Support & Share ❤️👍🏻

T.me/UndercodeSecurity

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑SOME 2020 BITCOIN EARNING APPS :


https://play.google.com/store/apps/details?id=bitcoin.blockchain.game

https://itunes.apple.com/app/blockchain-game/id1073324612

https://play.google.com/store/apps/details?id=in.sweatco.app&hl=en

https://play.google.com/store/apps/details?id=io.lawnmower.mobile

https://itunes.apple.com/app/apple-store/id965079226

https://play.google.com/store/apps/details?id=bitcoin.alien.run

https://itunes.apple.com/us/app/alien-run-free-bitcoin/id1161356630

https://play.google.com/store/apps/details?id=com.claimyourbits.btcsafari

enjoy❤️👍🏻
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#infoguatering How can I check if the victim Linux
is a Linux system is running on a physical or virtual machine?

1) Check if the server is physical or virtual
The easiest way to check this is to use the dmidecode command.

> sudo dmidecode -s system-manufacturer


2) If it is a physical system, you should see the manufacturer's name such as Dell, Lenovo, etc.
If it's a virtual system, you should see output like QEMU, innotek Gmbh (for VirtualBox).

3) The dmidecode command is used to decode the computer's DMI information into a human readable format.

4) DMI, short for Desktop Management Interface, is a standard followed by (almost) all system manufacturers. DMI is used to manage and monitor components on a desktop, laptop, or server computer.

5) With DMI, you can get information about the system hardware, system manufacturer, and device serial number.

6) The dmidecode (DMI Decode) command retrieves this s system-manufacturer information and provides information about the system manufacturer.

7) If your system is real, you should see the manufacturer's name:

> destroyer@andreyex:~$ sudo dmidecode -s system-manufacturer

8) If it is a virtual machine, the information will be reflected accordingly.

> root@localhost:~# dmidecode -s system-manufacturer

9) It was fast, wasn't it? You can refer to the dmidecode command man page to see the keywords you can use to extract more information.

10) If you want to check the Linux version information, you will have to use the uname command, because dmidecode is all about hardware details.

Hopefully this article helped you determine if your Linux server is running in a virtual machine or a physical machine.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#full Commands & pictures for beginers

Exploiting Port 22 SSH Bruteforce Port 22 SSH (RSA Method) Exploiting port 23 TELNET (Credential Capture) Exploiting TELNET (Bruteforce) Port 25 SMTP User Enumeration Exploiting Port 80 (PHP) Exploiting Port 139 & 445 (Samba) Exploiting Port 8080 (Java) Exploiting Port 5432 (Postgres) Exploiting Port 6667 (UnrealIRCD) Exploiting Port 36255 Remote Login Exploitation Remote Shell Exploitation Exploiting Port 8787 Bindshell Exploiting Port 5900 (VNC) Access Port 2121 (ProFTPD) Exploiting Port 8180 (Apache Tomcat) Privilege Escalation via NFS Exploiting Port 3306 (MYSQL)Network Scan Exploiting Port 21 FTP (Hydra) Exploiting VSFTPD 2.3.4
enjoy❤️👍🏻

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Best easy ways to reduce latency :

Solving latency issues
Latency is the time it takes to transfer data from client to server and back over available connections. High latency and / or low bandwidth results in low bandwidth, causing connectivity issues and latency.

Latency can occur anywhere between your local computer and the server, so it's important to consider both. Often times, the tactic you use for your local machine also works well for your server.

Remember, you cannot completely eliminate the delay. However, there are some easy ways to reduce latency, or at least identify its source.

1) Reboot
Warning, we're going to use the ugliest words in all of IT help ... have you turned it off and on again? Jokes aside, a reboot is important both locally and from a server perspective.

The network can slow down over time if not restarted. Locally, the cache of the modem or router gradually fills up and starts to get bogged down. In addition, sometimes a reboot of network servers is required.

2) Close programs that are limiting your bandwidth.
As explained above, latency and throughput are inextricably linked. If you are using near or even higher than the maximum bandwidth for your connection, it will increase latency.

3) Consider a wired connection.
Over time, technology has evolved towards wireless alternatives. Connecting to a network via an Ethernet cable can do wonders for connection speed if the latency occurs locally. This is very important when uploading or downloading large amounts of data to your local computer. It also has the added bonus of a simple and inexpensive fix. You won't find many wireless devices in server centers.

