UNDERCODE SECURITY
225 subscribers
295 photos
1.03K files
1.73K links
πŸ¦‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘#Fasttip : Network configuration-Find computer IP based on NETBIOS name special old bios versions :

1️⃣Use the nmblookup test to find the IP of the machine with the NETBIOS name test in the same network, if This machine
has multiple IPs, which are also listed.

2️⃣My linux forcibly died under yesterday's sudden power failure.
When I enter again, I cannot enter KDE.
What should I do?

 -s -y /
fsck -s -y /var
fsck -s -y /usr

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘Powerefull Web Hacking root termuxβ€” any Linux :

FEATURES :

-Real platform independence. Tested on Windows, Linux, BSD and OS X.

-No native library dependencies. All of the framework has been written in pure Python.

-Good performance when compared with other frameworks written in Python and other scripting languages.

-Very easy to use.

-Plugin development is extremely simple.

-The framework also collects and unifies the results of well known tools:

-sqlmap, xsser, openvas, dnsrecon, theharvester...😁😍

-Integration with standards: CWE, CVE and OWASP.


πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :
```1️⃣sudo bash

2️⃣apt-get install python2.7 python2.7-dev python-pip python-docutils

3️⃣git perl nmap sslscan

4️⃣cd /opt


5️⃣git clone https://github.com/golismero/golismero.git

6️⃣cd golismero

7️⃣pip install -r requirements.txt

8️⃣pip install -r requirements_unix.txt

9️⃣ln -s ${PWD}/
golismero.py /usr/bin/golismero
exit

```πŸ¦‘If you have an API key for Shodan, or an OpenVAS server or SpiderFoot server you want to integrate with GoLismero, run the following commands:

mkdir ~/.golismero
touch ~/.golismero/user.conf
chmod 600 ~/.golismero/user.conf
nano ~/.golismero/user.conf

πŸ”ŸAt the editor, add the following sections to the file, as appropriate:

[shodan:Configuration]
apikey = <INSERT YOUR SHODAN API KEY HERE>

[openvas]
host = <INSERT THE OPENVAS HOST HERE>
user = <INSERT THE OPENVAS USERNAME HERE>
password = <INSERT THE OPENVAS PASSWORD HERE>

spiderfoot
url = <INSERT THE SPIDERFOOT URL HERE>

πŸ¦‘This command will launch GoLismero with all default options and show the report on standard output:

golismero scan <target>

> If you omit the default command "scan" GoLismero is smart enough to figure out what you're trying to do, so this works too:

golismero <target>

> You can also set a name for your audit with --audit-name:

golismero scan <target> --audit-name <name>

> And you can produce reports in different file formats. The format is guessed from the file extension, and you can write as many files as you want:

golismero scan <target> -o <output file name>



βœ…git 2020 sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘SOME IP ATTACKS #DEFINITIONS

> Hide server ip
Using CDN acceleration can hide the real ip of the server , resulting in the attacker not being able to attack the real ip, but this can only prevent some of the more attackers unless you really hide the ip.

> Prohibit proxy access
As mentioned earlier, the attacker attacks through a large number of proxies. Setting up to prohibit proxy access or limit the number of proxy connections can also play a certain role in protection.

> Shield attack ip
Thousands of tcp connections usually appear on the server when being attacked by cc. Open cmd and enter netstat -an. If a large number of external IPs appear, you will be attacked. At this time, you can use protective software to block the attack ip or manually block. This method is often used. passive.

Share usβ€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘#Fasttip : Network configuration-Find computer IP based on NETBIOS name special old bios versions :

1️⃣Use the nmblookup test to find the IP of the machine with the NETBIOS name test in the same network, if This machine
has multiple IPs, which are also listed.

2️⃣My linux forcibly died under yesterday's sudden power failure.
When I enter again, I cannot enter KDE.
What should I do?

 -s -y /
fsck -s -y /var
fsck -s -y /usr

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
Forwarded from PRIVATE UNDERCODE
SPAMMING CARDING VIDEOS 2020 PRIVATEDEEPWEB

+ NETFLIX & LIVECC & MUCH MORE CRACKING...

https://mega.nz/folder/rHInzAKD#SFAz4UTbcKrDn3YEHEccDQ
Forwarded from Backup Legal Mega
GIFT FOR YOU πŸ˜‚SOON THEY WILL SELL THOSE JAJAJA
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘HACK CAM IP WAY 3(SEARCH FOR WAY 2-1 ON @UndercodeTesting)
> Termux-Linux 2020 tool :
Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online.

πŸ¦‘What does the tool to? Look, a list!


>Search

> Brute force

> SSID and WPAPSK Password Disclosure

> E-mail, FTP, DNS, MSN Password Disclosure

> Exploit

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1️⃣git clone https://github.com/jimywork/shodanwave.git

2️⃣$ cd /opt/

3️⃣$ git clone https://github.com/fbctf/shodanwave.git

4️⃣$ cd shodanwave

5️⃣$ pip install -r requirements.txt

6️⃣python shodanwave.py -u usernames.txt -w passwords.txt -k Shodan API key --t OUTPUT
python shodanwave.py --help

7️⃣Required if using Proxy!!!

