UNDERCODE COMMUNITY
2.72K subscribers
1.24K photos
31 videos
2.65K files
83.8K links
🦑 Undercode World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE


Youtube.com/Undercode
by Undercode.help
Download Telegram
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
⚡️ Why AirPods Pro 2 Still Reign Supreme Over AirPods 4: Key Features Worth the Upgrade

https://undercodenews.com/why-airpods-pro-2-still-reign-supreme-over-airpods-4-key-features-worth-the-upgrade/

@Undercode_News
Forwarded from UNDERCODE TESTING
🦑Awesome Security - A collection of awesome software, libraries, documents, books, and resources about security.

🔗https://lnkd.in/dGb2hzyY
Awesome Web Security - Web Security materials and resources for cutting-edge penetration techniques.

🔗https://lnkd.in/d3kxd9ik

⭕️Awesome Machine Learning for Cyber Security Tools and resources on machine learning for cybersecurity.

🔗https://lnkd.in/dZPtJmXV

⭕️awesome-web-hacking - Resources for learning about web application security.

🔗https://lnkd.in/dqmeXsgj

⭕️awesome-mobile-security - Maintained by @vaib25vicky with contributions from the security and developer communities.

🔗https://lnkd.in/dbbvfeYT

⭕️awesome-threat-intelligence - A curated list of awesome Threat Intelligence resources.

🔗https://lnkd.in/dSPyZAQn
awesome-security-hardening - Collection of security hardening guides, best practices, and tools.

🔗https://lnkd.in/de_PyRxH
security-hardening

⭕️Awesome Cyber Security - A collection of software, libraries, documents, and resources about security.

🔗https://lnkd.in/dXztUHKk

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁
👍1
Forwarded from UNDERCODE TESTING
🦑OTP Bypass on Register account via Response manipulation:

1. First Method
1. Register account with mobile number and request for OTP.
2. Enter incorrect OTP and capture the request in Burpsuite.
3. Do intercept response to this request and forward the request.
4. response will be
{"verificationStatus": false, "mobile": 9072346577", "profileld": "84673832"}
5. Change this response to
{"verificationStatus": true, "mobile": 9072346577", "profileId": "84673832" }
6. And forward the response.
7. You will be logged in to the account.

Impact: Account Takeover

2. Second Method.
1. Go to login and wait for OTP pop up.
2. Enter incorrect OTP and capture the request in Burpsuite.
3. Do intercept response to this request and forward the request.
4. response will be <error>
5. Change this response to
success
6. And forward the response.

Ref: Het Vikam
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