Unknown · 2022-01-24 02:13
any fellow bros ever tried their hands at scambaiting? I got inspired by seeing the youtube videos and decided to try it low scale, and got a couple to connect to my VM where I sent them memz as the ol' banking_details.txt.exe and was surprised at how easy it was to do. Anyone else ever practiced their /sec/ skills doing this stuff? I see some guys doing the entire RAT their network thing and it seems fun
Nell · 2022-01-24 11:31
>>18556
Haha, I wanted to try that too. Spying their entire network. Running Bitcoin miners. And so on.
I get so many scam/phishing mails at my old unused email address. Maybe I can start there, hehe.
Marly Krushkhova · 2022-01-24 18:18
Been considering this as a means of doing some botnet/mining but I'm super rusty when it comes to windows AV evasion in the current year. Any lains know a good place to start?
Nell · 2022-01-24 18:26
>>18566
You can search av bypasses on github and you will see 100's of cheatsheets for av bypass.
Mentat · 2022-01-25 03:41
>>18558
it's pretty fun, honestly you don't even have to do anything crazy just to mess with em but with practice why not try RATing them, could be a good learning tool
Bob Arctor · 2022-02-01 00:16
>>18568
AVs are still garbage to this day. Simply doubly encoding payloads or endpoint in BaseXX is enough to defeat a majority of them. Also, 64bit executables seems to have a lower detection rate their 32bit counterparts.
case in point:
4cd82b6cbd3e20fc8a9a0aa630d2a866d32cfb60e76b032191fda5d48720a64d
Tank · 2022-02-03 22:23
>>18637
you can run mimikats on most systems by changing katz to dogs in powershell code.
ref: https://www.blackhillsinfosec.com/bypass-anti-virus-run-mimikatz/
Eldon Tyrell · 2022-02-04 04:14
Nothing generates lulz more than an angry Indian man screaming about how he's going to fuarrrk your mother.
Miho Iwakura · 2022-02-13 18:48
>>18660
top shelf
Mentat · 2022-05-07 05:43
Sorry for late bump but with the rise of crypto 'pig-butchering' scammers this could be very profitable.