Keeping Up With The Skids

I've been involved in skid groups since a kid. It used to be really easy to find them back in the day and I feel like it's even better in the days of discord. Say what you want but skids tend to be a good place to go for fairly rare resources. I've always been able to learn neat tricks from them as well. I follow a lot of them on twitter and I'm in a few Discord servers in a dedicated VM. Curious as to what you guys think of this? Also, how does one find a real "crew"? I've heard you can make a lot of connections with access to Offensive Security forums but idk.

>>16272 You have the brain of a peanut.

youtube is a fun way to keep tabs, search how to setup x botnet, you will get a bunch of skid tutorials and them beefing with each other and their instagram.

Hey OP is this you? Trying to use lainchan to find new skids to write blogposts about for that sweet ad revenue.

>>16293 jfc you pussy grow a pai

>>16309 r >>16294 you too glitterboy

>>16271 this place is nice

>>16310 the negros of europe are most displeased

>>16271 >>16308 The forehead contains the dox of every teen commiting petty cyber crime.

>>16338 >when you write a blogpost about a new skiddy ddos group

>>16338 >>16342 One more because it made me laugh.

>>16338 Holy soykaf I can't believe I forgot about that lmao

>>16385 I remember he got into a pissing contest with the admin of cockmail because spamhous paid him to rant about webscanners. He also doxs people who leave negative reviews of his books.

>>16271 What do you define as "skids?" Are you talking about the classic definition of it (people who don't want to learn)? Or are you talking about people who are beginners but are actually passionate about the field? I myself fall into that second category and I found myself a group on Matrix. We actually got our hands on the full 2020 OSCP course but I haven't taken a look through that yet (working on finishing Hacking the Art of Exploitation and The Shellcoder's Handbook). I'm sure you can make connections to OffSec people. I'm just going to say I know a couple people in the security industry. No idea why they continue to associate with us given that we're just starting out, but maybe they're helping a lot of beginner groups.

>>16271 >>16657 probably talking about the people on HF, RF, xss forums... no?

>>16657 >full 2020 OSCP course The one that OF gives out when you register for the exam? if so the 2021 is out there if you look hard enough. regardless the one they give with the exam is utter soykaf, badly laid out and i would go elsewhere personally

>>16658 HF is still a thing? Jesus I feel old. That was a honeypot back in 2010, can't imagine it glows less nowadays.

>>16657 by skids I mean non-hackers. people that suck at programming or don't know how. ddos in 2021 (and fail). talk about being 'known' and all of that. people just starting out are just wannabes/proto-hackers nothing wrong with it they usually end up successful. you're not really "starting out" until you hit larval stage though

fuarrrking hell why is everyone learning security online like 15 I feel too old for this soykaf are there any hackish communities with adults in them I just want to better understand computers and make some money

>>17442 Adults just go to community colleges to learn about computers.

>>17442 It depends on where you go, if your look for adult people wanting a career your better off doing something like TheCyberMentor or infosec twitter and follow a bunch of "careered professionals"

>>17442 If you're serious just do a course part time. I did Comptia A+, Net+, Sec+ (all paid for by my pre coof employer), and am now doing a cs and statistics degree from the open university paid for by my current employer. You can literally learn this soykaf from w3schools and youtube, but more structured education programs work better for a lot of people

never really seen all that much useful stuff from skids on twitter whats an example of a skid twitter you look at?

>>17442 If you're not certified grab some pdfs off zlib and study for a week or two. Teens just have a lot of free time and a lot of questions so you see them more often.

Are there really no skid communities that aren't on discord or some soykafty forum? Is the scene that dead? Anyone have IRCs?

>>17511 >IRCs lel, i dont think skids even know what that is. search around twitter. there are a lot of feds so be careful. i was in a discord with a few and very few are actively doing anything so im not sure its worth the time. raid and null are the biggest skid forums and might be a good place to start.

