Арбитраж carnaval 6k

Статус
Закрыто для дальнейших ответов.
Перейти к новому Отслеживать
Mr M

Mr M

Premium Seller
Premium
Регистрация
14.12.2022
Сообщения
28
Реакции
11
Гарант сделки
4
Депозит
0.0801
Got contacted by carnaval on TOX with his username installer404 asking for Cobalt Strike 4.12 that I sell for 10k . We agreed to do the deal from CS 4.12 + Shellter Elite for 12k as follows :
  1. 6k $ (he sent first - which I got it)
  2. I had to provide CS 4.12 Licensed (Client+Teamserver) + Shellter Elite + VIDEO how to install it (teamserver on Ubuntu) + CLIENT on Windows + my own C2 profile + HOW Shellter works and bypasses 0/36 AVs/EDRs -> ALL DONE from my side , ALL delivered
  3. ASAP he tests this and gets a beacon I get the rest of 6k $
  4. As a bonus I wanted to share BRC2 for free cause he seemed nice + EXTRA BOFs for CS ( stupid me? ) after he paid the rest of 6$

Problems -> didn't knew I had to exemplify how java is installed on an Ubuntu (basic stuff) .. or on a Windows machine with environment path setup ... again basic stuff .. Didn't knew that I had to show him how to white list port 50050 on Ubuntu so the client can connect to the teamserver .. anyway I helped him of course and was patient to help him install all and connect to the server (including buiding CNA's cause he didn't knew that once built in Ubuntu you transfer to Windows to load them , but again, I had patience and explained him what to do) .
After getting all the stuff we agreead , including getting his beacon in Cobalt Strike from VPS with CORTEX (which is bypassed).. because he didn't loaded the CNA to do shell / powerpick / BOF to invoke with fork powershell via powerpick .. he refuses to pay me the rest of 6k $ even after I delivered with BRIO all the stuff we agreed.

HE refuses to reply , refuses to pay. We agreed once all is given and bypasses all AVs I will get the rest of my money 6k $ left !

  • Evidence :
  1. I told him I am afraid to share before the money are sent ... so I have proof when he sent DM on site here also as the rules say I NOTIFIED HIM 1 hour before on DM and TOX I will open this complaint
  2. Since we said together the terms stated upper and we agreed BOTH , I started to screen record everything to have VIDEO PROOF in REAL TIME that I deliver what I stated, delivered and carnival also approved he got all , downloaded all , made it work all, AV 0/36 bypassed in real time ..
  3. Video Recording is done in the following order of events : terms stated -> deal sealed -> 6k received -> tools tested by me and archived with xss.pro password including video how to do it -> > approval that he got them all -> help given -> 2nd video recorded for Shellter -> beacon working -> refuse to give me the 6k
  4. I gave him lots of time to reply , he refuses to talk now so I opened arbitrary cause I did my job and I want my money .
  5. Attached is the full log cause it's a little long and don't wanna spam .. -> password to read it is xss.pro --> READ IT HERE
  6. I can provide also the screenshots I did when I explained what to do .. with screenshots .. + all recorded videos with everything from start to finish to the one who arbitrates to show even more proofs; links presented are till there up and online
Thanks whoever arbitrates this complaint
JUSTICE MAY BE SERVED AS ADMIN SEES IT FIT.
 
Последнее редактирование:
Mr M сказал(а):
Got contacted by carnaval on TOX with his username installer404 asking for Cobalt Strike 4.12 that I sell for 10k . We agreed to do the deal from CS 4.12 + Shellter Elite for 12k as follows :
  1. 6k $ (he sent first - which I got it)
  2. I had to provide CS 4.12 Licensed (Client+Teamserver) + Shellter Elite + VIDEO how to install it (teamserver on Ubuntu) + CLIENT on Windows + my own C2 profile + HOW Shellter works and bypasses 0/36 AVs/EDRs -> ALL DONE from my side , ALL delivered
  3. ASAP he tests this and gets a beacon I get the rest of 6k $
  4. As a bonus I wanted to share BRC2 for free cause he seemed nice + EXTRA BOFs for CS ( stupid me? ) after he paid the rest of 6$

