β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦full Install graphical interface for Termux original methodes
#forbeginers
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1οΈβ£get termux playstore- get lastest version
2οΈβ£Update the source, fonts, interface, etc. There are very detailed and detailed tutorials online, you can search for a search, there are many, because there is no way to say too much in a hurry.
3οΈβ£How install desktop for termux ?
> Install various packages
1) Openbox (window manager)
Openbox is a lightweight window manager running on GNU/Linux with X11. Openbox uses the GPL protocol to open source code and is free and free software. Openbox is based on Blackbox, which is considered one of the original window managers (ie, the code itself). [From Baidu Encyclopedia]
2) PyPanel is a lightweight panel/task bar written in Python and C for the X11 window manager. It can be easily customized to match any desktop theme or taste. PyPanel works with EWMH compatible WMS (Openbox, PekWM, FVWM, etc.). And it is distributed under the GNU General Public License v2.
3) xorg-xsetroot Description: A classic X utility that sets the root window background to a given mode or color
4) PyXDG is a
unique python terminal emulator for accessing freedesktop.org
5) Install tigervnc (you can also install other remote desktops, take tigervnc as an example) to realize remote desktop control
> pkg install tigervnc
> vi startvnc
6οΈβ£Write a configuration file :
#!/bin/bash -e
export DISPLAY=:10
Xvnc --SecurityTypes=None $DISPLAY &
sleep 1s
openbox-session
xsetroot -solid gray
pypanel
aterm
startxfce4
7οΈβ£chmod +x startvnc
8οΈβ£./startvnc
You can connect to the remote desktop boringly! ! ! !
Sprinkle flowers Sprinkle flowers ~~
Click Android vnc and
enter localhost:5910
ENJOYβ€οΈππ»
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦full Install graphical interface for Termux original methodes
#forbeginers
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1οΈβ£get termux playstore- get lastest version
2οΈβ£Update the source, fonts, interface, etc. There are very detailed and detailed tutorials online, you can search for a search, there are many, because there is no way to say too much in a hurry.
3οΈβ£How install desktop for termux ?
> Install various packages
1) Openbox (window manager)
Openbox is a lightweight window manager running on GNU/Linux with X11. Openbox uses the GPL protocol to open source code and is free and free software. Openbox is based on Blackbox, which is considered one of the original window managers (ie, the code itself). [From Baidu Encyclopedia]
2) PyPanel is a lightweight panel/task bar written in Python and C for the X11 window manager. It can be easily customized to match any desktop theme or taste. PyPanel works with EWMH compatible WMS (Openbox, PekWM, FVWM, etc.). And it is distributed under the GNU General Public License v2.
3) xorg-xsetroot Description: A classic X utility that sets the root window background to a given mode or color
4) PyXDG is a
unique python terminal emulator for accessing freedesktop.org
5) Install tigervnc (you can also install other remote desktops, take tigervnc as an example) to realize remote desktop control
> pkg install tigervnc
> vi startvnc
6οΈβ£Write a configuration file :
#!/bin/bash -e
export DISPLAY=:10
Xvnc --SecurityTypes=None $DISPLAY &
sleep 1s
openbox-session
xsetroot -solid gray
pypanel
aterm
startxfce4
7οΈβ£chmod +x startvnc
8οΈβ£./startvnc
You can connect to the remote desktop boringly! ! ! !
Sprinkle flowers Sprinkle flowers
enter localhost:5910
ENJOYβ€οΈππ»
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
Analysing meterpreter payload with Ghidra.pdf
1.1 MB
meterpreter payload with Ghidra (analysing)
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦GOOD NEW RESOURCES FOR PROFITE & INCREASING YOUR SKILLS :
Hopper's Roppers Security Training | Four free self-paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
Learning Exploitation with Offensive Computer Security 2.0 | blog-style instruction, includes: slides, videos, homework, discussion. No login required.
Mind Maps | Information Security related Mind Maps
MIT OCW 6.858 Computer Systems Security | academic content, well organized, full-semester course, includes assigned readings, lectures, videos, required lab files.
OffensiveComputerSecurity | academic content, full semester course including 27 lecture videos with slides and assign readings
OWASP top 10 web security risks | free courseware, requires account
SecurityTube | tube-styled content, "megaprimer" videos covering various topics, no readable content on site.
