UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.4K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
lastest update 2019
T.me/UnderCodeTesting

πŸ¦‘π•€β„•π•Šπ•‹π”Έπ•ƒπ•ƒπ•€π•Šπ”Έπ•‹π•€π•†β„• & β„π•Œβ„•:

1) git clone https://github.com/esc0rtd3w/wifi-hacker

2) cd wifi-hacker

3) chmod 777 wifi-hacker.sh

4) ./wifi-hacker.sh

πŸ¦‘Features :

> wifi bruteforce

> hack wep

> hack wpa

> hack wpa2

> hack wps

πŸ¦‘Tested on

> debian

> kali

> parrot

@UndercOdeOfficial
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Kernel Technology-Tip: Upgrading Applications from Source
t.me/UndercOdeTesting

If compiled and installed your first application from source, and it works great. congratulations! But now you have a new version of the source code and want to upgrade, and hope everything goes smoothly. What effective measures can be taken to avoid mistakes? In this tip, I will provide several such measures.

Upgrading can also be simple:

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) After reading the Changelog and
downloading the source code, first familiarize yourself with the new software changes-these changes are usually listed in the ChangeLog or README file in the source code's home directory. You may find that the configuration file settings have changed slightly, or some new features have been added. It's best to clarify these changes in the source code's documentation, rather than waiting for errors to be remedied later. Not doing this is absolutely wrong-and since you took the time to install a new version of this package, wouldn't it be good to know what new features it includes or what bugs it fixes?

2) Upgrading Critical Applications
If you are upgrading an application that affects many users, such as Apache on a busy web server, it's worth the extra care. If possible, first install the new version of the source code on a non-production machine, and note each step performed to get the new version up and running. In this way, even if you encounter problems during the upgrade process, it will not cause any harm. written @UndercOdeTesting
And when you're ready to upgrade your production machine, you already have a detailed list of steps to perform-which can reduce costly downtime.

3) Also, if you are upgrading a critical application, upgrading during off-peak hours is always the best choice.

4) Configured in the same way
When upgrading an application, one of the big mistakes people tend to make is specifying different, incompatible options on the "./configure" line, or uncommenting different lines in the Makefile configuration. If you want to perform a simple upgrade, make sure that the configuration of the new version of the software is exactly the same as the configuration of the current version.

5) If the current version looks for its configuration file in the / etc directory, it is better to configure the new version the same way. Don't be hasty; if you pass different options on the "./configure" command line, the result is most likely that the new version has significantly different features, is installed in the wrong directory tree, or looks for it in the wrong location Configuration file or data file. If you forget the configuration options or Makefile definitions you used, be sure to check them before compiling and installing the new version. For the upgrade to go smoothly, you will want to get these settings from the beginning.

6) Back up the original configuration file before installing.
For many packages, the real challenge is not in the compilation and installation phase, but in the process of setting up the application to run properly after you type "make install". This usually takes hours to edit the application's configuration file, which is usually in the / etc directory with the usual ".conf" suffix.

7) When you type "make install" When installing a new version of a package, most Makefiles do not overwrite existing configuration files on disk-but you should be grateful for this rather than regret it for security reasons. If you are not quite sure, be sure to back up your previous configuration files! Some configuration files may take a few days to rebuild, depending on the package. If the configuration file contains encrypted passwords, rebuilding can be time consuming or simply impossible.
8) If you are planning a major upgrade of your linux system, now may be a good time to perform a system-wide backup. This is especially important if you are preparing to upgrade key system libraries or tools that are the basis for many packages to work properly. A system-wide backup is a great idea in itself, and I hope that you back up your system from time to time.

9) Have the older source code at hand
I have no intention of discouraging you from upgrading your favorite program to the latest version-but the new version may not work. "./configure" or "make" may crash. To make matters worse, everything including "make install" passed smoothly, and no trouble occurred until the program was actually run. The buggy source code distribution does exist, which is why it is a good idea to keep the older source code (and any installation steps) on hand in case the newer source code is not working properly.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Now Test The Kernel Technology after Upgrading Applications from Source
t.me/UndercOdeTesting

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) Compiling and installing is one thing, and making sure that the new software works is another.

2) You must be sure that you are not installing 500 KB of junk in the root partition.

