UNDERCODE COMMUNITY
2.68K subscribers
1.23K photos
31 videos
2.65K files
80.1K links
🦑 Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

Web & Services:
Undercode.help
Download Telegram
Forwarded from Exploiting Crew (Pr1vAt3)
🦑WEB APPLICATION PENTESTING TOOLKIT

Whether you're focusing on APIs, SSL, or directory fuzzing, this toolkit has you covered!

Ref: Rahul Raj V K
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Forwarded from Exploiting Crew (Pr1vAt3)
This media is not supported in your browser
VIEW IN TELEGRAM
🦑#Tips Palo Alto Firewall: Packet Flow Sequence:

In the Firewall understanding the Packet Flow Sequence is essential for troubleshooting traffic issues!

🔴 Inside to Outside Traffic 🔴

🔴 First: Security Policy – Checks if traffic is allowed.
🔴 Second: NAT Policy – Translates source IP if matched.
🔴 Third: Routing Table – Determines the next-hop to the destination.

🔵 Outside to Inside Traffic

🔵 First: NAT Policy – Translates destination IP to internal IP.
🔵 Second: Security Policy – Validates access to the internal resource.
🔵 Third: Routing Table – Finds the path to the internal destination.

💡 Pro Tip: Mastering this sequence is a game-changer for resolving connectivity and NAT issues quickly! 🚀

Ref: Dahri A.
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
Forwarded from Exploiting Crew (Pr1vAt3)
𝐅𝐫𝐞𝐞 𝐋𝐚𝐛𝐬 𝐭𝐨 𝐓𝐞𝐬𝐭 𝐘𝐨𝐮𝐫 𝐏𝐞𝐧𝐭𝐞𝐬𝐭/𝐂𝐓𝐅 𝐒𝐤𝐢𝐥𝐥𝐬
🎲 Must-Try Platforms
1. HackTheBox: A gamified approach to pentesting with challenges ranging from easy to advanced.
🔗 [https://hackthebox.com](https://hackthebox.com)
2. PicoCTF: Beginner-friendly CTF platform ideal for building foundational skills.
🔗 [https://picoctf.com](https://picoctf.com)
3. OverTheWire: Focuses on building your Linux and networking fundamentals.
🔗 [http://overthewire.org](http://overthewire.org)
4. PentesterLab: Offers guided exercises for learning web app security.
🔗 [https://pentesterlab.com](https://pentesterlab.com)
5. Google CTF: Curated by Google, this platform provides top-notch CTF challenges.
🔗 [https://lnkd.in/gs89f_zU)
6. Immersive Labs: Perfect for hands-on practice across various cybersecurity domains.
🔗 https://immersivelabs.com

7. Hacker101: A free resource from HackerOne to learn and practice ethical hacking.
🔗 https://ctf.hacker101.com


Ref: G.M. Faruk
@Undercodecommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
Forwarded from Exploiting Crew (Pr1vAt3)
🦑30 MUST USE CYBERSECURITY SEARCH ENGINES

This list showcases 30 must-use cybersecurity search engines, each specializing in a specific aspect of threat intelligence, vulnerability assessment, or data reconnaissance. These tools cater to professionals seeking information about exposed credentials, vulnerabilities, DNS records, attack surfaces, public repositories, and devices on the internet.

Dehashed: Focuses on finding leaked credentials.
Security Trails: Provides DNS and domain intelligence.
DorkSearch: Enables Google Dorking for open-source intelligence.
ExploitDB: Offers a database of publicly available exploits.
ZoomEye: Scans for information about internet-connected devices and services.
Pulsedive: Centralizes threat intelligence data.
GrayHatWarfare: Specializes in indexing public S3 buckets.
PolySwarm: Scans files and URLs for malware.
FoFa: Analyzes internet-wide threat intelligence.
LeakIX: Tracks leaked and exposed web servers.
DNSDumpster: Examines DNS data for domain reconnaissance.
FullHunt: Maps attack surfaces of internet-facing systems.
AlienVault: Collects and correlates threat intelligence.
Onyphe: Aggregates cyber-threat data and intelligence.
Grep App: Searches for sensitive information in Git repositories.
URL Scan: Investigates websites for potential malicious behavior.
Vulners: Hosts a comprehensive vulnerability database.
WayBackMachine: Provides historical archived internet content.
Shodan: Lists internet-connected devices and their security risks.
Netlas: Scans devices and services exposed on the internet.
CRT.sh: Monitors SSL/TLS certificates.
Wigle: Maps wireless networks.
PublicWWW: Conducts marketing and web analysis.
Binary Edge: Delivers threat intelligence about internet assets.
GreyNoise: Analyzes internet noise for threat detection.
Hunter: Finds and verifies email addresses.
Censys: Tracks internet-facing devices and vulnerabilities.
IntelligenceX: Searches for data leaks on Tor, I2P, and other darknets.
Packet Storm: A repository for vulnerabilities and exploits.
SearchCode: Facilitates source code searches for developers.

Ref: Rahul Raj V K
@Undercodecommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
Forwarded from Exploiting Crew (Pr1vAt3)
🦑5 domains a Cloud Engineer should know:


1. 🔒 Security
2. 💻 Compute
3. 💾 Storage
4. 🗂 Database
5. 🌐 Networking

📚 Starting Training 🆓 NOW:

🔶 Security Learning Plan
https://lnkd.in/eNiTnyRN

🔶 AWS Compute Services Overview
https://lnkd.in/eSiFN88Y

🔶 AWS Storage Learning Plan
https://lnkd.in/eFcuArhG

🔶 AWS Database Offering
https://lnkd.in/gSbjZQhQ

🔶 AWS Networking Core
https://lnkd.in/eUwRdA2f

Ref: Greg Powell
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)