Seed Labs | academic content, well organized, featuring lab videos, tasks, needed code files, and recommended readings
TryHackMe | Designed prebuilt challenges which include virtual machines (VM) hosted in the cloud ready to be deployed
ENJOYβ€οΈππ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦GOOD NEW RESOURCES FOR PROFITE & INCREASING YOUR SKILLS :
Hopper's Roppers Security Training | Four free self-paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
Learning Exploitation with Offensive Computer Security 2.0 | blog-style instruction, includes: slides, videos, homework, discussion. No login required.
Mind Maps | Information Security related Mind Maps
MIT OCW 6.858 Computer Systems Security | academic content, well organized, full-semester course, includes assigned readings, lectures, videos, required lab files.
OffensiveComputerSecurity | academic content, full semester course including 27 lecture videos with slides and assign readings
OWASP top 10 web security risks | free courseware, requires account
SecurityTube | tube-styled content, "megaprimer" videos covering various topics, no readable content on site.
Seed Labs | academic content, well organized, featuring lab videos, tasks, needed code files, and recommended readings
TryHackMe | Designed prebuilt challenges which include virtual machines (VM) hosted in the cloud ready to be deployed
ENJOYβ€οΈππ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
www.hoppersroppers.org
Roppers Security Courses
Free training on computing and security fundamentals.
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦reactjs npm commun error & fix :
D:\vuedemo\day23\react-study>npm start
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! react-study@0.1.0 start:
npm ERR!
WELL DONE !
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦reactjs npm commun error & fix :
D:\vuedemo\day23\react-study>npm start
> react-study@0.1.0 start D:\vuedemo\day23\react-study
> react-scripts start
There might be a problem with the project dependency tree.
It is likely not a bug in Create React App, but something you need to fix locally.
π¦The react-scripts package provided by Create React App requires a dependency: "babel-eslint": "10.1.0"
Don't try to install it manually: your package manager does it automatically.
However, a different version of babel-eslint was detected higher up in the tree:
D:\node_modules\babel..
Manually installing incompatible versions is known to cause hard-to-debug issues.
If you would prefer to ignore this check, add SKIP_PREFLIGHT_CHECK=true to an .env file in your project.
That will permanently disable this message but you might encounter other issues.
π¦ To fix the dependency tree, try following the steps below in the exact order: 1) Delete package-lock.json (not package.json!) and/or yarn.lock in your project folder.
2) Delete node_modules in your project folder.
3) Remove "babel-eslint" from dependencies and/or devDependencies in the package.json file in your project folder.
4) Run npm install or yarn, depending on the package manager you use.
In most cases, this should be enough to fix the problem.
If this has not helped, there are a few other things you can try:
5) If you used npm, install yarn (http://yarnpkg.com/) and repeat the above steps with it instead.
This may help because npm has known issues with package hoisting which may get resolved in future versions.
6) Check if D:\node_modules\babel-eslint is outside your project directory.
For example, you might have accidentally installed something in your home folder.
7) Try running npm ls babel-eslint in your project folder.
This will tell you which other package (apart from the expected react-scripts) installed babel-eslint.
If nothing else helps, add SKIP_PREFLIGHT_CHECK=true to an .env file in your project.
That would permanently disable this preflight check in case you want to proceed anyway.
P.S. We know this message is long but please read the steps above :-) We hope you find them helpful!npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! react-study@0.1.0 start:
react-scripts start
npm ERR! Exit status 1npm ERR!
WELL DONE !
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Reverse Engineering, Buffer Overflow and Exploit Development
A Course on Intermediate Level Linux Exploitation | as the title says, this course isn't for beginners
Analysis and exploitation (unprivileged) | huge collection of RE information, organized by type.
Binary hacking | 35 "no bullshit" binary videos along with other info
Buffer Overflow Exploitation Megaprimer for Linux | Collection of Linux Rev. Engineering videos
Corelan tutorials | detailed tutorial, lots of good information about memory
Exploit tutorials | a series of 9 exploit tutorials,also features a podcast
Exploit development | links to the forum's exploit dev posts, quality and post style will vary with each poster
flAWS challenge | Through a series of levels you'll learn about common mistakes and gotchas when using Amazon Web Services (AWS).
