Ethical Hacking: SQL Injection [919 MB]

https://www.pluralsight.com/courses/ethical-hacking-sql-injection

https://mega.nz/#F!V341kCwI!VSsLeUTLFoOvpXLIqMguzw

Digital Forensics with Kali Linux [809 MB]

https://www.packtpub.com/networking-and-servers/digital-forensics-kali-linux

https://mega.nz/#F!SpsQXY5J!KFd1E4yVyoh4Nm2AeNuU1w

Linux Foundation Certified Engineer (2019) [3.24 GB]

https://linuxacademy.com/course/linux-foundation-certified-engineer/

https://mega.nz/#F!7xkzhQID!9KFPQdQfrToABn-W7g6gww

New pro courses

PROGRAMMING AND HACKING COURSES!

75GB +

Link to the folder 📂

https://mega.nz/folder/I2Q32aKI#0wjcp4cpqxsJfjoi-CrqgA

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑updated 2020 File upload vulnerability scanner and exploitation tool :

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣git clone https://github.com/almandin/fuxploider.git

2️⃣cd fuxploider

3️⃣pip3 install -r requirements.txt
If you have problems with pip (and if you use windows apparently) :

3️⃣python3 -m pip install -r requirements.txt
For Docker installation

4️⃣# Build the docker image
docker build -t almandin/fuxploider

5️⃣python3 fuxploider.py -h

6️⃣Example run :
python3 fuxploider.py --url https://awesomeFileUploadService.com --not-regex "wrong file type"

✅Git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑#Pro Users :
FreeMail standalone version installation guide


1️⃣Install the operating system on the server (recommended Freebsd 4.X), configure the network, DNS server
<Recommendation: When installing Freebsd, set the server to boot from the CD, and then use the Freebsd4.1 installation CD provided by us to start, enter directly The installation interface of the system can save the trouble of making an installation floppy disk.
After booting, select Skip kernel configure standardEntire hard diskInstall BootMgr partition (swp:500M, root: rest)Install from CD-ROM>

2️⃣Considering that some background submission functions of the management interface are invoked in shell mode, the system default SHELL adopts /bin/sh or /bin/bash
<Note: After successfully using the installation CD provided by us, the system adopts /bin/bash> by default

3️⃣Prepare two directories:
/usr/mail /usr/disk The owner is nobody
chown nobody /usr/mail; chown nobody /usr/disk>

4️⃣Use freemail.tar.gz
<Note: This compressed package includes all packages of Freemail:
apache_1.3.12
ldap
mysql_3.23.13a
qmail_1.03
imap
run the following command:
gunzip freemail.tar.gz
tar xvf freemail.tar compressed package automatically Release to the directory /usr/install/FREEMAIL.>

5️⃣．There are several configuration files under /usr/install/FREEMAIL/CONF: ------These files cannot be deleted during installation
-rw-r--r-- 1 root wheel 6 Sep 6 15:08 .quote - ----- Prompt system mailbox capacity
<Note: This file is used to set the size of the user's email mailbox, the initial setting is 10240K>
-rw-r--r-- 1 root wheel 194 Sep 6 14:36 ​​freemail. conf -----
freemail system configuration information _HOSTNAME=test.soim.com; -----------------Modify this item to the corresponding domain name.
_SMTPSERVER=127.0.0.1;
_WWWHOST=http://10.1.1.217;
_LDAPHOST=ldap://10.1.1.217;
_HOMEPAGE=http://10.1.1.217; -------------- The above three items are modified to the corresponding IP address _IP
=localhost;
_PASSWORD=coffee&tea;
_DEFAULTLANG=GB2312;
--------------------Note: The red font cannot be changed
-rw -r - r-- 1 root wheel 0 Sep 5 18:24 ip_domain.conf ------ virtual domain for use if there is no virtual domains, null
representation if the client login, just enter your account name without the domain name suffix, under the premise of the presence of a virtual domain name system, defaults are determined by ip_domain.conf
this document says: in virtual domain name system support, at the right time when the user uses the system SMTP / POP3 / IMAP functions, not On the premise of entering the domain name, how to determine the domain in which the user resolves.
Such as:
10.1.1.21 : local.freemail.com

-rw-r--r-- 1 root wheel 11 Sep 6 14:36 ​​servers.ip
The IP address of the server in the FREEMAIL system. For the stand-alone version, only this Machine IP, such as:
10.1.1.217 -------------This item is modified to the corresponding IP address

-rw-r--r-- 1 root wheel 65 Sep 5 17:28 system.conf----- ----- System control information
long _MAXUSERS=200000;
char _SINGLE=``''T''''; //Is it a stand-alone system?
int _MAXHOST=10;
char _ENCRYPT='T'; //Whether the user password encryption?

