Forwarded from UNDERCODE NEWS
Three days ago, Darknet Empire Market went down to speculate it ran away or the administrator was arrested
#international
#international
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Request is a decentralized network built on top of Ethereum, which allows anyone, anywhere to request a payment. A full description of the protocol may be found in our whitepaper.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/RequestNetwork/requestNetwork
2) Install all the packages in the monorepo.
yarn install
3) Build
Build all the packages in the monorepo.
yarn run build
4) Lint
Lint all the packages in the monorepo.
yarn run lint
5) Test
Test all the packages in the monorepo.
yarn run test
enjoyβ€οΈππ»
β git topic
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Request is a decentralized network built on top of Ethereum, which allows anyone, anywhere to request a payment. A full description of the protocol may be found in our whitepaper.
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/RequestNetwork/requestNetwork
2) Install all the packages in the monorepo.
yarn install
3) Build
Build all the packages in the monorepo.
yarn run build
4) Lint
Lint all the packages in the monorepo.
yarn run lint
5) Test
Test all the packages in the monorepo.
yarn run test
enjoyβ€οΈππ»
β git topic
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - RequestNetwork/requestNetwork: A JavaScript library for interacting with the Request Network protocol
A JavaScript library for interacting with the Request Network protocol - RequestNetwork/requestNetwork
β β β ο½ππ»βΊπ«Δπ¬πβ β β β
π¦TYPES OF PROCESS INJECTIONS
#FastTips
1) Classic DLL injection: In this method, the malware creates a DLL on the disk and links its path string in the virtual address space of the target process, thus ensuring the process executes it. The DLL then inherits the same access to all objects and resources as the target process. In addition, since the malware creates a DLL on the disk, it makes it susceptible to being detected by security products
2) Process hollowing: In this method, the malware spawns a new instance of the target process by overwriting the memory space of the target process and replacing it with the malicious code. This technique is known as process hollowing and makes the malware stealthier than the classic DLL injection, as it feels like a valid process
3) Portable executable (βPEβ) injection: In this method, the malware copies its malicious code into the virtual address space of the target process and causes it to execute via a shellcode or the CreateRemoteThread function. The malware allocates memory in the target process and loads its malicious code into it instead of linking its path string, as in the case of classic DLL injection. In addition, this means the target process is running two (2) different codes (the legitimate process and the malware) via it and relies on Windows APIs
β β β ο½ππ»βΊπ«Δπ¬πβ β β β\
π¦TYPES OF PROCESS INJECTIONS
#FastTips
1) Classic DLL injection: In this method, the malware creates a DLL on the disk and links its path string in the virtual address space of the target process, thus ensuring the process executes it. The DLL then inherits the same access to all objects and resources as the target process. In addition, since the malware creates a DLL on the disk, it makes it susceptible to being detected by security products
2) Process hollowing: In this method, the malware spawns a new instance of the target process by overwriting the memory space of the target process and replacing it with the malicious code. This technique is known as process hollowing and makes the malware stealthier than the classic DLL injection, as it feels like a valid process
3) Portable executable (βPEβ) injection: In this method, the malware copies its malicious code into the virtual address space of the target process and causes it to execute via a shellcode or the CreateRemoteThread function. The malware allocates memory in the target process and loads its malicious code into it instead of linking its path string, as in the case of classic DLL injection. In addition, this means the target process is running two (2) different codes (the legitimate process and the malware) via it and relies on Windows APIs
β β β ο½ππ»βΊπ«Δπ¬πβ β β β\
Forwarded from UNDERCODE HACKING
48337.rb
9.4 KB
VMWARE 2020 VERIFIED CVE VIA METASPLOIT
β USB Arbitrator Setuid Privilege Escalation
(use for learn)
β USB Arbitrator Setuid Privilege Escalation
(use for learn)
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦massive SQL injection vulnerability scanner :
F E A T U R E S :
-multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo
-targetted scanning by providing specific domain (with crawling)
-reverse domain scanning