3) The new version of the configuration file may require minor modifications, and may even require significant modifications. If you are upgrading the daemon, make sure your configuration script successfully starts this new version when you restart. You absolutely don't want to find any problems when you restart the server after two weeks (and you have forgotten the program's configuration details).

4) You can follow the recommendations in this article, but if you are not testing your installation, you are missing the most important steps.

5) You should now have enough knowledge to upgrade your favorite applications

Written by UndrcOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Set up a large-capacity Web-based Email system FULL
by UndercOde
instagram.com/UndercOdeTestingCompany
PART 1

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

> An Email system can be divided into server-side and client-side. The Email system of the Web interface puts the Email client on the Web server. Therefore, what the Email system needs to implement is an Email client of the Web interface. However, because this Email system requires a large number of users, there are also specific requirements for the Email server.

β—† operating system and user databases

1) by providing high-capacity Email System requirements for the operating system and the database is very high, therefore, select the appropriate operating system and the database is the most basic question.

2) Because of the high stability and performance required to provide web and email services, unix is generally used as the server operating system. For example, hotmail uses freebsd and solaris, and domestic sites such as 163 also use the bsd series. However, Unix's standard email system is also unsuitable for such large capacity services. Some Unix systems, such as the current version of Linux, have only 16-bit user IDs, so the number of users can only be up to 64k, even if the Unix system itself supports 32-bit user IDs. Considering performance factors, the number of users supported by a single server

3) Do not exceed 100,000. In order to support scalability for more users, multiple servers are generally used to provide services at the same time. Although standard Unix users can still be used as email users at this time, non-Unix systems are generally used in consideration of security,
performance, and manageability

4) Users come as email users. The storage of user data is usually in the form of a database that supports network access. Commonly used are ldap, standard databases, and user databases implemented by the email system itself. Among them, ldap is the standard for providing directory services, so it should be the best choice. Its commonly used open source implementation is openldap; while the standard database is easy to implement and highly scalable, and the most commonly used on the Internet is mysql. ; In addition, there are other ways to achieve.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Set up a large-capacity Web-based Email system FULL
by UndercOde
instagram.com/UndercOdeTestingCompany
PART 2

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :


β—† save messages

1) for bulk Email system, the most critical technical issue is how to handle mail storage, the manner in which to improve storage efficiency, we will determine the success of Email system or not.

2) Due to the large number of users, how to save users' emails is a very important issue. Traditional Unix uses a single directory to store mail for all users, which greatly reduces the performance of the file system when there are a large number of users. Only by using multi-level directories and a limited number of files in each directory, can we reduce the system consumption when opening files, or no longer use simple files to save emails, but use a certain form of packaging. The database is completely used to save emails. @UndercOdeTesting Because users' email operations are mostly file operations, and the size changes greatly, it will cause a large waste of performance and storage space.

3) Due to the huge number of users and the need to be accessed by multiple servers at the same time, a server or server cluster with a large storage space must be used for storage. The storage space is shared through Fibre Channel or the network file system NFS, so that each user's mail storage The path is consistent for each server. Fibre Channel is a very expensive solution. It is more common to use NFS. You can use a dedicated NFS server, such as NetApp, or a PC Unix server with RAID capabilities.

4) When using NFS shared storage space, you must pay attention to a very important issue: Because NFS lacks a file locking mechanism, when using the traditional user mail storage format mailbox, all mails are stored in the same file, so mail is sent.

5) The operation must be locked to ensure that there are no access conflicts, which makes it unsuitable for NFS storage. In order to solve this problem, qmail proposes the Maildir storage method. Each mail is stored as a separate file in the user's personal mail directory, which avoids locking. Therefore, common free mail servers generally use the Maildir method to store user mail.

6) If you do not plan to use a shared file system to store user mail, and you want to allow each server to access only user mail on its own hard disk storage space, then both the Email server and the client need to be customized so that they can pass the user name Come to find the real server to which the user belongs, and hand over the access task to this server to complete.

7) The disadvantages of this method are that in addition to the large changes required and the complex system structure, the server is divided by users, which is not conducive to load sharing. Its advantage is also because it does not access other servers through the network, so it can use any mail storage format, including the use of the powerful Cyrus system to store mail and provide services.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Set up a large-capacity Web-based Email system FULL
by UndercOde
instagram.com/UndercOdeTestingCompany
PART 2

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :


β—† save messages

1) for bulk Email system, the most critical technical issue is how to handle mail storage, the manner in which to improve storage efficiency, we will determine the success of Email system or not.

