UNDERCODE SECURITY
226 subscribers
295 photos
1.03K files
1.73K links
๐Ÿฆ‘WELCOME IN UNDERCODE TESTING FOR LEARN HACKING | PROGRAMMING | SECURITY & more..

THIS CHANNEL BY :

@UndercodeTesting
UndercodeTesting.com (official)

@iUndercode
iUndercode.com (iOs)

@Dailycve
DailyCve.com


@UndercodeNews
UndercodeNews.com
Download Telegram
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Instagram Hacking #Rquested :

This program will brute force any Instagram account you send it its way. Just give it a target, a password list and a mode then press enter and forget about it. No need to worry about anonymity when using this program, its highest priority is your anonymity, it only attacks when your identity is hidden.

๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ :

1๏ธโƒฃgit clone https://github.com/Pure-L0G1C/Instagram.git

2๏ธโƒฃcd Instagram

3๏ธโƒฃpip3 install -r requirements.txt

4๏ธโƒฃpython3 instagram.py <username> <wordlist> -m <mode>

5๏ธโƒฃUse sock5, for test proxies
python test_proxies.py

6๏ธโƒฃFor worldilst use :

> git clone https://github.com/Mebus/cupp.git

7๏ธโƒฃ python3 cupp.py -h
(generate your own wordlist
The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values.
)

8๏ธโƒฃMORE OPTIONS:



-i Interactive questions for user password profiling

-w Use this option to profile existing dictionary,
or WyD.pl output to make some pwnsauce :)

-l Download huge wordlists from repository

-a Parse default usernames and passwords directly from Alecto DB.
Project Alecto uses purified databases of Phenoelit and CIRT which where merged and enhanced.

-v Version of the program

โœ…Topic Git sources
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘FREE VPS & Trials New List :

> https://upcloud.com/vpssim/?utm_term=vps%20server&utm_campaign=Global%20-%20VPS&utm_source=adwords&utm_medium=ppc&hsa_acc=9391663435&hsa_cam=1652417669&hsa_grp=71919981308&hsa_ad=416234863334&hsa_src=g&hsa_tgt=kwd-16407600&hsa_kw=vps%20server&hsa_mt=b&hsa_net=adwords&hsa_ver=3&gclid=EAIaIQobChMIms7YyPyr6gIVCJzVCh3mdgPiEAAYASAAEgLp3_D_BwE (Choose plan before trial- cancel)

> https://gratisvps.net/ (6months trial)

> https://developer.rackspace.com/ [600$ for 12 Months]

> https://www.runabove.com/ [1 Week Trial]

>https://www.vultr.com/ [50$ for 2 Months]

>http://cloudsigma.com/ [7 days no CC]

>https://www.ctl.io/free-trial/ [2500$ or 1 Month]

> https://www.ihor.ru/ [3 days No CC]

>http://www.neuprime.com/l_vds3.php [10 days (Otp Required)

> https://alexwebhosting.com/free-vps/ (free 30 days)

Enjoyโค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Important Carding Resources !

> NON VBV Carding Sites For Carding All Websites That Are Non VBV
Here are The CARDABLE SITES NON VBV Sites

โž• www.amazon.com
โž• www.itchee.com
โž• www.bn.com
โž• www.cdnow.com
โž• www.cduniverse.com
โž• www.cdworld.com
โž• www.virginmega.com
โž• www.tunes.com
โž• www.artistdirect.com
โž• www.jeruk.com
โž• www.dvdexpress.com
โž• www.dvdworld.com
โž• www.ea.com
โž• www.tickles.com
โž• www.cduniverse.com

๐Ÿฆ‘ Zip Code Search

โž•http://www.findlinks.com/
โž•http://zipinfo.com/search/zipcode.htm
โž•http://www.addresses.com/
โž•http://www.mongabay.com/igapo/

๐Ÿฆ‘Send Fax Online

โž•efax.com
โž•j2.com
โž•send2fax.com
โž•rapidfax.comfax1.com
โž•k7.net

๐Ÿฆ‘ Credit Reports
โž•https://www.mycreditkeeper.com
โž•https://secure.creditreport.com
โž•https://qspace.iplace.com

