UNDERCODE SECURITY
226 subscribers
295 photos
1.03K files
1.73K links
πŸ¦‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Specify your own SSH port when using rdiff-backup :

1) rdiff-backup uses the standard SSH port when connecting to a remote host.

$ rdiff-backup --print-statistics ~ / Projects / personal /

2) rdiff-backup@backup.example.org :: / rdiff-backup / repositories / personal
ssh: connect to host backup.example.org port 22: Connection refused
Fatal Error: Truncated header string (problem probably originated remotely)

Couldn't start up the remote connection by executing

ssh -C rdiff-backup@backup.example.org rdiff-backup --server

3) Remember that, under the default settings, rdiff-backup must be installed in the PATH on the remote system. See the man page for more information on this. This message may also be displayed if the remote version of rdiff-backup is quite different from the local version (2.0.0).

$ rdiff-backup --print-statistics --remote-schema "ssh -C -p 2222 % s rdiff-backup --server" ~ / Projects / personal / rdiff-backup@backup.example.org :: / rdiff- backup / repositories / personal

-------------- [Session statistics] --------------
StartTime 1599393121.00 (Sun Sep 6 11:52:01 2020)
EndTime 1599393121.48 (Sun Sep 6 11:52:01 2020)
ElapsedTime 0.48 (0.48 seconds)
SourceFiles 11
SourceFileSize 10543 (10.3 KB)
MirrorFiles 1
MirrorFileSize 0 (0 bytes)
NewFiles 10
NewFileSize 10543 (10.3 KB)
DeletedFiles 0
DeletedFileSize 0 (0 bytes)
ChangedFiles 1
ChangedSourceSize 0 (0 bytes)
ChangedMirrorSize 0 (0 bytes)
IncrementFiles 0
IncrementFileSize 0 (0 bytes)
TotalDestinationSizeChange 10543 (10.3 KB)
Errors 0
--------------------------------------------------
That's all

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Best video recorder for android :

https://play.google.com/store/apps/details?id=com.duapps.recorder

https://play.google.com/store/apps/details?id=com.hecorat.screenrecorder.free&hl=en

https://play.google.com/store/apps/details?id=com.ezscreenrecorder

https://play.google.com/store/apps/details?id=screenrecorder.recorder.editor

https://play.google.com/store/apps/details?id=com.capturerecorder.receditor.screenrecorder

https://play.google.com/store/apps/details?id=com.i.video.recorder

https://play.google.com/store/apps/details?id=com.REC.recscreen.screenrecorder.gamescreenrecorder

https://id=com.recorder.video.magic.capture.gameplay

https://play.google.com/store/apps/details?
id=com.REC.screenrecorder.screen.recording

https://play.google.com/store/apps/details?id=com.tianxingjian.screenshot

https://play.google.com/store/apps/details?id=com.apowersoft.screenrecord

https://play.google.com/store/apps/details?id=com.camera.recorder.hdvideorecord

https://play.google.com/store/apps/details?id=com.blogspot.byterevapps.lollipopscreenrecorder

https://play.google.com/store/apps/details?id=com.screenrecorder.recordingvideo.supervideoeditor

https://play.google.com/store/apps/details?id=com.littlea.ezscreencorder

https://play.google.com/store/apps/details?id=com.zenaapps.backgroundvideorecorder

https://play.google.com/store/apps/details?id=com.kimcy929.secretvideorecorder

https://play.google.com/store/apps/details?id=com.rsupport.mobizen.sec

https://play.google.com/store/apps/details?id=https://play.google.com/store/apps/details?id=tv.shou.rec

https://play.google.com/store/apps/details?id=com.mobzapp.recme.free

@undercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the different benefits of using a proxy server?

1) hide your IP address

in certain situations in some organizations, the server can also prevent a person from accessing certain websites.

When used in these cases, a proxy server is useful as it allows you to visit and access a website without any identification of your IP address.

On a broader scale, there are countries that block the access of their residents to certain websites or online content.

Using a reliable proxy server, you can easily confuse the filter and access information on the Internet, plus you can use mobile proxies as well .

2) filter requests
A proxy server can not only be used as a means of accessing blocked websites, but it can also be used to restrict access to websites for individuals using the network.

Businesses can use proxy servers to prevent employees from accessing websites that could damage a company's network or reduce overall performance.

3) Protection and Security
If you browse the Internet directly from an IP address that does not have a tool to act as an intermediary, then the security level of your computer is relatively low.

This means that your computer and server are vulnerable to hackers.

When using a proxy server, external servers are not sure which server is your direct IP and thus you will be better protected.

Some proxy servers are used as firewalls for added security, providing additional protection for computers from hackers.

4) performance and efficiency
Some proxies use cached data; however, it probably means nothing to you and makes you wonder what benefits a caching proxy can offer?

There is a simple answer to this question.

Let's say that a person is using the same network that you are using and wants to visit the same page that you have already visited, then the proxy does not need to visit any target website.

It can extract information from already received cached data.

This increases the speed of information transfer, speeds up work and reduces the volume of traffic coming from the server of the target site.

5) anonymity when using the Internet
If you want to surf the Internet anonymously, then it is most beneficial to use a proxy server.

If you think that hackers are the only people using proxies for anonymity reasons, then you are greatly mistaken.

In many cases, people choose to hide their IP and therefore their identity on the Internet.

6) business location
International companies may want to present different content depending on the user's location.

To do this, they will need to use a proxy server.