2) Due to the large number of users, how to save users' emails is a very important issue. Traditional Unix uses a single directory to store mail for all users, which greatly reduces the performance of the file system when there are a large number of users. Only by using multi-level directories and a limited number of files in each directory, can we reduce the system consumption when opening files, or no longer use simple files to save emails, but use a certain form of packaging. The database is completely used to save emails. @UndercOdeTesting Because users' email operations are mostly file operations, and the size changes greatly, it will cause a large waste of performance and storage space.

3) Due to the huge number of users and the need to be accessed by multiple servers at the same time, a server or server cluster with a large storage space must be used for storage. The storage space is shared through Fibre Channel or the network file system NFS, so that each user's mail storage The path is consistent for each server. Fibre Channel is a very expensive solution. It is more common to use NFS. You can use a dedicated NFS server, such as NetApp, or a PC Unix server with RAID capabilities.

4) When using NFS shared storage space, you must pay attention to a very important issue: Because NFS lacks a file locking mechanism, when using the traditional user mail storage format mailbox, all mails are stored in the same file, so mail is sent.

5) The operation must be locked to ensure that there are no access conflicts, which makes it unsuitable for NFS storage. In order to solve this problem, qmail proposes the Maildir storage method. Each mail is stored as a separate file in the user's personal mail directory, which avoids locking. Therefore, common free mail servers generally use the Maildir method to store user mail.

6) If you do not plan to use a shared file system to store user mail, and you want to allow each server to access only user mail on its own hard disk storage space, then both the Email server and the client need to be customized so that they can pass the user name Come to find the real server to which the user belongs, and hand over the access task to this server to complete.

7) The disadvantages of this method are that in addition to the large changes required and the complex system structure, the server is divided by users, which is not conducive to load sharing. Its advantage is also because it does not access other servers through the network, so it can use any mail storage format, including the use of the powerful Cyrus system to store mail and provide services.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ what kind of Email server software will ultimately affect the performance of the system ?
fb.com/UndercOdeTestingCompany

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) email software, such as sendmail, although it also provides some methods including aliases to support non-Unix system users, but these capabilities are not enough to implement this email system.

2) To support these Email users, you must use your own Email server software. However, since the existing Email software is quite mature and is also open source software, it is common practice to modify the original Email software, such as sendmail, qmail, etc., to make it support specific Email users.

3) It is not advisable to completely rewrite an email service software from the perspective of maturity and stability.

4) Regardless of performance or security considerations, sendmail is not an ideal choice, and because qmail itself supports Maildir, it has become a basic development platform for commonly used Email software.

5) However, it should be noted that qmail is protected under the GPL license, so any changes based on qmail must in principle disclose the source code, which has certain obstacles to the development of commercial applications.

6) Of course, this problem can be bypassed by not changing qmail, but changing related system library functions, or using a plug-in method. Another optional basic email software is postfix, which itself has an
interface with LDAP and MySQL and can be used as part of the mail system with almost no changes.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘ SO MANY ABOUT LINUX AND PROGRAMMING LETS START SOME CARDING TUTORIAL BASIC TO PROTECT YOURSELF
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Bank Identification Number (β€œBIN”):
IAM WONDERING MANY HACKERS DOESN T KNOW THE REAL DEFINITION OF BIN CODE
Twitter.com/UndercOdeTC

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) Bank Identification Number (β€œBIN”) or Issuer identification number (β€œIIN”) is the first six digits of a bank card number or payment cards number and it is part of ISO/IEC 7812. It is commonly used in credit cards and debit cards, stored-value cards, gift cards and other similar cards.

2) BIN is beneficial to identify a card brand, issuing institution or bank, country of issuance, card type and category of cards. This information is very useful in commercial business for fraud prevention, especially in online store.


πŸ¦‘ Structure of Credit Card & Debit Card Numbers with BIN

1) An ISO/IEC 7812 number is up to 19 digits in length and used the following format

A BBBBB CCCCCCCCCCCC D

2) where A BBBBB denote the Bank Identification Numbers ("BIN") or Issuer identification number ("IIN")

3) A (Single Digit) specify the Major Industry Identifier (MII).
BBBBB (5 Digits) specify the issuing institution or bank.
CCCCCCCCCCCC (up to 12 digits) specify the individual account identifier.