5) Review the location of data centers.
Depending on where your data is currently located, you can move it or add additional locations. If you can place your data closer to the user or the fetch point, you can dramatically reduce latency. Find out more about the location of our data centers on VPS.NET. With 24 locations around the world, you're sure to find the perfect destination.

6) Add CDN.
Content Delivery Networks (CDNs) can help you place copies of your data in many places. By creating multiple points of presence, your data can be cached for quick retrieval by those who access it regularly. CDNs can reduce latency as well as increase uptime. There are many CDNs available on the market. With a little research, you can find the perfect solution to your latency problem.

enjoy❤️👍🏻
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑HOW TO KNOW IF YOUR SERVER HAVE A GOOD SPEED RATE OR NOT ?

1) RAM size
The memory can be conditionally divided according to the distance from the processor. For example, the cache is in the first positions, the operative - in the second, the disk drive - in the third place. Their cost is calculated according to a similar principle. The types of memory that are closer to the processor are usually more expensive.

Note that in recent years, the operating system has become more accessible, and the larger its volume on the server, the more profitable. In such conditions, web applications will be able to store more information closer to the processor, which will increase their performance.

2) Why bandwidth is important
Usually providers offer their customers 1G and 10G Ethernet ports. 2 of them, 1 GB each, are built into the servers, but 10 will have to be installed additionally.

Ports are used to access the Internet or when organizing local networks. To solve the first task, a bandwidth of 1 GB is enough, but the second requires a higher speed - 10 GB.

3) Paying attention to disk drives
When choosing them, you need to take into account 3 parameters: capacity, access time and price. They are tightly interconnected, so you need to approach the search for a compromise thoughtfully.

For example, SATA drives are inexpensive and can reach several tens of TB in size, but they are characterized by high access times. SDD has a lower figure, but they are more expensive when calculated per GB.

Speaking about the purpose, we note that SATA is suitable for storing backups or static content in large volumes. SDD is suitable if you need to host databases or a boot partition.

4) Determining the processor
It is characterized mostly by two parameters: frequency and number of cores. You need to select it depending on the tasks. For some, it is the high frequency that is important, and the number is not an important characteristic (if, for example, 1C is to be placed). Others, on the other hand, need multi-core processors. These include the process of encoding or virtualizing video files.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Identify and categorize important data:

Separating critical data from non-critical data is perhaps the most important step in creating a data loss prevention program. Some of the data types you may need to identify are:

-Intellectual property (IP)

-Legal documents

-Strategic planning documents

-Sales data

-Information for clients

-Personally Identifiable Information (PII)

-Marketing data and forecasts

-Operational documentation

-Financial records

-Human Resource Data

-Government data

-Passwords and other IT data

-Data is subject to any compliance rules

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Linux terminal tips and tricks

1) For example, if we entered "apt install htop" without sudo, an error is returned indicating that "sudo" is required

> apt install htop

> sudo !!

2) Be careful if your last command was "poweroff" while you type !! and press Enter, you guessed it, the system will shutdown.

Not sure what the last team was? use the "history" command to check the last command and even further back Team work in the background
To keep the command running in the background, use "Ctrl + Z", use "fg" to bring it back

(fg: foreground)

eg

> nano /etc/apt/sources.list

> Ctrl + Z
# (Execute any other required commands)

fg
# Now we're back to nano


> Cancel shutdown
# If clicked shutdown from GUI use following command to undo
shutdown -c


# If the shutdown procedure has started, use the following command to cancel

> pkill shutdown


3) Execute a command at a specific time
We may need to install the "at" command first

# Debian / Ubuntu / Kali Linux, etc.

> sudo apt install at


# RHEL / CentOS / Fedora, etc.

> sudo dnf install at


at 01:20 Tue

> poweroff


> Ctrl + D

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Reverse list in Pytho0 by undercode :


1) The reverse () method
reverse () is a list data type method that reverses the elements of a list. This method modifies the original list rather than creating a new one.

The syntax for the reverse () method is as follows:

list.reverse ()


reverse () takes no arguments.

Here's an example:

capitals = 'Krasnodar', 'Moscow', 'Rostov', 'Minsk'

capitals.reverse ()

print ('Reverse list:', capitals)
Reverse list: 'Minsk', 'Rostov', 'Moscow', 'Krasnodar'

Reversed () function
reversed () is a built-in Python function that returns the reverse iterator of a given iterable object. The original list is not changed.

2) If you only want to iterate over the elements of the list in reverse order, it is preferable to use the reversed () function, since it is faster than rearranging the elements in place.