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/the-robot/sqliv.git
2) cd sqliv
3) sudo python2 setup.py -i
4) Tutorial :
1. Multiple domain scanning with SQLi dork
it simply search multiple websites from given dork and scan the results one by one
python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE>
python sqliv.py -d "inurl:index.php?id=" -e google
2. Targetted scanning
can provide only domain name or specifc url with query params
if only domain name is provided, it will crawl and get urls with query
then scan the urls one by one
python sqliv.py -t <URL>
python sqliv.py -t www.example.com
python sqliv.py -t www.example.com/index.php?id=1
3. Reverse domain and scanning
do reverse domain and look for websites that hosted on same server as target url
python sqliv.py -t <URL> -r
4. Dumping scanned result
you can dump the scanned results as json by giving this argument
python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE> -o result.json
enjoyβ€οΈππ»
use for learn
β git topic
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦massive SQL injection vulnerability scanner :
F E A T U R E S :
-multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo
-targetted scanning by providing specific domain (with crawling)
-reverse domain scanning
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/the-robot/sqliv.git
2) cd sqliv
3) sudo python2 setup.py -i
4) Tutorial :
1. Multiple domain scanning with SQLi dork
it simply search multiple websites from given dork and scan the results one by one
python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE>
python sqliv.py -d "inurl:index.php?id=" -e google
2. Targetted scanning
can provide only domain name or specifc url with query params
if only domain name is provided, it will crawl and get urls with query
then scan the urls one by one
python sqliv.py -t <URL>
python sqliv.py -t www.example.com
python sqliv.py -t www.example.com/index.php?id=1
3. Reverse domain and scanning
do reverse domain and look for websites that hosted on same server as target url
python sqliv.py -t <URL> -r
4. Dumping scanned result
you can dump the scanned results as json by giving this argument
python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE> -o result.json
enjoyβ€οΈππ»
use for learn
β git topic
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - the-robot/sqliv: massive SQL injection vulnerability scanner
massive SQL injection vulnerability scanner. Contribute to the-robot/sqliv development by creating an account on GitHub.
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦BEST & FASTEST TORRENTS CLIENTS 2020 :
http://www.vuze.com/
https://www.qbittorrent.org/
http://www.vuze.com/
http://www.utorrent.com/
http://deluge-torrent.org/
FOR ANDROID :
https://play.google.com/store/apps/details?id=com.checketry.downloadmanager
https://play.google.com/store/apps/developer?id=BitTorrent,+Inc.
https://play.google.com/store/apps/details?id=com.frostwire.android
#fastTips
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦BEST & FASTEST TORRENTS CLIENTS 2020 :
http://www.vuze.com/
https://www.qbittorrent.org/
http://www.vuze.com/
http://www.utorrent.com/
http://deluge-torrent.org/
FOR ANDROID :
https://play.google.com/store/apps/details?id=com.checketry.downloadmanager
https://play.google.com/store/apps/developer?id=BitTorrent,+Inc.
https://play.google.com/store/apps/details?id=com.frostwire.android
#fastTips
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Vuze
Vuze Bittorrent Client - The Most Powerful Bittorrent Software on Earth
Vuze is the easiest to use and the best torrent download software on the internet.
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦What is Internal Server Error 500
Every time you open a web page, your browser sends a request to the server that hosts the site, which returns the requested data and a response code. The HTTP response status codes indicate whether the request was successful or not.
The answers are divided into five classes. Codes ranging from 500 to 599 indicate a server error.
The HTTP 500 status code is a generic error response that is returned by the server when another error code does not match. This can be caused by a number of issues that prevent the server from fulfilling the request.
If the page you are visiting throws a 500 error, there is nothing you can do because the error is not caused by your browser or internet connection. Even though the error occurs on the server side, you can try some of the following options:
1) Restart your browser or try using a different one. The chances of the page loading when you refresh your browser are slim, but still worth a try.
2) Try clearing your browser cache. If a page showing a 500 error is cached, after clearing the cache, the browser will ask for a new version of the page.
