UNDERCODE SECURITY
225 subscribers
295 photos
1.03K files
1.73K links
πŸ¦‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘A #tool to dump a git repository from a website.

1) git clone https://github.com/arthaud/git-dumper.git?

2)cd git-dumper

3) pip install -r requirements.txt

4) ./git-dumper.py http://website.com/.git ~/website

F E A T U R E S :

-Fetch all common files (.gitignore, .git/HEAD, .git/index, etc.);

-Find as many refs as possible (such as refs/heads/master, refs/remotes/origin/HEAD, etc.) by analyzing .git/HEAD, .git/logs/HEAD, .git/config, .git/packed-refs and so on;

-Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, .git/refs/* and .git/logs/*;

-Fetch all objects recursively, analyzing each commits to find their parents;

-Run git checkout . to recover the current working tree

βœ…
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from UNDERCODE COMMUNITY
48718.c
1.9 KB
#dangerous shellCode
β€” Shellcode Title: Windows/x86 Download using mshta.exe Shellcode (100 bytes)
β€” Shellcode Author: Siddharth Sharma
--- Shellcode Length: ~100 bytes
β€” Tested on: WIN7x86
β€” Date: 2020-06-16
πŸ¦‘THE RECENT SHELLCODE HERE CAN USE MSHTA FOR AUTO DOWNLOAD WITHOUT AUTORIZATION...

- SO what is Mshta.exe
-How to Download Mshta.exe and Fix EXE Error Messages

1) EXE files such as mshta.exe are categorized as Win32 EXE (Executable application) files. As a Microsoft (R) HTML Application host file, it was created for use in Internet Explorer by Microsoft.

2) The release of mshta.exe introduced for Windows was on 11/08/2006 in Windows Vista. The most recent release for Microsoft Office Access 2010 14 launched on 07/04/2011 [version 11.00.16299.371 (WinBuild.160101.0800) release]. Mshta.exe is included in Windows 10, Windows 8.1, and Windows 8 versions.

mshta.exe Runtime Errors

3) Runtime errors are Microsoft Office Access 2010 errors that occur during "runtime". Runtime is pretty self-explanatory; it means that these EXE errors are triggered when mshta.exe is attempted to be loaded either when Microsoft Office Access 2010 is starting up, or in some cases already running. Runtime errors are the most common form of EXE error you will encounter using Microsoft Office Access 2010.

4) In most cases, mshta.exe runtime errors occurring while the program is running will result in the program terminating abnormally. Most of these mshta.exe error messages mean that Microsoft Office Access 2010 was either unable to locate this file on startup, or the file is corrupt, resulting in a prematurely-aborted startup process. Generally, Microsoft Office Access 2010 will be unable to start without resolving these errors.

by microsoft
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from WEB UNDERCODE - PRIVATE
Memory Injection like a Boss.pdf
331.5 KB
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘#infoguatering How can I check if the victim Linux
is a Linux system is running on a physical or virtual machine?

1) Check if the server is physical or virtual
The easiest way to check this is to use the dmidecode command.

> sudo dmidecode -s system-manufacturer


2) If it is a physical system, you should see the manufacturer's name such as Dell, Lenovo, etc.
If it's a virtual system, you should see output like QEMU, innotek Gmbh (for VirtualBox).

3) The dmidecode command is used to decode the computer's DMI information into a human readable format.

4) DMI, short for Desktop Management Interface, is a standard followed by (almost) all system manufacturers. DMI is used to manage and monitor components on a desktop, laptop, or server computer.

5) With DMI, you can get information about the system hardware, system manufacturer, and device serial number.

6) The dmidecode (DMI Decode) command retrieves this s system-manufacturer information and provides information about the system manufacturer.

7) If your system is real, you should see the manufacturer's name:

> destroyer@andreyex:~$ sudo dmidecode -s system-manufacturer

8) If it is a virtual machine, the information will be reflected accordingly.

> root@localhost:~# dmidecode -s system-manufacturer

9) It was fast, wasn't it? You can refer to the dmidecode command man page to see the keywords you can use to extract more information.