The syntax for the reversed () function is as follows:

reversed (seq)

Where is seq the list to return?

Below is an example of using a reversed () loop through the elements of a list in reverse order:

numbers = 1, 2, 3, 4

for i in reversed (numbers):
print (i)

3) If you want to convert a reverse iterator to a list, use the list () constructor:

numbers = 1, 2, 3, 4

print (list (reversed (numbers)))


4, 3, 2, 1

4) Flip the list using slicing
Slice notation is a built-in Python function that allows you to extract parts of a sequential data type. Although not very Pythonic, you can use the :: - 1 notation by flipping the list:

numbers = 1, 2, 3, 4

print (numbers :: - 1)


Slicing the list results in a new list containing the retrieved items. The original list is not changed.

4, 3, 2, 1

🦑 O U T P U T :

To reverse a Python list in place, use the reverse () method. If you only need to create a reverse iterator, use the reversed () function.

@UndercodeTesting :)
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑TOP DANGEROUS MALWARE ATTACKS :

1. Clop Ransomware
Ransomware is malware which encrypts your files until you pay a ransom to the hackers. “Clop” is one of the latest and most dangerous ransomware threats. It’s a variant of the well-known CryptoMix ransomware, which frequently targets Windows users.

Before beginning the encryption process, the Clop ransomware blocks over 600 Windows processes and disables multiple Windows 10 applications, including Windows Defender and Microsoft Security Essentials — leaving you with zero chance of protecting your data.

The Clop ransomware has evolved since its inception, now targeting entire networks — not just individual devices. Even the Maastricht University in the Netherlands became a victim of the Clop ransomware, with almost all Windows devices on the university’s network being encrypted and forced to pay a ransom.

2. Fake Windows Updates (Hidden Ransomware)
Hackers have been increasingly sending emails that instruct readers to install urgent Windows OS updates. The emails trick readers into installing the “latest” Windows updates, which are actually ransomware ‘.exe’ files in disguise.

The ransomware contained in these emails is known as “Cyborg”. It encrypts all of your files and programs and demands a ransom payment to un-encrypt the files.

Unfortunately, many email service providers and basic antivirus software aren’t able to detect and block these emails. This is why you must be using an antivirus that provides proper internet security, protecting you from dangerous emails.


3. Zeus Gameover
Zeus Gameover is part of the “Zeus” family of malware and viruses. This piece of malware is a Trojan — malware disguised as something legitimate — that accesses your sensitive bank account details and steals all of your funds.

The worst thing about this particular variant of the Zeus malware family is that it doesn’t require a centralized “Command and Control” server to complete transactions — which is a flaw found in many cyberattacks that authorities can target. Instead, Zeus Gameover can bypass centralized servers and create independent servers to send sensitive information. In essence, you cannot trace your stolen data.

4. RaaS
“RaaS” — also known as “Ransomware as a Service” — is a growing industry in the underground hacker community. People without the knowledge to carry out a sophisticated ransomware attack can pay to hire a professional hacker or team of hackers to perform the attack for them.

The growth of the underground RaaS industry is worrying, as it shows how easy it is to infect people with ransomware despite the bad actors having no previous experience with designing or coding malware.


5. News Malware Attacks
Cybercriminals often use current news stories and global events to target people with malware.

One example is hackers using the wave of the COVID-19 (Coronavirus) outbreak to target individuals with malware. Hackers send out emails that are disguised as legitimate information about the outbreak. Readers are prompted to click a link to learn more about the information, but the link contains malware that copies the files on your device and steals your personal information.

Research currently focuses on the spread of this malware in Japan. Still, it will become an issue worldwide during any kind of newsworthy outbreak.

6. Fleeceware
Fleeceware continues to charge app users large amounts of money despite users deleting those apps. Recent research has found that over 600 million Android users have downloaded “Fleeceware” onto their device in the past few years.

Although Fleeceware doesn’t pose a considerable security threat to a user’s device and data, it’s still very common, and it’s a shady practice by app developers wanting to cash in on unsuspecting users.


7. IoT Device Attacks
As the popularity of IoT (Internet of Things) devices grows in 2020 — things like smart speakers and video doorbells — hackers are looking to exploit these devices for valuable information.

There are multiple reasons why hackers choose to target IoT devices. For one, most IoT devices don’t have enough storage to install proper security measures. These devices often contain easy-to-access data such as passwords and usernames, which then can be used by hackers to log into user accounts and steal valuable information, such as banking details.