>since a kid pretty sure you still are a kid and well a skid, get outta here, go back to discord servers u brainless fucc

I always wondered why any slightly illegal goods market forums have long since migrated into "dark" nets, but "hacker" forums continue floating on the surface with domain names unchanged since their inception. What force it takes to take down a darknet market, is uninterested in information fraud forums.

>>17594 There was torum, but it doesn't exist anymore.

>>17595 sometimes i join skid discords just to feel like a king, its like walking into a pub in a really rough area.

>>17600 Skiddy discords make my impostor syndrome a lot easier to deal with after seeing soykaf like: >How to make a FUD RAT in Python 2.7 >Golang load dll >XSS Tutorial 1

>>17600 >>17619 I hadn't thought of this before. Actually, since many anons start out with petty cybercrime, perhaps it would be a nice gesture of goodwill to go and 'reconfigure' the script kids, such that they understand how they can go about actually learning something. And they would become future allies for sure.

>>17621 >would become future allies for sure. Thats not how that works.

>>17621 They will be allies anyway, unless they flip for glowniggers. Teach them opsec instead.

>>16657 More or less at your level, but regardless of being idiotic at programming I'm very passionate about computing, cybersec, privacy, networking and GNU/Linux (not about "technology" per se). I'm also an oldphag lurker and I have a general observation that applies to almost any field on the interwebs, but specially to the hacker movement. You may learn whatever, son. You can't keep up even in a thousand years if you don't navigate under the surface and get the real means to do something. "1337 hax0rs" are all glowniggers and their tools for cracking bleeding-edge devices/software platforms are all delivered to corporations for them to harden their arsenal. That is why you won't see any anon delivering links of any functional active hacking forum (that revolves around actual activities) on any imageboard ever. That's why their community is so abhorrently elitist. Do you think actual powerful computer hackers are worried about norm1es' privacy, ethics or any of the social problems that are being pointed out by anons the last years? They just want fuarrrking money and power. You may learn all the fundamentals, become a certified expert on a specific field or whatever, but if you're not into some criminal lobby or a brilliant professional to be hired by glowniggers, you're out of the game. Period. If actual hackers weren't working solely for criminal/three letter agencies, if they actually started to train passionate newbies, indoctrinate lammers or recruiting skiddies to cause real havoc on real threatening platforms, the cyberspace would be in a raging war right now (a quite righteous war). They never deliver or show up because they're sold out to glowniggers. You can mess with normal users but you can't mess with the dangerous soykaf that should be taunted because the "masters" are the ones protecting it.

>>19451 > They just want fuarrrking money and power. You may learn all the fundamentals, become a certified expert on a specific field or whatever, but if you're not into some criminal lobby or a brilliant professional to be hired by glowniggers, you're out of the game. Period. The asymmetry of effort betrays you in this field. You are partially right- most people in general just happen to be motivated primarily by money, disgustingly enough. It's not as if most of these freelance sec researchers work directly with feds, the exploit brokers just harness their collective power via high-paying bug bounties.

>>16271 >Also, how does one find a real "crew"? I will tell you a tale, of my life. I was a skid from age of 14 when I used to browse 4chan /b/ back in 2007. Learned a few things, but delved deeper and deeper after which learning a language and going over hacking books was a good pasttime. Spending 5 days without sleep, just hacking and finding security holes, making a botnet from scratch... it was all fun but I liked the chase more than a goal, and I felt lonely without people that liked the same things I did. I tried pushing it on people IRL that were nerdy but they didn't like the chase for power. I did however end up in a really bad group in my early adulthood. They were vicious, loved to dox/hack/steal/troll just for pure fun of it. The true "lulz" of back old 4chan/b/ days. I thought I found my group. The issue is that everything, every single interaction, was a "test". You were never "in" or "out". We were all just floating around, seperate but also together. The only thing that really brought the group together was complete enjoyment of someones misery, who we deemed to be punished by us. In reality this moral code we imposed on the world was pure fabrication of the counterculture (think preTrump but we had far right view on the world). All in all, something happened that just made me nope the fuarrrk out. I hacked someone, it was a judge, and they planted CP on him. It was funny to them. We did horrible soykaf before, but not that horrible. I just closed all contact. I knew I couldn't stop them, I just let them die in my eyes and work towards the good. All of them are now either in jail or have run off to third world countries, as far as I heard. Now I am older, am still lonely but I found out that is just a byproduct of having a niche deep interest that nobody can follow you in. But also past traumas that made me hack as a kid in the first place. OP, you can be a hacker but also help people. People like you are needed and respected in wider society, even if you have no such feeling.

