β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦STILL LOOKING FOR THE FASTEST INTERNET DOWNLOAD MANAGER FOR WINDOWS ?
https://jdownloader.org/home/index
http://www.internetdownloadmanager.com/
https://beebom.com/best-windows-10-apps/
https://www.freedownloadmanager.org/
http://www.eagleget.com/
https://ugetdm.com/
http://xdman.sourceforge.net/
https://wordrider.net/freerapid/index.html
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦STILL LOOKING FOR THE FASTEST INTERNET DOWNLOAD MANAGER FOR WINDOWS ?
https://jdownloader.org/home/index
http://www.internetdownloadmanager.com/
https://beebom.com/best-windows-10-apps/
https://www.freedownloadmanager.org/
http://www.eagleget.com/
https://ugetdm.com/
http://xdman.sourceforge.net/
https://wordrider.net/freerapid/index.html
β β β Uππ»βΊπ«Δπ¬πβ β β β
Internetdownloadmanager
Internet Download Manager is a powerful download accelerator
Internet Download Manager (IDM) is a tool to increase download speeds by up to 10 times, resume or schedule downloads and download streaming videos
Forwarded from UNDERCODE NEWS
Forwarded from UNDERCODE NEWS
Amazon is transferring $ 30 million to AllCloud to transfer Israeli companies to its cloud.
#international
#international
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦a simple paid apk with great features:
Tracking a set of texts, SMS-messages, online correspondence in chats, history of visiting pages on the Internet, calls, contacts, emails, photos and videos in invisible mode;
Access to the online control panel via a computer for remote viewing of recorded and tracked information;
Support for working with almost any device;
Ability to work with gadgets from "Apple" without breaking the system;
Simple registration of an account on the official website;
The program works in a hidden mode, which prevents its deactivation by your children or inexperienced users;
Mobistealth helps protect your children from various cyber threats associated with fraud and extortion;
The software installation takes a few minutes;
Leaders of organizations get the opportunity to better optimize their workflow by tracking employees using Mobistealth software tools;
The cost of maintaining a single device tracking app starts at just $ 0.50 per day.
A) Contact Tracking:
You will always be aware of who your child is communicating with, and if he tries to make an appointment and enter this event in the electronic calendar on your phone, then you will know about it.
B) Voice call tracking tools:
In addition to the fact that with the help of "Mobistealth" you can view the list of outgoing and incoming calls, it is also possible to listen to the voice communication of the interlocutors during regular calls, as well as when talking through various instant messengers.
C) Recording messages:
If your child is actively communicating on social networks, then you can find out every word that he writes to the interlocutor on various popular services, including Skype, Viber, WhatsApp and KiK.
D) Tracking emails:
The Mobistealth program has a built-in keylogger that reads all keystrokes on a smartphone, which can be very useful for obtaining passwords from accounts on various Internet resources.
E) Viewing the history of visits to web pages:
Allows you to find out which sites your child visits frequently in order to further block unwanted web addresses.
F) Taking screenshots of the desktop:
Allows you to see applications that were recently installed, after which the corresponding icons appear on the smartphone. In addition, installed unwanted software can be easily removed using the Mobistealth tools through the control panel.
G) Sound recording via built-in microphone:
With this option, you can use your smartphone as an ordinary "bug", listening to all conversations around the device.
H) Tracking SMS messages:
You can read all text messages received through your mobile operator.
https://www.mobistealth.com/
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦a simple paid apk with great features:
Tracking a set of texts, SMS-messages, online correspondence in chats, history of visiting pages on the Internet, calls, contacts, emails, photos and videos in invisible mode;
Access to the online control panel via a computer for remote viewing of recorded and tracked information;
Support for working with almost any device;
Ability to work with gadgets from "Apple" without breaking the system;
Simple registration of an account on the official website;
The program works in a hidden mode, which prevents its deactivation by your children or inexperienced users;
Mobistealth helps protect your children from various cyber threats associated with fraud and extortion;
The software installation takes a few minutes;
Leaders of organizations get the opportunity to better optimize their workflow by tracking employees using Mobistealth software tools;
The cost of maintaining a single device tracking app starts at just $ 0.50 per day.
A) Contact Tracking:
You will always be aware of who your child is communicating with, and if he tries to make an appointment and enter this event in the electronic calendar on your phone, then you will know about it.
B) Voice call tracking tools:
In addition to the fact that with the help of "Mobistealth" you can view the list of outgoing and incoming calls, it is also possible to listen to the voice communication of the interlocutors during regular calls, as well as when talking through various instant messengers.
C) Recording messages:
If your child is actively communicating on social networks, then you can find out every word that he writes to the interlocutor on various popular services, including Skype, Viber, WhatsApp and KiK.
