UNDERCODE SECURITY
226 subscribers
295 photos
1.03K files
1.73K links
πŸ¦‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘TIPS FOR BLOGGERS

1
. Crop images to improve composition
Sometimes you can take a photo that is almost perfect, but still requires some tweaking.

In these cases, a simple crop may be all you need to get your photos perfect.

By cropping, you can remove unnecessary background details to better define the main subject of your photos.

You can also use the free image cropping editor, which we will show next.

2. Adjust the exposure.
If you want to learn how to edit photos, you need to know about adjusting exposure.

First, you need to know that exposure is the amount of light your camera uses when taking a photo.

Both aperture and shutter speed affect exposure.

An overexposed photo may look washed out.

In contrast, an underexposed photo can appear dull and dark.

For this, a photo retouching program is suitable, you can easily adjust the exposure.

3. Perform color correction.
When taking photos, you should always properly adjust the white balance on your camera.

If your white balance is not properly adjusted, your photo may have a color cast that affects its contrast, saturation, and brightness.

Fortunately, you can easily fix any color problems during the editing process.

It takes some trial and error to master color grading.

But this is one of the most important skills to acquire if you really want to learn how to edit photos like a pro.

4. Removing unwanted stains
Sometimes you may need to make selective corrections to remove any blemishes, imperfections, etc.

One way to avoid making these adjustments is to make sure the camera lens is clean and free of dirt, grime and water droplets before shooting.

However, it would be nice to learn how to edit photos in order to eliminate these disadvantages.

5. Using PhotoMASTER
The free program PhotoMASTER has many possibilities in its functionality.

All of the above tips, you can implement using this tool.

The program is in Russian and has a simple and intuitive interface.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Brute SSH the remote server :

For brute-force attacks (brute-force attacks), we will use the Hydra tool , which is included with the Kali Linux distribution. SSH is present on any Linux or Unix server and is generally the primary use for administrators to access and control their systems.

Warning: Hydra is an attack tool

β€œ Use it only on your own systems and networks unless you have written permission from the owner. Otherwise, it is illegal . "

1) To implement the attack, use the command:

# hydra -s 22 -l root -P / usr / share / wordlists / fasttrack .txt 192.168.1.1 -t 4 ssh

2) Now let's analyze it:

- s - The flag indicates the port. It is worth noting that administrators can replace the default port 22 for the ssh service , in order to find out which port the service is running on, it is necessary to perform an initial scan of the target using the Nmap tool . We wrote about how to do this earlier in the article .

- l - the flag indicates the login, in our example we use root and admin. (we can provide a link to the dictionary here)

- P - the flag indicates the password, in our case we use the fasttrack .txt dictionary from the kali distribution , which is located in the / usr / share / wordlists / directory

3) It is worth noting that in order to effectively carry out a brute-force attack, it is worth paying due attention to the preparation of the dictionary, namely: taking into account geographical and linguistic peculiarities, including the name of the company, the names of its subsidiaries, the names of the services and applications running, the names of employees, etc.

192.168.1.1 - ip address of the target, since the target we are using has a white ip, it is smeared

- t - the flag indicates the number of simultaneously used threads. We indicate 4

ssh - used protocol

4) Based on the results of the team's work, we see that the passwords from the dictionary did not fit for the admin and root logins

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘GET ALL HARDWARE INFO ANY LINUX :

Installing HardInfo

1) HardInfo is the most popular graphical application and has been tested on Ubuntu / Mint, Debian, OpenSUSE, Fedora / CentOS / RHEL, Arch Linux and Manjaro Linux.

2) HardInfo is available for installation on all major Linux distributions from the default repository.

Installing HardInfo on Debian, Ubuntu and Linux Mint

$ sudo apt install hardinfo

Installing HardInfo on Fedora / CentOS Linux

3) For some reason, the Fedora team decided to stop packaging Hardinfo in the repository, so you will need to compile it from source as follows:

# dnf install glib-devel gtk + -devel zlib-devel libsoup-devel

$ cd Downloads

$ git clone https://github.com/lpereira/hardinfo.git

$ cd hardinfo

$ mkdir build

$ cd build

$ cmake ..