4) D (Single Digit) specify the checksum for validation.

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Nord Vpn New Accounts non-tested all
twitter.com/UndercOdeTC

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

hansiboy980@gmail.com:Hansmartin980 | Expiration = 2020-07-10 12:13:21
kylestasiuk10@gmail.com:Bigdog10$ | Expiration = 2022-05-12 19:16:34
nbohannan@gmail.com:tk421421 | Expiration = 2021-04-06 23:42:55
mattyheap@hotmail.com:MDH163264 | Expiration = 2022-05-28 01:58:37
ddeleon1103@gmail.com:Dyllon24 | Expiration = 2022-03-08 01:53:35
nath4c@gmail.com:Trains444 | Expiration = 2022-09-28 18:25:54
khushpreetsokhi@gmail.com:capt6717 | Expiration = 2022-05-08 10:41:30
infidusdiabolus@gmail.com:amethistI1 | Expiration = 2019-09-22 03:35:14
burn.lunacy@gmail.com:burn1976 | Expiration = 2021-07-19 08:01:34
jsmitty87@live.com:iddqd090 | Expiration = 2022-04-21 07:56:44
agonzo1121@gmail.com:superman65 | Expiration = 2022-11-11 19:30:29
robineau.antoine@hotmail.fr:Antoine1984 | Expiration = 2022-08-18 16:41:14
chloebellj767@hotmail.com:cebj070489 | Expiration = 2021-08-30 00:00:00
stefanos.valvis@ymail.com:cheese99 | Expiration = 2019-09-26 20:39:26
olga.kaczynska@gmail.com:kaczulla3 | Expiration = 2020-06-22 11:36:52
QuentonH234@gmail.com:Wordbla6 | Expiration = 2022-06-18 23:38:36
kubadziech.main@gmail.com:kdnfsug2 | Expiration = 2019-09-20 20:36:13
john_wb_hill@yahoo.com:Albatross1 | Expiration = 2020-03-15 00:41:57
tmantis1@lakeheadu.ca:Monkey52 | Expiration = 2019-10-23 15:44:03
mongelt@gmail.com:a89gg5kd | Expiration = 2020-05-09 02:26:41
robtdixon@gmail.com:Sauvage00 | Expiration = 2022-05-23 21:33:40
carljsandberg@live.com:Bajs12345 | Expiration = 2020-02-16 06:35:58
darth_maximus@hotmail.com:ingorion177g | Expiration = 2020-09-21 07:08:37
patkell13@gmail.com:Murphy13 | Expiration = 2022-10-06 21:07:20
kazemini1018@gmail.com:Hassan10 | Expiration = 2020-10-22 23:09:41
aaron.john.burke@gmail.com:aptkauic0$ | Expiration = 2021-03-04 08:13:52
victorialrussell101@gmail.com:200801121 | Expiration = 2020-10-08 20:09:07
imbatman2332@live.com:William23 | Expiration = 2019-10-10 21:50:53
fatihgorman@hotmail.com:fatgor01 | Expiration = 2020-02-07 09:18:20
huussiman@gmail.com:murmeli1 | Expiration = 2022-06-21 15:48:15
nebys082@gmail.com:xodqmffl0822 | Expiration = 2022-02-14 01:14:34
gascart@hotmail.com:Fripouille59 | Expiration = 2019-09-25 14:19:16
scummer999@hotmail.com:djj0rdan | Expiration = 2020-05-12 12:04:18
abu_soni@yahoo.com:bangladesh1 | Expiration = 2021-05-02 00:11:01
krilleman420@hotmail.com:r313afaf1 | Expiration = 2020-06-20 14:34:37
krogercarneiro@gmail.com:fatima3546 | Expiration = 2022-03-04 17:10:44
lior.cohen06@gmail.com:juliee13 | Expiration = 2019-09-19 22:11:25
borges.felix@gmx.de:7Z78a3Xfbz23 | Expiration = 2021-12-07 11:50:55
joelmoore14@gmail.com:Leedsutd1 | Expiration = 2019-10-01 22:33:58
blake.smartguy@gmail.com:goF15h1ng | Expiration = 2019-12-23 13:33:31
gaming_yeti@hotmail.com:sasquatch10 | Expiration = 2022-04-18 01:51:03
jttatsuo@gmail.com:Junelake1 | Expiration = 2019-09-19 00:00:00
ravi@ravigovind.com:r1a0v2i3 | Expiration = 2022-07-27 13:44:18
reed.jaren@gmail.com:Basegod1 | Expiration = 2022-07-12 07:38:55


▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘For Carder All Tools Needed :
t.me/UndercOdeTesting

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) Web Base BIN Tools

2) BIN Checker - To validate user input BIN.