๐Ÿฆ‘ Phone Redirect

โž•http://www.tollfreeforwarding.com
โž•http://www.Spoofcall.com

โž• USA phone number search
โž•http://www.reversephonedetective.com

๐Ÿฆ‘ MMN search
โž•ancestry.com

๐Ÿฆ‘ DOB search
โž•privateeye.com

๐Ÿฆ‘ Sock5&Proxy
โž•http://www.socks24.org/
โž•http://www.sockslist.net




Source DeepWeb
(Not by Undercode)
Enjoyโค๏ธ๐Ÿ‘๐Ÿป
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
Forwarded from Backup Legal Mega
๐Ÿฆ‘Free 200$ CCNA Course-Data center

https://mega.nz/folder/V25AlQwC#UnAZ5lhW8eit1L9hCjSa0Q
๐Ÿฆ‘WorldLiSTS


1๏ธโƒฃ 5-6 โœฎ indonesians โœฎ WorldLists :

> https://github.com/geovedi/indonesian-wordlist

2๏ธโƒฃEnglish for wpa2 WorldList :

> https://www.mediafire.com/file/6botgtnsy0rjfj9/BIG-WPA-LIST-2.rar/file

3๏ธโƒฃ12 Gb WordlLists :

https://download.weakpass.com/wordlists/1851/hashesorg2019.gz
(good for everything..)

Enjoy โค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Microsoft releases emergency security update to fix security vulnerabilities in Windows 10/Server
#UndercodeNews

> There are about two weeks away from this month's patch Tuesday event day, but due to security vulnerabilities found in Windows 10 and Windows Server, today Microsoft released two emergency security updates. Microsoft said that although the two vulnerabilities have not been publicly disclosed and are less likely to be exploited by hackers, the company can't wait for the July 14 patch to release the update on Tuesday's event day.

> Microsoft wrote in a security bulletin: "There is a remote code execution vulnerability in the way Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information and further harm the user's system."

> It is reported that the affected versions of Windows include

Windows 10 version 1709

Windows 10 version 1803

Windows 10 version 1809

Windows 10 version 1903

Windows 10 version 1909

Windows 10 version 2004

Windows Server 2019

Windows Server version 1803

Windows Server version 1903

Windows Server version 1909

Windows Server version 2004

@UndercodeNews
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ ๏ฝ•๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Topic Pentesting tools
โž•Termux-Linux
SIPVicious OSS security tools

>svmap
- this is a sip scanner. Lists SIP devices found on an IP range
>svwar - identifies active extensions on a PBX
>svcrack - an online password cracker for SIP PBX
>svreport - manages sessions and exports reports to various formats
>svcrash - attempts to stop unauthorized svwar and svcrack scans

๐Ÿ„ธ๐Ÿ„ฝ๐Ÿ…‚๐Ÿ…ƒ๐Ÿ„ฐ๐Ÿ„ป๐Ÿ„ป๐Ÿ„ธ๐Ÿ…‚๐Ÿ„ฐ๐Ÿ…ƒ๐Ÿ„ธ๐Ÿ„พ๐Ÿ„ฝ & ๐Ÿ…๐Ÿ…„๐Ÿ„ฝ :

1๏ธโƒฃgit clone https://github.com/EnableSecurity/sipvicious.git

2๏ธโƒฃcd sipvicious

3๏ธโƒฃpython setup.py install

4๏ธโƒฃFire-up the scripts one by one:

sipvicious_svmap --help
sipvicious_svcrack --help
sipvicious_svcrash --help
sipvicious_svwar --help
sipvicious_svreport --help

๐Ÿฆ‘Tested by Undercode On :

> ubuntu

โœ…git sources 2020
Enjoy โค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
Forwarded from Backup Legal Mega
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Why wifi hacking not recommended for Windows :
Hacking Wi-Fi in Windows


> To be able to crack Wi-Fi in Windows, you need a wireless card that supports monitor mode, and its driver must have support for this mode. For Windows Wi-Fi adapter drivers, this support is not available. Therefore, in Windows it is impossible to capture a handshake.

