Analysis Of Exploitation- CVE-2020-10189

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Android Pentesting 2020 Most usefull sources :


1) OWASP Mobile Security Testing Guide Manual

2) doridori/Android-Security-Reference

3) android app security checklist

4) Mobile App Pentest Cheat Sheet

5) Android Reverse Engineering 101 by Daniele Altomare (Web Archive link)

6) Mobile Security Reading Room - A reading room which contains well categorised technical reading material about mobile penetration testing, mobile malware, mobile forensics and all kind of mobile security related topics~~

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#Android Malwares & Security sources 2020 :

1. Android Security Bulletins
2. Android's reported security vulnerabilities
3. Android Devices Security Patch Status
4. AOSP - Issue tracker
5. OWASP Mobile Top 10 2016
6. Exploit Database - click search
7. Vulnerability Google Doc
8. Google Android Security Team’s Classifications for Potentially Harmful Applications (Malware)


✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Malware 2020 resources :

1. androguard - Database Android Malwares wiki
2. Android Malware Github repo
3. Android Malware Genome Project - contains 1260 malware samples categorized into 49 different malware families, free for research purpose.
4. Contagio Mobile Malware Mini Dump
5. VirusTotal Malware Intelligence Service - powered by VirusTotal, not free
6. Drebin
8. Kharon Malware Dataset - 7 malwares which have been reverse engineered and documented
9. Android Adware and General Malware Dataset
10. Android PRAGuard Dataset - The dataset contains 10479 samples, obtained by obfuscating the MalGenome and the Contagio Minidump datasets with seven different obfuscation techniques.
11. AndroZoo - AndroZoo is a growing collection of Android Applications collected from several sources, including the official Google Play app market.

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Where to report Security Android issues :

1) Android - reporting security issues


2) Android Reports and Resources - List of Android Hackerone disclosed reports and other resources

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑X60 Nordvpn prem

pastebin.com/ti9eHFds

(not cracked by us)

🦑BIN MULTIFUNCIONAL :

> 536595xxx33x00xx

> CVV/FECHA: RND (Random)

🥇IP : USA

🥇Postal: 10080

◽️Strazplay
◽️MyCanal
◽️OSN
◽️HBO
◽️Anghami

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 #Bug Bounty Platforms 2020 Topic:


- AntiHACK
- Bounty Factory
- Bountysource
- BugbountyHQ
- Bugbountyjp
- Bugcrowd
- CESPPA
- Cobalt
- Coder Bounty
- Detectify
- FOSS Factory
- FreedomSponsors
- HackenProof
- Hackerhive
- HackerOne
- Hacktrophy
- intigriti
- Safehats
- Synack
- YesWeHack

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Network filtering-About linux+iptables+ADSL to do NATAbout d

1️⃣everyone help to see what is wrong with the following configuration
linux7.2
eth0 Intel82558 IP: 192.168.0.1/24 (internal gateway)
eth1 3COM-3C905C (with ADSL)

2️⃣rc.local configuration
modprobe ip_tables
modprobe ip_nat_ftp
# for IP masquerading
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

3️⃣in /etc/sysconfig/ network has been added
FORWARD_IPV4 = YES

4️⃣the ADSL configuration, has been able to dial can ping external address, inside the gateway computer may ping 192.168.0.1
but not ping external address of ping not point-to-point (ppp0) address , The following is to run
netstat -r
Destination Gateway Genmask Flags MSS Window irtt Iface
218.20.189.1 * 255.255.255.255 UH 40 0 ​​0 ppp0
192.168.0.0 * 255.255.255.0 U 40 0 ​​0 eth0
10.10.40.0 * 255.255.255.0 U 40 0 ​​0 eth1
127.0.0.0 * 255.0.0.0 U 40 0 ​​0 lo
default 218.20 .189.1 0.0.0.0 UG 40 0 ​​0 ppp0

[root@linuxnat /]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination

5️⃣Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination

6️⃣Chain OUTPUT (policy ACCEPT)
target prot Opt source destination

🦑doesn't know what went wrong, do you want to compile the kernel?

Your iptables doesn't even have a NAT rule. How can you get out?

1️⃣iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
execute these two commands to see how!