Hackers can also use internet-based cameras and mics to spy on and communicate with people — including young children via smart baby monitors.

These devices can also act as weak points in a corporation’s network, meaning hackers can gain access to entire systems through unsecured IoT devices — spreading malware to other devices across the network.

8. Social Engineering
Humans are possibly the weakest link in any security protocol. This is why cybercriminals are now turning to human psychology and deception to try and gain access to personal information.

The hacker will start by contacting a company or service provider and pretend to be a specific person. They’ll ask questions regarding the victim’s account and trick the customer support team into handing over pieces of sensitive information. Then, they’ll exploit that information to gain access to a person’s account and data, including payment details.

Although this isn’t a type of malware per se, social engineering is an alarming trend, as it doesn’t require hackers to know about coding or malware development. Instead, all the attacker needs is to be convincing and allow human error and complacency to reward them with the data they need.


9. Cryptojacking
Cryptojacking malware is designed to use a person’s computing power to help “mine” cryptocurrencies, such as Bitcoin. Mining requires a huge amount of computing power to generate new crypto coins, which is why hackers are attempting to install cryptojacking malware on computers and mobile devices to help with the mining process — slowing down the user’s device considerably.

Although cryptojacking attacks dropped significantly in previous years — mainly due to the sharp fall in the value of cryptocurrencies, this trend remains a threat. As cryptocurrency prices continue to rise through 2020, cryptojacking malware attacks will continue to be lucrative for cybercriminals.

10. Artificial Intelligence (AI) Attacks
As more tools become available to developers who want to program AI scripts and software, hackers will be able to use this same technology to carry out devastating cyberattacks.

Although cybersecurity companies are using artificial intelligence and machine learning algorithms to help combat malware, these technologies can also be exploited to hack devices and networks on a massive scale.


from wiki:0
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

TOP DANGEROUS MALWARE ATTACKS

NORDVPN :