Introduction to ARM Assembly Basics | tons of tutorials from infosec pro Azeria, follow her on twitter
Introductory Intel x86 | 63 days of OS class materials, 29 classes, 24 instructors, no account required
Lena's Reversing for Newbies (Complete) | listing of a lengthy resource by Lena, aimed at being a course
Linux (x86) Exploit Development Series | blog post by sploitfun, has 3 different levels
ENJOYβ€οΈππ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Reverse Engineering, Buffer Overflow and Exploit Development
A Course on Intermediate Level Linux Exploitation | as the title says, this course isn't for beginners
Analysis and exploitation (unprivileged) | huge collection of RE information, organized by type.
Binary hacking | 35 "no bullshit" binary videos along with other info
Buffer Overflow Exploitation Megaprimer for Linux | Collection of Linux Rev. Engineering videos
Corelan tutorials | detailed tutorial, lots of good information about memory
Exploit tutorials | a series of 9 exploit tutorials,also features a podcast
Exploit development | links to the forum's exploit dev posts, quality and post style will vary with each poster
flAWS challenge | Through a series of levels you'll learn about common mistakes and gotchas when using Amazon Web Services (AWS).
Introduction to ARM Assembly Basics | tons of tutorials from infosec pro Azeria, follow her on twitter
Introductory Intel x86 | 63 days of OS class materials, 29 classes, 24 instructors, no account required
Lena's Reversing for Newbies (Complete) | listing of a lengthy resource by Lena, aimed at being a course
Linux (x86) Exploit Development Series | blog post by sploitfun, has 3 different levels
ENJOYβ€οΈππ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - nnamon/linux-exploitation-course: A Course on Intermediate Level Linux Exploitation
A Course on Intermediate Level Linux Exploitation. Contribute to nnamon/linux-exploitation-course development by creating an account on GitHub.
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Advanced usage of bitcoin
#ExpertsUsers
> Bitcoin The official Bitcoin client has two versions: one is a graphical interface version, usually called Bitcoin (capital), and one A concise command line version (called bitcoind). They are compatible with each other, have the same command line parameters, read the same configuration file, and read and write the same data file. You can run one of the Bitcoin client or bitcoind client on a computer (if you accidentally try to run another client at the same time, it will prompt you that there is already a client running and automatically quit).
1οΈβ£SSL options:
-rpcssl uses OpenSSL (https) JSON-RPC connection
-rpcsslcertificatechainfile=<file.cert> server certificate file (default: server.cert)
-rpcsslprivatekeyfile=<file.pem> server private key file (default: server.pem)
-rpcsslciphers=<password> Acceptable ciphers (default: TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!AH:!3DES:@STRENGTH)
2οΈβ£bitcoin.conf configuration file
All command-line parameters except -datadir and -conf can be set through a configuration file, and all options in the configuration file can also be set on the command line. The value set by the command line parameter will override the setting in the configuration file.
The configuration file is a list in the format "setting=value", one per line. You can also use the # symbol to write comments.
The configuration file is not created automatically; you can use your favorite plain text editor to create it. By default, Bitcoin (or bitcoind) will look for a file named "bitcoin.conf" under the Bitcoin data folder, but the path of the data folder and configuration file can be passed through the -datadir and -conf command line parameters, respectively Specify separately.
operating system
Default data folder
Configuration file path
Windows
%APPDATA%\Bitcoin\
(Windows XP) C:\Documents and Settings\username\Application Data\Bitcoin\bitcoin.conf
(Windows 7,8,10) C:\Users\username\AppData\Roaming\Bitcoin\bitcoin.conf
Linux
$HOME/.bitcoin/
/home/username/.bitcoin/bitcoin.conf
Mac OSX
$HOME/Library/Application Support/Bitcoin/
/Users/username/Library/Application Support/Bitcoin/bitcoin.conf
Note: If the Bitcoin client testnet mode is running, the client will automatically create a subfolder named "testnet" under the data folder.
bitcoin.conf example
# bitcoin.conf configuration file. Lines beginning with # are comments.
3οΈβ£# User interface options:
# Minimize the launch of the Bitcoin client
#min=1
# Minimize to system tray
#minimizetotray=1
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Advanced usage of bitcoin
#ExpertsUsers
> Bitcoin The official Bitcoin client has two versions: one is a graphical interface version, usually called Bitcoin (capital), and one A concise command line version (called bitcoind). They are compatible with each other, have the same command line parameters, read the same configuration file, and read and write the same data file. You can run one of the Bitcoin client or bitcoind client on a computer (if you accidentally try to run another client at the same time, it will prompt you that there is already a client running and automatically quit).