$ make

# make install

4) Installing HardInfo on Arch and Manjaro Linux

$ sudo pacman -S hardinfo

Installing HardInfo on OpenSUSE

$ sudo zypper in hardinfo

5) How to use HardInfo on Linux

After installation, open Hardinfo on your computer.

It is a graphical application and should be categorized as System named System Profiler and Benchmark in your distribution's launcher.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘2020 Instagram-Spam-Bot!

R E Q U I R E M E N T :

You will need the following for running this script-

1)Python3 installed in your system

2)Firefox web browser with Firefox webdriver

3)pip3

4)selenium

5)requests

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) Installing Python3
Visit the following url for details on how to install Python 3 for various Operating systems https://realpython.com/installing-python/#step-1-download-the-python-3-installer

2) Installing Firefox

cd

sudo apt-get -y install firefox

cd

wget https://github.com/mozilla/geckodriver/releases/
download/v0.26.0/geckodriver-v0.26.0-linux64.tar.gz

tar xzf geckodriver-v0.25.0-linux64.tar.gz

sudo mv geckodriver /usr/bin/geckodriver

3) Installing pip3

cd

apt install python3-pip

4) Installing Selenium and Requests

cd

pip3 install selenium

pip3 install requests

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Specify your own SSH port when using rdiff-backup :

1) rdiff-backup uses the standard SSH port when connecting to a remote host.

$ rdiff-backup --print-statistics ~ / Projects / personal /

2) rdiff-backup@backup.example.org :: / rdiff-backup / repositories / personal
ssh: connect to host backup.example.org port 22: Connection refused
Fatal Error: Truncated header string (problem probably originated remotely)

Couldn't start up the remote connection by executing

ssh -C rdiff-backup@backup.example.org rdiff-backup --server

3) Remember that, under the default settings, rdiff-backup must be installed in the PATH on the remote system. See the man page for more information on this. This message may also be displayed if the remote version of rdiff-backup is quite different from the local version (2.0.0).

$ rdiff-backup --print-statistics --remote-schema "ssh -C -p 2222 % s rdiff-backup --server" ~ / Projects / personal / rdiff-backup@backup.example.org :: / rdiff- backup / repositories / personal

-------------- [Session statistics] --------------
StartTime 1599393121.00 (Sun Sep 6 11:52:01 2020)
EndTime 1599393121.48 (Sun Sep 6 11:52:01 2020)
ElapsedTime 0.48 (0.48 seconds)
SourceFiles 11
SourceFileSize 10543 (10.3 KB)
MirrorFiles 1
MirrorFileSize 0 (0 bytes)
NewFiles 10
NewFileSize 10543 (10.3 KB)
DeletedFiles 0
DeletedFileSize 0 (0 bytes)
ChangedFiles 1
ChangedSourceSize 0 (0 bytes)
ChangedMirrorSize 0 (0 bytes)
IncrementFiles 0
IncrementFileSize 0 (0 bytes)
TotalDestinationSizeChange 10543 (10.3 KB)
Errors 0
--------------------------------------------------
That's all

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Best video recorder for android :

https://play.google.com/store/apps/details?id=com.duapps.recorder

https://play.google.com/store/apps/details?id=com.hecorat.screenrecorder.free&hl=en

https://play.google.com/store/apps/details?id=com.ezscreenrecorder

https://play.google.com/store/apps/details?id=screenrecorder.recorder.editor

https://play.google.com/store/apps/details?id=com.capturerecorder.receditor.screenrecorder

https://play.google.com/store/apps/details?id=com.i.video.recorder

https://play.google.com/store/apps/details?id=com.REC.recscreen.screenrecorder.gamescreenrecorder

https://id=com.recorder.video.magic.capture.gameplay

https://play.google.com/store/apps/details?
id=com.REC.screenrecorder.screen.recording

https://play.google.com/store/apps/details?id=com.tianxingjian.screenshot

https://play.google.com/store/apps/details?id=com.apowersoft.screenrecord

https://play.google.com/store/apps/details?id=com.camera.recorder.hdvideorecord

https://play.google.com/store/apps/details?id=com.blogspot.byterevapps.lollipopscreenrecorder

https://play.google.com/store/apps/details?id=com.screenrecorder.recordingvideo.supervideoeditor

https://play.google.com/store/apps/details?id=com.littlea.ezscreencorder

https://play.google.com/store/apps/details?id=com.zenaapps.backgroundvideorecorder

https://play.google.com/store/apps/details?id=com.kimcy929.secretvideorecorder

https://play.google.com/store/apps/details?id=com.rsupport.mobizen.sec

https://play.google.com/store/apps/details?id=https://play.google.com/store/apps/details?id=tv.shou.rec

https://play.google.com/store/apps/details?id=com.mobzapp.recme.free

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the different benefits of using a proxy server?

