Black hat in 2022

Hey lain. Can u tell how u(Black hat) live this days? Is black hat still relevant?Or u can take same money be on white hat side?Is it harder to hide from the CIA than it used to be, or do they now have such technology that you can be easily caught?

still exists, harder than it used to be but certainly still viable. overall not worth it unless you somehow stumble into an established group or you genuinely hate the world and have nothing to lose. white hat is consistent money but as the industry is getting worse it will never be obsolete. it also can't be outsourced to india (and trust me they've tried)

I have a nice leather hat that protects me from the sun, and it's black.

Always play for fun. >or do they now have such technology that you can be easily caught? If you have to ask how one can be caught, you clearly don't know enough about operational security and the potential attacks on existing anonymity systems. Spend some time reading http://7fa6xlti5joarlmkuhjaifa47ukgcwz6tfndgax45ocyn4rixm632jid.onion/anonbib/topic.html (https://www.freehaven.net/anonbib/) if you really wanna know. You should know everything there is to know about deanonymization of low-latency anonymous networks. So. Do operations on a separate, usually/always airgapped machine containing no information about past or future ops, disk encrypted, as few software installed as you possibly can. Only one network interface that you use for accessing a local proxy machine that routes all of your traffic through your chosen set of remote proxies- it should be impossible for your host machine to connect to the internet without traversing that proxy. If these are all low-latency, keep them away from western countries, use at least some of your own relays (tor, i2p, both, whatever). If your payload can be executed without interaction from you, then additionally send whatever script you need into an enemy country (they are not typically as monitored internally by your country), to another machine within that country and then induce significant latency before that machine launches your attack. Operate away from home, ideally using some cracked wireless access point accessed without being seen by a camera. Drop the ego and use no pseudonym whatsoever, so that social information disclosure is eliminated as a potential footgun and LE cannot target you with exploits (you're now like 99% less likely to be caught). Airgap that machine immediately and wipe it. Toss it if you are schizophrenic. You should be acutely aware of every single stream of bytes emitting from any relevant machine and every single anonymized stream should be minimal, tightly controlled and totally purposeful. Don't mix ops with daily life- don't store data on your home PC. Don't say anything to anyone. The fewer people that know even a miniscule fraction of the picture the better. Give as few people power over you as possible. Don't talk to the police even if you actually did manage to fuarrrk up. Don't allow a single technical aspect of your op to have the capacity to fuarrrk it up by itself- analyze your op from the perspective of the red team with various levels of capabilities. Do remember that destruction is not the only way to fight evil- if you can contribute to the development of some tool that assists in the protection of other people like yourself, such as mix networks, minimalist privacy-respecting software, anti-fingerprinting tech, open hardware, or something else, do it. You'll help a lot of people. And don't be a pussy who's scared of a little thing like death :D Relevant for OP: torsocks yt-dlp https://yewtu.be/watch?v=J1q4Ir2J8P8

>not just playing on both teams Ngmi

Cia has better thjngs to do than worry about your silly conputer game

>>19270 Virgin schizoid opsec maxing vs chad skid public vpn + tor

>>19264 Black Hat is very rarely worth it in the 1st world. You WILL be caught, even if it takes a couple years. Solo work has dried up except for some niches. Group work requires you to live and speak the language of particular countries, notable Russia, Pakistan or China, but if you get too loud in those countries without gov sanction, you will be caught. Gov work is good anywhere, but at that point its just a job. the good niches for 1st worlders is to target the 3rd world, but the revenues are far lower, or to focus on particular segments like crypto companies/groups (lol).

>>19649 >You WILL be caught, even if it takes a couple years. Caught for what? Without using a persistent identity, such extreme FAIL on any particular op would only reveal information about that one op, not anything else. At that point u will need to lawyer up tho :( also if anyone is super schizo about mass surveillance of metadata remember that you can nullify their ability to retroactively trace a stream by having a bunch of relays generate a bunch constant-rate dummy traffic between each other for a bit :) maybe even pretend to be a bittorrent swarm :)

>19270 Great advice. Unfortunately many know all or most of these points and still manage to fuarrrk up. Especially egotistic ones.

black hat is probably easier to get money now due to crypto, you used to need to get credit. cards and have randoms take out money from ATMs.