1οΈβ£SSL options:
-rpcssl uses OpenSSL (https) JSON-RPC connection
-rpcsslcertificatechainfile=<file.cert> server certificate file (default: server.cert)
-rpcsslprivatekeyfile=<file.pem> server private key file (default: server.pem)
-rpcsslciphers=<password> Acceptable ciphers (default: TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!AH:!3DES:@STRENGTH)
2οΈβ£bitcoin.conf configuration file
All command-line parameters except -datadir and -conf can be set through a configuration file, and all options in the configuration file can also be set on the command line. The value set by the command line parameter will override the setting in the configuration file.
The configuration file is a list in the format "setting=value", one per line. You can also use the # symbol to write comments.
The configuration file is not created automatically; you can use your favorite plain text editor to create it. By default, Bitcoin (or bitcoind) will look for a file named "bitcoin.conf" under the Bitcoin data folder, but the path of the data folder and configuration file can be passed through the -datadir and -conf command line parameters, respectively Specify separately.
operating system
Default data folder
Configuration file path
Windows
%APPDATA%\Bitcoin\
(Windows XP) C:\Documents and Settings\username\Application Data\Bitcoin\bitcoin.conf
(Windows 7,8,10) C:\Users\username\AppData\Roaming\Bitcoin\bitcoin.conf
Linux
$HOME/.bitcoin/
/home/username/.bitcoin/bitcoin.conf
Mac OSX
$HOME/Library/Application Support/Bitcoin/
/Users/username/Library/Application Support/Bitcoin/bitcoin.conf
Note: If the Bitcoin client testnet mode is running, the client will automatically create a subfolder named "testnet" under the data folder.
bitcoin.conf example
# bitcoin.conf configuration file. Lines beginning with # are comments.
3οΈβ£# User interface options:
# Minimize the launch of the Bitcoin client
#min=1
# Minimize to system tray
#minimizetotray=1
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
Traversing the Path to RCE.pdf
252.5 KB
Traversing the Path to RCE
#requested
#requested
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Mozilla Network Security Services (NSS)
#FastTips
> Network Security Services (NSS) is a set of libraries designed to support cross-platform development of secure client and server applications. Applications built using NSS can use SSL v2 and v3, TLS, PKCS # 5, PKCS # 7, PKCS # 11, PKCS # 12, S / MIME, X.509 v3 certificates and other security standards.
> Unlike OpenSSL, NSS uses database files as a certificate store.
> NSS starts with a hard-coded CA list of trusted certificates inside the libnssckbi.so file . This list can be viewed from any application using NSS that can display (and manipulate) the trust certificate store, for example, Chrome-compatible or Firefox-compatible browsers.
> Some applications using the NSS library use a different certificate store than recommended. Mozilla's own Firefox is a prime example of this.
> Your distribution most likely already has the NSS package installed, in some distributions it is called libnss3 (Debian and derivatives) in some distributions - nss (Arch Linux, Gentoo and derivatives).
> If you want to view and modify NSS certificate stores, you need the certutil utility . On Arch Linux, this utility is included in the nss package and, therefore, is preinstalled on Arch Linux
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Mozilla Network Security Services (NSS)
#FastTips
> Network Security Services (NSS) is a set of libraries designed to support cross-platform development of secure client and server applications. Applications built using NSS can use SSL v2 and v3, TLS, PKCS # 5, PKCS # 7, PKCS # 11, PKCS # 12, S / MIME, X.509 v3 certificates and other security standards.
> Unlike OpenSSL, NSS uses database files as a certificate store.
> NSS starts with a hard-coded CA list of trusted certificates inside the libnssckbi.so file . This list can be viewed from any application using NSS that can display (and manipulate) the trust certificate store, for example, Chrome-compatible or Firefox-compatible browsers.