3) Come back later. In the meantime, the webmaster can fix the server issue.
4) Contact the website owners. The last remaining option is to contact the person in charge of maintaining the website.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦What is Internal Server Error 500
Every time you open a web page, your browser sends a request to the server that hosts the site, which returns the requested data and a response code. The HTTP response status codes indicate whether the request was successful or not.
The answers are divided into five classes. Codes ranging from 500 to 599 indicate a server error.
The HTTP 500 status code is a generic error response that is returned by the server when another error code does not match. This can be caused by a number of issues that prevent the server from fulfilling the request.
If the page you are visiting throws a 500 error, there is nothing you can do because the error is not caused by your browser or internet connection. Even though the error occurs on the server side, you can try some of the following options:
1) Restart your browser or try using a different one. The chances of the page loading when you refresh your browser are slim, but still worth a try.
2) Try clearing your browser cache. If a page showing a 500 error is cached, after clearing the cache, the browser will ask for a new version of the page.
3) Come back later. In the meantime, the webmaster can fix the server issue.
4) Contact the website owners. The last remaining option is to contact the person in charge of maintaining the website.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Tips for choosing a CMS :
The right CMS is essential to building your artist site. These tips will help you narrow down your choices.
βDetermine your budget: To determine your budget, take into account the initial setup costs, any marketing you want to do, and website hosting, which is a monthly fee paid to a service provider to make your site accessible to the world.
Initial setup fees include the cost of purchasing and registering a domain name that will be the URL of your website.
__Using Templates: The best content management systems offer templates to get you started. Look for a template with a clean, simple layout that puts your art in the spotlight. For example, a carousel template allows site visitors to easily browse your creations.
βDecide if you want to sell online: If you want to sell your artwork online, look for a CMS that supports e-commerce features. This includes the functionality of a virtual shopping cart and the ability to accept various forms of payment.
βPrioritize your marketing options: You will probably need a CMS that supports email marketing and newsletter capabilities. Ideally, the CMS you choose should have marketing analytics built in, but many require a third-party app, so don't let that get in the way of the deal.
#fastTips
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Tips for choosing a CMS :
The right CMS is essential to building your artist site. These tips will help you narrow down your choices.
βDetermine your budget: To determine your budget, take into account the initial setup costs, any marketing you want to do, and website hosting, which is a monthly fee paid to a service provider to make your site accessible to the world.
Initial setup fees include the cost of purchasing and registering a domain name that will be the URL of your website.
__Using Templates: The best content management systems offer templates to get you started. Look for a template with a clean, simple layout that puts your art in the spotlight. For example, a carousel template allows site visitors to easily browse your creations.
βDecide if you want to sell online: If you want to sell your artwork online, look for a CMS that supports e-commerce features. This includes the functionality of a virtual shopping cart and the ability to accept various forms of payment.
βPrioritize your marketing options: You will probably need a CMS that supports email marketing and newsletter capabilities. Ideally, the CMS you choose should have marketing analytics built in, but many require a third-party app, so don't let that get in the way of the deal.
#fastTips
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦#ForBeginers What is Cross Site Scripting (XSS)? & How it Work's ?
1) Cross-site scripting (XSS) is a type of cyberattack in which malicious scripts are injected into trusted and trusted sites.
2) Cross-site scripting attacks are possible in HTML, Flash, ActiveX and CSS. However, JavaScript is the most frequent target of cybercriminals as it plays an important role in most web browsing.
3) JavaScript is a programming language that allows you to implement complex functionality on your website. Most of the large and interactive websites on the Internet have been built with JavaScript. βYou can develop interactive features, games or add additional features to better promote your products,β says Domantas Gudelyauskas, marketing manager for the Zyro project.
4) JavaScript is so popular in the web community because it allows you to do almost anything on a web page. And that's when it becomes problematic. Cybercriminals can use JavaScript to log into your web pages and insert malicious scripts.
π¦How does cross-site scripting work?