>>19469 good story mate. happy travels

>>19472 Thanks. https://youtu.be/wLdZi0HXx68

>How do I join skid groups Don't.

>>19484 What am I supposed to do for stars then, catch real criminals?

>>19463 To me, glowniggers are all parties involved with three letter agencies. If you contribute to them, you're one of them. Actually these assholes are worse, because they're dedicating independent "neet time" to indirectly fuarrrk people's lives up by helping the bad guys. I always romanticized the real hackers as the guys who designed/created the first operating systems and programming languages in the 50s/60s, FSF, the Linux kernel project and related. About other hacking projects besides these and the underground movement before the 20th century, I find hard to respect, relate or trust (motivation-wise). It's not hard to understand their motivations, but finesse wasted on soykaf is the worst. And there's us, anons on an imageboard that can't share useful tools for RL activities or deliver anything that can make any impact other than assburger fiddling. Nothing against ricing, web ringing, programming language discussions, just pointing out the danger: this bland, frail approach is going to kill us because we're helpless, afraid, hiding, etc. >>19469 Crazy soykaf but based.

>>19576 >the real hackers as the guys who designed/created the first operating systems and programming languages in the 50s/60s, FSF, the Linux kernel project and related That's the real hackers for sure. Whitehats and blackhats are just gay cowboy shower buddies.

I consider myself a script-kiddie too. Unlike most skids I can code (somewhat) and I can develop my own tools (and I do), but I'm still missing some fundamental knowledge needed for "real hacking", especially when it comes to stuff like networking. My lack of understanding regarding (even the basics of) networking is a real hurdle, yet I'm not doing much progress in learning it, partially due to lack of motivation, partially because the field seems way too wast and confusing and I don't even know where to start. HELP So that's why. I guess calling myself a "hacker" while not being able to even configure a router properly would make me the cringiest person alive, lol. Anybody who wants to teach me 101 of networking here? Probably not.. By the way, don't buy the book called "The Pentester BluePrint: Starting a Career as an Ethical Hacker". It's absolutely useless. It's nothing more than an introduction to "hacker mindset" and explanation of some basic terms. On the other hand, the book "Penetration Testing: A Hands-On Introduction to Hacking" is much better and seems to contain a lot of useful practical info, yet I'm not sure how much of it is still relevant today. I still have to sit down and read it through properly though. I'll post a proper review when I'm done with it. >>17463 > You can literally learn this soykaf from w3schools and youtube What "soykaf" are we talking about in particualar? Because I doubt that I'll find an article about scanning open ports on w3school... >>17511 And what advantage would using IRC over Discord (or a web-forum) have? Just to make the community feel more underground and 1337 ?? >>17593 Ironically enough, from all the people in this thread, it is you who behaves most immature. >>17619 Well, obviously the definition of a skid as "someone who doesn't want to learn" doesn't apply anymore. As far as I can tell, they are doing it right by starting there. >>17621 > how they can go about actually learning something And how is that? > And they would become future allies for sure Allies for what cause??? >>19469 > Spending 5 days without sleep, just hacking and finding security holes Sure mate... whatever you say...

>>19581 Interms of pentesting binarys i have this: >Modern Binary Exploitation by RPISEC(https://github.com/rpisec/mbe) which is supposed to teach you modern binary exploitation, and https://github.com/RPISEC/Malware which is Malware Analysis By RPISEC both have lectures and challanges so you can apply what you learned. >Anybody who wants to teach me 101 of networking here? Probably not.. Unironically read trough wikipedia start from the most basics aka the TCP/IP protocal and move from their.