3) BIN Search & Finder - To find out BIN.

4) IP/BIN Combo Checker - To validate user input IP Address and BIN.

5) Credit Card Checker - To validate user input Credit Card or Debit Card.

6) Credit Card Number Generator

7) Random Credit Card Number Generator - To generate valid (but fake)

8) random Credit Card or Debit Card Numbers.

9) BIN Credit Card Number Generator - To generate valid (but fake)

10) random Credit Card or Debit Card Numbers base on user input BIN.

11) Bank Credit Card Number Generator - To generate valid (but fake)

12) random Credit Card or Debit Card Numbers base on bank specific BIN.

13) BIN Lists and Ranges - Information on BIN Lists and Ranges.

14) API Lookup BIN Tools

15) API Lookup Access - Documentation on our API Access tools.

16) BIN Checker API

17) Credit Card Checker API

18) Credit Card Generator API

19) Multi BIN Checker Premium API

20) BIN Search Premium API

23) Many sites avaible their i recommended
> https://www.bincodes.com/

FOR FREE

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Grab and analyze a file Crawl and analyze a file :
crawl and analyze a file is very simple. This tutorial will guide you step by step to achieve it with an example. let's start!
PART 1
Twitter.com/UndercOdeTC

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :


1) First, I have to decide the URL address we will crawl. Can be set in a script or passed in $ QUERY_STRING. For simplicity, let's set the variables directly in the script.

<?
$ Url = 'http://www.php.net' ;
?>

2) The second step, we crawl the specified file, and by file () function it exists in an array.

<?
$ url = 'http://www.php.net' ;
$ lines_array = file ( $ url );
?>

3) OK, now there are files in the array. However, the text we want to analyze may not be all on one line. To understand this file, we can simply convert the array $ lines_array into a string. We can implement it using the implode (x, y) function. If you later want to use explode (set an array of string variables), it may be better to set x to "|" or "!" Or other similar separator. But for our purposes, it is best to set x to a space. y is another required parameter because it is the array you want to process with implode ().

<?
$ url = 'http:;
$ lines_array = file ( $ url );
$ lines_string = implode ( '' , $ lines_array );
?>

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Grab and analyze a file Crawl and analyze a file :
crawl and analyze a file is very simple. This tutorial will guide you step by step to achieve it with an example. let's start!
PART 2
Twitter.com/UndercOdeTC

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

4) Now that the crawling is done, it's time to analyze it. For the purpose of this example, we want to get everything between <head> to </ head>. In order to parse out the string, we also need something called a regular expression.

<?
$ url = 'http://www.php.net' ;
$ lines_array = file ( $ url );
$ lines_string = implode ( '' , $ lines_array );
eregi ( "<head> (. *) </ head> " , $ lines_string ,$ head );
?>

5) Let's take a look at the code. As you can see, the eregi () function is executed in the following format:

eregi ("<head> (. *) </ Head>", $ lines_string, $ head);

"(. *)" Means everything and can be explained For, "Analyze all things between <head> and </ head>". $ lines_string is the string we are analyzing, and $ head is the array where the analysis results are stored.

6) Finally, we can lose data. Because there is only one instance between <head> and </ head>, we can safely assume that there is only one element in the array, and that is what we want. Let's print it out.