Cybercriminals can perform XSS attacks on WordPress websites in two ways. They can either use user input or bypass policies of the same origin. Let's take a look at both methods to better understand cross-site scripting.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦#ForBeginers What is Cross Site Scripting (XSS)? & How it Work's ?
1) Cross-site scripting (XSS) is a type of cyberattack in which malicious scripts are injected into trusted and trusted sites.
2) Cross-site scripting attacks are possible in HTML, Flash, ActiveX and CSS. However, JavaScript is the most frequent target of cybercriminals as it plays an important role in most web browsing.
3) JavaScript is a programming language that allows you to implement complex functionality on your website. Most of the large and interactive websites on the Internet have been built with JavaScript. βYou can develop interactive features, games or add additional features to better promote your products,β says Domantas Gudelyauskas, marketing manager for the Zyro project.
4) JavaScript is so popular in the web community because it allows you to do almost anything on a web page. And that's when it becomes problematic. Cybercriminals can use JavaScript to log into your web pages and insert malicious scripts.
π¦How does cross-site scripting work?
Cybercriminals can perform XSS attacks on WordPress websites in two ways. They can either use user input or bypass policies of the same origin. Let's take a look at both methods to better understand cross-site scripting.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
Forwarded from Backup Legal Mega
ARP spoofing &Man In The Middle Attacks Execution &Detection
Udemy Link:
https://www.udemy.com/course/learn-practical-attacks-against-network-clients/
OneDrive Link:
https://mygavilan-my.sharepoint.com/:f:/g/personal/kali_masi_my_gavilan_edu/EoMS0fsDG3BLhDy8__Evem8B62PRRN5kDQTSXw-qbhQuLw?e=lw9GFZ
Udemy Link:
https://www.udemy.com/course/learn-practical-attacks-against-network-clients/
OneDrive Link:
https://mygavilan-my.sharepoint.com/:f:/g/personal/kali_masi_my_gavilan_edu/EoMS0fsDG3BLhDy8__Evem8B62PRRN5kDQTSXw-qbhQuLw?e=lw9GFZ
Udemy
ARP spoofing &Man In The Middle Attacks Execution &Detection
Learn practical attacks to test the security of clients connected to a network and how to protect against these attacks
Forwarded from Backup Legal Mega
Learn Artificial Intelligence with TensorFlow -1.84 GB-
https://mega.nz/#F!OhEnTahQ!eIH-kn6EH6xQOPA3Yph4Rg
https://mega.nz/#F!OhEnTahQ!eIH-kn6EH6xQOPA3Yph4Rg
mega.nz
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
Forwarded from Backup Legal Mega
mega.nz
MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦#ForBeginers What is Cross Site Scripting (XSS)? & How it Work's ?
1) Cross-site scripting (XSS) is a type of cyberattack in which malicious scripts are injected into trusted and trusted sites.
2) Cross-site scripting attacks are possible in HTML, Flash, ActiveX and CSS. However, JavaScript is the most frequent target of cybercriminals as it plays an important role in most web browsing.
3) JavaScript is a programming language that allows you to implement complex functionality on your website. Most of the large and interactive websites on the Internet have been built with JavaScript. βYou can develop interactive features, games or add additional features to better promote your products,β says Domantas Gudelyauskas, marketing manager for the Zyro project.
4) JavaScript is so popular in the web community because it allows you to do almost anything on a web page. And that's when it becomes problematic. Cybercriminals can use JavaScript to log into your web pages and insert malicious scripts.
π¦How does cross-site scripting work?
Cybercriminals can perform XSS attacks on WordPress websites in two ways. They can either use user input or bypass policies of the same origin. Let's take a look at both methods to better understand cross-site scripting.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦#ForBeginers What is Cross Site Scripting (XSS)? & How it Work's ?
1) Cross-site scripting (XSS) is a type of cyberattack in which malicious scripts are injected into trusted and trusted sites.
2) Cross-site scripting attacks are possible in HTML, Flash, ActiveX and CSS. However, JavaScript is the most frequent target of cybercriminals as it plays an important role in most web browsing.
