 (LWP 8764) exited]
[New Thread 0x7fffc8a57700 (LWP 8767)]
[Thread 0x7fffb3fff700 (LWP 8762) exited]
[Thread 0x7fffc8a57700 (LWP 8767) exited]
[New Thread 0x7fffc8a57700 (LWP 8769)]
[New Thread 0x7fffb3fff700 (LWP 8770)]
Gtk-Message: 13:18:41.228: GtkDialog mapped without a transient parent.
> This is discouraged.
[New Thread 0x7fffb37fe700 (LWP 8772)]
[Thread 0x7fffc8a57700 (LWP 8769) exited]
[Thread 0x7fffb2ffd700 (LWP 8763) exited]
ASSERT failure in QVector<T>::operator[]: "index out of range", file
/usr/local/tdesktop/Qt-5.6.2/include/QtCore/qvector.h, line 431

๐Ÿฆ‘Thread 1 "Telegram" received signal SIGABRT, Aborted:

__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0 0x00007ffff5f7ae97 in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1 0x00007ffff5f7c801 in __GI_abort () at abort.c:79
#2 0x00000000022944a1 in ()
#3 0x0000000003c183a0 in ()
#4 0x0000003000000030 in ()
#5 0x00007fffffffcdc0 in ()
#6 0x00007fffffffcd00 in ()
#7 0x000000000000006c in ()
#8 0x00007ffff74696f0 in () at /lib/x86_64-linux-gnu/libdbus-1.so.3
#9 0x000000000291c5b1 in ()
#10 0x0000000003be003d in ()
#11 0x000000000291b440 in ()
#12 0x00000000000001af in ()
#13 0x0000000000000000 in ()
(gdb)

@ฬถฬ ฬธฬ› ฬฬนMฬถฬ†rฬตฬ‡.ฬถฬ อ›อ ฬดฬBฬตฬ… ฬนoฬตอ’tฬท ฬ›อ‘nฬถฬ ฬอ“eฬดอ‘tฬดฬŽ อŒฬ (ฬตอ’tฬด อ’ฬฝ.ฬธอ„mฬถฬ’ ฬ‘อ–.ฬทฬ‘
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘How Speed up Net Connection FULL GUIDE
Tested by undercOde:
(t.me/UnderCodeTestingOfficial)

1) Test a different modem/router

The biggest cause of slowed down internet is a bad modem. For ages I was using a Billion modem that I thought was absolutely fantastic. I was having frequent internet drop outs and blaming them on my ISP. Finally I changed to a new NETGEAR N150 modem and speeds went up and the drop outs stopped. The problem? The old Billion modem wasnโ€™t equipped for ADSL2+. Rookie mistake. Make sure your modem is suited to the internet plan that you are on.

2) Scan for viruses

The next thing you need to do is make sure that no virus itself is causing you to slow down. Sometimes viruses can live on your computer and suck resources away from what you are doing thus slowing down your speeds.

3) Check for on-system interference

Sometimes your virus scanner or other programs can interfere with your internet speeds. This is really frustrating but you can figure out by simply switching things off one at a time and then running a speed test again. Please note I wonโ€™t be responsible for any viruses or spyware you pick up whilst doing this. You should always have good virus protection.

4) Check your filters

If you have your internet connected to a phone line that also has a telephone on it then you will need to make sure you have good quality filters installed on your line

5) Try getting rid of your cordless phone

Some people disagree with this but I have found that cordless phones slow down or interfere with my internet even with filters. It is worth doing an isolation test by removing your phones and replacing them with different ones (borrow a friendโ€™s) and see whether you get better results.

6๐Ÿฆ‘Plug in

Wifi is nice but wireless internet is often a tad slower than if you plug in to your modem. Try getting that chord out of the box and plugging straight into the modem, especially if it is your desktop computer and you donโ€™t need to move it around very often.

7)Check for external interference

I bet most of you have an iPhone, iPad, sound system and at least one other form of electronic device in your modem area. Am I right? Well, if so, then you need to check to see whether these things are causing electromagnetic interference. Try moving speakers out of the way and getting other electronic devices out of your modem space.

8) Check for Foxtel or other types of TV

Old Foxtel boxes can cause interference for your internet, even if you arenโ€™t using them. If your net speed is slower than it should be and you canโ€™t figure out why, it might be an idea to go for a walk around your house and see if you have a Foxtel (cable TV) box that you didnโ€™t know was there. It could be from a past owner. If so, call up and make sure it is disconnected totally.

9) Shorten and replace cables

The length of your cables and their structure can affect speeds. Try replacing old phone cables, sockets and lines and instead use shorter and newer ones. This can often make a big difference.

10) Have you tried turning it off and on again?

The last suggestion is often the most powerful one. Turn off your modem for one minute and turn it on again. It is called power cycling and can often flush out a bunch of problems that affect your speed. If you are really brave you can even reconfigure your modem with a new password as this can often refresh your settings at the end of your ISP and refresh connections.

11) Update firmware and software regularly

Your router/modem actually has itโ€™s own software that you need to update regularly. You can login to your modem by following your brandโ€™s instructions. For example, for a NETGEAR modem you go to http://routerlogin.com where you can update and tweak your settings. You also need to consider updating your computerโ€™s desktop version, operating system, etc. as often the wireless settings become less compatible over time.
12) Find your router/ISPโ€™s best settings
When you login to your modem/router (see point 11) you will see a bunch of settings relating to channels and so on. Sometimes these settings are not on the best option by default and youโ€™ll need to update them based on the types of devices you use, etc. Check out your router and ISPโ€™s website for the best settings.

