[Howto] Using your linux boxes for Paypal/CVV/RDP/VNC business (or just anonymizing yourself)
People usually search a lot for good Windows RDP sellers to do business, like Paypal, CVV business or others.
Most do not know you can do the same with linux boxes, just with some extra little work.
If you are sitting in a big stack of hacked Linux servers with plenty of RAM and IP addresses - and have root on them, or if you just bought a US$5 Linux VPS with 512 Mb of RAM from Digital Ocean with a hacked Paypal account, this will make your life really easier.
You can even setup this and rent access to some fresh IP addresses to your friends, so they can do some of the usual business we need to do to put food on our table.
Basically we need to install this applications below on the linux server/VPS, but i prefer to install more of them:
X11
vncserver
tor
And do some redirect via SSH to access a beautiful graphical screen from where we are going to do business as usual.
For Centos 6.x:
# yum -y install wget
# wget https://dl.fedorapro...-6-8.noarch.rpm
# rpm -Uvh epel-release-6-8.noarch.rpm
# yum -y groupinstall basic-desktop desktop-platform x11 fonts
# yum -y install tor pidgin pidgin-otr pv rsync yum-utils jwhois bind-utils alsa-plugins-pulseaudio libcurl mlocate wine vim-enhanced exim telnet tcpdump nginx httpd httpd-tools httpd-devel tigervnc tigervnc-server xterm firefox flash-plugin nspluginwrapper
### create an user and setup a password for it
# adduser briankrebs
# passwd briankrebs
### change to this user
# su - briankrebs
### start the graphical VNC onto this server/VPS
$ vncserver -geometry 800x600 -nolisten tcp -localhost
### now you have a listening port 5901 on localhost, where you will have a graphical screen with browser, jabber (pidgin), etc to do business. Just redirect your local SSH to there
### check the listening ports with netstat
$ netstat -uptnlp
### you should see something like this:
tcp 0 0 127.0.0.1:5901 0.0.0.0:* LISTEN 4837/Xvnc
### now configure your local SSH to access this host and forward this connection to your side ( I am assuming you are using Linux )
### inside your LOCAL MACHINE in the file /home/YOUR-USER/.ssh/config place this lines:
Host myvps
Hostname 72.52.7.144
Port 22
User briankrebs
IdentitiesOnly yes
LocalForward 5901 127.0.0.1:5901
### after you login into your VPS, you will have a local port listening on 5901 so you can connect to your graphical server/VPS
### locally you do ( I am assuming you have TOR running on your local computer )
$ torify ssh myvps
### then login into your graphical and enjoy - you can even download TOR BROWSER and only browse from this server, from TOR
$ vncviewer 127.0.0.1:5901
### TOR is compromised by NSA? do not bother, you are 2 layers deep into it. you -> TOR -> VPS -> TOR -> world (forums,jabber,etc)
If have any doubts hit me on jabber: ahmedakbar@xmpp.jp
### Have a more powerfull server with plenty of IP addresses? Install VirtualBox into this VNC screen with Windows XP/7/8 machines, setup RDP on them, resell or use them !!!!
debian is similar, (instead of yum use this packages):
aptitude install xfce4 tightvncserver iceweasel tor
## start vncserver the same way
### if want add more security, connect to your Linux SSH box via a TOR hidden service, edit /etc/tor/torrc
HiddenServiceDir /var/lib/tor/hidden_service/
HiddenServicePort 54776 127.0.0.1:22 ### assuming 22 is your SSH listening port
### now reload tor
/etc/init.d/tor reload
### get address of hidden service
cat /var/lib/tor/hidden_service/hostname
### now use putty / SSH client to connect to XXXX.onion port 54776 (or other you choose above)
### the improvement of this setup is, even if TOR EXIT NODES are compromised, you are still safe - your packets are not going through exit nodes, just internally in TOR via your private hidden service. Somebody sent you a link and got the IP address of VPS? do not bother, your real IP is protected. If you use TOR BROWSER inside the VNC window, better, because:
you -> HIDDEN SERVICE SSH -> VPS -> TOR BROWSER -> INTRNET (PIDGIN, CLEARNET, ETC)
also the speed of this setup is not bad, and no VPN owner can rat you to LE
Good business!