<?
$ url = 'http://www.php.net' ;
$ lines_array = file ( $ url );
$ lines_string = implode ( '' , $ lines_array );
eregi ( "<head> (. *) </ head> " ,);
echo $ head [ 0 ];
?>

7) That's all there is to it.
<? php
$ url = 'http://www.php.net' ;
$ lines_array = file ( $ url );
$ lines_string = implode ( '' , $ lines_array );
preg_match_all ( "/ <body ([^>] . +?)> (. *) <\ / body> / is " , $ lines_string , $ m );
echo " <xmp> " ;
echo $ m [ 2 ] [ 0 ];
?>

That all !
Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ SSD does not recognize the disk [processing skills]
by UndercOde
t.me/UndercOdeTesting

1) as long as the reasons for the solid-state hard disk drive drop-out, there are generally several reasons, such as abnormal power failure, loose SATA interface, link power management, and firmware bug. Or, it is a firmware bug. If it is a firmware bug, updating the manufacturer's firmware can usually solve it.
2) the abnormal power failure will cause the FTL of the solid state disk to be damaged. This situation generally requires secure erasure, but before proceeding, you need to scan it with software to confirm that commonly used tools can be downloaded online After, after confirming, then perform Secure Erase repair, usually the success rate is 100%. However, if you perform a secure erase repair, the data on the solid state hard disk will be gone, so readers are reminded again that, for security reasons, generally important files and data are stored on the mechanical hard disk. The solid state hard disk only contains the system and installs applications. The steps can be, let's take a look at the idea of undercode to solve the solid state hard disk does not recognize it.

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) There are several reasons for solid-state hard disk drive failures, such as abnormal power failures, loose SATA interfaces, link power management, and firmware bugs. The most frequent disk failures are FTL damage caused by abnormal power failures and disk failures, or Firmware bug. If it is a firmware bug, you can usually fix it by updating the manufacturer's firmware.

2) Secondly, the abnormal power failure will cause the FTL of the solid state disk to be damaged. This situation generally requires secure erasure, but before proceeding, you need to scan it with software to confirm that commonly used tools can be downloaded online After, after confirming, then perform Secure Erase repair, usually the success rate is 100%. However, if you perform a secure erase repair, the data on the solid state hard disk will be gone, so readers are reminded again that, for security reasons, generally important files and data are stored on the mechanical hard disk. The solid state hard disk only contains the system and installs applications.

3) First of all, when encountering a solid-state hard disk that does not recognize the disk, all we have to do is disassemble the machine and look at the main control. ), Which is the very square and square chip on the circuit board. Only when you know the main control chip, you can go to the corresponding card-opening software tool to open the card. .

4) Secondly, to open the card for mass production, you need to put the solid-state hard disk into a SATA mobile hard disk box and convert it into a USB interface, and then insert it into the computer USB2.0 interface. This is indeed the case through practice. Please try to insert a USB2.0 card to start mass production.

5) Download a corresponding card-opening mass production tool. Because this disk is no longer recognized, you need to short the 2 shorting points on the motherboard to allow the mass production tool to recognize the main control model, so we have to insert it in this posture. USB to computer. Of course, other solid-state short-circuiting points will be elsewhere, but most solid-state card openings require short-circuiting, and the specific location depends on the situation. Those without tweezers can also be shorted with a soldering iron flying lead.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
πŸ¦‘ you can get Many Hackers News 2020 From trusted sources
From UndercOde tweets :
Twitter.com/UndercOdeTC
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Unix administrative security :
t.me/UnderCodeTesting

PART 1 THEOR

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) Most people think that the security issues are technical. Hackers are computer geniuses with superb programming skills.

2) This is not the case. Most hackers are just more patient and careful than ordinary network users. Function or system administrator's sloppy intrusion into the system.

3) According to CERT statistics, 80% of security problems are caused by management vulnerabilities, that is to say, the vast majority of security vulnerabilities are caused by operating errors of system administrators. The structure is thoroughly analyzed), and most of the current security articles discuss the use of firewalls. I am not opposed to using firewalls to protect the security of the network, but since most problems can be prevented from a management perspective, why wait for a firewall?

> Of course, any operating system has one or more technical vulnerabilities, but in general, the premise of using these technical vulnerabilities to obtain superuser rights is to have a native shell. Without an operational shell, a hacker cannot use such a buffer Overflow, sendmail bug and other programs to gain superuser permissions This article introduces the security of the system from a management perspective. Management can prevent most general hackers from attacking, but it is not to say that security can be achieved completely through management.

4) For those hackers who are very familiar with the operating system, even without a Shell account, he may still invade this machine, such as using IP spoofing and technical vulnerabilities of certain operating systems. And if a hacker just wants to paralyze a machine instead of stealing information, he will most likely use a DOS attack (denial of service), which is to let the host process the useless information all the time so that it cannot work properly. Setting up a fire wall for a sensitive network should be as important as setting up a network environment. As far as the current situation is concerned, as long as the firewall is properly set, the security of the local area network is still guaranteed.

