I set up two virtual hosts: mavencn and bsd , Corresponding to two URLs of maven.huangdong.com and bsd.huangdong.com. In the following, the default_root attribute in the general section is set for two virtual hosts.
Precautions for installation

First of all, you must pay attention to the permission settings of files and directories in CVS. You must give the account that the web server runs permission to read. When I use the cvsd service in the ports in FreeBSD, I set its umask to 022.



written by Undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑cvs service-ViewCVS- guide by undercode

#SUPPORT & SHARE :

T.me/UndercodeTesting

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 Online #Analyzers :

1) [AndroTotal](http://andrototal.org/)

2) [Appknox](https://www.appknox.com/) - not free

3) [AVC UnDroid](http://undroid.av-comparatives.info/)

4) [Virustotal](https://www.virustotal.com/) - max 128MB

5) [Fraunhofer App-ray](http://app-ray.co/) - not free

6) [AppCritique](https://appcritique.boozallen.com) - Upload your Android APKs and receive comprehensive free security assessments.

7) [NowSecure Lab Automated](https://www.nowsecure.com/blog/2016/09/19/announcing-nowsecure-lab-automated/) - Enterprise tool for mobile app security testing both Android and iOS mobile apps. Lab Automated features dynamic and static analysis on real devices in the cloud to return results in minutes. Not free

8) [AMAaaS](https://amaaas.com) - Free Android Malware Analysis Service. A baremetal service features static and dynamic analysis for Android applications. A product of [MalwarePot](https://malwarepot.com/index.php/AMAaaS).

9) [App Detonator](https://appdetonator.run/) - Detonate APK binary to provide source code level details including app author, signature, build and manifest information. 3 Analysis/day free quota.

10) [BitBaan](https://malab.bitbaan.com/)

11) [NVISO ApkScan](https://apkscan.nviso.be/) - sunsetting on Oct 31, 2019

12) [Mobile Malware Sandbox](http://www.mobilemalware.com.br/analysis/index\_en.php)

13) [IBM Security AppScan Mobile Analyzer](https://appscan.bluemix.net/mobileAnalyzer) - not free

14) [Visual Threat](https://www.visualthreat.com/) - no longer an Android app analyzer

16) [Tracedroid](http://tracedroid.few.vu.nl/)

17) [habo](https://habo.qq.com/) - 10/day

18) [CopperDroid](http://copperdroid.isg.rhul.ac.uk/copperdroid/)

19) [SandDroid](http://sanddroid.xjtu.edu.cn/)

20) [Stowaway](http://www.android-permissions.org/)

21) [Anubis](http://anubis.iseclab.org/)

22) [Mobile app insight](http://www.mobile-app-insight.org)

23) [Mobile-Sandbox](http://mobile-sandbox.com)

24) [Ijiami](http://safe.ijiami.cn/)

25) [Comdroid](http://www.comdroid.org/)

26) [Android Sandbox](http://www.androidsandbox.net/)

27) [Foresafe](http://www.foresafe.com/scan)

28) [Dexter](https://dexter.dexlabs.org/)

29) ~[MobiSec Eacus](http://www.mobiseclab.org/eacus.jsp)

30) [Fireeye](https://fireeye.ijinshan.com/)- max 60MB 15/day~~


✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Static Analysis Tools 2020 :

