UNDERCODE COMMUNITY
2.68K subscribers
1.23K photos
31 videos
2.65K files
80.1K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Crack Evernote (Android version)-advanced account features
Refer to the previous article " Cracking Evernote (Android version)-password lock function ".
t.me/UndercodeTesting

πŸ¦‘ Required tools:

1)java environment, the rationale for changing the apk

2) The rationale for changing the apk (Android decompilation-ApkIDE3.1):

3 ) The cracked apk (Android version)

> get from here https://t.me/UnderCodeTesting/1376

πŸ¦‘ Two points need to be modified:

β‘ Account type function

β‘‘Block the prompt of "Premium account has expired" in the notification bar


πŸ¦‘ Modification process:

β‘  Modify account type function

According to the modification in the previous article:

. \ smali \ com \ evernote \ ui \ EvernotePreferenceActivity.smali


among them,

raa () is equal to 1, that is, "NORMAL", ordinary users

this.h.ah (), the current user permissions,

From the. \ Smali \ com \ evernote \ d \ f \ r.smali file, you can get the permission relationship:

a = 1, "NORMAL"

b = 3, "PREMIUM"

c = 5, "VIP"

d = 7, "MANAGER"

e = 8, "SUPPORT"

f = 9, "ADMIN"

The ah () function exists in the. \ smali \ com \ evernote \ client \ b.smali file,

The ah () function code:


change into


Make the ah () function return value: 3, that is, "PREMIUM"

β‘‘ Block the prompt of "Premium account has expired" in the notification bar

The process of positioning and modifying the position,

1.

<string name = "premium_downgrade_title"> Premium account has expired </ string>

<string name = "premium_downgrade_text"> Renew premium account </ string>

2.

<public type = "string" name = "premium_downgrade_title" id = "0x7f0703ab" />

<public type = "string" name = "premium_downgrade_text" id = "0x7f0703ac" />

3- final step :

. \ smali \ com \ evernote \ util \ bz.smali


Add a line of code at the beginning of the function, return-void

EVERYNOTE CLICK HERE OFFICIAL SITE

ENJOY
WRITTEN BY UNDERCODE
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Hackers stole 63.2GB of source code from Microsoft's private GitHub repository :
twitter.com/UndercodeNews

1) After announcing the successful invasion of Tokopedia, an Indonesian company, on March 28 this year, the hacker recently released heavy news that he had stolen .dump files with a capacity of more than 63.2GB from Microsoft's private GitHub repository. According to the screenshot of the file's directory listing, the dump file covers Azure, Office and some Windows runtimes.

2) This news was subsequently confirmed by the Twitter account of the data breach monitoring and prevention service organization Under the Breach. It should be noted that despite the large scale of the leaked source code, it does not mean that hackers will obtain Microsoft's core business secrets.

3) The content stored by Microsoft in the GitHub repository is generally public, even if it is stored in a private warehouse. The content is the same, and Microsoft will strictly screen the uploaded code to prevent leakage.

WRITTEN BY UNDERCODE
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘WIKI LEAK- Few days ago @UndercodeTesting
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Enumall – Subdomain Discovery Using Recon-ng & AltDNS :
t.me/UndercodeTesting

πŸ¦‘INSTALLISATION & RUN :

1) Setting up Enumall for Subdomain Discovery
Install recon-ng from Source, clone the Recon-ng repository:

> git clone https://LaNMaSteR53@bitbucket.org/LaNMaSteR53/recon-ng.git

2) Change into the Recon-ng directory:

cd recon-ng

3) Install dependencies:

> pip install -r REQUIREMENTS

4) Link the installation directory to /usr/share/recon-ng

ln -s /$recon-ng_path /usr/share/recon-ng

5) Optionally (highly recommended) download:

– AltDNS
– A good subdomain bruteforce list (example here)

6) Create the config.py file and specify the path to Recon-ng and AltDNS as it showed in config_sample.py.

πŸ¦‘ Basic Usage for Subdomain Enumeration
./enumall.py domain.com

> Also supports:

-w to run a custom wordlist with recon-ng
-a to use alt-dns
-p to feed a custom permutations list to alt-dns (requires -a flag)
-i to feed a list of domains (can also type extra domains into the original command)

> -i to feed a list of domains (can also type extra domains into the original command)

@UndercodeTesting
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Qewe ransomware:
t.me/UndercodeTesting


πŸ¦‘ This is the detailed information of Qewe ransomware:

1) Ransomware family3 DJVU / STOP4 Ransomware

2) extension .qewe

3) Ransomware considerations _readme.txt
ransom From US $ 490 to US $ 980 (in Bitcoin)
contact helpdatarestore@firemail.cc , helpmanager@mail.ch
Detect5 Generik.CNMFSW , Generik.ETDNQBV , Backdoor: MSIL / Noancooe.A

3) Symptoms Your file (photo, video, document) has .qewe extension and you cannot open it

4) The encryption algorithm used by Qewe is AES-256. Therefore, if your document is encrypted with a specific decryption key, this is completely different and there are no other copies. The sad reality is that without a unique key, it is impossible to recover information.

5) If Qewe works in online mode, you will not be able to access the AES-256 key. It is stored on a remote server owned by a fraudster who promoted Qewe infection.

6) To get the decryption key, you should pay $ 980. To obtain payment details, the message in the message encourages the
πŸ¦‘ This fastest way for decrypt and remove Qewe ransomware
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘CARDING Methods that are used by carders to steal sensitive information :
t.me/UndercodeTesting


1) Malware. Malware that is mostly used for carding includes these categories: Trojan horses, rootkits, backdoors, etc. Each of these viruses can be installed on the system without any permission asked and then used to get the backdoor access to the system.

> These viruses can hide deep in the system as long as they need to collect the required amount of personal data. They can track their victims by recording their keystrokes or taking the screenshots of their desktops while they are using the Internet. After collecting financial information and other sensitive data, they send it to their remote server.

> The latest threat to watch out is β€œBackoff virus”, which is set to track PC users and steal their credit card data.

2) Phishing. People engaged in carding sometimes use phishing websites to trick users into revealing their financial information. These sites look like real login websites because they are developed by grabbing images from real websites and using URLs that are very close to the real ones. Also, victims can also receive fake email messages resembling reputable companies. They seek to make the victim reveal his/hers credit card number, expiration date, and similar sensitive information.

3) Carding forums. If the carder is not willing to use malware or if he/she simply does not know how to do that, he/she can use carding forums to receive needed information. Such forums have already become marketplaces used for such illegal activities as exchanging information related to stolen credit or debit card account numbers and similar data. The membership on such sites is usually paid, and only online nicknames can identify each of carders.

written by undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Protecting yourself from carding :


1) If you believe that a credit card fraudster targets you, you should waste no time and contact your bank. Please, let them know about your issues.
If your business was affected, you should also let all your customers know about that. Asking them to change their passwords and another login information is always a good idea.

2) To avoid programs that are used for identity theft, you should install a reliable anti-spyware. We highly recommend the following tools that have been tested by our team and received the biggest ranking: Reimage , SpyHunter 5.

3) Don’t forget to update your programs (security software as well) to avoid vulnerabilities. These β€œholes” can be used for installing new malware on your computer that can additionally be used for tracking you and stealing your personal data.

4) Stay away from illegal websites, suspicious Facebook pages and email messages from unknown senders. Each of them can lead you to the loss of your sensitive information, including your financial data.

written by undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM