зачетная статья
-
XSS.stack #1 – первый литературный журнал от юзеров форума
Статья How I exploited this corporation for $100k in 7 days
- Автор темы ghostmarket09
- Дата начала
Nice article, appreciate you taking time to write it down.
There are many articles of various skillset and themes, but it is important to share.
I really liked it as I also used to do something similar. Feel free to pm me for exchanging some ideas that could take your automation to another level.
Good job again and looking forward to more stories from you.
P.S. Krebs is dead, so he can rest in peace
терпение ключ к добродетели, отличная статья и мотивационное добро
Congratulations on the win, fella. I'd call this; when "thinking outside the box" has a baby with "staying consistent and persistent" type of thing. Thanks for sharing the story, I truly got low-key inspired to keep on learning and pushing forward.
If you don't mind, I'd like to ask a couple questions regarding the learning phase, as I consider myself a complete newbie in the field of python and other languages. I've got some minor experience when it comes to Linux, as well as I've done some carding in the past (which introduced me to the basic OpSec).
1. If you had to start from a complete 0 (knowledge, specifically), where'd you start off?
2. If we're talking Linux, which distro would you suggest to use?
By the way, don't judge me by the freshness of my account. This is literally my first time actually registering on this forum.
If you don't mind, I'd like to ask a couple questions regarding the learning phase, as I consider myself a complete newbie in the field of python and other languages. I've got some minor experience when it comes to Linux, as well as I've done some carding in the past (which introduced me to the basic OpSec).
1. If you had to start from a complete 0 (knowledge, specifically), where'd you start off?
2. If we're talking Linux, which distro would you suggest to use?
By the way, don't judge me by the freshness of my account. This is literally my first time actually registering on this forum.
- Автор темы
- Добавить закладку
- #25
Hi, I don't judge people on their registration dates because there are plenty of clowns and idiots who registered long ago lol. I have always tried to learn anything I can that makes me less dependent on others so that my projects do not require a partner. Partners in my opinion or group projects almost always have a person who is a weak link, or a liar/time waster. It didn't use to be this way but now it is. So I learn things like:
How to make my own scans with machine readable PDF417 barcodes ( Identity verifications for bank drops, various websites, android/ios apps https://github.com/transgen/Transgen )
How to make my own checkers ( Python is your friend I'm sure most would agree, also OB framework is newbie friendly and great to test if no experience https://github.com/openbullet/openbullet )
How to use a web proxy server that sits between your browser and target to intercept/modify traffic ( I use burp suite but there is also fiddler, mitmproxy ,etc https://github.com/SNGWN/Burp-Suite )
How to perform proper and fast recon ( Axiom is my current favorite framework because it allows true distributed scans of many tools easily making it VERY fast https://github.com/pry0cc/axiom )
How to check apk's for keys, vulns, dis etc ( https://github.com/MobSF/Mobile-Security-Framework-MobSF )
Those are my main daily tools/tasks I use. If I have a problem or something I don't know then I break the problem the down and look up the solutions until I understand. This usually involves many failures before success and understanding. I do post on forums asking people for solutions, and I never answer posts I see even if I know the answer. This used to be a sin on old forums and you were expected to exhaust the research on your own so it has stuck with me. Also there is no sense in helping someone learn something that I know can be searched for the answer because at the next road block they will simply quit and beg for answers again in an endless cycle.
I don't have a specific OS, all my vps are usually ubuntu, sometimes I use kali/parrot if I had vm open for specific reason and also windows 10 /server 2019.
I use an android emulator very often, lately its been Nox but I switch it up sometimes genymotion, android studio etc.
Sometimes I will find different things to practice on that most people arent doing. Especially verifications that are unique. Here is one I did last year for the electronic death registration system in Tennessee as a Doctor:
This allowed me to lookup and create new death certificates. Essentially I couldve electronically killed anyone in the USA lol. I actually still think things along these lines are interesting and would make a very interesting service perhaps. Because of USA laws and the way social security numbers work when someone is killed it is almost impossible to simply correct the mistake if they are found living or that it was a mistake. It also would potentially create possible loopholes when it comes to any legal troubles that person was facing making things like warrants more difficult to enforce, debts, etc. There is also a system for creating birth certificates and certifying them which would potentially allow you to simply create people out of thin air that are in the system. I got the idea originally from an Australian hacker.