> Modify your Tsocks config!!

> Add/Modify the following at the bottom:
server =
server_type = <4 or 5>
server_port =
default_pass = (Might be required for proxy)

8️⃣Shodan API search engine for Internet-connected devices.
https://www.shodan.io/

Requests Requests: HTTP for Humans
http://docs.python-requests.org/en/master/

Netwave Exploit Netwave IP Camera - Password Disclosure
https://www.exploit-db.com/exploits/41236/

βœ…topic git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
WRITTEN PDFs TUTORIALS
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What is VNC?
recently send how hack Rdp but about vnc #Definition

1️⃣VNC (Virtual Network Computing) is a system of remote access to the computer desktop using the RFB protocol (Remote FrameBuffer, a remote frame buffer). Management is carried out by transmitting keystrokes on the keyboard and mouse movements from one computer to another and relaying the contents of the screen through a computer network. In simple terms, using VNC you can connect to another computer and work at it as if you were sitting in front of it.

2️⃣By application, VNC is an analog of RDP (Remote Desktop Protocol). But RDP is associated primarily with Windows, since it was initially distributed on this operating system. And VNC is more associated with Linux. However, the clients and servers of these technologies are cross-platform. RDP software (both server and client) is preinstalled on Windows, but you must enable this service to use. VNC software is written by third-party developers, so you must install it before using it. The most popular VNC clients and servers are free and open source.

3️⃣One of the significant advantages of VNC over RDP is that it does not require a user to log out of the session on behalf of which the user is logged on to the remote system. That is, the user in front of the computer and the user on VNC can work simultaneously. It is allowed to connect several users at once via VNC, which is impossible with RDP.

4️⃣The VNC system is platform independent: a VNC client called a VNC viewer running on one operating system can connect to a VNC server running on any other OS. There are client and server implementations for almost all operating systems. Multiple clients can connect to one VNC server at the same time. The most popular ways to use VNC are remote technical support and access to a working computer from home.

written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘Bin For Apple Music & Amazon Musicβœ…

Bin : 45140510002xxxxx
CVV/Date: RND
IP : Canada πŸ‡¨πŸ‡¦

> How use bin https://t.me/UnderCodeTesting/3768

provide us with screanshoats to @Undercode_Bot


πŸ¦‘ Bin For Twitter Ads + Facebook Ads + Instagram Ads βœ…

Bin: 5262845xxx262xxx
Country: USA πŸ‡ΊπŸ‡Έ
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘#FASTTIP :log formats and values are supported for the --log-format option :

COMBINED - combined journal format,

VCOMBINED - combined log format with a virtual host,

COMMON is a regular log format,

VCOMMON - a regular log format with a virtual host,

W3C is an extended W3C log format,

SQUID - Squid's native log format,

CLOUDFRONT - Amazon CloudFront Web Distribution,

CLOUDSTORAGE - Google Cloud Storage,

AWSELB - Amazon Elastic Load Balancing,

AWSS3 - Amazon Simple Storage Service (S3)

written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘Hacking framework This framework is designed to perform penetration testing. Its functions:

> Scan sql vulnerability

> Scan xxs vulnerability

>Dos sites

>Brutforce Ftp

> Brutforse SSh

> Brutforse mail Accounts

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

1️⃣git clone https://github.com/b3-v3r/Hunner.git

2️⃣cd Hunner

3️⃣python2 hunner.py
(choose options via numbers)

4️⃣for launching only hacking modules
launch as python

>cd modules

banner.py


dos.py

ftp.py

hun_listener.py

Update mail.py

ssh.py

5️⃣include passwordlist

Share usβ€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘What does that mean?

It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment.

πŸ„ΈπŸ„½πŸ…‚πŸ…ƒπŸ„°πŸ„»πŸ„»πŸ„ΈπŸ…‚πŸ„°πŸ…ƒπŸ„ΈπŸ„ΎπŸ„½ & πŸ…πŸ…„πŸ„½ :

πŸ¦‘FOR PARROT-KALI :

You can either run Cuckoo from your own user or create a new one dedicated just for your sandbox setup. Make sure that the user that runs Cuckoo is the same user that you will use to create and run the virtual machines (at least in the case of VirtualBox), otherwise Cuckoo won’t be able to identify and launch these Virtual Machines.

1️⃣clone https://github.com/cuckoosandbox/cuckoo
or open terminal and type


$ sudo pip install -U pip setuptools

2️⃣$ sudo pip install -U cuckoo

3️⃣$ virtualenv venv

4️⃣$ . venv/bin/activate

5️⃣(venv)$ pip install -U pip setuptools

6️⃣(venv)$ pip install -U cuckoo

πŸ¦‘Install Cuckoo from file methode 2 -
You will end up with a file Cuckoo-2.0.0.tar.gz (or a higher number, depending on the latest released stable version) as well as all of its dependencies (e.g., alembic-0.8.8.tar.gz).


1️⃣DOWNLOAD https://cuckoosandbox.org/

2️⃣$ pip download cuckoo

3️⃣$ pip install Cuckoo-2.0.0.tar.gz

4️⃣$ pip install *.tar.gz

5️⃣choose option simply

Share usβ€οΈπŸ‘πŸ»
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