10) If you want to check the Linux version information, you will have to use the uname command, because dmidecode is all about hardware details.

Hopefully this article helped you determine if your Linux server is running in a virtual machine or a physical machine.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Comprehensive Guide on Metasploitable 2.pdf
2.4 MB
#full Commands & pictures for beginers

Exploiting Port 22 SSH Bruteforce Port 22 SSH (RSA Method) Exploiting port 23 TELNET (Credential Capture) Exploiting TELNET (Bruteforce) Port 25 SMTP User Enumeration Exploiting Port 80 (PHP) Exploiting Port 139 & 445 (Samba) Exploiting Port 8080 (Java) Exploiting Port 5432 (Postgres) Exploiting Port 6667 (UnrealIRCD) Exploiting Port 36255 Remote Login Exploitation Remote Shell Exploitation Exploiting Port 8787 Bindshell Exploiting Port 5900 (VNC) Access Port 2121 (ProFTPD) Exploiting Port 8180 (Apache Tomcat) Privilege Escalation via NFS Exploiting Port 3306 (MYSQL)Network Scan Exploiting Port 21 FTP (Hydra) Exploiting VSFTPD 2.3.4
enjoyβ€οΈπŸ‘πŸ»
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Best easy ways to reduce latency :

Solving latency issues
Latency is the time it takes to transfer data from client to server and back over available connections. High latency and / or low bandwidth results in low bandwidth, causing connectivity issues and latency.

Latency can occur anywhere between your local computer and the server, so it's important to consider both. Often times, the tactic you use for your local machine also works well for your server.

Remember, you cannot completely eliminate the delay. However, there are some easy ways to reduce latency, or at least identify its source.

1) Reboot
Warning, we're going to use the ugliest words in all of IT help ... have you turned it off and on again? Jokes aside, a reboot is important both locally and from a server perspective.

The network can slow down over time if not restarted. Locally, the cache of the modem or router gradually fills up and starts to get bogged down. In addition, sometimes a reboot of network servers is required.

2) Close programs that are limiting your bandwidth.
As explained above, latency and throughput are inextricably linked. If you are using near or even higher than the maximum bandwidth for your connection, it will increase latency.

3) Consider a wired connection.
Over time, technology has evolved towards wireless alternatives. Connecting to a network via an Ethernet cable can do wonders for connection speed if the latency occurs locally. This is very important when uploading or downloading large amounts of data to your local computer. It also has the added bonus of a simple and inexpensive fix. You won't find many wireless devices in server centers.

5) Review the location of data centers.
Depending on where your data is currently located, you can move it or add additional locations. If you can place your data closer to the user or the fetch point, you can dramatically reduce latency. Find out more about the location of our data centers on VPS.NET. With 24 locations around the world, you're sure to find the perfect destination.

6) Add CDN.
Content Delivery Networks (CDNs) can help you place copies of your data in many places. By creating multiple points of presence, your data can be cached for quick retrieval by those who access it regularly. CDNs can reduce latency as well as increase uptime. There are many CDNs available on the market. With a little research, you can find the perfect solution to your latency problem.

enjoyβ€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘HOW TO KNOW IF YOUR SERVER HAVE A GOOD SPEED RATE OR NOT ?

1) RAM size
The memory can be conditionally divided according to the distance from the processor. For example, the cache is in the first positions, the operative - in the second, the disk drive - in the third place. Their cost is calculated according to a similar principle. The types of memory that are closer to the processor are usually more expensive.

Note that in recent years, the operating system has become more accessible, and the larger its volume on the server, the more profitable. In such conditions, web applications will be able to store more information closer to the processor, which will increase their performance.

2) Why bandwidth is important
Usually providers offer their customers 1G and 10G Ethernet ports. 2 of them, 1 GB each, are built into the servers, but 10 will have to be installed additionally.

Ports are used to access the Internet or when organizing local networks. To solve the first task, a bandwidth of 1 GB is enough, but the second requires a higher speed - 10 GB.