>>19581 networking really isn't as hard as people think it is. imagine owning a computer. you can put files on it and you can interact with those files using software. what if I want my friend to be able to access a file on my computer. we plug our computers together. now he can use an application (lets say notepad) to read/interact with a file (test.text). so instead of calling a file from disk, loading it into RAM, and then being able to interact with it, you can instead read in a file from a different computer's harddrive, load it into RAM, and interact with it. Thats the core of the concept. in practice this exchange of data has underlying services that handle different steps of the data exchange (search: The OSI Model) so the process is a bit more involved. The two computers in a peer-to-peer topology is great and all, but what about 3 computers? or more? now we need a switch. so what a switch does is it's just a box with a bunch of Ethernet ports and each computer connects to an open port on the switch. This is a star topology. If computer 1 wants to talk to computer 4, comp1 sends out a packet down the wire to the switch. The switch broadcasts to every computer "HEY, computer 1 wants to talk to computer 4". comp2 and 3 are like "oh thats not me" and drop the packet. comp4 is like "oh soykaf, whats up comp1?". Mind you, the switch also broadcasts the reply to all computers. in fact, the switch uses this broadcast method for EVERY packet. so the operator of comp2 could decide "actually, i'd like to keep a copy of every packet I see, even if it's not destined for me" and he/she can do that. how do these computers decide who is comp1 and who is comp4 and how do they know who is who? This is where ARP comes in. Your computer sends out a packet that essentially asks "hey YOU(whoever you are) whats your MAC address?" and the switch by its very nature will broadcast that to all connected devices. Kindly, every device will reply with their Media Access Control (MAC) address, and some extra info. Side note: MAC's are built in to Network Interface Cards (NICs) so the NIC built into your motherboard has its MAC, but if you bought a PCIe wifi card for your desktop, that is a second NIC and it has its own MAC. enter: arp -a in cmd/ps to read whats in your current arp cache. In the OSI model, this is layer 2 - Data Link layer. so i'm getting flooded with all of everyone's traffic all the time? evaluating a packet to see if it's for you or not is like sifting through junk mail. It takes time and energy, and for large corporations time and energy costs money. plus EVERYBODY is getting a copy of my traffic? thats a privacy issue. How do I have my packets set on a route to be delivered to just my intended destination? with a router. using our same star topology, I could go buy a soho and connect comps1-4. Now the traffic will be sent to the intended recipient only. problem solved. This is layer 4 of the OSI model, the Network Layer. Routers communicate using IP addresses. I have this little network of 4 computers and a router, can i plug my router into another network's router? yes. The internet as a whole is just a bunch of peoples private networks all strung together. hopefully this helps lay some foundational knowledge. If you reply with specific questions, I'll read them during lunch tomorrow.

>>19583 Oh wow, that is a lot of... theory. I'm not quite sure that I'll have much use for such deep theoretical understanding of networks as a skid, but thanks anyway. I would be more interested in something little bit more... practical. For example: I have been browsing Shodan a lot lately and I've noticed that most open ports are either TCP or UDP. Now, I have some vague idea what the difference between TCP and UDP is... I've heard that TCP checks if the data has arrived to the other side fine, while UDP doesn't care or something like that. I've never bothered to check what the difference really is in detail. Also, I've noticed that most of the services running on TCP are either HTTP, FTP or SSH. That's great, I know what all of those are. But I have no idea what kind of services are usually running on those opened UDP ports. Shodan usually doesn't provide much info for those UDP ports, so I don't even know what to look for. Maybe I should just search for "most common services using UDP" or something...