People usually search a lot for good Windows RDP sellers to do business, like Paypal, CVV business or others.
Most do not know you can do the same with linux boxes, just with some extra little work.
If you are sitting in a big stack of hacked Linux servers with plenty of RAM and IP addresses - and have root on them, or if you just bought a US$5 Linux VPS with 512 Mb of RAM from Digital Ocean with a hacked Paypal account, this will make your life really easier.
You can even setup this and rent access to some fresh IP addresses to your friends, so they can do some of the usual business we need to do to put food on our table.
Basically we need to install this applications below on the linux server/VPS, but i prefer to install more of them:
X11
vncserver
tor
And do some redirect via SSH to access a beautiful graphical screen from where we are going to do business as usual.
For Centos 6.x:
# yum -y install wget
# wget https://dl.fedorapro...-6-8.noarch.rpm
# rpm -Uvh epel-release-6-8.noarch.rpm
# yum -y groupinstall basic-desktop desktop-platform x11 fonts
# yum -y install tor pidgin pidgin-otr pv rsync yum-utils jwhois bind-utils alsa-plugins-pulseaudio libcurl mlocate wine vim-enhanced exim telnet tcpdump nginx httpd httpd-tools httpd-devel tigervnc tigervnc-server xterm firefox flash-plugin nspluginwrapper
### create an user and setup a password for it
# adduser briankrebs
# passwd briankrebs
### change to this user
# su - briankrebs
### start the graphical VNC onto this server/VPS
$ vncserver -geometry 800x600 -nolisten tcp -localhost
### now you have a listening port 5901 on localhost, where you will have a graphical screen with browser, jabber (pidgin), etc to do business. Just redirect your local SSH to there
### check the listening ports with netstat
$ netstat -uptnlp
### you should see something like this:
tcp 0 0 127.0.0.1:5901 0.0.0.0:* LISTEN 4837/Xvnc
### now configure your local SSH to access this host and forward this connection to your side ( I am assuming you are using Linux )
### inside your LOCAL MACHINE in the file /home/YOUR-USER/.ssh/config place this lines:
Host myvps
Hostname 72.52.7.144
Port 22
User briankrebs
IdentitiesOnly yes
LocalForward 5901 127.0.0.1:5901
### after you login into your VPS, you will have a local port listening on 5901 so you can connect to your graphical server/VPS
### locally you do ( I am assuming you have TOR running on your local computer )
$ torify ssh myvps
### then login into your graphical and enjoy - you can even download TOR BROWSER and only browse from this server, from TOR
$ vncviewer 127.0.0.1:5901
### TOR is compromised by NSA? do not bother, you are 2 layers deep into it. you -> TOR -> VPS -> TOR -> world (forums,jabber,etc)
If have any doubts hit me on jabber: ahmedakbar@xmpp.jp
### Have a more powerfull server with plenty of IP addresses? Install VirtualBox into this VNC screen with Windows XP/7/8 machines, setup RDP on them, resell or use them !!!!
debian is similar, (instead of yum use this packages):
aptitude install xfce4 tightvncserver iceweasel tor
## start vncserver the same way
### if want add more security, connect to your Linux SSH box via a TOR hidden service, edit /etc/tor/torrc
HiddenServiceDir /var/lib/tor/hidden_service/
HiddenServicePort 54776 127.0.0.1:22 ### assuming 22 is your SSH listening port
### now reload tor
/etc/init.d/tor reload
### get address of hidden service
cat /var/lib/tor/hidden_service/hostname
### now use putty / SSH client to connect to XXXX.onion port 54776 (or other you choose above)
### the improvement of this setup is, even if TOR EXIT NODES are compromised, you are still safe - your packets are not going through exit nodes, just internally in TOR via your private hidden service. Somebody sent you a link and got the IP address of VPS? do not bother, your real IP is protected. If you use TOR BROWSER inside the VNC window, better, because:
you -> HIDDEN SERVICE SSH -> VPS -> TOR BROWSER -> INTRNET (PIDGIN, CLEARNET, ETC)
also the speed of this setup is not bad, and no VPN owner can rat you to LE
Good business!