3) JavaScript is a programming language that allows you to implement complex functionality on your website. Most of the large and interactive websites on the Internet have been built with JavaScript. βYou can develop interactive features, games or add additional features to better promote your products,β says Domantas Gudelyauskas, marketing manager for the Zyro project.
4) JavaScript is so popular in the web community because it allows you to do almost anything on a web page. And that's when it becomes problematic. Cybercriminals can use JavaScript to log into your web pages and insert malicious scripts.
π¦How does cross-site scripting work?
Cybercriminals can perform XSS attacks on WordPress websites in two ways. They can either use user input or bypass policies of the same origin. Let's take a look at both methods to better understand cross-site scripting.
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Top 5 PHP Frameworks :
Now that we have all understood the PHP framework, which PHP framework is the best to use in web development?
β Developing any software application from scratch requires a lot of work, so it is very tedious and time-consuming. Using a better PHP environment saves you the hassle of re-creating the same functions over and over. We've looked at the countless PHP frameworks available on the market to find the best for you.
1) Laravel
2) CakePHP
3) CodeIgniter
4) Symfony
5) Zend framework
#FastTips
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦Top 5 PHP Frameworks :
Now that we have all understood the PHP framework, which PHP framework is the best to use in web development?
β Developing any software application from scratch requires a lot of work, so it is very tedious and time-consuming. Using a better PHP environment saves you the hassle of re-creating the same functions over and over. We've looked at the countless PHP frameworks available on the market to find the best for you.
1) Laravel
2) CakePHP
3) CodeIgniter
4) Symfony
5) Zend framework
#FastTips
β β β Uππ»βΊπ«Δπ¬πβ β β β
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦ EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible..->
#tool
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/FortyNorthSecurity/EyeWitness.git
2) cd Navigate into the CS directory
3) Load EyeWitness.sln into Visual Studio
4) Go to Build at the top and then Build Solution if no modifications are wanted
5) EyeWitness.exe --help
6) EyeWitness.exe -f C:\Path\to\urls.txt
7) EyeWitness.exe -f C:\Path\to\urls.txt -d [timeout in seconds] -c
8) ./EyeWitness.py -f filename --timeout optionaltimeout
E X A M P L E :
./EyeWitness -f urls.txt --web
./EyeWitness -x urls.xml --timeout 8
./EyeWitness.py -f urls.txt --web --proxy-ip 127.0.0.1 --proxy-port 8080 --proxy-type socks5 --timeout 120
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
π¦ EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible..->
#tool
πΈπ½π π π°π»π»πΈπ π°π πΈπΎπ½ & π π π½ :
1) git clone https://github.com/FortyNorthSecurity/EyeWitness.git
2) cd Navigate into the CS directory
3) Load EyeWitness.sln into Visual Studio
4) Go to Build at the top and then Build Solution if no modifications are wanted
5) EyeWitness.exe --help
6) EyeWitness.exe -f C:\Path\to\urls.txt
7) EyeWitness.exe -f C:\Path\to\urls.txt -d [timeout in seconds] -c
8) ./EyeWitness.py -f filename --timeout optionaltimeout
E X A M P L E :
./EyeWitness -f urls.txt --web
./EyeWitness -x urls.xml --timeout 8
./EyeWitness.py -f urls.txt --web --proxy-ip 127.0.0.1 --proxy-port 8080 --proxy-type socks5 --timeout 120
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
β β β Uππ»βΊπ«Δπ¬πβ β β β
GitHub
GitHub - RedSiege/EyeWitness: EyeWitness is designed to take screenshots of websites, provide some server header info, and identifyβ¦
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. - RedSiege/EyeWitness
Forwarded from Backup Legal Mega
π¦New Computer Hacking Forensic Investigator labs and tools:
https://mega.nz/folder/fBJzUYQY#yhs2nAV7DwCTL6xiil9OgQ
https://mega.nz/folder/fBJzUYQY#yhs2nAV7DwCTL6xiil9OgQ
mega.nz
File folder on MEGA