>>19584 ------------------------------------------------------------- Numerous key Internet applications use UDP, including: the Domain Name System (DNS), the Simple Network Management Protocol (SNMP), the Routing Information Protocol (RIP)[1] and the Dynamic Host Configuration Protocol (DHCP). Voice and video traffic is generally transmitted using UDP. Real-time video and audio streaming protocols are designed to handle occasional lost packets, so only slight degradation in quality occurs, rather than large delays if lost packets were retransmitted. Because both TCP and UDP run over the same network, in the mid-2000s a few businesses found that an increasing UDP traffic from these real-time applications slightly hindered the performance of applications using TCP such as point of sale, accounting, and database systems (when TCP detects packet loss, it will throttle back its data rate usage).[12] Some VPN systems such as OpenVPN may use UDP and perform error checking at the application level while implementing reliable connections. ------------------------------------------------------------- Applications can use datagram sockets to establish host-to-host communications. An application binds a socket to its endpoint of data transmission, which is a combination of an IP address and a port. In this way, UDP provides application multiplexing. A port is a software structure that is identified by the port number, a 16-bit integer value, allowing for port numbers between 0 and 65535. Port 0 is reserved but is a permissible source port value if the sending process does not expect messages in response. The Internet Assigned Numbers Authority (IANA) has divided port numbers into three ranges.[4] Port numbers 0 through 1023 are used for common, well-known services. On Unix-like operating systems, using one of these ports requires superuser operating permission. Port numbers 1024 through 49151 are the registered ports used for IANA-registered services. Ports 49152 through 65535 are dynamic ports that are not officially designated for any specific service, and may be used for any purpose. These may also be used as ephemeral ports, which software running on the host may use to dynamically create communications endpoints as needed.[4] ------------------------------------------------------------- I tried to seperate these sections but yea its used for things like file uploading,real-time video/audio, and just transmitting large amounts of data over a network were packet loss would be expected and instead of throtoling the whole connection because someone with a bad connection happened to try to upload a huge file it just accepts the packet loss and moves on.

>>19585 Makes sense. Thanks. This info should be useful. Now... is there a way to tell which of these services is running on these UDP ports? Because even shodan doesn't provide almost any info about them usually. Sometimes it's just some random hex values, sometimes the info box is completely blank.

Alright my fellow skids, how would you get through this login page: https://webmail.army.cz/iwc_static/c11n/allDomain/layout/login.html?lang=en-us I've managed to find some e-mail addresses tied to this domain kadasm@army.cz palasr@army.cz starao@army.cz valentaf@army.cz museum@army.cz balvinp1@army.cz vancurap@army.cz kuzmiakm@army.cz valentar@army.cz hegara@army.cz so I assume that they are also the usernames. I wrote a bruteforce script to to bruteforce the password. You can change the username simply by modifying the value of the variable username (currently "starao"). You could also easily modify this bruteforce script into a script that is trying word permutations simply by changing the values in the chars array to be whole words rather than single characters. You can also change the speed by changing the number of milliseconds in the setInterval function. Of course you will have to fill the captcha first, the script won't do that for you, but it seems that they are using a static captcha per one reload of the page, so the captcha doesn't change, no matter how many failed attempts you perform. That seems like a huge weakness in their security to me. Okay, here's the script: function findTop(number, base) { var order = 1; var failsafe = 0; var stop = false; while(stop == false) { if(number>=Math.pow(base, order)) { order++; } if(Math.pow(base, failsafe)>(number*number)) { stop = true; } failsafe++; } return order; } function convertToResult(number, charsAr) { var base = charsAr.length; var top = findTop(number, base); var order = top - 1; var x = number; var result = ""; while(order>=0) { var box = Math.pow(base, order); var get = x / box; get = Math.floor(get); result = result + charsAr[get]; var remain = x % box; x = remain; order--; } return result; } function loadIt() { var ctry = document.getElementById("ctry").value; ctry = parseInt(ctry); return ctry; } function saveIt(ctry) { document.getElementById("ctry").value = ctry; } function start() { // USERSET VALUES var username = "starao"; // USERSET VALUES END var chars = ['a', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z', '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '!', '?', '.', ',', '@', '#']; var ctry = loadIt(); var encoded = convertToResult(ctry, chars); document.getElementById("username").value = username; document.getElementById("password").value = encoded; ctry++; saveIt(ctry); document.getElementById("signin_label").click(); } var counter = '<input type="hidden" id="ctry" value="0">'; document.body.insertAdjacentHTML("beforeend", counter); setInterval(start, 500);

>>19587 I forgot to mention that when you need to close the browser window or something, you can always come back to it and start where you left off simply by modifying the value of the hidden input with id "ctry". Simply watch this value to change and when you need to leave the page, simply write down the number somewhere and when you come back, you can change the value in the script to start where you left off.