> Some applications using the NSS library use a different certificate store than recommended. Mozilla's own Firefox is a prime example of this.
> Your distribution most likely already has the NSS package installed, in some distributions it is called libnss3 (Debian and derivatives) in some distributions - nss (Arch Linux, Gentoo and derivatives).
> If you want to view and modify NSS certificate stores, you need the certutil utility . On Arch Linux, this utility is included in the nss package and, therefore, is preinstalled on Arch Linux
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«6π¬πβ β β β
π¦THE DANGEROUS XKEYSTORE WHAT IS ?
You've never heard of XKeyscore, but it definitely knows you.
> The National Security Agency's top-secret program essentially makes available everything you've ever done on the Internet β browsing history, searches, content of your emails, online chats, even your metadata β all at the tap of the keyboard.
> The Guardian exposed the program on Wednesday in a follow-up piece to its groundbreaking report on the NSA's surveillance practices. Shortly after publication, Edward Snowden, a 29-year-old former Booz Allen Hamilton employee who worked for the NSA for four years, came forward as the source.
> This latest revelation comes from XKeyscore training materials, which Snowden also provided to The Guardian. The NSA sums up the program best: XKeyscore is its "widest reaching" system for developing intelligence from the Internet.
> The program gives analysts the ability to search through the entire database of your information without any prior authorization β no warrant, no court clearance, no signature on a dotted line. An analyst must simply complete a simple onscreen form, and seconds later, your online history is no longer private. The agency claims that XKeyscore covers "nearly everything a typical user does on the Internet."
> As The Guardian points out, this program crystallizes one of Snowden's most infamous admissions from his video interview on June 10:
"I, sitting at my desk," said Snowden, could "wiretap anyone, from you or your accountant, to a federal judge or even the president, if I had a personal email."
Snowden's dad: Revelations 'shocking'
> While United States officials denied this claim, the XKeyscore program, as the public understands it, proves Snowden's point. The law requires the NSA to obtain FISA warrants on U.S. citizens, but this is pushed aside for Americans with foreign targets β and this program gives the NSA the technology to do so. The training materials claim XKeyscore assisted in capturing 300 terrorists by 2008.
cnn report
β β β Uππ»βΊπ«6π¬πβ β β β
π¦THE DANGEROUS XKEYSTORE WHAT IS ?
You've never heard of XKeyscore, but it definitely knows you.
> The National Security Agency's top-secret program essentially makes available everything you've ever done on the Internet β browsing history, searches, content of your emails, online chats, even your metadata β all at the tap of the keyboard.
> The Guardian exposed the program on Wednesday in a follow-up piece to its groundbreaking report on the NSA's surveillance practices. Shortly after publication, Edward Snowden, a 29-year-old former Booz Allen Hamilton employee who worked for the NSA for four years, came forward as the source.
> This latest revelation comes from XKeyscore training materials, which Snowden also provided to The Guardian. The NSA sums up the program best: XKeyscore is its "widest reaching" system for developing intelligence from the Internet.
> The program gives analysts the ability to search through the entire database of your information without any prior authorization β no warrant, no court clearance, no signature on a dotted line. An analyst must simply complete a simple onscreen form, and seconds later, your online history is no longer private. The agency claims that XKeyscore covers "nearly everything a typical user does on the Internet."
> As The Guardian points out, this program crystallizes one of Snowden's most infamous admissions from his video interview on June 10:
"I, sitting at my desk," said Snowden, could "wiretap anyone, from you or your accountant, to a federal judge or even the president, if I had a personal email."
Snowden's dad: Revelations 'shocking'
> While United States officials denied this claim, the XKeyscore program, as the public understands it, proves Snowden's point. The law requires the NSA to obtain FISA warrants on U.S. citizens, but this is pushed aside for Americans with foreign targets β and this program gives the NSA the technology to do so. The training materials claim XKeyscore assisted in capturing 300 terrorists by 2008.
cnn report
β β β Uππ»βΊπ«6π¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦WIFI JAMMING
The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1οΈβ£git clone https://github.com/chrizator/netattack.git
2οΈβ£SCANNING FOR WIFI NETWORKS
> python netattack.py -scan -mon
3οΈβ£This example will perform a WiFi network scan. The BSSID, ESSID and the Channel will be listet in a table.