Последнее редактирование:
HaHa Good job on that one. like to hear about raping something even if not by my own hand... reminds me of my weekend run with M&T and zelle. in the beginning they would shoot for 2500 and not even flinch. bought every m&t i could find collected about 70 and then started. after the first day they restricted from anything except mobile device. that lasted about 10 minutes. then they dropped the amount that would send all the way down to $20. anything else would fail. but still had same limit of 2500 total. lol.... not anymore
Вложения
Если бы было что-то, о чем вы хотели бы знать, когда только начинали, что бы это было?
If there was something you wished you had known about when you first started, what would it have been?
If there was something you wished you had known about when you first started, what would it have been?
- Автор темы
- Добавить закладку
- #28
In the beginning ( 2008-2009 for me ) I wanted to know about everything lol but this was not an option then. Forums/Communities were not as simple to enter back then, and even after entering nobody would respect you or trust you if you were not known. So I like many others followed what used to be the clear path if you were from the west- Canada, USA etc, I started picking up drops ( package, signature, commercial, billing, etc ). After being vouched enough I was given an opportunity by another for instore carding. Preprinted plastic was sent to me along with 101 bases, I had to purchase my own embosser and msr, and instead of foil tipper at first I used metallic marker lol. In both of these fields there was a lot of selling involved at the end of the day but was not a problem since I travelled and was always in major cities.
I was given d+p opportunities after that from a legend out of ukraine and this I did quite a while. There were many things in between all of these things, back when reloading gc's online with cvv was much easier and common and instant e-gcs were more common. Lord and taylor my partner and I killed so bad one winter holiday in chicago they changed their system, lol, L'occitane, and so many other old things people dont know of. Had a great polish friend who was called aldo that disappeared who had corrupt employee at kmart corporate which was when i first learned sears/kmart were owned by same company and gift cards could be used at both, that employee sent me $7k of e gifts daily for $1.5k WU for a long time until he got fired i assume.
Many scams on lesser known sites like auctionarms and gunbrokers that are too long to explain. Too much to list but the point being I always wanted to understand and figure out anything. My problem has always been that I lose interest when I reach that point and move on, even when that project is working very well lol. My attention span and work ethic is great as long as the work is challenging/entertaining but once there are no problems to solve or figure out I goto the next thing. I grew up with a father who was a programmer, so basic interests were always in this field because of him. I have mastered nothing lol, but I have a working understanding about more than youd believe haha.
I took a break for 5-7 years and when I came back the people I knew were gone and the communities were much different, just like now. There were many legends then, bx1, Max Ray Vision, N2C, BadB, and many dangerous talent unlike now where most pretend theyre legends but know little about nothing. Just as boring to me are those people who are SUPER PERFECT EXPERTS in a single field but have almost no understanding about anything else... I don't see the logic in this and these paths lead always to being dependent at some point. There is a real shortage of creativity these days so if you have it then use it because its valuable.
As far as what I wish I'd known when I started. I wish I'd known that if you manage to become successful that those you love, and those closest to you might become hateful and resentful and eventually dangerous and cost you years of your life. Even though you are taking care of them, sharing with them, and consider all your wins as group wins... sometimes it doesnt matter and there is just something bad in most people. Sisters, brothers, girlfriends, doesnt matter.
Последнее редактирование:
I was about to quote your reply to my post until I noticed your answer to the guy above. Ghost, even though I'm repeating here, you should know for a fact that you're a quite inspiring individual. As I read through, I can tell that you're the type to be able to tell what the person is like, what they feel like just by their facial expressions, the way their eyes shift, basically - a body language expert thanks to the experience with all types of mainly negative situations in your life. Believe me or not, but I absolutely understand you. I grew up on the streets and they taught me a lot. Especially, about people. It's not just songs and movies, people will actually switch up on you, tell on you, betray you if you don't give them a piece of your success. I learned about "let your results speak instead of you" when I noticed how people around me were reacting to me finally making a positive change in my life. It was so irritating. Even the family members: "Oh, this doesn't work. That won't last. You didn't see the news? Not going to work. You can try but it's pointless.", what in the living fuck, right? Aren't they supposed to be on your side?
But nah, this is not how the world works. At least, not this world. I often judge myself for not getting people involved in my work, in my schemes, etc. But on the other hand, I've got a reason for it. I've been trying to educate my people, showing them my ideas, talking about other and underrated perspectives of different subjects, passing the connections that I've been working to get for so long - just for free, just so they can be happy and use them wisely. But in reality, they don't appreciate that shit and often, fuck shit up.