1. [Androwarn](https://github.com/maaaaz/androwarn/) - detect and warn the user about potential malicious behaviours developed by an Android application.
2. [ApkAnalyser](https://github.com/sonyxperiadev/ApkAnalyser)
3. [APKInspector](https://github.com/honeynet/apkinspector/)
4. [Droid Intent Data Flow Analysis for Information Leakage](https://www.cert.org/secure-coding/tools/didfail.cfm)
5. [DroidLegacy](https://bitbucket.org/srl/droidlegacy)
7. [Smali CFG generator](https://github.com/EugenioDelfa/Smali-CFGs)
8. [FlowDroid](https://blogs.uni-paderborn.de/sse/tools/flowdroid/)
9. [Android Decompiler](https://www.pnfsoftware.com/) – not free
10. [PSCout](http://pscout.csl.toronto.edu/) - A tool that extracts the permission specification from the Android OS source code using static analysis
11. [Amandroid](http://amandroid.sireum.org/)
12. [SmaliSCA](https://github.com/dorneanu/smalisca) - Smali Static Code Analysis
13. [CFGScanDroid](https://github.com/douggard/CFGScanDroid) - Scans and compares CFG against CFG of malicious applications
14. [Madrolyzer](https://github.com/maldroid/maldrolyzer) - extracts actionable data like C&C, phone number etc.
15. [SPARTA](https://www.cs.washington.edu/sparta) - verifies (proves) that an app satisfies an information-flow security policy; built on the [Checker Framework](https://types.cs.washington.edu/checker-framework/)
16. [ConDroid](https://github.com/JulianSchuette/ConDroid) - Performs a combination of symbolic + concrete execution of the app
17. [DroidRA](https://github.com/serval-snt-uni-lu/DroidRA)
18. [RiskInDroid](https://github.com/ClaudiuGeorgiu/RiskInDroid) - A tool for calculating the risk of Android apps based on their permissions, with online demo available.
19. [SUPER](https://github.com/SUPERAndroidAnalyzer/super) - Secure, Unified, Powerful and Extensible Rust Android Analyzer
20. [ClassyShark](https://github.com/google/android-classyshark) - Standalone binary inspection tool which can browse any Android executable and show important infos.
21. [StaCoAn](https://github.com/vincentcox/StaCoAn) - Crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
22. [JAADAS](https://github.com/flankerhqd/JAADAS) - Joint intraprocedure and interprocedure program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
23. ~~[Several tools from PSU](http://siis.cse.psu.edu/tools.html)~~
24. [Quark-Engine](https://github.com/quark-engine/quark-engine) - An Obfuscation-Neglect Android Malware Scoring System

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑App #Vulnerability Scanners Popular 2020

1️⃣ QARK - QARK by LinkedIn is for app developers to scan app for security issues

2️⃣ AndroBugs

3️⃣Nogotofail

4️⃣~Devknox - IDE plugin to build secure Android apps. Not maintained anymore.~~


✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Dynamic Analysis Tools 2020 Topic :

1. Android DBI frameowork
2. Androl4b- A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
4. Mobile-Security-Framework MobSF - Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
5. AppUse – custom build for pentesting
6. Droidbox
10. Drozer
11. Xposed - equivalent of doing Stub based code injection but without any modifications to the binary
12. Inspeckage - Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
13. Android Hooker - Dynamic Java code instrumentation (requires the Substrate Framework)
14. ProbeDroid - Dynamic Java code instrumentation
15. Android Tamer - Virtual / Live Platform for Android Security Professionals
16. DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
17. CuckooDroid - Android extension for Cuckoo sandbox
18. Mem - Memory analysis of Android (root required)
19. Crowdroid – unable to find the actual tool
20. AuditdAndroid – android port of auditd, not under active development anymore
21. Android Security Evaluation Framework - not under active development anymore
23. Aurasium – Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor.
24. Android Linux Kernel modules
25. Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on USB stick or smartphone. This is a one stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
26. StaDynA - a system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
27. DroidAnalytics - incomplete
28. Vezir Project - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
29. MARA - Mobile Application Reverse engineering and Analysis Framework
30. Taintdroid - requires AOSP compilation



✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Most Popular #Market Crawlers in 2019-2020

1. Google play crawler (Java)
2. Google play crawler (Python)
3. Google play crawler (Node) - get app details and download apps from official Google Play Store.
4. Aptoide downloader (Node) - download apps from Aptoide third-party Android market
5. Appland downloader (Node) - download apps from Appland third-party Android market
6. Apkpure - Online apk downloader. Provides also an own app for downloading.


✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Misc Tools 2020 (popular tools ):

1. smalihook
3. AXMLPrinter2 - to convert binary XML files to human-readable XML files
4. adb autocomplete
5. Dalvik opcodes
7. ExploitMe Android Labs - for practice
8. GoatDroid - for practice
9. Android InsecureBank - for practice
10. mitmproxy
11. dockerfile/androguard
12. Android Vulnerability Test Suite - android-vts scans a device for set of vulnerabilities
13. AppMon- AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida.
14. Internal Blue - Bluetooth experimentation framework based on Reverse Engineering of Broadcom Bluetooth Controllers
15. Opcodes table for quick reference
15. APK-Downloader - seems dead now

## <a name="academic"></a>Academic/Research/Publications/Books
✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Analysis Of Exploitation- CVE-2020-10189

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Android Pentesting 2020 Most usefull sources :


1) OWASP Mobile Security Testing Guide Manual

2) doridori/Android-Security-Reference

3) android app security checklist

4) Mobile App Pentest Cheat Sheet

5) Android Reverse Engineering 101 by Daniele Altomare (Web Archive link)

6) Mobile Security Reading Room - A reading room which contains well categorised technical reading material about mobile penetration testing, mobile malware, mobile forensics and all kind of mobile security related topics~~

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#Android Malwares & Security sources 2020 :