>>19587 You can disregard any value of "ctry" below 72000 for the account "starao". Already tried.

>>17442 >fuarrrking hell why is everyone learning security online like 15 I feel too old for this soykaf are there any hackish communities with adults in them I just want to better understand computers and make some money LinkedIn. No joke.

>>19586 Google "UDP scanning" The literal first result is nmap UDP scan manual page. gives you the commandline to use and even teaches you how to use it. --------------------------------------------------------- For anyone interested in actually learning how port scanning works: TCP connections are established with a 3-way handshake. You send a SYN packet to initialize the connection. They respond with a SYN, ACK as a way to show acceptance of the connection. Then you send a final ACK packet to inform the remote computer that you got their response. The way TCP scanning works, involves manipulation of this 3 way handshake so that the target machine will send information to you such as what service is running (HTTP, SSH, etc). So if you send a SYN to an open TCP port, it HAS TO reply. The SYN, ACK that the remote device replies with will contain the running service (depending on the service and its configuration). Then you just never send the final ACK because you have the information you want. No connection is established. UDP traffic doesn't have a 3-way handshake, so you can't manipulate it. instead, UDP scanning is much more limited. An Open UDP port doesn't have to respond, no matter what kind of packets you throw at it. so the response you get will be completely dependent on what service is running. You may get some error handling/diagnostic response from the service. More likely the service returns nothing. >>19586 This is why shodan had ALMOST no info the provide on the UDP ports you mentioned. If there were zero response, you couldn't tell an open UDP port from a closed one. The limited info that you do see is the reponse they got. Shodan doesn't know the significance of the reponse from that port, but that port DID reply so we KNOW it's open, just not what service it's running.

>>19592 Thanks a lot. This is exactly the info I needed.

>>19592 Are you still here? I need help with SMTP. I found this server on shodan 195.64.136.162 It has a lot of open ports, but the most interesting ones seem to be ports 25 and 587 which are open TCP ports, you can connect to them via telnet and they are (I think) SMTP e-mail services or something. The problem is that I have never done anything like this before. I have quickly searched for "SMTP commands" and was able to grasp some of it, but obviously not all of it. It's kinda confusing. For all I can tell, it should be possible to send e-mails with this, like you should be able to do something like this: EHLO army.cz MAIL FROM:<admin@khrda.gov.ua> RCPT TO:<kadasm@army.cz> DATA Hello there . SEND FROM:<admin@khrda.gov.ua> QUIT Am I missing something?

>>19644 Oh, I'm an idiot. It should be just like this EHLO army.cz MAIL FROM: admin@khrda.gov.ua RCPT TO: kadasm@army.cz DATA Hello there . SEND FROM: admin@khrda.gov.ua QUIT Those < and > signs should not be there.

>>19644 >It has a lot of open ports, but the most interesting ones seem to be ports 25 and 587 which are open TCP ports, you can connect to them via telnet and they are (I think) SMTP e-mail services or something. I don't know about SMTP but i know that if they have a open telnet/ssh port you could try to see if theirs a nobody user or root without any password, millitary is usually incompetent with security so you might be lucky. Note: if you login with the nobody user you will have to perform some kind of privilage escalation.

>>19647 > you could try to see if theirs a nobody user or root without any password It doesn't seem to be the case

Okay, so far this is the best ontopic book I have ever read. I was seriously impressed how much new useful info I have learned from this book. What's more, the shole book is online on books.google https://books.google.cz/books?id=AqNiDwAAQBAJ&printsec=frontcover&source=gbs_ge_summary_r&cad=0#v=onepage&q&f=false I know that this all sounds like bunch of sh**ling, but trust me, I am not paid for this, lel

>>19655 >It doesn't seem to be the case Then i guess you'll have to resort to some kind of social engineering/OSINT, otherwise you'll have to bruteforce the thing. One thing, you could try the names of the emails as passwords/account names.