3) Paying attention to disk drives
When choosing them, you need to take into account 3 parameters: capacity, access time and price. They are tightly interconnected, so you need to approach the search for a compromise thoughtfully.

For example, SATA drives are inexpensive and can reach several tens of TB in size, but they are characterized by high access times. SDD has a lower figure, but they are more expensive when calculated per GB.

Speaking about the purpose, we note that SATA is suitable for storing backups or static content in large volumes. SDD is suitable if you need to host databases or a boot partition.

4) Determining the processor
It is characterized mostly by two parameters: frequency and number of cores. You need to select it depending on the tasks. For some, it is the high frequency that is important, and the number is not an important characteristic (if, for example, 1C is to be placed). Others, on the other hand, need multi-core processors. These include the process of encoding or virtualizing video files.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Identify and categorize important data:

Separating critical data from non-critical data is perhaps the most important step in creating a data loss prevention program. Some of the data types you may need to identify are:

-Intellectual property (IP)

-Legal documents

-Strategic planning documents

-Sales data

-Information for clients

-Personally Identifiable Information (PII)

-Marketing data and forecasts

-Operational documentation

-Financial records

-Human Resource Data

-Government data

-Passwords and other IT data

-Data is subject to any compliance rules

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Linux terminal tips and tricks

1) For example, if we entered "apt install htop" without sudo, an error is returned indicating that "sudo" is required

> apt install htop

> sudo !!

2) Be careful if your last command was "poweroff" while you type !! and press Enter, you guessed it, the system will shutdown.

Not sure what the last team was? use the "history" command to check the last command and even further back Team work in the background
To keep the command running in the background, use "Ctrl + Z", use "fg" to bring it back

(fg: foreground)

eg

> nano /etc/apt/sources.list

> Ctrl + Z
# (Execute any other required commands)

fg
# Now we're back to nano


> Cancel shutdown
# If clicked shutdown from GUI use following command to undo
shutdown -c


# If the shutdown procedure has started, use the following command to cancel

> pkill shutdown


3) Execute a command at a specific time
We may need to install the "at" command first

# Debian / Ubuntu / Kali Linux, etc.

> sudo apt install at


# RHEL / CentOS / Fedora, etc.

> sudo dnf install at


at 01:20 Tue

> poweroff


> Ctrl + D

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Reverse list in Pytho0 by undercode :


1) The reverse () method
reverse () is a list data type method that reverses the elements of a list. This method modifies the original list rather than creating a new one.

The syntax for the reverse () method is as follows:

list.reverse ()


reverse () takes no arguments.

Here's an example:

capitals = 'Krasnodar', 'Moscow', 'Rostov', 'Minsk'

capitals.reverse ()

print ('Reverse list:', capitals)
Reverse list: 'Minsk', 'Rostov', 'Moscow', 'Krasnodar'

Reversed () function
reversed () is a built-in Python function that returns the reverse iterator of a given iterable object. The original list is not changed.

2) If you only want to iterate over the elements of the list in reverse order, it is preferable to use the reversed () function, since it is faster than rearranging the elements in place.

The syntax for the reversed () function is as follows:

reversed (seq)

Where is seq the list to return?

Below is an example of using a reversed () loop through the elements of a list in reverse order:

numbers = 1, 2, 3, 4

for i in reversed (numbers):
print (i)

3) If you want to convert a reverse iterator to a list, use the list () constructor:

numbers = 1, 2, 3, 4

print (list (reversed (numbers)))


4, 3, 2, 1

4) Flip the list using slicing
Slice notation is a built-in Python function that allows you to extract parts of a sequential data type. Although not very Pythonic, you can use the :: - 1 notation by flipping the list:

numbers = 1, 2, 3, 4

print (numbers :: - 1)


Slicing the list results in a new list containing the retrieved items. The original list is not changed.

4, 3, 2, 1

πŸ¦‘ O U T P U T :

To reverse a Python list in place, use the reverse () method. If you only need to create a reverse iterator, use the reversed () function.

@UndercodeTesting :)
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