A proxy server can locate a visitor's IP address and load appropriate pages for a specific visitor according to need or desire.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What are the disadvantages of proxy servers?

1) identity theft
The proxy server cache can store a lot of sensitive data such as usernames and passwords.

While this may seem harmless at first, since proxy servers can block external servers from receiving this information, it can be unfortunate if the person associated with the proxy server is not responsible for the stored information.

In this situation, a malicious person can easily obtain sensitive data that could compromise your online identity.

It is for this reason that you should use a reputable internet service provider to buy proxy servers.

2) Incompatibility
Although the use of proxy servers can be very beneficial, there are problems that can arise if the proxy server is not compatible with the local network of servers.

Proxies are independent systems that operate according to their own configurations; hence, you can purchase a proxy that suits your local server, or configure one to match the other.

This is another reason why you should hire a reliable internet provider that offers convenient proxy servers.

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ email2phonenumber: get the target's phone number just by having their email address :
This tool helps automate the discovery of someone's phone number by exploiting the design flaws of password reset and public data.


Supports 3 main functions:

1) "Scrape" - scrape websites for phone numbers, initiating a password reset using the recipient's email address

2) Generate - Generates a list of valid phone numbers based on the publicly available country phone numbering plan information.

3) Bruteforce - Loops through a list of phone numbers and initiates a password reset on various websites to retrieve associated masked emails and match them to the victim's address

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1) git clone https://github.com/martinvigo/email2phonenumber.git

2) pip install BeautifulSoup requests

Scan sites for phone numbers

python email2phonenumber.py scrape -e target@email.co

3) Create a dictionary of valid phone numbers based on the phone number mask

4) python email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt

5) Find the target's phone number by resetting passwords on websites that do not alert the target using a phone number mask and proxy to avoid captchas and other anti-abuse remedies.

6) python email2phonenumber.py bruteforce -m 555XXX1234 -e target@email.com -p /tmp/proxies.txt -q

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁


πŸ¦‘β˜οΈ How to keep the application running after closing Putty?


So, you have an application on a remote VPS server.

You connect to it via Putty and launch an application (for example) with a script.

After closing Putty, your application crashes.
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”

1) For
users who have the same problem, we will show the necessary steps on how to use screen:

First of all, install it:

sudo apt-get install screen

2) You can now start a new screen session by simply typing screen at the command line.

3) You will be shown some information about the screen.

4) Press Enter and you will see the usual prompt.

5) To disconnect (but leave the session enabled)

Hit Ctrl + A and then Ctrl + D in immediate succession. You will see the message [detached]
It's all!

6) After the [detached] message, your application will start after you close putty.
Some additional commands

7) To reconnect to an already running session

screen -r

To reconnect to an existing session or create a new one if it doesn't exist

screen -D -r

8) To create a new window within a screen session
Hit Ctrl + A and then C in immediate succession. You will see a new prompt.

9) To switch from one screen to another

Hit Ctrl + A and then Ctrl + A in immediate succession.

10) To list open windows:

Hit Ctrl + A and then W in immediate succession

@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘πŸ§ How to view Linux system statistics with Saidar :

1) Saidar is available in the default repositories of popular Linux distributions.

To install Saidar on Debian, Ubuntu and derivatives, run:

$ sudo apt install saidar

2) Saidar is available in the EPEL repository for CentOS 7.

Enable the EPEL repository using the command:
$ sudo yum install epel-release

3) Then install Saidar on CentOS 7 using the command:

$ sudo yum install saidar

4) Fedora:

$ sudo dnf install saidar

5) OpenSUSE:

$ sudo zypper install saidar

6) Viewing Linux System Statistics with Saidar
To view the current system statistics with Saidar on Linux, simply run:

$ saidar


@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from UNDERCODE COMMUNITY
Progressive Web Apps Full videos Guide

https://mega.nz/#F!X1900SyR!7ReP8Rly1CgNwO28TQu4vA
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘πŸ•΅οΈ vulnerable-AD: create your own vulnerable active directory :

β€”-Vulnerable-ADβ€”-

1) Create a vulnerable active directory that allows you to test most AD attacks on a local bench.

F E A T U R E S :

Main characteristics
Randomized attacks
Full coverage of known attacks
You need to run the script on a DC with Active Directory installed
Some of the attacks require a client workstation
Supported attacks
Abusing ACLs / ACEs
Kerberoasting
AS-REP Roasting
Abuse DnsAdmins
Password in the AD User comment
Password spraying
DCSync
Silver Ticket
Golden Ticket
Pass-the-Hash
Pass-the-Ticket
SMB Signing Disabled

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

2) git clone https://github.com/WazeHell/vulnerable-AD.git

Example
#

3) if you have not installed Active Directory yet, you can try if you have already installed Active Directory, just run the script

4) Install-ADDSForest -CreateDnsDelegation:$false -DatabasePath "C:\Windows\NTDS" -DomainMode "7" -DomainName "cs.org" -DomainNetbiosName "cs" -ForestMode "7" -InstallDns:$true -LogPath "C:\Windows\NTDS" -NoRebootOnCompletion:$false -SysvolPath "C:\Windows\SYSVOL" -Force:$true

5) #
!
IEX((new-object net.webclient).downloadstring("https://raw.githubusercontent.com/wazehell/vulnerable-AD/master/vulnad.ps1"));
Invoke-VulnAD -UsersLimit 100 -DomainName "cs.org"


@UndercodeTesting
@UndercodeHacking
@UndercodeSecurity
▁ β–‚ β–„ Uπ•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