UNDERCODE COMMUNITY
2.69K subscribers
1.24K photos
31 videos
2.65K files
81K links
πŸ¦‘ Undercode World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE


✨ Youtube.com/Undercode
by Undercode.help
Download Telegram
Forwarded from Backup Legal Mega
πŸ¦‘FRESH PREMIUM PROXIES DETAILS LIST:

pastebin.com/5rN2vTCC
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Special wordlist for cracking :
> you can create your own with cupp but those wordlist special one :

πŸ¦‘π•ƒπ”Όπ•‹'π•Š π•Šπ•‹π”Έβ„π•‹ :

> hashesorg2019 100 12.79 Gb
https://download.weakpass.com/wordlists/1851/hashesorg2019.gz

>weakpass_2a 99 85.44 Gb
https://download.weakpass.com/wordlists/1919/weakpass_2a.gz


>weakpass_2 97 28.44 Gb
https://download.weakpass.com/wordlists/1863/weakpass_2.gz

>HashesOrg 95 4.14 Gb
https://download.weakpass.com/wordlists/1802/HashesOrg.gz

> weakpass_1 92 34.47 Gb
https://download.weakpass.com/wordlists/1257/DCHTPassv1.0.txt.gz

>DCHTPassv1.0.txt 83 22.84 Gb
https://download.weakpass.com/wordlists/1257/DCHTPassv1.0.txt.gz

> weakpass 80 36.7 Gb
https://download.weakpass.com/wordlists/1861/weakpass.gz

>DicAss.v.1.0.txt 68 206.69 Gb
https://download.weakpass.com/wordlists/1900/DicAss.v.1.0.txt.gz

πŸ¦‘More customize wordlists on :
https://weakpass.com/wordlist

E N J O Y
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Best sites for downloads any softwares-apps... :

1) Download.Com

2) FileHippo.Com

3) ZDNet Download

4) Softpedia.Com

5) Tucows.Com

6) FreewareFiles.Com

7) MajorGeeks

8) FileCluster > much more but this listy is most popular Websites

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
This media is not supported in your browser
VIEW IN TELEGRAM
Forwarded from Backup Legal Mega
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ Before they attack a bank what they do :

> An attacker collects the following information about the bank:

1) Information about network perimeter systems and software

2) Employees (including email addresses, telephones, positions, and names)

3) Partners and contractors, as well as their systems and employees

4) Business processes


πŸ¦‘ Examples of preparatory actions:

1) Penetrating the internal network

Stage 2. Penetrating the internal network
Stage 2. Penetrating the internal network
Stage 3. Developing the attack and gaining a foothold in the network

2) Once criminals have gained access to the bank's intranet, they need to obtain local administrator privileges on employee computers and servers to continue their attack. Success of attacks is due to insufficient system protection against internal intruders. Common vulnerabilities are as follows:

3) Use of outdated software versions and failure to install OS security updates
Configuration errors (including excessive user and software privileges, as well as setting local administrator passwords through group policies)

4) Use of dictionary passwords by privileged users
Absence of two-factor authentication for access to critical systems
After gaining maximum privileges on the host, criminals can access the OS memory in order to learn the credentials of all logged in users (usernames, passwords, or hash values of passwords). This data is then used to connect to other computers on the network.

πŸ¦‘
Stage 3. Developing the attack and gaining a foothold in the network

1) Moving among hosts is usually done with legitimate software and built-in OS functions (for example, PsExec or RAdmin). Since these are tools used by corporate system administrators on a daily basis, they are unlikely to cause suspicion. The Cobalt gang also resorted to use of phishing messages within the bank by sending letters from real employees' workstations.

2) Local administrator privileges are used according to a typical scheme: an attacker copies memory of the lsass.exe process and uses it to extract passwords of OS users (or their hash values) using the mimikatz tool. Such actions are not detectable by antivirus software because legitimate tools are used to copy memory (for example, ProcDump) while mimikatz runs on the attacker's laptop. In addition, attackers can use Responder to attack network protocols and intercept credentials.

3) Such methods of spreading throughout the network are given in more detail in our previous report.

4) If attackers manage to gain domain administrator privileges, they can continue to navigate freely through the network and monitor employees' computers, servers, and infrastructure services of the bank. With this level of privileges, it is very easy to gain access to the organization's business systems and banking softwareβ€”it is enough to identify workstations of employees who have such access and connect to them. Using the golden ticket technique, attackers can safely gain a foothold in the corporate system and stay there for a long time.

5)To disguise their presence, attackers often use bodyless malicious code that resides in RAM only. Attackers retain remote control after computer restarts by adding malicious software to the list of startup programs.