Jacob.Lindgren@hotmail.fi:Jakke1994 | Expiration = 2021-12-29 14:31:28
jacob_branch7@yahoo.com:Buck1bell | Expiration = 2021-06-09 04:13:55
jacobandrew81@gmail.com:chester2 | Expiration = 2021-08-11 01:20:49
jacobconnelly6@gmail.com:Blueleader.17 | Expiration = 2020-08-01 11:05:49
jacobeckstein@hotmail.com:Eckstein2012! | Expiration = 2020-08-01 20:52:57
jacobmtravis80@gmail.com:daddy123 | Expiration = 2020-08-26 19:31:24
jacobroeser@gmail.com:Jacob954! | Expiration = 2021-07-21 13:41:34
jade_pearl@hotmail.com:unknownn | Expiration = 2022-05-03 11:27:30
hesaleitao@gmail.com:sportc08 | Expiration = 2020-10-17 11:06:29
hillis92@hotmail.com:Osteraker12 | Expiration = 2020-08-21 12:24:06
hisbad2003@yahoo.com:Slimshady7! | Expiration = 2020-08-11 00:01:39
hls1295@gmail.com:Peeps2007! | Expiration = 2020-09-09 01:24:37
hmorgan66@yahoo.com:2md0y1kd | Expiration = 2020-08-26 01:03:17
hoathuytb@gmail.com:fumiraxy | Expiration = 2021-01-29 22:34:42
hochard.francois@wanadoo.fr:Fh321965! | Expiration = 2021-03-12 15:48:54
hockeycrazyj30@gmail.com:J@yjay67 | Expiration = 2022-10-27 07:29:21
hokmanwu824@gmail.com:W0rd243118 | Expiration = 2020-08-24 09:46:09
holtmbra@gmail.com:Chopper12 | Expiration = 2020-11-01 13:37:05
homargonzalez@ymail.com:frogs123 | Expiration = 2021-10-02 04:12:08
howard.su@live.com:howardsu06231988 | Expiration = 2021-11-01 13:47:32
Howardkusumo@gmail.com:nov31998 | Expiration = 2021-05-25 13:21:45
hoykun12@hotmail.com:Sopern12 | Expiration = 2022-08-01 15:19:41
hoyunyin924@hotmail.com:ho139587 | Expiration = 2022-10-04 07:00:27
hudsonpk22@gmail.com:pallypower1 | Expiration = 2022-09-29 21:59:36
huntstephen2@gmail.com:Sputniks6942 | Expiration = 2021-02-13 23:01:40
husam.badwan@gmail.com:broncos1 | Expiration = 2020-09-13 10:04:05
huseregter@zeelandnet.nl:Regenboog123 | Expiration = 2022-08-11 15:45:00
iaincampbell247@gmail.com:Avonf1re | Expiration = 2021-03-25 16:01:11
ian.earle@yahoo.com:Moonlight1 | Expiration = 2022-09-26 03:49:00
ian.hale.2@gmail.com:sundance8 | Expiration = 2021-07-01 02:21:06
ianjarvis@blueyonder.co.uk:Pedant1977 | Expiration = 2021-08-13 12:36:15
ihamadb741@gmail.com:Hamad12345Asd | Expiration = 2021-02-02 22:08:15
ikekie@gmail.com:wildseven | Expiration = 2022-09-04 00:58:09
ikill5uckers21@gmail.com:Dj712416! | Expiration = 2021-06-25 14:44:06
imaveryscaryghost@gmail.com:w4rr10rme | Expiration = 2022-02-15 03:05:34
impuls3_@hotmail.com:fotboll123 | Expiration = 2020-08-16 13:49:48
harrelltf@gmail.com:fuckyou87 | Expiration = 2020-11-11 08:26:04
harrise967@gmail.com:Jibjib12 | Expiration = 2021-11-28 00:32:57
harrisonowens70@yahoo.com:hfro7093 | Expiration = 2020-08-22 00:42:02
harry.c97@hotmail.co.uk:Hanton97. | Expiration = 2022-08-15 09:46:30
hartleyspencer8@gmail.com:bandit0704 | Expiration = 2020-10-18 16:33:08
hazzalazza@live.com:Harrydog08 | Expiration = 2022-09-03 21:21:35
hbsan@hotmail.fr:Nfsgame62 | Expiration = 2020-12-31 01:54:06
hdvaughan87@gmail.com:Harrison87 | Expiration = 2021-12-15 16:03:27
helloimnate@gmail.com:Ded1cated | Expiration = 2021-03-23 07:19:53
hemal3240@me.com:device72 | Expiration = 2022-08-08 02:06:16
henrika90@gmail.com:sola54321 | Expiration = 2021-05-16 11:03:33
Henrygarate@msn.com:Lolomfg123 | Expiration = 2020-08-27 07:22:37
hernandezjoseg@hotmail.com:hugo1935 | Expiration = 2021-07-20 20:40:48
herschelthompson55@gmail.com:HTConeM7! | Expiration = 2020-12-06 10:44:03
imwonton@gmail.com:Wontonimo1 | Expiration = 2020-09-05 07:40:09
info@sextansystem.com:Sextan88 | Expiration = 2020-12-04 17:34:50
informedsquash@gmail.com:Widozer43 | Expiration = 2020-08-14 02:21:11
ircypissed@gmail.com:inferno1 | Expiration = 2022-03-20 07:26:37
Isbergaren@hotmail.com:3401isba45 | Expiration = 2022-07-30 10:55:19
islamkhreiwesh@yahoo.com:qassam123 | Expiration = 2022-06-13

Detailed fresh Proxies List


https://pastebin.com/eZBxeyLB

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 Rewrite of the popular wireless network auditor, "wifite":

F E A T U R E S :

PMKID hash capture (enabled by-default, force with: --pmkid)
WPS Offline Brute-Force Attack aka "Pixie-Dust". (enabled by-default, force with: --wps-only --pixie)
WPS Online Brute-Force Attack aka "PIN attack". (enabled by-default, force with: --wps-only --no-pixie)
WPA/2 Offline Brute-Force Attack via 4-Way Handshake capture (enabled by-default, force with: --no-wps)
Validates handshakes against pyrit, tshark, cowpatty, and aircrack-ng (when available)
Various WEP attacks (replay, chopchop, fragment, hirte, p0841, caffe-latte)
Automatically decloaks hidden access points while scanning or attacking.
Note: Only works when channel is fixed. Use -c <channel>
Disable this using --no-deauths
5Ghz support for some wireless cards (via -5 switch).
Note: Some tools don't play well on 5GHz channels (e.g. aireplay-ng)
Stores cracked passwords and handshakes to the current directory (--cracked)
Includes information about the cracked access point (Name, BSSID, Date, etc).
Easy to try to crack handshakes or PMKID hashes against a wordlist (--crack)

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/derv82/wifite2.git

2) cd wifite2

3) sudo ./Wifite.py

4) sudo python setup.py install

enjoy❤️👍🏻
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