UNDERCODE COMMUNITY
2.67K subscribers
1.23K photos
31 videos
2.65K files
79.2K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
> the code :

server {
listen 80;
server_name default_server;
location /status {
stub_status on;
allow 114.247.125.227;
}
}
4) The allow configuration allows only specified IPs to access the nginx status function, and removing it means no restrictions.

5) After restarting Nginx, the browser visits http://{IP}/status to view the status monitoring information
6) Active connections: the current number of client active connections (including waiting client connections), equivalent to TCP connection status in Established and SYN_ACK

7) accepts: the total number of accepted client connections, that is, the connections that have been received by the worker process

8) handled: The total number of connections that have been handled

9) requests: the total number of HTTP requests from the client

10) Reading: The number of http requests currently being read (the http request header is read)

11) Writing: The number of connections currently prepared to respond (written to the http response header)
Waiting: The number of idle client requests currently waiting, the waiting time is the interval between Reading and Writing

12) After collecting Nginx data, you can use the monitoring tool to monitor it.

written by Undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
B) Log analysis :

1) The default log format configuration of Nginx can be found in /etc/nginx/nginx.conf


log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for" $request_time $upstream_response_time';


2) Examples of printed logs

39.105.66.117-mp [11/Sep/2019:19:03:01 +0800] "POST /salesplatform-gateway/users HTTP/1.1" 200 575 "-" "Apache-HttpClient/4.5.5 (Java/1.8. 0_161)" "-" 0.040 0.040
39.105.66.117-mp [11/Sep/2019:19:03:08 +0800] "POST /salesplatform-gateway/users HTTP/1.1" 200 575 "-" "Apache-HttpClient/ 4.5.5 (Java/1.8.0_161)" "-" 0.008 0.008

πŸ¦‘
1) $remote_addr: client IP address

2) $remote_user: used to record the user name of the remote client

3) $time_local: used to record access time and time zone

4) $request: Used to record the request URL and request method

5) $status: response status code

6) $body_bytes_sent: Number of bytes of file body content sent to the client

7) $http_referer: It can record from which link the user came from

8) $http_user_agent: the browser information used by the user

9) $http_x_forwarded_for: can record the client IP, through the proxy server to record the client's IP address

10) $request_time: refers to the time from receiving the first byte of the user request to sending the response data, that is, $request_time includes the time to receive the client request data, the back-end program response time, and the time to send the response data to the client

11) $upstream_response_time: Time to receive response from upstream server

written by Undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Common analysis commands:

𝓛𝓔𝓣'𝓒 𝓒𝓣𝓐𝓑𝓣 :

1) Statistic UV according to visiting IP

awk '{print $1}' paycenteraccess.log | sort -n | uniq | wc -l

2) Query the most frequently visited IP (top 10)

aWk '{print $1}' /var/log/nginx/access.log | sort -n |uniq -c | sort -rn | head -n 10

3) View the number of IP visits in a certain period of time (1-8 o'clock)


awk '$4 >="[25/Mar/2020:01:00:00" && $4 <="[25/Mar/2020:08:00:00"' /var/log/nginx/access.log | awk '{print $1}' | sort | uniq -c| sort -nr |wc -l

4) View IPs accessed more than 100 times


awk '{print $1}' /var/log/nginx/access.log | sort -n |uniq -c |awk '{if($1 >100) print $0}'|sort -rn

5) View the URLs and number of visits of the specified IP


grep "39.105.67.140" /var/log/nginx/access.log|awk '{print $7}' |sort |uniq -c |sort -n -k 1 -r

6) Statistic PV based on visit URL


cat /var/log/nginx/access.log |awk '{print $7}' |wc -l

7) Query the most frequently visited URL (top 10)


awk '{print $7}' /var/log/nginx/access.log | sort |uniq -c | sort -rn | head -n 10