-scan | --scan
4οΈβ£This parameter must be called when you want to do a scan. It's one of the main commands. It is searching for beacon frames that are sent by routers to notify there presence.
-mon | --monitor
5οΈβ£By calling this parameter the script automatically detects you wireless card and puts it into monitoring mode to capture the ongoing traffic. If you know the name of your wireless card and it's already working in monitoring mode you can call
-i
This can be used instead of -mon.
DEAUTHENTIFICATION ATTACK
python netattack.py -deauth -b AB:CD:EF:GH:IJ:KL -u 12:34:56:78:91:23 -c 4 -mon
6οΈβ£This command will obviously perform a deauthentification attack.
-deauth | --deauth
This parameter is a main parameter as well as scan. It is necessary to call if you want to deauth attack a certain target.
-b | --bssid
With -b you select the AP's MAC-Address (BSSID). The -deauth parameter requires one or multiple BSSID's
-u | --client
If you don't want to attack the whole network, but a single user/client/device, you can do this with -u. It is not necessary.
-c | --channel
7οΈβ£By adding this parameter, your deauthentification attack is going to be performed on the entered channel. The usage of -c is highly recommended since the attack will be a failure if the wrong channel is used. The channel of the AP can be seen by doing a WiFi scan (-scan). If you don't add -c the attack will take place on the current channel.
The -mon or -i is necessary for this attack as well.
ENJOYβ€οΈππ»
β topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦WIFI JAMMING
The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1οΈβ£git clone https://github.com/chrizator/netattack.git
2οΈβ£SCANNING FOR WIFI NETWORKS
> python netattack.py -scan -mon
3οΈβ£This example will perform a WiFi network scan. The BSSID, ESSID and the Channel will be listet in a table.
-scan | --scan
4οΈβ£This parameter must be called when you want to do a scan. It's one of the main commands. It is searching for beacon frames that are sent by routers to notify there presence.
-mon | --monitor
5οΈβ£By calling this parameter the script automatically detects you wireless card and puts it into monitoring mode to capture the ongoing traffic. If you know the name of your wireless card and it's already working in monitoring mode you can call
-i
This can be used instead of -mon.
DEAUTHENTIFICATION ATTACK
python netattack.py -deauth -b AB:CD:EF:GH:IJ:KL -u 12:34:56:78:91:23 -c 4 -mon
6οΈβ£This command will obviously perform a deauthentification attack.
-deauth | --deauth
This parameter is a main parameter as well as scan. It is necessary to call if you want to deauth attack a certain target.
-b | --bssid
With -b you select the AP's MAC-Address (BSSID). The -deauth parameter requires one or multiple BSSID's
-u | --client
If you don't want to attack the whole network, but a single user/client/device, you can do this with -u. It is not necessary.
-c | --channel
7οΈβ£By adding this parameter, your deauthentification attack is going to be performed on the entered channel. The usage of -c is highly recommended since the attack will be a failure if the wrong channel is used. The channel of the AP can be seen by doing a WiFi scan (-scan). If you don't add -c the attack will take place on the current channel.
The -mon or -i is necessary for this attack as well.
ENJOYβ€οΈππ»
β topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - chrizator/netattack: A simple python script to scan and attack wireless networks.