D) Tracking emails:
The Mobistealth program has a built-in keylogger that reads all keystrokes on a smartphone, which can be very useful for obtaining passwords from accounts on various Internet resources.
E) Viewing the history of visits to web pages:
Allows you to find out which sites your child visits frequently in order to further block unwanted web addresses.
F) Taking screenshots of the desktop:
Allows you to see applications that were recently installed, after which the corresponding icons appear on the smartphone. In addition, installed unwanted software can be easily removed using the Mobistealth tools through the control panel.
G) Sound recording via built-in microphone:
With this option, you can use your smartphone as an ordinary "bug", listening to all conversations around the device.
H) Tracking SMS messages:
You can read all text messages received through your mobile operator.
https://www.mobistealth.com/
β β β Uππ»βΊπ«Δπ¬πβ β β β
Mobistealth
Best Parental Control And Monitoring App | Mobistealth
Best Cell Phone and Computer Monitoring software to monitor all activities. View Text Messages, Track Location, Log Keystrokes and much more!
Forwarded from UNDERCODE NEWS
UNDERCODE COMMUNITY
Lateral Movement β RDP.pdf
some pdfs from git
βWinRM stands for Windows Remote Management and is a service that allows administrators to perform management tasks on systems remotely. Communication is performed via HTTP (5985) or HTTPS SOAP (5986) and support Kerberos and NTLM authentication by default and Basic authentication. Usage of this service requires administrator level credentials
βWinRM stands for Windows Remote Management and is a service that allows administrators to perform management tasks on systems remotely. Communication is performed via HTTP (5985) or HTTPS SOAP (5986) and support Kerberos and NTLM authentication by default and Basic authentication. Usage of this service requires administrator level credentials
Forwarded from UNDERCODE NEWS
Sberbank and Microsoft have created a robot that carries bags of money and can extract oil.
#Technologies
#Technologies
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Updated Network and Web Pentest Automation Framework
F E A T U R E S :
Many supported Services: Target most common TCP/UDP services (HTTP, FTP, SSH, SMB, Oracle, MS-SQL, MySQL, PostgreSQL, VNC, etc.).
Combine Power of Tools: Each security check is performed by a tool from the toolbox. Attacks are performed by chaining security checks.
Context Awareness: Security checks to run are selected and adapted according to the context of the target (i.e. detected technologies, credentials, vulnerabilities, etc.).
Reconnaissance: Automatic fingerprinting (product detection) of targeted services is performed.
CVE Lookup: When product names and their versions are detected, a vulnerability lookup is performed on online CVE
databases (using Vulners & CVE Details).
Vulnerability Scanning: Automatically check for common vulnerabilities and attempt to perform some exploitations (auto-pwn).
Brute-force Attack: Automatically check for default/common credentials on the service and perform dictionnary attack if necessary. Wordlists are optimized according to the targeted services.
Post-authentication Testing: Automatically perform some post-exploitation checks when valid credentials have been found.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/koutto/jok3r.git
2) cd jok3r
3) Show all the tools in the toolbox:
python3 jok3r.py toolbox --show-all
4) Install all the tools in the toolbox (already done in Docker container):
python3 jok3r.py toolbox --install-all --auto
5)Update all the tools in the toolbox and prompt each time to check update:
6) python3 jok3r.py toolbox --update-all
Update all the tools in the toolbox without any prompt:
python3 jok3r.py toolbox --update-all --auto
7) Security Testing
Create a new mission in local database:
python3 jok3r.py db
jok3rdb[default]> mission -a mayhem
[+] Mission "mayhem" successfully added
[*] Selected mission is now mayhem
jok3rdb[mayhem]>
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Updated Network and Web Pentest Automation Framework
F E A T U R E S :
Many supported Services: Target most common TCP/UDP services (HTTP, FTP, SSH, SMB, Oracle, MS-SQL, MySQL, PostgreSQL, VNC, etc.).
Combine Power of Tools: Each security check is performed by a tool from the toolbox. Attacks are performed by chaining security checks.
Context Awareness: Security checks to run are selected and adapted according to the context of the target (i.e. detected technologies, credentials, vulnerabilities, etc.).
Reconnaissance: Automatic fingerprinting (product detection) of targeted services is performed.
CVE Lookup: When product names and their versions are detected, a vulnerability lookup is performed on online CVE
databases (using Vulners & CVE Details).
Vulnerability Scanning: Automatically check for common vulnerabilities and attempt to perform some exploitations (auto-pwn).
Brute-force Attack: Automatically check for default/common credentials on the service and perform dictionnary attack if necessary. Wordlists are optimized according to the targeted services.