8) View the most frequently visited URL ([exclude /api/appid]) (top 10)


grep -v '/api/appid' /var/log/nginx/access.log|awk '{print $7}' | sort |uniq -c | sort -rn | head -n 10

9) View pages with more than 100 page views


cat /var/log/nginx/access.log | cut -d ' ' -f 7 | sort |uniq -c | awk '{if ($1 > 100) print $0}' | less

10) View the most recent 1000 records and the most visited pages


tail -1000 /var/log/nginx/access.log |awk '{print $7}'|sort|uniq -c|sort -nr|less

11) Count the number of requests per hour, the time point of top10 (accurate to hours)

awk '{print $4}' /var/log/nginx/access.log |cut -c 14-15|sort|uniq -c|sort -nr|head -n 10
12) Count the number of requests per minute, the time point of top10 (accurate to minutes)


awk '{print $4}' /var/log/nginx/access.log |cut -c 14-18|sort|uniq -c|sort -nr|head -n 10
13. Count the number of requests per second, the time point of top10 (accurate to seconds)


awk '{print $4}' /var/log/nginx/access.log |cut -c 14-21|sort|uniq -c|sort -nr|head -n 10
14) Find logs for a specified period of time

awk '$4 >="[25/Mar/2020:01:00:00" && $4 <="[25/Mar/2020:08:00:00"' /var/log/nginx/access.log
15) List urls with transmission time over 0.6 seconds, display the first 10


cat /var/log/nginx/access.log |awk '(substr($NF,2,5) > 0.6){print $4,$7,substr($NF,2,5)}' | awk -F '"' '{print $1,$2,$3}' |sort -k3 -rn | head -10

16) List the time points when the /api/appid request time exceeds 0.6 seconds


cat /var/log/nginx/access.log |awk '(substr($NF,2,5) > 0.6 && $7~/\/api\/appid/){print $4,$7,substr($NF,2,5)}' | awk -F '"' '{print $1,$2,$3}' |sort -k3 -rn | head -10
cat /var/log/nginx/access.log |awk '(substr($NF,2,5) > 0.6 && $7~/\/api\/appid/){print $4,$7,substr($NF,2,5)}' | awk -F '"' '{print $1,$2,$3}' |sort -k3 -rn | head -10
17) Get the top 10 most time-consuming request time, url, time-consuming


cat /var/log/nginx/access.log |awk '{print $4,$7,substr($NF,2,5)}' | awk -F '"' '{print $1,$2,$3}' | sort -k3 -rn | head -10

written by Undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Animation Fundamentals β€”-1.73 GB purchased by undercode

https://cloud.blender.org/p/animation-fundamentals/

> Download <
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Updated Generate Unlimited instagram acoounts :

β’Ύβ“ƒβ“ˆβ“‰β’Άβ“β“β’Ύβ“ˆβ’Άβ“‰β’Ύβ“„β“ƒ & β“‡β“Šβ“ƒ :


1) Create a new virtualenv

2) clone https://github.com/FeezyHendrix/Insta-mass-account-creator

2) Requirements:
run pip install -r requirements.txt

3) Download chrome driver
configure it to path

4) open config.py in modules

Config

πŸ¦‘Usage
chromedriver_path Path to chromedriver

bot_type Default is 1 to use selenium to create accounts or use 2 to use python requests

password General password for Each account generated to be able to
login

use_local_ip_address using local Ip to create account, default is False

use_custom_proxy use your own custom proxy, Default is False change to True add list of proxies to Assets/proxies.txt

amount_of_account amount of account to create

proxy_file_path Path to the proxy file .txt format

amount_per_proxy for custom proxy, amount of account to

create for each proxy

email_domain for custom domain name, is useful for use

own email_domain

country the country of account

identity the complete name of created accounts

5) run python creator.py

6) All username are stored in Assets/usernames.txt

βœ…

@UndercodeTesting
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
ANDROID-7-GMAIL EXPLOITS-.py
4.7 KB
Android-7 gmail Hacking -exploit