>There are a few exceptions - high-cost commercial products that include wireless card drivers that support monitor mode. Like Linux, only some hardware is supported.

>Although almost all programs for auditing Wi-Fi networks are made under Linux and only there work great, some of them are cross-platform. For example, to search using graphics cards on Windows, you can use Hashcat, which works great on this operating system.

>In general, of course, it is recommended to use Linux for testing wireless networks, especially such specialized distributions as Kali Linux and BlackArch.


@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘Helpful Hacking Programs :

- [Bookfresh](https://hackerone.com/bookfresh)
- [Brussels Airlines](https://go.intigriti.com/brusselsairlines)
- [BTC_sx](https://cobalt.io/btc-sx)
- [Buffer](mailto:security@bufferapp.com)
- [BX.in.th](https://cobalt.io/bx-in-th)
- [C2FO](https://hackerone.com/c2fo)
- [Campaign Monitor](https://help.campaignmonitor.com/contact)
- [CARD.com](https://bugcrowd.com/card)
- [Catchafire](https://cobalt.io/catchafire)
- [Caviar](https://hackerone.com/caviar)
- [CCBill](mailto:bugrewards@ccbill.com)
- [CERT/CC](https://hackerone.com/cert)
- [Certly](https://hackerone.com/certly)
- [ChainPay](https://cobalt.io/chainpay)
- [ChangeTip](https://cobalt.io/changetip)
- [Chargify](https://bugcrowd.com/chargify)
- [Chromium Project](https://code.google.com/p/chromium/issues/entry?template=Security%20Bug)
- [Circle](https://cobalt.io/circle)
- [CircleCI](mailto:security@circleci.com)
- [Cisco](http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html#roosfassv)
- [ClickUp](https://clickup.com/bug-bounty)
- [Clojars](mailto:contact@clojars.org)
- [CloudFlare](https://hackerone.com/cloudflare)
- [Cobalt](https://cobalt.io/cobalt)
- [Code Climate](mailto:security@codeclimate.com)
- [CodeIgniter](https://hackerone.com/codeigniter)
- [CodePen](https://bugcrowd.com/codepen)
- [Coin Republic](https://cobalt.io/coin-republic)
- [Coin.Space](https://hackerone.com/coinspace)

Enjoyโค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘How to set up a connection to RDP from the Internet ?

> RDP allows any connection, whether from a local network or from the Internet. Connecting from the Internet requires your computer to have a white IP .

> If your ISP uses NAT , then you need to rent an external (white) IP address.

> If you are connected to a router (they also always use NAT), then you need to configure port forwarding (forwarding, forwarding) as follows:

1) You need to start with " Permanent IP Settings in Windows ."

2) Subsequent settings must be made in the router. Since everyone has different models of routers, the specific actions and names of the tabs in the administration panel of routers may vary. The main thing is to understand the essence and find the appropriate tab in the router. Remember that you need to forward TCP and UDP ports with the number 3389.

3) Go to the control panel of the router . In the settings of the router, go to "section of the Internet " (may be referred to the WAN ), then the tab " Port Forwarding " (may be called " Port Forwarding ", " Port Forwarding "):

4) Add a new rule:

>Service Name - enter any
>Source IP leave blank
>Port Range - Specify Port 3389
>Local IP address - specify the IP address of the Windows computer to >which RDP connection will be made
>Local port - specify port 3389
>Protocol - specify Both (both)
And click the " Add " button .

5) Save your changes.