2️⃣Haha, the version is cooked, and others have added it. The first rule you wrote shows that you are not familiar with iptables at all. You misunderstood. Why didn’t I write a script for him to use it? ? Can support dial-up. It is


3️⃣recommended that your rc.local be written like this:
echo 0> /proc/sys/net/ipv4/ip_froward
iptables -t filter -F
iptables -t nat -F
iptables -t nat -A POSTROUTING -s 192.168.0.0 /24 -j MASQUERADE
echo 1> /proc/sys/net/ipv4/ip_froward

written by Undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑LIVECCN ✅✅

5439979006730365|06|2021|536 CCN MATCHED
5439979006736263|06|2021|584 CARD
5439979006732387|06|2021|381 CCN MATCHED
5439979006730837|06|2021|781 CCN MATCHED
5439979006735000|06|2021|556 CCN MATCHED
5439979006738004|06|2021|176 CCN MATCHED
5439979006734847|06|2021|683 CCN MATCHED
5439979006738053|06|2021|762 CCN MATCHED
5439979006733021|06|2021|124 CCN MATCHED
5439979006730837|06|2021|512 CCN MATCHED

(verified only by undercode)

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 topic for Termux-Linux :
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣ git clone https://github.com/CISOfy/lynis

2️⃣cd lynis

3️⃣ cd lynis; ./lynis audit system

4️⃣$ ./lynis audit system --quick --auditor "The Auditor"

 this example we tell Lynis to audit (command), with the target system (argument). By using the --quick (option), we tell it not to wait. We used --auditor (option) and defined it as "The Auditor" (argument).

5️⃣HostIDs

>During the security audit, Lynis attempts to assign two identifiers to the system. They can be compared as fingerprints and can be used in other tools and to link data to an existing system.

6️⃣Identifiers: hostid and hostid2
The first identifier is named hostid and has a length of 40 characters. The MAC address of the system is typically used its data input. The second identifier is hostid2. It is 64 characters long and typically uses a public SSH key a data input.

7️⃣lynis show hostids
Overriding the identifiers
In case your system can not generate the host identifiers automatically, then you can specify them in your custom profile (custom.prf). This can also be useful when systems are short-lived, yet you want to link the same data to such instance.

8️⃣lynis configure settings hostid=$(head -c 64 /dev/random | sha1sum | awk '{print $1}'):hostid2=$(head -c 64 /dev/random | sha256sum | awk '{print $1}')

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑A Few #GETVPN 2020 References

- [Cisco Group Encrypted Transport VPN Configuration Guide](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html)

- [GETVPN G-IKEv2](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn-gikev2.html)

- [GETVPN White Paper](https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport-vpn/deployment_guide_c07-624088.html)

- [GETVPN Design Guide](https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_version_2_0_External.pdf)

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Storage backup-usb hard drive on rh9Using a USB hard drive on rh9-
Special for old users :

This is verified on redhat9.0, you try it!
1) Test system:
#uname -a
i686 mobile hard disk is Keshuo hard disk box

2) View and modify /usr/src/linux-2.4.20-8/Makefie

to start the file The value of "EXTRAVERSION =XXXX" is changed to "EXTRAVERSION =-8".
It is very important to pay attention to this step, otherwise you will be prompted like me that the version does not match when you finally load it, you must rebuild the kernel! (Because I am 2.4.20-8, so I changed to -8).

3) Modify /usr/src/linux-2.4.20-8/drivers/usb/storage/unusual_devs.h to

find:
UNUSUAL_DEV( 0x05e3, 0x0702, 0x0000, 0x0001,
"EagleTec",
"External Hard Disk",
US_SC_SCSI, US_PR_BULK , NULL,
US_FL_FIX_INQUIRY ),

changed to the following form:
UNUSUAL_DEV( 0x05e3, 0x0702, 0x0000, 0x9999,
"EagleTec",
"External Hard Disk",
US_SC_SCSI, US_PR_BULK, NULL,
US_FL_FIX_INQUIRY | US_FL_MODE_XLATE | US_FL_START_STOP ),

4) Run the command
#cp /boot/config-2.4.20-8 /usr/src/linux-2.4.20-8/. config
#make mrproper (if you originally compiled the kernel, add this sentence)
#make oldconfig
#make dep
#make modules (this step is a long time)

5) Run
#cp /usr/src/linux-2.4.20 -8/drivers/usb/storage/usb-storage.o /lib/modules/2.4.20-8/kernel/drivers/usb/storage/ After
this step, you can connect the hard disk.