>>19638 the chad intimidation vs the virgin "security"

>>19651 If nowhere else, then when you try to convert your ill gotten gains to real money. KYC and AML are extremely strict nowadays.

>>19633 you were adopted >>19270 >>19638 >>19654 Did hack for 10 years now, first 5 were without VPN or Tor. I assume the calculation is something like 6 months of police investigation in your country. Did you do damage that is above that amount of 5 police detectives salary for 6 months? They will try and find you. No? No need to worry then.

>>19264 >or do they now have such technology that you can be easily caught? I'm more of a theories kind of guy since I like the idea of opsec and might use it in a novel or hacking manga or similar. Basically in the current year 2022 it would be quite a daunting task v.s. how things used to 10 years ago. There is basically large amounts of proprietary devices around us now (android iphones and laptops) than ever before and most of these have the ExposureNotification. All wireless devices MAC addresses (driven by proprietary code/firmw) are being tagged and tracked by each devices so there's like a map of every devices kinda like Mozilla's location services or even open cellid but it happens in background, automatically. Adding to this, most routers (proprietary) are also in for it. I noticed that routers already beam 802.11 beacons announcing their location (some have mpcie wireless card that also has GPS, or is embedded into). This location is announced to neighboring devices - unencrypted and unauthenticated public packets. This is to help "location accuracy" but also is being used to track people with the "C*vid" by mobile apps/systems but the general idea is a massive dystopian spy grid. This also does not stop CPE/equipment from announcing and attaching their gps coords over the packets. Good luck trying to use "tor" on your internet plan. Also tor or any other realtime things are bad as they (ISPs) can just compare src and dst timestamps and get you so most "LEET" people would rather use a public throwaway than "tor+residential". It should have been like a snail mail to have simulated latency but these are low latency newtowrks and therefore the logs will be easily traced to each endpoint ISP (secretly or openly) bought by your local big tech. Basically your phone would have records of all nearby bt or wifi MAC by sheer proprietary baseband and I've confirmed apps that do store a db of previous cellIDs and MACs (but no gps data since I had that turned off) and even last phone numbers dialed. Through magic APIs this data will then be grabbed by whatever system apps or non-system apps that have abuse API holes/tunnels. Basically your average skid is absolutely fuarrrked. Still not done on the beacons thing. All devices around you are litearlly sniffing these stray beacons, announce and other stuff (in case it's not monitor mode), then these devices with their Exposure API would snitch on every detail - including Hidden SSIDs stored your devices tries to "search". This is how they can even track the "infected" that has never even used or installed the app or engaged in these "APIs" while having open sourced phones - their wifi beacons leaked out enabling the whole spy grid (other people's phones) to do what it does. In simple terms, no matter how you make yourself / your phone private, it doesn't stop other people's ears / phones from recording you. Good luck.

>>19659 >If nowhere else, then when you try to convert your ill gotten gains to real money. Ah, then I've got you! I don't steal money! :D

Fast question, how was called the webpage It has a list of ips of governments of different countries, it was something like iptables, with which it was possible to block them. I don't remember :(

Relevant: https://cryptome.org/2015/07/hackback.htm

>>19660 >Did you do damage that is above that amount of 5 police detectives salary for 6 months? Government is not a business. It is not money in vs money out. It is money in vs political goals.

Not worth it. Real life isn't as romantic as fiction. Even if you do it, it's one of those things where you WILL get caught sooner or later and the consequences can be severe.

>>19671 >Good luck trying to use "tor" on your internet plan. Also tor or any other realtime things are bad as they (ISPs) can just compare src and dst timestamps and get you so most "LEET" people would rather use a public throwaway than "tor+residential". It should have been like a snail mail to have simulated latency but these are low latency newtowrks and therefore the logs will be easily traced to each endpoint ISP (secretly or openly) bought by your local big tech. Public throwaway is always a must. However, further measures will delay or prevent discovery of your region, and this timing/size correlation can be mitigated. You can start with at a 1st hop in a country that doesn't cooperate with yours, sending a continuous stream of traffic to be discarded at the first hop, and tunnel your real stream within that through the rest of your chain. There should be at least 1 more hop within the same country in the chain after the 1st hop. This forces your government to crack those ISPs backwards in a row until they can identify the source, because their capacity for passive correlation is eliminated/diminished.