-rw-r--r-- 1 root wheel 0 Sep 6 15:10 system.disk--------- Disk information in the system (usually empty)

-rw-r--r-- 1 root wheel 67 Sep 6 14:41 tcp.smtp --------- tcpserver configuration information
127.0.0.1:allow,RELAYCLIENT= "" ""
10.1.1: the allow, RELAYCLIENT = "" ""
: the you allow

- rw-r--r-- 1 root wheel 20 Sep 6 10:47 webmail.conf ------APACHE path information
/usr/apache/htdocs/ ---------cannot be changed
<Explanation: APACHE is installed in the /usr/apache directory by default in the installation program we provide, so this setting cannot be modified, otherwise, the page cannot be browsed correctly>

6️⃣Enter the /usr/install/FREEMAIL directory and install in sequence :
./Apache.install.sh-------The path is /usr/apache
<Note: After installing this item, the ServerName
and ServerAdmin of the /usr/apache/conf/httpd.conf file should be modified to The corresponding domain and the E-mail account of the administrator, we have set up other items>
./ldap.install.sh-------The path is /usr/ldap
./mysql.install.sh--- ----The path is /usr/local
./src.install.sh -------The path is /usr/apache/cgi-bin
./qmail.install.sh-------The path is /var/qmail
<Note: You will be prompted to enter the domain name when installing this item, please enter it correctly>
./imap.install.sh ------The path is /usr/lib/courier_imap
<Description: After the above items are installed You can use
telnet localhost 80 //Check if apache has run
telnet localhost 143 //If imap has been installed correctly>
6. Modify the domain name settings in several pages under APACHE:
default.htm regtable.htm manager_default.htm forgetpassword.htm
<modify sss.soim.com/test.soim.com in the above pages to your settings Domain name>
8. After the system runs, add in /etc/rc.local:
/usr/apache/bin/httpd –f /usr/apache/conf/httpd.conf & //Start apache
/usr/local/ bin/safe_mysqld & //Start mysql
/var/qmail/rc & //Start qmail

/usr/local/bin/tcpserver -x /etc/tcp.smtp.cdb -R -c 100 -u 0 0 smtp /var/ qmail/bin/qmail-smtpd &
/usr/local/bin/tcpserver -c 100 -u 65534 0 pop3 /var/qmail/bin/qmail-popup mail-vip.soim.com /bin/checkpassword /var/qmail/ bin/qmail-pop3d Maildir &

/usr/local/bin/slapd -f /usr/ldap/conf/slapd-master.conf -p 389 -d 5> /dev/null 2>&1 &
/usr/local/bin/imapd.rc start &

used to define system startup settingsFreeMail standalone version installation guide1. Install the operating system on the server (recommended Freebsd 4.X), configure the network, DNS server
<Recommendation: When installing Freebsd, set the server to boot from the CD, and then use the Freebsd4.1 installation CD provided by us to start, enter directly The installation interface of the system can save the trouble of making an installation floppy disk.
After booting, select Skip kernel configure standardEntire hard diskInstall BootMgr partition (swp:500M, root: rest)Install from CD-ROM>

2．Considering that some background submission functions of the management interface are invoked in shell mode, the system default SHELL adopts /bin/sh or /bin/bash
<Note: After successfully using the installation CD provided by us, the system adopts /bin/bash> by default

3. Prepare two directories:
/usr/mail /usr/disk The owner is nobody
chown nobody /usr/mail; chown nobody /usr/disk>

4．Use freemail.tar.gz
<Note: This compressed package includes all packages of Freemail:
apache_1.3.12
ldap
mysql_3.23.13a
qmail_1.03
imap
run the following command:
gunzip freemail.tar.gz
tar xvf freemail.tar compressed package automatically Release to the directory /usr/install/FREEMAIL.>