6) Execute:
#modprobe -r usb-storage
#modprobe usb-storage (if the previous Makefile file is modified correctly, this step will not go wrong)
Then you wait patiently for a while before running the next step.

7) fdisk -l Here you can see your hard disk. (My hard drive is /dev/sda1 and the USB drive is /dev/sdb1.)

8) Load
#mount -t vfat -o iocharset=cp936 /dev/sda1 /mnt/usb-hd
usb-hd is the directory I created first, you can use your own.
Now everyone should be able to use a USB hard drive!

Written by Undercode
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Full exploiting tutorial

- - - - - U҉N҉D҉E҉R҉C҉O҉D҉E҉- - - -

🦑 NewHow to hack a website using Termux (2020 release)


🦑INSTALLISATION & RUN:

Hackerpro - All in One Hacking Tool for Linux & Android (Termux)

A) Installation for Android

1) install termux

2) apt update

3) apt upgrade

4) apt install git

5) apt install pythongit clone https://github.com/technicaldada/hackerpro.git

cd hackerpro

6) python hackerpro.py

B) Installation for Linux

1) git clone https://github.com/technicaldada/hackerpro.git

2) cd hackerpro

3) python hackerpro.py python hackerpro.py

🦑Features:


Information Gathering
Password Attacks
Wireless Testing
Exploitation Tools
Sniffing & Spoofing
Web Hacking
Private Web Hacking
Post Exploitation
Install The HACKERPRO

🦑Information Gathering

Nmap
Setoolkit
Port Scanning
Host To IP
wordpress user
CMS scanner
XSStrike
Dork - Google Dorks Passive Vulnerability Auditor
Scan A server's Users
Crips

🦑Password Attacks

Cupp
Ncrack

🦑Wireless Testing

reaver
pixiewps
Fluxion

🦑Exploitation Tools

ATSCAN
sqlmap
Shellnoob
commix
FTP Auto Bypass
jboss-autopwn

🦑Sniffing & Spoofing

Setoolkit
SSLtrip
pyPISHER
SMTP Mailer

🦑Web Hacking

Drupal Hacking
Inurlbr
Wordpress & Joomla Scanner
Gravity Form Scanner
File Upload Checker
Wordpress Exploit Scanner
Wordpress Plugins Scanner
Shell and Directory Finder
Joomla! 1.5 - 3.4.5 remote code execution
Vbulletin 5.X remote code execution
BruteX - Automatically brute force all services running on a target
Arachni - Web Application Security Scanner Framework

🦑Private Web Hacking

Get all websites
Get joomla websites
Get wordpress websites
Control Panel Finder
Zip Files Finder
Upload File Finder
Get server users
SQli Scanner
Ports Scan (range of ports)
ports Scan (common ports)
Get server Info
Bypass Cloudflare

🦑Post Exploitation

Shell Checker
POET
Weeman


- - - - - U҉N҉D҉E҉R҉C҉O҉D҉E҉- - - -

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Some Topic 2020 Exploit & More tools :


Gtfo - Search For Unix Binaries That Can Be Exploited To Bypass System Security Restrictions

- SWFPFinder - SWF Potential Parameters Finder

- laravelN00b - Automated Scan .env Files And Checking Debug Mode In Victim Host

- Andriller - Software Utility With A Collection Of Forensic Tools For Smartphones

- LAVA - Large-scale Automated Vulnerability Addition

- Heapinspect - Inspect Heap In Python

- CHAPS - Configuration Hardening Assessment PowerShell Script

- Karonte - A Static Analysis Tool To Detect Multi-Binary Vulnerabilities In Embedded Firmware

- IotShark - Monitoring And Analyzing IoT Traffic

- LNAV - Log File Navigator

- TuxResponse - Linux Incident Response

✅git sources 2020
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