Problems -> didn't knew I had to exemplify how java is installed on an Ubuntu (basic stuff) .. or on a Windows machine with environment path setup ... again basic stuff .. Didn't knew that I had to show him how to white list port 50050 on Ubuntu so the client can connect to the teamserver .. anyway I helped him of course and was patient to help him install all and connect to the server (including buiding CNA's cause he didn't knew that once built in Ubuntu you transfer to Windows to load them , but again, I had patience and explained him what to do) .
After getting all the stuff we agreead , including getting his beacon in Cobalt Strike from VPS with CORTEX (which is bypassed).. because he didn't loaded the CNA to do shell / powerpick / BOF to invoke with fork powershell via powerpick .. he refuses to pay me the rest of 6k $ even after I delivered with BRIO all the stuff we agreed.

HE refuses to reply , refuses to pay. We agreed once all is given and bypasses all AVs I will get the rest of my money 6k $ left !

  • Evidence :
  1. I told him I am afraid to share before the money are sent ... so I have proof when he sent DM on site here also as the rules say I NOTIFIED HIM 1 hour before on DM and TOX I will open this complaint
  2. Since we said together the terms stated upper and we agreed BOTH , I started to screen record everything to have VIDEO PROOF in REAL TIME that I deliver what I stated, delivered and carnival also approved he got all , downloaded all , made it work all, AV 0/36 bypassed in real time ..
  3. Video Recording is done in the following order of events : terms stated -> deal sealed -> 6k received -> tools tested by me and archived with xss.pro password including video how to do it -> > approval that he got them all -> help given -> 2nd video recorded for Shellter -> beacon working -> refuse to give me the 6k
  4. I gave him lots of time to reply , he refuses to talk now so I opened arbitrary cause I did my job and I want my money .
  5. Attached is the full log cause it's a little long and don't wanna spam .. -> password to read it is xss.pro --> READ IT HERE
  6. I can provide also the screenshots I did when I explained what to do .. with screenshots .. + all recorded videos with everything from start to finish to the one who arbitrates to show even more proofs; links presented are till there up and online
Thanks whoever arbitrates this complaint
JUSTICE MAY BE SERVED AS ADMIN SEES IT FIT.

Please post the screenshots and chat logs in this thread (I can't view your chat history using your link). I need to see the terms of the deal and the defendant's confirmed contact on the forum.

carnaval жду Вашего комментария.
 
Posting the conversation , proof he is carnival after he messaged me on XSS in private (please check the timeline in XSS also in DM , if needed I can share screenshot from there too) ... I also have videos to show all in realtime, just want to know the website where you want me to upload !
Attached the screenshots from TOX + VIDEO

Good thing I recorded video also to be honest.. with all the deal , including tests etc .. video is better than a picture

 
Also one more thing that I want to make it clear : After I get paid, I will keep my word even if I don't need to.. but I keep my word of what I say here and on qtox -> even if this happened, I will offer support and help him with extra stuff that he wants (in time limit and with patience .. not here to teach how cobalt strike is used, that is why courses exist) .. and will share Brute Ratel for free as I said.

Just to prove a point that it's a difference when you buy something from a pro seller who always comes with new versions here of Cobalt Strike and always being the first who shares them .

That's how any business should be done. This makes me sick and makes me not to come anymore with any Cobalt Strike that comes new because of stuff like this (then resellers appear all around)

ONCE you say something, no matter what, you do it.
Thanks.
 
carnaval , исходя из условий сделки, которые Вы сами же прописали в личной переписке с Mr M ,а именно:
1. First i send you 6k USD
2. Second (now) i install server, install Windows client - you help me witj ALL we saying under
3. i run ps or exe on test server - session come to client CS
4. Sent another 6k USD
Все условия были выполнены.

В переписке Вы так же упомянули:
"i run file on target with Cordex edr"

а затем:
"session appears"
"session good"

На данный момент,я считаю что carnaval должен перевести оставшуюся часть денег продавцу, то есть Mr M
 
Mister Арбитр XSS , got DMed by carnaval on TOX . He refuses to pay and told me that the tools are s**t (original exactly how they come from the vendors and licensed both) . If you need more proofs I can share.