1. Android Security Bulletins
2. Android's reported security vulnerabilities
3. Android Devices Security Patch Status
4. AOSP - Issue tracker
5. OWASP Mobile Top 10 2016
6. Exploit Database - click search
7. Vulnerability Google Doc
8. Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)


✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Malware 2020 resources :

1. androguard - Database Android Malwares wiki
2. Android Malware Github repo
3. Android Malware Genome Project - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
4. Contagio Mobile Malware Mini Dump
5. VirusTotal Malware Intelligence Service - powered by VirusTotal, not free
6. Drebin
8. Kharon Malware Dataset - 7 malwares which have been reverse engineered and documented
9. Android Adware and General Malware Dataset
10. Android PRAGuard Dataset - The dataset contains 10479 samples, obtained by obfuscating the MalGenome and the Contagio Minidump datasets with seven different obfuscation techniques.
11. AndroZoo - AndroZoo is a growing collection of Android Applications collected from several sources, including the official Google Play app market.

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Where to report Security Android issues :

1) Android - reporting security issues


2) Android Reports and Resources - List of Android Hackerone disclosed reports and other resources

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑X60 Nordvpn prem

pastebin.com/ti9eHFds

(not cracked by us)

🦑BIN MULTIFUNCIONAL :

> 536595xxx33x00xx

> CVV/FECHA: RND (Random)

🥇IP : USA

🥇Postal: 10080

◽️Strazplay
◽️MyCanal
◽️OSN
◽️HBO
◽️Anghami

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 #Bug Bounty Platforms 2020 Topic:


- AntiHACK
- Bounty Factory
- Bountysource
- BugbountyHQ
- Bugbountyjp
- Bugcrowd
- CESPPA
- Cobalt
- Coder Bounty
- Detectify
- FOSS Factory
- FreedomSponsors
- HackenProof
- Hackerhive
- HackerOne
- Hacktrophy
- intigriti
- Safehats
- Synack
- YesWeHack

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Network filtering-About linux+iptables+ADSL to do NATAbout d

1️⃣everyone help to see what is wrong with the following configuration
linux7.2
eth0 Intel82558 IP: 192.168.0.1/24 (internal gateway)
eth1 3COM-3C905C (with ADSL)

2️⃣rc.local configuration
modprobe ip_tables
modprobe ip_nat_ftp
# for IP masquerading
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

3️⃣in /etc/sysconfig/ network has been added
FORWARD_IPV4 = YES

4️⃣the ADSL configuration, has been able to dial can ping external address, inside the gateway computer may ping 192.168.0.1
but not ping external address of ping not point-to-point (ppp0) address , The following is to run
netstat -r
Destination Gateway Genmask Flags MSS Window irtt Iface
218.20.189.1 * 255.255.255.255 UH 40 0 ​​0 ppp0
192.168.0.0 * 255.255.255.0 U 40 0 ​​0 eth0
10.10.40.0 * 255.255.255.0 U 40 0 ​​0 eth1
127.0.0.0 * 255.0.0.0 U 40 0 ​​0 lo
default 218.20 .189.1 0.0.0.0 UG 40 0 ​​0 ppp0

[root@linuxnat /]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination

5️⃣Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination

6️⃣Chain OUTPUT (policy ACCEPT)
target prot Opt source destination

🦑doesn't know what went wrong, do you want to compile the kernel?

Your iptables doesn't even have a NAT rule. How can you get out?

1️⃣iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
execute these two commands to see how!


2️⃣Haha, the version is cooked, and others have added it. The first rule you wrote shows that you are not familiar with iptables at all. You misunderstood. Why didn’t I write a script for him to use it? ? Can support dial-up. It is


3️⃣recommended that your rc.local be written like this:
echo 0> /proc/sys/net/ipv4/ip_froward
iptables -t filter -F
iptables -t nat -F
iptables -t nat -A POSTROUTING -s 192.168.0.0 /24 -j MASQUERADE
echo 1> /proc/sys/net/ipv4/ip_froward

written by Undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑LIVECCN ✅✅

5439979006730365|06|2021|536 CCN MATCHED
5439979006736263|06|2021|584 CARD
5439979006732387|06|2021|381 CCN MATCHED
5439979006730837|06|2021|781 CCN MATCHED
5439979006735000|06|2021|556 CCN MATCHED
5439979006738004|06|2021|176 CCN MATCHED
5439979006734847|06|2021|683 CCN MATCHED
5439979006738053|06|2021|762 CCN MATCHED
5439979006733021|06|2021|124 CCN MATCHED
5439979006730837|06|2021|512 CCN MATCHED

(verified only by undercode)