13) Check the cabling and do a line test

If all of this fails itโ€™s time to contact your Internet Service Provider and modem company and ask them for a line test and investigation. This may mean that a worker from the company will be sent out to your house, and this can cost an additional fee. The man who came to my property found that the wires in my roof were almost totally chewed away and needed replacing

@ฬถฬ ฬธฬ› ฬฬนMฬถฬ†rฬตฬ‡.ฬถฬ อ›อ ฬดฬBฬตฬ… ฬนoฬตอ’tฬท ฬ›อ‘nฬถฬ ฬอ“eฬดอ‘tฬดฬŽ อŒฬ (ฬตอ’tฬด อ’ฬฝ.ฬธอ„mฬถฬ’ ฬ‘อ–.ฬทฬ‘
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
T.me/UnderCodeTestingOfficial

# ๐•Š๐•Œโ„™โ„™๐•†โ„๐•‹ & ๐•Šโ„๐”ธโ„๐”ผ
โ“Žโ“žโ“ค โ“ฆโ“โ“โ“ฃ โ“โ“”โ“งโ“ฃ :
Anonymous Poll
69%
Hacking trick
12%
Virtual numbers long list
19%
Carding Tutorials
- - - - - - Uา‰Nา‰Dา‰Eา‰Rา‰Cา‰Oา‰Dา‰Eา‰- - - - -

๐Ÿฆ‘BEST TOOLS FOR WIFI HACK ON KALI LINUX :
(t.me/UnderCodeTestingOfficial)

๐Ÿฆ‘๐Ÿ„ป๐Ÿ„ด๐Ÿ…ƒ ๐Ÿ…‚ ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ…๐Ÿ…ƒ:

A) Wash:

1) Wash is an instrument to figure out if a get to point has WPS empowered or not.

2) You can likewise utilize Wash to check if a get to point bolted up WPS after various Reaver endeavors.

3) A great deal of getting to focuses locks itself up as a safety effort when Savage is driving the WPS PIN.

4) Wash is incorporated with the Reaver bundle and comes as a standard apparatus with Kali Linux.

B) Pixiewps

1) PixieWPS is a new device included with Kali Linux and furthermore, focuses on a WPS helplessness.

2) PixieWPS is composed of C and is utilized to animal constrain the WPS PIN disconnected misusing the low or non-existing entropy of helpless get too focused.

3) This is known as a tidy pixie assault. PixieWPS requires an adjusted rendition of Reaver or Wifite to work with.

C) Wireshark

1) Wireshark can be utilized for live parcel catching, profound assessment of several conventions, peruse and channel bundles and is multiplatform.

2) Wireshark is incorporated with Kali Linux additionally accessible for Windows and Mac.

3) For specific elements, you do require a Wifi connector which is backings indiscriminate and observing mode.

C) oclHashcat

1) oclHashcat is not a committed Wifi hacking apparatus and is excluded with Kali Linux, but rather it can do beast constrain and lexicon assaults on caught handshakes quick when utilizing a GPU.

2) In the wake of utilizing the Aircrack-ng suite, or some other apparatus, to catch the WPA handshake, you can break it with oclHashcat utilizing your GPU.

3) Utilizing a GPU with oclHashcat, rather than a CPU with Aicrack-ng, will accelerate the splitting procedure a great deal.

4)) A normal GPU can attempt around 50.000 blends for each second with oclHashcat.

5) oclHashcat is accessible for Windows and Linux and has a form for AMD and Nvidia video cards. AMD video cards require Catalyst 14.9 precisely, and Nvidia video cards require ForceWare 346.x or later to work.๐Ÿฆ‘

D) Aircrack-ng

1) Aircrack is a standout amongst the most common instruments for WEP/WPA/WPA2 splitting.

2) The Aircrack-ng suite contains apparatuses to catch parcels and handshakes, de-confirm associated customers and produce activity and instruments to perform beast compel and word reference assaults. Aicrack-ng is an across the board suite containing the accompanying devices (among others)

E) Crunch

1) Crunch is an extraordinary and simple to utilize instrument for creating custom word lists which can be utilized for lexicon assaults.

2) This component can spare a great deal of time since you wonโ€™t need to hold up until extensive secret key records have been created by Crunch before you can utilize them.

F) Wifite

1) Wifite is a robotized instrument to assault various remote systems scrambled with WEP/WPA/WPA2 and WPS.

2) On start-up, Wifite requires a couple of parameters to work with, and Wifite will do all the diligent work.

3) It will catch WPA handshakes. Naturally, de-confirm associated customers, parody your MAC address and safe the split passwords.

G) Reaver

1) Reaver is another famous instrument for hacking remote systems and targets particularly WPS vulnerabilities.

2) Utilizing Reaver requires a decent flag quality to the remote switch together with the correct arrangement.

3) Overall Reaver can recuperate the passphrase from defenseless switches in 4-10 hours, contingent upon the get to point, flag quality and the PIN itself off base.๐Ÿฆ‘

4) You have a half possibility of breaking the WPS PIN in half of the time.


H) Fern Wifi Cracker
1) Plant Wifi Cracker is a remote security inspecting and assault instrument written in Python. Plant Wifi Cracker is the initially devoted Wifi hacking device in this rundown which has a graphical UI.