1) hide your IP address

in certain situations in some organizations, the server can also prevent a person from accessing certain websites.

When used in these cases, a proxy server is useful as it allows you to visit and access a website without any identification of your IP address.

On a broader scale, there are countries that block the access of their residents to certain websites or online content.

Using a reliable proxy server, you can easily confuse the filter and access information on the Internet, plus you can use mobile proxies as well .

2) filter requests
A proxy server can not only be used as a means of accessing blocked websites, but it can also be used to restrict access to websites for individuals using the network.

Businesses can use proxy servers to prevent employees from accessing websites that could damage a company's network or reduce overall performance.

3) Protection and Security
If you browse the Internet directly from an IP address that does not have a tool to act as an intermediary, then the security level of your computer is relatively low.

This means that your computer and server are vulnerable to hackers.

When using a proxy server, external servers are not sure which server is your direct IP and thus you will be better protected.

Some proxy servers are used as firewalls for added security, providing additional protection for computers from hackers.

4) performance and efficiency
Some proxies use cached data; however, it probably means nothing to you and makes you wonder what benefits a caching proxy can offer?

There is a simple answer to this question.

Let's say that a person is using the same network that you are using and wants to visit the same page that you have already visited, then the proxy does not need to visit any target website.

It can extract information from already received cached data.

This increases the speed of information transfer, speeds up work and reduces the volume of traffic coming from the server of the target site.

5) anonymity when using the Internet
If you want to surf the Internet anonymously, then it is most beneficial to use a proxy server.

If you think that hackers are the only people using proxies for anonymity reasons, then you are greatly mistaken.

In many cases, people choose to hide their IP and therefore their identity on the Internet.

6) business location
International companies may want to present different content depending on the user's location.

To do this, they will need to use a proxy server.

A proxy server can locate a visitor's IP address and load appropriate pages for a specific visitor according to need or desire.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the disadvantages of proxy servers?

1) identity theft
The proxy server cache can store a lot of sensitive data such as usernames and passwords.

While this may seem harmless at first, since proxy servers can block external servers from receiving this information, it can be unfortunate if the person associated with the proxy server is not responsible for the stored information.

In this situation, a malicious person can easily obtain sensitive data that could compromise your online identity.

It is for this reason that you should use a reputable internet service provider to buy proxy servers.

2) Incompatibility
Although the use of proxy servers can be very beneficial, there are problems that can arise if the proxy server is not compatible with the local network of servers.

Proxies are independent systems that operate according to their own configurations; hence, you can purchase a proxy that suits your local server, or configure one to match the other.

This is another reason why you should hire a reliable internet provider that offers convenient proxy servers.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ email2phonenumber: get the target's phone number just by having their email address :
This tool helps automate the discovery of someone's phone number by exploiting the design flaws of password reset and public data.


Supports 3 main functions:

1) "Scrape" - scrape websites for phone numbers, initiating a password reset using the recipient's email address

2) Generate - Generates a list of valid phone numbers based on the publicly available country phone numbering plan information.

3) Bruteforce - Loops through a list of phone numbers and initiates a password reset on various websites to retrieve associated masked emails and match them to the victim's address

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) git clone https://github.com/martinvigo/email2phonenumber.git

2) pip install BeautifulSoup requests

Scan sites for phone numbers

python email2phonenumber.py scrape -e target@email.co

3) Create a dictionary of valid phone numbers based on the phone number mask

4) python email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt

5) Find the target's phone number by resetting passwords on websites that do not alert the target using a phone number mask and proxy to avoid captchas and other anti-abuse remedies.

6) python email2phonenumber.py bruteforce -m 555XXX1234 -e target@email.com -p /tmp/proxies.txt -q

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