5．There are several configuration files under /usr/install/FREEMAIL/CONF: ------These files cannot be deleted during installation
-rw-r--r-- 1 root wheel 6 Sep 6 15:08 .quote - ----- Prompt system mailbox capacity
<Note: This file is used to set the size of the user's email mailbox, the initial setting is 10240K>
-rw-r--r-- 1 root wheel 194 Sep 6 14:36 ​​freemail. conf -----
freemail system configuration information _HOSTNAME=test.soim.com; -----------------Modify this item to the corresponding domain name.
_SMTPSERVER=127.0.0.1;
_WWWHOST=http://10.1.1.217;
_LDAPHOST=ldap://10.1.1.217;
_HOMEPAGE=http://10.1.1.217; -------------- The above three items are modified to the corresponding IP address _IP
=localhost;
_PASSWORD=coffee&tea;
_DEFAULTLANG=GB2312;
--------------------Note: The red font cannot be changed
-rw -r - r-- 1 root wheel 0 Sep 5 18:24 ip_domain.conf ------ virtual domain for use if there is no virtual domains, null
representation if the client login, just enter your account name without the domain name suffix, under the premise of the presence of a virtual domain name system, defaults are determined by ip_domain.conf
this document says: in virtual domain name system support, at the right time when the user uses the system SMTP / POP3 / IMAP functions, not On the premise of entering the domain name, how to determine the domain in which the user resolves.
Such as:
10.1.1.21 : local.freemail.com

-rw-r--r-- 1 root wheel 11 Sep 6 14:36 ​​servers.ip
The IP address of the server in the FREEMAIL system. For the stand-alone version, only this Machine IP, such as:
10.1.1.217 -------------This item is modified to the corresponding IP address

-rw-r--r-- 1 root wheel 65 Sep 5 17:28 system.conf----- ----- System control information
long _MAXUSERS=200000;
char _SINGLE=``''T''''; //Is it a stand-alone system?
int _MAXHOST=10;
char _ENCRYPT='T'; //Whether the user password encryption?

-rw-r--r-- 1 root wheel 0 Sep 6 15:10 system.disk--------- Disk information in the system (usually empty)

-rw-r--r-- 1 root wheel 67 Sep 6 14:41 tcp.smtp --------- tcpserver configuration information
127.0.0.1:allow,RELAYCLIENT= "" ""
10.1.1: the allow, RELAYCLIENT = "" ""
: the you allow

- rw-r--r-- 1 root wheel 20 Sep 6 10:47 webmail.conf ------APACHE path information
/usr/apache/htdocs/ ---------cannot be changed
<Explanation: APACHE is installed in the /usr/apache directory by default in the installation program we provide, so this setting cannot be modified, otherwise, the page cannot be browsed correctly>

5. Enter the /usr/install/FREEMAIL directory and install in sequence :
./Apache.install.sh-------The path is /usr/apache
<Note: After installing this item, the ServerName
and ServerAdmin of the /usr/apache/conf/httpd.conf file should be modified to The corresponding domain and the E-mail account of the administrator, we have set up other items>
./ldap.install.sh-------The path is /usr/ldap
./mysql.install.sh--- ----The path is /usr/local
./src.install.sh -------The path is /usr/apache/cgi-bin
./qmail.install.sh-------The path is /var/qmail
<Note: You will be prompted to enter the domain name when installing this item, please enter it correctly>
./imap.install.sh ------The path is /usr/lib/courier_imap
<Description: After the above items are installed You can use
telnet localhost 80 //Check if apache has run
telnet localhost 143 //If imap has been installed correctly>
6. Modify the domain name settings in several pages under APACHE:
default.htm regtable.htm manager_default.htm forgetpassword.htm
<modify sss.soim.com/test.soim.com in the above pages to your settings Domain name>
8. After the system runs, add in /etc/rc.local:
/usr/apache/bin/httpd –f /usr/apache/conf/httpd.conf & //Start apache
/usr/local/ bin/safe_mysqld & //Start mysql
/var/qmail/rc & //Start qmail