The only issue is that he wants to do extra stuff than we agreed for and I'm not here to teach anyone how to do their job , I'm not a teacher, I'm a seller .
I would have helped him after he paid me for free when time permits for extra things (at least most of the times depending what he wants to learn/do / time consuming) .

I can't understand how he can behave like that when the tools have original HASH , are licensed with original licenses, no java hooks on cobalt strike, all nice and clean, original from the vendor both tools .

I ACCEPT to share with you Арбитр the tools Cobalt Strike 4.12 and Shellter both original not tempered from the vendors and fully working ..so you can test them both including video tutorial but I am SURE YOU KNOW HOW TO WORK WITH THEM !

carnaval is doing child play here.

I still believe that in our branch / community we work like pros and respect is mutual. Regardless I will keep my word and share the stuff with him (brute ratel original licensed) after I get paid .. maybe some support in the future.. I still think that there is still hope in people like me/us and we can work together and help each other properly and with professionalism.

A man values as much as his word values - when we do deals around here

I just want the rest of my money - the remaining 6k as we agreed cause my part of the deal was done once he got the beacon on Cortex target and confirmed
Thanks!
 
Последнее редактирование:
Арбитр XSS

As we can see he will not pay me the rest of 6k $ he owns me after he got beacon from Cortex VM where he tested.
How can we resolve this and get the rest of the money?

IF it's needed (easier to see with your own eyes) I will share the tools I sold and you can test it easily (ful scan nothing detected on kleenscan 0/36)
Also video that I recorded and sent him to follow up (that's how he got beacon from Cortex VM)

Код: 
[pending] : 2026-02-09
[01:41:24] Mr.M: dude pay me up
[02:04:35] Mr.M: mdo you hear me?
[06:28:01] Mr.M: hello ? ..
[06:54:32] installer404: bro
[06:54:37] installer404: you open arbitrary
[06:54:50] installer404: you never get even 1 cent from me
[06:55:09] installer404: until you crypt me all payloads
[06:55:35] Mr.M: what do you mean lol
[06:56:00] Mr.M: you got rev shell , beacon working from the vm with EDR
[06:56:03] Mr.M: what do you want more LO
[06:56:05] Mr.M: LOL
[06:56:10] Mr.M: to teach you how to use cobatstrike ? 
[06:56:24] installer404: тщ
[06:56:25] installer404: no
[06:56:30] installer404: i know how to use
[06:56:41] Mr.M: well don't pay LOL
[06:56:45] Mr.M: let the arbitrary do the work 
[06:56:46] Mr.M: LOL
[06:57:06] Mr.M: original files , licenses and so on for 2 tools that work
[06:57:13] Mr.M: I sshowed you and you got beacon up and running
[06:57:28] Mr.M: you went with powershell instead of powerpick ccommand cause you don' know how to use it LOL 
[06:57:55] Mr.M: always first thing to do is to cloack your binary ...and run it on target 
[06:58:03] Mr.M: always you start with http/https listener 
[06:58:23] Mr.M: then you move with the CNA's you already got but you didn't knew you have to do powerpick
[06:58:30] Mr.M: that was implemented since 4.6 LOL
[06:58:50] Mr.M: You wont pay me for the stuff the rest of 6k ?
[06:58:54] Mr.M: You are a scammer 
[06:59:05] Mr.M: and escuse me for this one -> a noob ? 
[06:59:13] Mr.M: let arbitrary deal with it
[06:59:22] Mr.M: and that's it
[06:59:37] Mr.M: shame on you by the way 
[06:59:47] Mr.M: for acting so childish 
[07:00:28] Mr.M: learn to use the tools man ,, not here to teach you .. I am here to sell you the tools and to help you achieve a workiig beacon from Crotex .. and you got it
[07:00:31] Mr.M: SO PAY UP
[07:01:17] Mr.M: k?

Thanks
 
Статус
Закрыто для дальнейших ответов.
Верх