Written by Undercode
#FastTips
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘#ProUsers The Yardstick One and RFcat Notes

The Yardstick One is a very useful piece of hardware to perform testing of RF devices that communicate in frequencies under 1GHz. It can be combined with many tools, including RFcat. The following are a few links and resources that we discussed in the video course related to these tools:

๐Ÿ•ณYardstick One
Yardstick One website: https://greatscottgadgets.com/2015/09-30-introducing-yard-stick-one/

๐Ÿ•ณRFcat
RFcat website: https://bitbucket.org/atlas0fd00m/rfcat

The following are several useful RFcat commands:
`d._debug = 1` รขโ‚ฌโ€œ dumps debug messages to the screen
d.debug() - prints state information every second
`d.discover()` - listens for specific SYNCWORDS
d.lowball() - disables most รขโ‚ฌล“filtersรขโ‚ฌ to see more packets
`d.lowballRestore()` - restores the configuration before calling lowball()
d.RFlisten() - listens for signals and dumps data to the screen
`d.RFcapture()` - dumps data to screen, returns list of packets
d.scan() - scans a configurable frequency range
`d.setChannel()` - sets the channel to be used
d.setFHSSstate() - sets the FHSS state to be used
`d.setFreq()` - sets the frequency to be used
d.specan() - a spectrum analyzer

Source: โœ…2020 git sources
enjoyโค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘New Tips: #ZigBee Resources

Good explanation and introduction to Zigbee:
http://resources.infosecinstitute.com/hacking-zigbee-networks/

KillerBee Presentation: http://www.willhackforsushi.com/presentations/toorcon11-wright.pdf

KillerBee Framework: https://github.com/riverloopsec/killerbee

The KillerBee framework is being expanded to support multiple devices. Currently there is support for the River Loop ApiMote, Atmel RZ RAVEN USB Stick, MoteIV Tmote Sky, TelosB mote, and Sewino Sniffer.

Open source hardware: https://github.com/riverloopsec/apimote

Attify ZigBee Framework GitHub Repo: https://github.com/attify/Attify-Zigbee-Framework

โœ…2020 git sources
enjoyโค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–

๐Ÿฆ‘2020 Only usefull Hacking tools #list 3 :

- BaseQuery - A Way To Organize Public Combo-Lists And Leaks In A Way That You Can Easily Search Through Everything

- Attack Monitor - Endpoint Detection And Malware Analysis Software

- Crashcast-Exploit - This Tool Allows You Mass Play Any YouTube Video With Chromecasts Obtained From Shodan.io

- SQLMap v1.3 - Automatic SQL Injection And Database Takeover Tool

- Stretcher - Tool Designed To Help Identify Open Elasticsearch Servers That Are Exposing Sensitive Information
- Aztarna - A Footprinting Tool For Robots

- Hediye - Hash Generator & Cracker Online Offline

- Killcast - Manipulate Chromecast Devices In Your Network

- bypass-firewalls-by-DNS-history - Firewall Bypass Script Based On DNS History Records

- WiFi-Pumpkin v0.8.7 - Framework for Rogue Wi-Fi Access Point Attack

- H8Mail - Email OSINT And Password Breach Hunting

- Kube-Hunter - Hunt For Security Weaknesses In Kubernetes Clusters

- Metasploit 5.0 - The Worldรขโ‚ฌโ„ขs Most Used Penetration Testing Framework

- Interlace - Easily Turn Single Threaded Command Line Applications Into Fast, Multi Threaded Ones With CIDR And Glob Support

- Twifo-Cli - Get User Information Of A Twitter User

- Sitadel - Web Application Security Scanner

- Pe-Sieve - Recognizes And Dumps A Variety Of Potentially Malicious Implants (Replaced/Injected PEs, Shellcodes, Hooks, In-Memory Patches)

- Malboxes - Builds Malware Analysis Windows VMs So That You Don'T Have To

- Snyk - CLI And Build-Time Tool To Find & Fix Known Vulnerabilities In Open-Source Dependencies

- Shed - .NET Runtime Inspector

- Stardox - Github Stargazers Information Gathering Tool


โœ…2020 git sources
enjoyโค๏ธ๐Ÿ‘๐Ÿป
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซ6๐”ฌ๐““โ“” โ–„ โ–‚ โ–