That's where I understand your will to work solo, because there are weak, disloyal, unmotivated and envy people around. Most of them. While you're chasing loyalty like an idiot - people are chasing the paper, which is even dumber.
Regarding your reply to my previous post - I appreciate the fact that you invested your time in it, with the links to sources, explanations, opinion and your personal experience. I already copied and pasted the links to my drive. Before diving in, I have to ask another thing, though; is it worth spending 10+ hours on the YouTube python boot-camps? For an example, there is this "freecodecamp" channel, he teaches the Kali Linux, python and other basics.
About the death certificate part, I actually smirked as I instantly got a dumb thought of how I'd have used that in order to "e-kill" some of the people that have done me wrong in the past. Just to mess with their situations a bit. Would be quite hilarious.
But nah, this is not how the world works. At least, not this world. I often judge myself for not getting people involved in my work, in my schemes, etc. But on the other hand, I've got a reason for it. I've been trying to educate my people, showing them my ideas, talking about other and underrated perspectives of different subjects, passing the connections that I've been working to get for so long - just for free, just so they can be happy and use them wisely. But in reality, they don't appreciate that shit and often, fuck shit up.
That's where I understand your will to work solo, because there are weak, disloyal, unmotivated and envy people around. Most of them. While you're chasing loyalty like an idiot - people are chasing the paper, which is even dumber.
Regarding your reply to my previous post - I appreciate the fact that you invested your time in it, with the links to sources, explanations, opinion and your personal experience. I already copied and pasted the links to my drive. Before diving in, I have to ask another thing, though; is it worth spending 10+ hours on the YouTube python boot-camps? For an example, there is this "freecodecamp" channel, he teaches the Kali Linux, python and other basics.
About the death certificate part, I actually smirked as I instantly got a dumb thought of how I'd have used that in order to "e-kill" some of the people that have done me wrong in the past. Just to mess with their situations a bit. Would be quite hilarious.
Замечательная история. Определенно, это настоящее путешествие от новичка к эксперту.
Был ли случай, когда друг воспользовался вами? Нарушил ваше доверие?
Каков ваш мыслительный процесс, когда вы пытаетесь найти новые проекты? Если бы вы могли дать совет начинающим, что бы это было?
Был ли случай, когда друг воспользовался вами? Нарушил ваше доверие?
Каков ваш мыслительный процесс, когда вы пытаетесь найти новые проекты? Если бы вы могли дать совет начинающим, что бы это было?
Please excuse me if my comments offend you in any way as it was not my intent and probably really not my business to comment anyway. But i wanted to throw my 2 cents about something i feel pretty strongly about. I completely relate to what you say about getting bored and if it doesnt present a challenge no matter how profitable it may still be is really irrelevant. The lack of creativity from people now is really almost pathetic people are searching for a golden pdf step by step guide to make millions and put as little effort in it as possible and absolutely none of there own ideas.. one thing i can say is that every method ive ever seen or been told has never worked for me. maybe 1 time ever. the only things that work for me are the ones i come up with my self or variations ive come up with after hearing or reading some of these pdf's example. there is a person on this forum posted he was looking for someone to hack bank accounts.... i responded of course always up for a good challenge..... come to find out what he really should have posted was he is looking for someone to he can give a bank pro to and they cash it out and onkly keep 50% of the money. Seriously if that isnt just flat out lazy.... so my response to this person was, Why dont you try and learn how to do it your self, its more money for you? to which i recieved this reply , Why dont you learn to read what is posted....... SMH.... seriously what has become of this business. and who really would even do this for someone....
Rant over.... sorry
Rant over.... sorry
Good storyteller.
Wonderful story.
Keep it going.
Wonderful story.
Keep it going.
That was a great story, man. Thanks.
100%. The majority of people never value what they get for free. I helped many people in the past and was stabbed by them, so I'm not sure if I suppose to help anyone. When you work alone, the probability of getting caught is lower. You can only control yourself, but not others.
How do you explain the source of your funds to governments, banks, friends, etc.? Can you please provide some examples or hints?
Wow. this is exactly what I was thinking couple of days ago and I come here to read it )))
what system is this?
I'd like to find out this too.
Cool !!
The head line regarding the exploit is good but you should call it as they call types of cyber threats.
How would you call your?? LOL
It related to Spoofing Campaign but not even <[]>
The head line regarding the exploit is good but you should call it as they call types of cyber threats.
How would you call your?? LOL
It related to Spoofing Campaign but not even <[]>
Хорошее чтиво, отличная статья