πŸ¦‘Stage 4. Compromising banking systems and stealing funds
After gaining a foothold in the network, criminals need to understand on which hosts the target banking systems are located and find the most convenient ways to access them. Criminals examine users' workstations in search of files indicating that a particular workstation has worked with bank applications. To store passwords for critical systems on corporate networks, specialized software is usually used.
Forwarded from Backup Legal Mega
>Such an attack scenario is very effective and has been successfully implemented during penetration testing on multiple occasions. Additional support for criminals can be provided by resources that contain information about the infrastructure: for example, monitoring systems that administrators use in their work or technical support resources for users.

> This data increases the confidence of intruders in their knowledge of the internal network structure and helps them to take into account operational details of the bank's business processes during the attack, so as not to raise suspicions or trigger detection.
Forwarded from Backup Legal Mega
πŸ¦‘ The main methods of theft are:

1) Transferring funds to fictitious accounts through interbank payment systems

2) Transferring funds to cryptocurrency wallets

3) Controlling bank cards and accounts

4) Controlling ATM cash dispensing

5) Developing or adapting malicious software for the software and

6) OS versions used in the bank

7) Preparing phishing emails

8) Setting up infrastructure (including domain registration, server rental, and purchase of exploits)

9) Preparing the infrastructure for money laundering and cash

10) Searching for money mules

11) Testing the infrastructure and malicious software

@Wiki @UndercodeTesting
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘ FULL DETAILED HOW THEY HACK BANK IN 2020-USE FOR SECURE YOUR CC
Forwarded from Backup Legal Mega
πŸ¦‘ SOME DANGEROUS MALWARES FOR WINDOWS SOLUTION AND DESCRIPTION
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Win32/Sality

Windows Defender detects and removes this threat.

This malware family can steal your personal information and lower your PC security settings.

Threats in this family can:
1) Stop your security software from running

2) Steal your sensitive information

3) Download and run other files

4) Delete security-related files from your PC

5) Lower your PC security settings

6) Find out ways that malware can get on your PC.

πŸ¦‘Spammer:Win32/Sality.A


> Spammer:Win32/Sality.A is a detection for malware that searches a user's Outlook address book and Internet Explorer cached files for e-mail addresses to send spammed messages to.

>It then sends out spammed messages based on information it retrieves from a remote server.


πŸ¦‘Virus:Win32/Sality.AU

> Windows Defender Antivirus detects and removes this threat.

> This threat can lower your PC security.

> It is installed by Worm:Win32/Sality.AU. It also spreads through infected removable drives, such as USB flash drives.

> Find out ways that malware can get on your PC.

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘SEVER MALWARES FONCTIONS 2 :

TrojanDropper:Win32/Sality.AU

> TrojanDropper:Win32/Sality.AU is a trojan that drops the virus

> Win32/Sality.AU. The trojan may be executed by Exploit:Win32/CplLnk.A.

Β» Alert level: SEVERE

> Virus:Win32/Sality.AM

> This virus is a member of the Win32/Sality family. This family can delete Windows files with the extensions .SCR or .EXE.

> This family can also end or close your antimalware software and other security-related processes.

πŸ¦‘Virus:Win32/Sality.G.dll

> This virus is a member of the Win32/Sality family. This family can delete Windows files with the extensions .scr or .exe.

> They can also end or close antivirus software and other security-related processes and services.

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘The official facebook hacking tool :

πŸ¦‘Requirements :

Selenium
Matplotlib-1.2.1
Networkx-1.8.1
Numpy-1.7.1
Pygraphviz-1.1
Simplejson-3.3.0
Mechanize-0.2.5
Other: gephi-0.8.2-beta (Graphs software)

πŸ¦‘π•€β„•π•Šπ•‹π”Έπ•ƒπ•ƒπ•€π•Šπ”Έπ•‹π•€π•†β„• & β„π•Œβ„• :

1) git clone https://github.com/chinoogawa/fbht.git

2) cd fbht

3) python main.py

βœ… Verified by Undercode :

> slax
> kali
> parrot
> debian


E N J O Y

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
πŸ¦‘ EXPERT HACKING & PROGRAMMING TIPs BY UNDERCODE
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Detailed webpack advanced configuration and optimization

> The so-called multi-page packaging means that multiple html pages are packaged at the same time. The multi-page packaging also uses html-webpack-plugin. However, when the plugin is introduced, multiple plugin objects are created because one html-webpack-plugin plugin object Can package a html page. Such as:
1) When packaging multiple pages, the key lies in the configuration of the chunks attribute, because in the absence of the configuration of the chunks attribute, the index.html and foo.html output by the package will both import index.js and foo.js.

2) Therefore, the chunks attribute must be configured to specify the output module to be introduced in the packaged html file. The elements of the array are the chunk names specified when the entry attribute value is the object. The above configuration can be implemented. Index.html only introduces index. js, foo.html only import foo.js file

3) Second, configure source-map

source-map is the source code mapping, mainly to facilitate code debugging, because the code we packaged on the line will be compressed and processed, resulting in all the code being compressed into one line. If there is an error in the code, the browser will only prompt an error The location is on the first line, so that we can't really know the specific location of the error in the source code. webpack provides a devtool attribute to configure source code mapping.