/usr/local/bin/tcpserver -x /etc/tcp.smtp.cdb -R -c 100 -u 0 0 smtp /var/ qmail/bin/qmail-smtpd &
/usr/local/bin/tcpserver -c 100 -u 65534 0 pop3 /var/qmail/bin/qmail-popup mail-vip.soim.com /bin/checkpassword /var/qmail/ bin/qmail-pop3d Maildir &

/usr/local/bin/slapd -f /usr/ldap/conf/slapd-master.conf -p 389 -d 5> /dev/null 2>&1 &
/usr/local/bin/imapd.rc start &

used to define system startup settings
WRITTEN BY UNDERCODE
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#PRO USERS full FreeMail standalone version installation guide

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Faceboook #news :

Facebook sues a developer for stealing data from 5,500 users

1️⃣According to foreign media reports, according to court documents, Facebook is suing a developer, saying that the developer participated in a data collection activity and stolen personal information from thousands of people. The company asked the defendant to provide $75,000 in compensation in the lawsuit. The social networking company said on Thursday that they are suing Mohammad Zaghar and its website Massroot8, alleging that the website obtained Facebook users' data without permission.

2️⃣The act was alleged to violate the Computer Fraud and Abuse Act. The lawsuit filed in Northern California states that Zaghar’s website provides customers with the ability to obtain data from Facebook friends, including phone numbers, genders, birth dates, and email addresses.

3️⃣All of this data is published publicly by Facebook users, but the automation provided by the Zaghar website is said to enable people to access this information at a faster rate and on a larger scale. Facebook also accused Zaghar of using a botnet to bypass Facebook's detection by pretending to be an Android device using social networks. In response to this lawsuit, Zaghar did not respond to requests for comment.

4️⃣Facebook said that data collection activities continued from April 23 to May 6, and about 5,500 people signed up for the service. The indictment alleges that in addition to the data collected from these 5,500 customers' friends on Facebook, Massroot8 also asked its customers to provide login credentials.

5️⃣Facebook stated that they had issued Zaghar several orders to stop, and temporarily blocked his Facebook and Instagram accounts and asked his customers to change their passwords for security reasons.

@UndercodeNews
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑How build your owN RDP ?
> Remote Desktop Protocol in twisted python
2020 updated libs

🦑Dependencies
Dependencies are only needed for pyqt4 binaries :

rdpy-rdpclient
rdpy-rdpscreenshot
rdpy-vncclient
rdpy-vncscreenshot
rdpy-rssplayer

🦑FEATURES :

RDP Man In The Middle proxy which record session
RDP Honeypot
RDP screenshoter
RDP client
VNC client
VNC screenshoter
RSS Player

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1️⃣$ git clone https://github.com/citronneur/rdpy.git rdpy

2️⃣$ pip install twisted pyopenssl qt4reactor service_identity rsa pyasn1

3️⃣$ python rdpy/setup.py install
Or use PIP:

4️⃣$ pip install rdpy
For virtualenv, you will need to link the qt4 library to it:

5️⃣$ ln -s /usr/lib/python2.7/dist-packages/PyQt4/ $VIRTUAL_ENV/lib/python2.7/site-packages/

6️⃣$ ln -s /usr/lib/python2.7/dist-packages/sip.so $VIRTUAL_ENV/lib/python2.7/site-packages/

🦑RDPY comes with some very useful binaries. These binaries are linux and windows compatible.

1️⃣rdpy-rdpclient
rdpy-rdpclient is a simple RDP Qt4 client.

$ rdpy-rdpclient.py [-u username] [-p password] [-d domain] [-r rss_ouput_file] [...] XXX.XXX.XXX.XXX[:3389]
You can use rdpy-rdpclient in a Recorder Session Scenario, used in rdpy-rdphoneypot.

2️⃣rdpy-vncclient
rdpy-vncclient is a simple VNC Qt4 client .

3️⃣$ rdpy-vncclient.py [-p password] XXX.XXX.XXX.XXX[:5900]
rdpy-rdpscreenshot
rdpy-rdpscreenshot saves login screen in file.