A simple python script to scan and attack wireless networks. - chrizator/netattack
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦CODE ACCESS WEBCAM VIA HTML by undercde :
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta content="Display Webcam Stream" name="title">
<title>Display Webcam Stream</title>
<style>
body {
margin: 30px;
}
h1 {
font-family: sans-serif;
color: #666;
}
#container {
width: 500px;
height: 375px;
border: 10px #333 solid;
}
#videoElement {
width: 500px;
height: 375px;
background-color: #666;
}
button {
margin-top: 20px;
font-size: 12px;
font-weight: bold;
padding: 5px;
background-color: white;
border: 5px solid black;
}
button:hover {
background-color: yellow;
}
button:active {
background-color: yellowgreen;
}
</style>
</head>
<body>
<h1>ΠΡΠΎΠ²Π΅ΡΠΊΠ° Π²Π΅Π± ΠΊΠ°ΠΌΠ΅ΡΡ ΠΎΠ½Π»Π°ΠΉΠ½</h1>
<div id="container">
<video autoplay id="videoElement">
</video>
</div>
<button id="stop">Stop Video</button>
<button id="start">Start Video</button>
<script>
var video = document.querySelector("#videoElement");
var stopVideo = document.querySelector("#stop");
var startVideo = document.querySelector("#start");
stopVideo.addEventListener("click", stop, false);
startVideo.addEventListener("click", startWebCam, false);
function startWebCam() {
if (navigator.mediaDevices.getUserMedia) {
navigator.mediaDevices.getUserMedia({video: true})
.then(function (stream) {
video.srcObject = stream;
})
.catch(function (err0r) {
console.log("Something went wrong!");
});
}
}
function stop(e) {
var stream = video.srcObject;
var tracks = stream.getTracks();
for (var i = 0; i < tracks.length; i++) {
var track = tracks[i];
track.stop();
}
video.srcObject = null;
}
</script>
</body>
</html>
by undercode
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦CODE ACCESS WEBCAM VIA HTML by undercde :
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta content="Display Webcam Stream" name="title">
<title>Display Webcam Stream</title>
<style>
body {
margin: 30px;
}
h1 {
font-family: sans-serif;
color: #666;
}
#container {
width: 500px;
height: 375px;
border: 10px #333 solid;
}
#videoElement {
width: 500px;
height: 375px;
background-color: #666;
}
button {
margin-top: 20px;
font-size: 12px;
font-weight: bold;
padding: 5px;
background-color: white;
border: 5px solid black;
}
button:hover {
background-color: yellow;
}
button:active {
background-color: yellowgreen;
}
</style>
</head>
<body>
<h1>ΠΡΠΎΠ²Π΅ΡΠΊΠ° Π²Π΅Π± ΠΊΠ°ΠΌΠ΅ΡΡ ΠΎΠ½Π»Π°ΠΉΠ½</h1>
<div id="container">
<video autoplay id="videoElement">
</video>
</div>
<button id="stop">Stop Video</button>
<button id="start">Start Video</button>
<script>
var video = document.querySelector("#videoElement");
var stopVideo = document.querySelector("#stop");
var startVideo = document.querySelector("#start");
stopVideo.addEventListener("click", stop, false);
startVideo.addEventListener("click", startWebCam, false);
function startWebCam() {
if (navigator.mediaDevices.getUserMedia) {
navigator.mediaDevices.getUserMedia({video: true})
.then(function (stream) {
video.srcObject = stream;
})
.catch(function (err0r) {
console.log("Something went wrong!");
});
}
}
function stop(e) {
var stream = video.srcObject;
var tracks = stream.getTracks();
for (var i = 0; i < tracks.length; i++) {
var track = tracks[i];
track.stop();
}
video.srcObject = null;
}
</script>
</body>
</html>
by undercode
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦for beginers & experts :
TensorFlow 2 and Keras - Quick Start Guide
Build your first Neural Network
Heart Disease Prediction
Cryptocurrency price prediction using LSTMs
Practical Guide to Handling Imbalanced Datasets
Hacker's Guide to Fixing Underfitting and Overfitting Models
Hacker's Guide to Hyperparameter Tuning
Deploy a Keras Deep Learning Project to Production with Flask
Hacker's Guide to Data Preparation for Machine Learning
Hacker's Guide to Fundamental Machine Learning Algorithms
Time Series Forecasting with LSTMs
Time Series Demand Prediction with LSTMs
Time Series Classification for Human Activity Recognition with LSTMs
Time Series Anomaly Detection with LSTM Autoencoders
Object Detection on Custom Dataset
Image Data Augmentation
Sentiment Analysis
Intent Recognition with BERT using Keras and TensorFlow 2
π¦FREE :ON https://github.com/curiousily/Deep-Learning-For-Hackers
ENJOYβ€οΈππ»
β topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦for beginers & experts :
TensorFlow 2 and Keras - Quick Start Guide
Build your first Neural Network
Heart Disease Prediction
Cryptocurrency price prediction using LSTMs
Practical Guide to Handling Imbalanced Datasets
Hacker's Guide to Fixing Underfitting and Overfitting Models
Hacker's Guide to Hyperparameter Tuning
Deploy a Keras Deep Learning Project to Production with Flask
Hacker's Guide to Data Preparation for Machine Learning
Hacker's Guide to Fundamental Machine Learning Algorithms
Time Series Forecasting with LSTMs
Time Series Demand Prediction with LSTMs
Time Series Classification for Human Activity Recognition with LSTMs
Time Series Anomaly Detection with LSTM Autoencoders
Object Detection on Custom Dataset
Image Data Augmentation
Sentiment Analysis
Intent Recognition with BERT using Keras and TensorFlow 2
π¦FREE :ON https://github.com/curiousily/Deep-Learning-For-Hackers
ENJOYβ€οΈππ»
β topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - curiousily/Deep-Learning-For-Hackers: Machine Learning tutorials with TensorFlow 2 and Keras in Python (Jupyter notebooksβ¦
Machine Learning tutorials with TensorFlow 2 and Keras in Python (Jupyter notebooks included) - (LSTMs, Hyperameter tuning, Data preprocessing, Bias-variance tradeoff, Anomaly Detection, Autoencode...