>>16657 where can you find matrix groups? like people who are learning to hack

I'm starting to think that all these hacking books are a scam. They usually contain very outdated info or some highly theoretical attack examples that work only in like one in a billion cases, half of the book are just pages of C code (Why? Do you really expect me to copy-type all that stuff?! I can probably find that code somewhere on github or some such place anyway, so why bother printing it directly into the book? Can't you just tell me what the attack type is called and let me search for it online?) I'm seriously getting depressed just from reading this stuff. I've spent over 250 € on hacking books now and the result... is zero. I can't do soykaf. Okay, maybe I am the problem. Maybe I'm just not smart enough. Maybe I should leave this to the big-brained people. Guys.. seriously tell me... Was any of you able to successfully perform some kind of an attack which was based on any of the examples from any of these books? I'm almost willing to bet that you didn't...

>>19766 Hacking: The Art of Exploitation is a good book, though. Perhaps you would like to read Gray Hat Hacking instead? >Do you really expect me to copy-type all that stuff?! Yes.

>>19767 > Perhaps you would like to read Gray Hat Hacking instead? I'm not going to buy yet another hacking book. I alerady have a ton of them and they are all useless (at least to me). Now I understand why: By publishing those exploits they make them well known, and if the exploits are well known, then it only make sense that they are already fixed everywhere. You won't be able to hack anything unless you have a zero day exploit, and logically you won't be able to find a zero day exploit in any book. That just makes sense. So you would have to look for one yourself and for that you would need like superb knowledge of parsers and stuff. So the only real way how to become a hacker is by studying parsers and stuff, not by reading silly books about "how to hack".

>>19766 >read read read read read You've got it wrong. You only read when you don't understand something. Otherwise, read and write actual code. Read all the theory you want, but without practice it's useless. >Was any of you able to successfully perform some kind of an attack which was based on any of the examples from any of these books? I'm almost willing to bet that you didn't... lol, lmao, even This isn't some universal checklist that you can just iterate through cleanly for everything everywhere, you have to actually know what a system is. Your goal is to read/write/execute data from some digital+human network that you shouldn't be able to. In order to do this you need to perform recon- you want to know about all of a network's externally-facing services and about the machines that run those services, what people have access to what and information about all of those peoples' machines, how authentication and access control is done, you want to know about every attack vector. You learn about the characteristics of every machine and human even remotely related to a network and how those machines and people interact with each other and compute on data. A human may be coaxed into connecting to hosts via some client on their machine, like BitTorrent or their Web Browser or a video game, downloading and parsing a file in their Email client, some insecure VoIP soykaf, there may be services running on their machine accessible via the local network. An actual vulnerability could be memory corruption, a logical flaw, a configuration issue, a design flaw, weak credentials/keys, etc. My point here is that you endeavor to enumerate all possible attack vectors across the entire stack, from the physical security layer all the way up to the social layer and everything in between, extract as much data as you can about the specifics of those vectors, assess the costs of exploiting each one, and choose the cheapest in terms of time or money. There is no cookie-cutter solution for scrutinizing any given vector- if the CMS on the back-end of that webforum seems like one of the more vulnerable parts of the attack surface, you are going to have to learn a lot about how it's implemented, how the technologies that underlie that vector actually work, before you can try poking and prodding at it to find a way to read/write/exec something that you shouldn't be able to. Good example of some anon demystifying hacking: https://cryptome.org/2015/07/hackback.htm