4️⃣$ rdpy-rdpscreenshot.py [-w width] [-l height] [-o output_file_path] XXX.XXX.XXX.XXX[:3389]
rdpy-vncscreenshot
rdpy-vncscreenshot saves the first screen update in file.

5️⃣$ rdpy-vncscreenshot.py [-p password] [-o output_file_path] XXX.XXX.XXX.XXX[:5900]
rdpy-rdpmitm
rdpy-rdpmitm is a RDP proxy allows you to do a Man In The Middle attack on RDP protocol. Record Session Scenario into rss file which can be replayed by rdpy-rssplayer.

6️⃣$ rdpy-rdpmitm.py -o output_dir [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] [-r (for XP or server 2003 client)] target_host[:target_port]
Output directory is used to save the rss file with following format (YYYYMMDDHHMMSS_ip_index.rss) The private key file and the certificate file are classic cryptographic files for SSL connections. The RDP protocol can negotiate its own security layer If one of both parameters are omitted, the server use standard RDP as security layer.

7️⃣rdpy-rdphoneypot
rdpy-rdphoneypot is an RDP honey Pot. Use Recorded Session Scenario to replay scenario through RDP Protocol.

8️⃣$ rdpy-rdphoneypot.py [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] rss_file_path_1 ... rss_file_path_N
The private key file and the certificate file are classic cryptographic files for SSL connections. The RDP protocol can negotiate its own security layer. If one of both parameters are omitted, the server use standard RDP as security layer. You can specify more than one files to match more common screen size.

9️⃣rdpy-rssplayer
rdpy-rssplayer is use to replay Record Session Scenario (rss) files generates by either rdpy-rdpmitm or rdpy-rdpclient binaries.

$ rdpy-rssplayer.py rss_file_path

@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Written pfds New tutorials+++

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Detailed explanation of the connection setting method between the main control terminal and the client of shared file monitoring software and shared file permission management software :

🦑WHAT WE TALK ABOUT ?

In the case of enabling the advanced control function of the general trend to shared folder management software, that is, prohibiting copying of shared files, prohibiting sharing of shared files as local disks, prohibiting dragging and sharing of shared files, prohibiting printing of shared files, and prohibiting copying of shared file contents Requires the user's computer to run the client to the shared file management system,
> FileLockerMain.exe, in order to control the user's shared file access behavior described above. If the user is not running, the host will deny the user access to the shared file.

> However, for some reasons, users cannot connect to the management terminal normally after running FileLockerMain.exe. In this case, the following three methods can be used to solve this problem:

Before this, you need to detect whether the management terminal can be pinged through the ping command on the client. If it can be pinged, then perform the following steps. If you can't ping, you need to solve the connection problem of the physical line first.

If it can be pinged, it can be solved in the following ways.

1️⃣ Make sure that the management terminal is still running. Remember to close the SharedFileMonitor on the management terminal, which will cause LAN users to be unable to access the share.

2️⃣Turn off the Windows firewall of the management computer. Specific method: Control Panel\System and Security\Windows Firewall

3️⃣If it is connected across network segments. That is, the file server where the management terminal is located is on one network segment, and the visitor is on another network segment. In this case, the IP address of the connection server needs to be manually set.

Specific method: alt+f5 calls the software hotkey (other hotkeys: alt+f6, alt+f7, alt+f8, alt+f9; if the above hotkeys are not working, you can try ctrl+f5, ctrl+f6, ctrl+ f7, ctrl+f8, ctrl+f9; if the above hotkey still does not work, you can try ctrl+alt+f5, and so on.)

4️⃣Then enter the default password dsz to enter, and then click "Operation Software", select "Manual Configuration", then enter the server's IP address, and then click "OK"

5️⃣If you are prompted to fail the test, you need to open the relevant ports from the firewall as prompted
In this case, it is usually caused by the firewall intercepting the port 19681 required by the client connection

6️⃣After the connection is successful, there will be a time prompt:
( In this case, the shared file can be accessed normally)



@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Data Stream Development with Apache Spark, Kafka, and Spring Boot —2.64 GB—

https://www.packtpub.com/application-development/data-stream-development-apache-spark-kafka-and-spring-boot-video

https://mega.nz/#F!1PQwjCAK!c0MTVeGVeCgND_ZYsRLkVg