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Install sshprank on Windows
1οΈβ£Start by installing Python python.org
2οΈβ£After installing Python and PIP, download the sshprank source archive from the link: https://github.com/noptrix/sshprank/archive/master.zip
3οΈβ£Unzip the archive.
4οΈβ£Open a command prompt or PowerShell (if you donβt know how, see the article β Setting up the PowerShell desktop environment on Windows and Linux β).
5οΈβ£Go to the folder of the unpacked archive using the cd command (you will have a different path to the folder, so edit the command accordingly):
>cd C:\Users\MiAl\Downloads\sshprank-master\
6οΈβ£Install the required dependencies:
>pip install -r docs\requirements.txt
7οΈβ£Perform a check (help for using the program should be displayed):
>python .\sshprank.py -H
8οΈβ£Further work with the program is the same as in Linux, but instead of sshprank you need to specify python. \ Sshprank.py , for example:
>python .\sshprank.py -h 138.201.59.125 -v
9οΈβ£How to create a host list
>The sshprank program does not directly support ranges, although a little later I will show how you can still specify subnets for scanning with sshprank. Therefore, for sshprank you need to create a list of hosts.
πIf the following examples are not clear to you, then study the section β Opening curly braces β.
So, I want to scan the range 138.201.0.0/16 . To list hosts, I run the following command:
>echo -e 138.201.{0..255}.{0..255}"\n" | sed 's/ //' > hosts.txt
1οΈβ£1οΈβ£Check that we have succeeded:
> head -n 20 hosts.txt
ENJOYβ€οΈππ»
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Install sshprank on Windows
1οΈβ£Start by installing Python python.org
2οΈβ£After installing Python and PIP, download the sshprank source archive from the link: https://github.com/noptrix/sshprank/archive/master.zip
3οΈβ£Unzip the archive.
4οΈβ£Open a command prompt or PowerShell (if you donβt know how, see the article β Setting up the PowerShell desktop environment on Windows and Linux β).
5οΈβ£Go to the folder of the unpacked archive using the cd command (you will have a different path to the folder, so edit the command accordingly):
>cd C:\Users\MiAl\Downloads\sshprank-master\
6οΈβ£Install the required dependencies:
>pip install -r docs\requirements.txt
7οΈβ£Perform a check (help for using the program should be displayed):
>python .\sshprank.py -H
8οΈβ£Further work with the program is the same as in Linux, but instead of sshprank you need to specify python. \ Sshprank.py , for example:
>python .\sshprank.py -h 138.201.59.125 -v
9οΈβ£How to create a host list
>The sshprank program does not directly support ranges, although a little later I will show how you can still specify subnets for scanning with sshprank. Therefore, for sshprank you need to create a list of hosts.
πIf the following examples are not clear to you, then study the section β Opening curly braces β.
So, I want to scan the range 138.201.0.0/16 . To list hosts, I run the following command:
>echo -e 138.201.{0..255}.{0..255}"\n" | sed 's/ //' > hosts.txt
1οΈβ£1οΈβ£Check that we have succeeded:
> head -n 20 hosts.txt
ENJOYβ€οΈππ»
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
β β β Uππ»βΊπ«Δπ¬πβ β β β