Post-authentication Testing: Automatically perform some post-exploitation checks when valid credentials have been found.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/koutto/jok3r.git
2) cd jok3r
3) Show all the tools in the toolbox:
python3 jok3r.py toolbox --show-all
4) Install all the tools in the toolbox (already done in Docker container):
python3 jok3r.py toolbox --install-all --auto
5)Update all the tools in the toolbox and prompt each time to check update:
6) python3 jok3r.py toolbox --update-all
Update all the tools in the toolbox without any prompt:
python3 jok3r.py toolbox --update-all --auto
7) Security Testing
Create a new mission in local database:
python3 jok3r.py db
jok3rdb[default]> mission -a mayhem
[+] Mission "mayhem" successfully added
[*] Selected mission is now mayhem
jok3rdb[mayhem]>
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - koutto/jok3r: Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework - koutto/jok3r
Forwarded from UNDERCODE NEWS
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦FULL METASPLOIT COURSES :
https://www.youtube.com/watch?v=hJEzf3DPRvc
18 MIN
https://www.youtube.com/watch?v=cqxEXqizcHc
https://youtu.be/_C7nRJ6WsmI
4 HOURS
https://null-byte.wonderhowto.com/how-to/hack-like-pro-evade-av-software-with-shellter-0168504/
42 min
https://youtu.be/Zx9Jy7z0zCM
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦FULL METASPLOIT COURSES :
https://www.youtube.com/watch?v=hJEzf3DPRvc
18 MIN
https://www.youtube.com/watch?v=cqxEXqizcHc
https://youtu.be/_C7nRJ6WsmI
4 HOURS
https://null-byte.wonderhowto.com/how-to/hack-like-pro-evade-av-software-with-shellter-0168504/
42 min
https://youtu.be/Zx9Jy7z0zCM
β β β Uππ»βΊπ«Δπ¬πβ β β β
YouTube
Hacking Tutorial 3: Metasploit Framework introduction and first attack
This video shows how to harness the power of Metasploit Framework - the ultimate penetration testing tool. Metasploit has a modular structure supporting thousands of auxiliary tools (e.g. scanning), exploits, payloads and so forth.
The video demonstratesβ¦
The video demonstratesβ¦
Forwarded from UNDERCODE NEWS
A module application used by millions of students around the world expose a new vulnerability.
#Vulnerabilities
#Vulnerabilities
Forwarded from UNDERCODE NEWS
A telecommunications protection legislation was adopted by Finland, stating it does not threaten a business or region.
#international
#international
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦π§ Installing and configuring StrongSwan VPN on Ubuntu 20.04:
1) VPN is used to create a private network from a public internet connection to protect your data.
2) strongSwan is one of the most famous VPN software that supports various operating systems including Linux, OS X, FreeBSD, Windows, Android and iOS.
It uses the IKEv1 and IKEv2 protocols to securely establish a connection.
3) You can extend its functionality with built-in plugins.
4) You can install it with other required components using the following command:
apt-get install install strongswan strongswan-pki libcharon-extra-plugins libcharon-extauth-plugins libstrongswan-extra-plugins -y
Once all packages have been installed, you can proceed to create a CA certificate.
π¦How to create a certificate for a VPN server
1) Then you will need to generate a certificate and key for the VPN server to authenticate the server on the client side.
First, create a private key for the root CA with the following command:
ipsec pki --gen --size 4096 --type rsa --outform pem> /etc/ipsec.d/private/ca.key.pem
2) Then create a root CA and sign it using the above key:
ipsec pki --self --in /etc/ipsec.d/private/ca.key.pem --type rsa --dn "CN = My VPN Server CA" --ca --lifetime 3650 --outform pem> / etc / ipsec.d / cacerts / ca.cert.pem
3) Then create a private key for the VPN server using the following command:
ipsec pki --gen --size 4096 --type rsa --outform pem> /etc/ipsec.d/private/server.key.pem
4) Finally, generate a server certificate using the following command:
ipsec pki --pub --in /etc/ipsec.d/private/server.key.pem --type rsa | ipsec pki --issue --lifetime 2750 --cacert /etc/ipsec.d/cacerts/ca.cert.pem --cakey /etc/ipsec.d/private/ca.key.pem --dn "CN = vpn .domain.com "--san =" vpn.domain.com "--flag serverAuth --flag ikeIntermediate --outform pem> /etc/ipsec.d/certs/server.cert.pem
5) At this point, all certificates are ready for your VPN server.
StrongSwan VPN setup
The default strongswan configuration file is /etc/ipsec.conf.