5) However, the system administrator needs to have a certain degree of security awareness, and can judge whether the machine is faulty or technically attacked.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Unix administrative security :
t.me/UnderCodeTesting

PART 2 :

> Easy to go wrong

finger is a very common tool on the UNIX platform. The purpose of using it is to provide users with some relevant information on a given system. The most problematic part of a Unix host is fingerd, which is the daemon for finger. Its working principle is described in many UNIX books, but its disadvantage is that there are too many messages. A person skilled in using finger can break a fingerd machine in a short period of time. This is not alarmist. Finger of SUN Solaris can provide all online user names and all user names on the host. User information. For example, I make a finger request to a SUN machine and query the root status. If its fingerd is not closed or replaced, it will tell me the following information:
Login name: root In real life: Super-User

Directory: / Shell: / sbin / sh

Last login Fri Mar 26 16:54 on pts / 2

New mail received Sat Mar 27 23:10:37

πŸ¦‘ So I can get the following information :

(1) The real name of root is Super-User (some hard-working system administrators will write their own names here, and set the root password to their own name !!);

(2) The root directory of root is at / next, sometimes after hacking a machine as a normal user find / etc / passwd is the root to read and write, so he can get the majority of users on the host name by viewing the user directory;

(3) the environment is the root of Shell / sbin / sh, if it is / bin / passwd, it proves that the user can only change the password when logging in to the host;

(4) The last time root logged into the machine was at 2019.3.26 16:54;

(5) A new letter from root arrived at 2019.3.26, but he has not seen the letter since 2018.12.23.

Written by UndercOde
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Programming Techniques-Self-made c language compiled cgi to achieve search C language to achieve self-compiled cgi search

πŸ¦‘ π•ƒπ”Όπ•‹π•Š π•Šπ•‹π”Έβ„π•‹ :

1) Environmental
/ usr / local / apache / htdocs / ( to be retrieved files Under this directory)
/ usr / local / apache / temp / (as a transit folder)
/ usr / local / apache / cgi-bin /

2) Place the a.out generated by gcc search.c in / usr / local / In apache / cgi-bin /, the permission is set to nobody
to execute.

3) chown -R nobody.nobody / usr / local / apache / temp

4) Add a file deletetemp permission in /etc/cron.daily to 555
rm -f / usr / local / apache / temp / *

5) In / Add a file myetc permission in etc / cron.hourly to 555
updatedb -U / usr / local / apache / htdocs

6) Delete the

appendix (a total of 2) of a file locate.cron in /etc/cron.daily :

a) index .htm source
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
</head>

<body>
<p>...</p>
<form name="form1" action="http://129.158.217.223/cgi-bin/a.out">
<p> </p>
<p>
<input name="keyname" value="" type=text>
</p>
<p>
<input type="submit" value="...">
</p>
</form>
<p> </p>
</body>
</html>

2. search.com
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <fcntl.h>

int main(int argc, char* argv[])
{
int fd;
int status;
time_t i;
char cFileName[64];
char cTempName[64];
char cBuffer[1024];
char *p = cBuffer;
char cContent[10240];

char *data;
char keyword[1024];
data = getenv("QUERY_STRING");
if(data==NULL)
{
printf("Content-Type:text/html ");
printf("not found!");
exit(1);
}

sscanf(data, "keyname=%s&", keyword);

p += sprintf(p, "locate '%s' | sed -e 's#^/usr/local/apache/htdocs#http://129.158.217.223#' | sed -e 's#^.*$#<a href=&>&</a>
#' > ", keyword);
i = time(NULL);

sprintf(cTempName, "%d.html", i);
sprintf(cFileName, "/usr/local/apache/temp/%d.html", i);
strcat(cBuffer, cFileName);
cBuffer[1024-1]=0;

system(cBuffer);
fd = open(cFileName, O_RDWR);
status = read(fd, cContent, sizeof(cContent)-1);
close(fd);

printf("Content-Type:text/html ");
printf("<meta http-equiv=refresh content=0;url="http://129.158.217.223/temp/%s"> ", cTempName);
printf("Waiting....................... ");
printf("%s", keyword);
return 0;
}

Written by uNDERCoDE
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