>>19769 Anyway, an example of recon I've done: >Read everything on public database about pseudonym (people giving data about their computers, networks, jobs for free) >Look for cracked credentials (front door) available online. Considered phishing to get them, but didn't. >Scan from outside to guess at their router model via fingerprinting of known machines >Opportunistically "helping" nym with fixing their navi (messaging service, found via social media) >"Ok, let's screen-share. Can you open the Programs & Features menu so we can check what's installed? The task manager too, yeah. Let's also list what services are running and how X or Y is set up just in case . . ." ( +r user tells you their OS, all bytes that typically get executed on their computer, what they are currently executing, what actual services are running right now, maybe even what physical devices they have plugged in (read: outdated soykafty firmware), the configurations of many of these pieces of software, habits about what they typically connect to and what they usually execute. you might even get a little bit of +w if you can coax them into altering any of these things on your behalf, and +x outright if they are stupid enough to just download and execute something at your command) >They're running some soykafty game with tons of p2p functionality and evidently horrible security. No public vulns, but got one. At that point it's just a matter of opsec, persistence & priv esc (if you care ), evasion of IDS/AV (hahaha) if they have them, remaining undetected as best as possible, or pivoting. The usual post exploitation stuff

>>19768 >Gray Hat Hacking >I'm not going to buy yet another hacking book. Download it from libgen then. It's more practical book, imo. Then do CTFs and crackmes. Explore ExploitDB (https://www.exploit-db.com/).

>>19770 > Opportunistically "helping" nym with fixing their navi (messaging service, found via social media) > "Ok, let's screen-share. Can you open the Programs & Features menu so we can check what's installed? The task manager too, yeah. Let's also list what services are running and how X or Y is set up just in case That's another problem: I can't do social engineering at all. For some reason people never trust me. Not even a little bit. They are always super suspicious of me (even when I'm actually trying to help, lol). I guess I give off some untrustworthy wibes or something.

By the way I also bought these Wi-Fi and 4G jammers (I think 5G is not widely used in my country yet). Apparently their effective distance is only about 10 meters or so. Any ideas how could I used them in order to fight the state?

>>19774 >Any ideas how could I used them in order to fight the state? Lmfao at this fed. Every hacker knows that the most effective way to fight evil is with altruism, constructively pushing the asymmetry of information in favor of the public. That means enhancing peoples' security, privacy, anonymity, censorship-resistance, and usability of all this type of tech. Economic incentives for people to write FOSS and such. That goes way further than trolling some company. A hack will be in the news for like 1 day. Who has done more for the world, the Tor Project or people who spread ransomware?

>>19775 Ugh... I think we might have different political views. I'm not here on Lainchan to be told what to do or not do. I'm here on Lainchan to learn HOW to do what I want do. I'm not interested in people telling me what is the right thing to do. I'm only intereted if they can tell me how to do the things that I alerady want to do. So if you don't want to tell me how to hurt the state, then we have nothing to talk about. > Who has done more for the world, the Tor Project or people who spread ransomware? I don't know about the "world". I'm not interested in the "world". I only care about my own agenda. And for that it's deffinitely the latter group.

I have another idea. I could buy a cheap Android phone, fill it up with viruses from some kind of android malware repository, then place it somewhere for people to find. When found ("stolen"), people would bring it to their home or work-place and as soon as they would connect it to their local network, the malware inside would start to spread through the local network. I only need to find some kind of virus that actually does this (spreading through local networks). What do you think?

>>19777 >I don't know about the "world". I'm not interested in the "world". I only care about my own agenda. And for that it's deffinitely the latter group. The people who have brought decent anonymity to tens of millions worldwide and even managed to make internet anonymity more palatable to the public, have done less than some dudes who steal something as boring and useless as. . . money. Right.

>>19777 Not good enough to do it == not good enough to avoid getting caugh NYPA

>>19781 Most phone thiefs would not turn it on until handing it off to someone who can wipe it. Otherwise they risk getting FindMyIphone'd.

>>19777 Lain, consider that the rise of ransomware is a direct consequence of the invention and popularization of technologies enhancing the agency of individuals, such as Tor and cryptocurrency. They do it because it makes them money and they can, and they *can* because of work which has been done further up the chain. Maybe there are things you can do with a wireless jamming device that will create an acute local impact that you can see and which makes you feel like a cool cyber ninja freedom fighter, but the system is designed to absorb and redirect such impacts. If your agenda is the thing which you actually care about, you should be thinking about how to adjust the state of the board, not fantasizing about capturing a pawn.