We can back up the main config file and create a new file:
mv /etc/ipsec.conf /etc/ipsec.conf-bak
Then create a new config file:
nano /etc/ipsec.conf
Add the following config and conn settings:
config setup
charondebug = "ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2"
strictcrlpolicy = no
uniqueids = yes
cachecrls = no
conn ipsec-ikev2-vpn
auto = add
compress = no
type = tunnel
keyexchange = ikev2
fragmentation = yes
forceencaps = yes
dpdaction = clear
dpddelay = 300s
rekey = no
left =% any
leftid=@vpn.domain.com
leftcert = server.cert.pem
leftsendcert = always
leftsubnet = 0.0.0.0 / 0
right =% any
rightid =% any
rightauth = eap-mschapv2
rightsourceip = 10.10.10.0 / 24
rightdns = 8.8.8.8
rightsendcert = never
eap_identity =% identity
Save and close the /etc/ipsec.conf file.
Next, you will need to define the EAP user credentials and RSA private keys for authentication.
You can customize it by editing the /etc/ipsec.secrets file:
nano /etc/ipsec.secrets
Add the following line:
: RSA "server.key.pem"
vpnsecure: EAP "password"
Then restart the StrongSwan service as follows:
systemctl restart strongswan-starter
To enable StrongSwan to start at system boot, enter:
systemctl enable strongswan-starter
Check the status of the VPN server, enter:
systemctl status strongswan-starter
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦π§ Installing and configuring StrongSwan VPN on Ubuntu 20.04:
1) VPN is used to create a private network from a public internet connection to protect your data.
2) strongSwan is one of the most famous VPN software that supports various operating systems including Linux, OS X, FreeBSD, Windows, Android and iOS.
It uses the IKEv1 and IKEv2 protocols to securely establish a connection.
3) You can extend its functionality with built-in plugins.
4) You can install it with other required components using the following command:
apt-get install install strongswan strongswan-pki libcharon-extra-plugins libcharon-extauth-plugins libstrongswan-extra-plugins -y
Once all packages have been installed, you can proceed to create a CA certificate.
π¦How to create a certificate for a VPN server
1) Then you will need to generate a certificate and key for the VPN server to authenticate the server on the client side.
First, create a private key for the root CA with the following command:
ipsec pki --gen --size 4096 --type rsa --outform pem> /etc/ipsec.d/private/ca.key.pem
2) Then create a root CA and sign it using the above key:
ipsec pki --self --in /etc/ipsec.d/private/ca.key.pem --type rsa --dn "CN = My VPN Server CA" --ca --lifetime 3650 --outform pem> / etc / ipsec.d / cacerts / ca.cert.pem
3) Then create a private key for the VPN server using the following command:
ipsec pki --gen --size 4096 --type rsa --outform pem> /etc/ipsec.d/private/server.key.pem
4) Finally, generate a server certificate using the following command:
ipsec pki --pub --in /etc/ipsec.d/private/server.key.pem --type rsa | ipsec pki --issue --lifetime 2750 --cacert /etc/ipsec.d/cacerts/ca.cert.pem --cakey /etc/ipsec.d/private/ca.key.pem --dn "CN = vpn .domain.com "--san =" vpn.domain.com "--flag serverAuth --flag ikeIntermediate --outform pem> /etc/ipsec.d/certs/server.cert.pem
5) At this point, all certificates are ready for your VPN server.
StrongSwan VPN setup
The default strongswan configuration file is /etc/ipsec.conf.
We can back up the main config file and create a new file:
mv /etc/ipsec.conf /etc/ipsec.conf-bak
Then create a new config file:
nano /etc/ipsec.conf
Add the following config and conn settings:
config setup
charondebug = "ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2"
strictcrlpolicy = no
uniqueids = yes
cachecrls = no
conn ipsec-ikev2-vpn
auto = add
compress = no
type = tunnel
keyexchange = ikev2
fragmentation = yes
forceencaps = yes
dpdaction = clear
dpddelay = 300s
rekey = no
left =% any
leftid=@vpn.domain.com
leftcert = server.cert.pem
leftsendcert = always
leftsubnet = 0.0.0.0 / 0
right =% any
rightid =% any
rightauth = eap-mschapv2
rightsourceip = 10.10.10.0 / 24
rightdns = 8.8.8.8
rightsendcert = never
eap_identity =% identity
Save and close the /etc/ipsec.conf file.
Next, you will need to define the EAP user credentials and RSA private keys for authentication.
You can customize it by editing the /etc/ipsec.secrets file:
nano /etc/ipsec.secrets
Add the following line:
: RSA "server.key.pem"
vpnsecure: EAP "password"
Then restart the StrongSwan service as follows:
systemctl restart strongswan-starter
To enable StrongSwan to start at system boot, enter:
systemctl enable strongswan-starter
Check the status of the VPN server, enter:
systemctl status strongswan-starter
β β β Uππ»βΊπ«Δπ¬πβ β β β