Unrelated but should I feel shame in using skid software? Just a simple guy that knows a little C++ but I crave instant results ASAP

For most purposes you are better off just getting a job, unless you are underage, 3rd worlder, or too schizo to hold work. Yes people do get rich, but it is usually more by chance then intelligence or hard work. Lots of millionaires were made off crypto, but crime involving it is dying out at this point with better security and the hype having died off.

>>19733 Thanks man, I was getting tired of finding nothing but pedantic fuarrrkers and obtuse info

>>20140 No point reinventing the wheel. What would make you a skid is using tools/scripts/sploits because it's your only option.

>>19671 provide sources to realize investigation and reach your level of knowledge, please if you can.

>>19266 >Out sourcing pentesting to inda? Tell the story

>>19293 this how the fuarrrk white hats will get better if they don't have good black hats to catch? And how will black hats get better if they don't know how to evade current ways of detection and mitigation? MITRE framework is there, sure, but that's not the holy bible

>>20039 >you WILL get caught sooner or later and the consequences can be severe. >be me >be hacking since the age of 14 >when I didn't know what a VPN was or Tor >was fearful whenever walking next to a cop >did a lot of heinous stupid kid soykaf >never got caught >now in early 30s working for cyb sec you will never gamble and take a risk, in anything. >>20140 That's human. Results are sometimes what we crave, and sometimes it's all about the journey. Find the balance between the two I suggest. You'll get there. >>20038 >he still believes there are ideologues in politics lmao dude, most governmental people are talking about "muh moneezz", that's all what they're talking about. Every ideologue that goes into politics gets hard hit of reality when they start to implement their ideas: >planning disaster >too much bureaucracy >waste of money on frivolous expenses >opposition politicians tripping you up with veto power Literally nothing screams "government" more than poorly run business (see above 4 notes) and you would see the same if you were in any corporation that "had an idea" but was poorly executed and had a lot of infighting due to powerhungry hungry hippos. The only difference is people can crumble a business by not deciding to work for it or deciding to buy their product while governments never fail until there is upheaval and war. You say it is not a business, okay, well how would you describe it? All they talk is about how much something costs, how they don't have money for some projects and how some other projects were a waste of money? How pensions can't be payed because there is less and less young people (simple money in money out worldview), how international war peace treaties are waste of money because expenses of military defense are offloaded to another country (money in money out). Give me one example of how government, ANY government looks at some good ideological goal and nobody has some monetary gain in it. Hell, even Sweden that touts its "we're helping immigrants" bullshayt is actually lying through their teeth as many of the left wing politicians have their fingers deep into real estate business (have large migration -> less houses -> rents and property prices go up -> rich politicians) AND not only that but also a lot of times the politicians argue that migration from 3rd world is necessary due to lower paying jobs not being filled, AND instead of rising wages they import poor folk to trim their hedges and clean their toilets (IF THAT ISN'T RACIST THEN I DON'T KNOW WHAT IS) Just a rant, I know you won't read it but whatevs.

>>20234 >>you WILL get caught sooner or later and the consequences can be severe. >>be me >>be hacking since the age of 14 >>when I didn't know what a VPN was or Tor >>was fearful whenever walking next to a cop >>did a lot of heinous stupid kid soykaf >>never got caught >>now in early 30s working for cyb sec >you will never gamble and take a risk, in anything. big guy fawkes mask wearer energy

>>20239 >anonymous mask guy Remember remember, the soykafs of /i/nvasion The glitterboyry soykaffold and plot

>>20242 ℌ𝔢𝔯𝔢 𝔱𝔬 𝔰𝔞𝔠𝔯𝔦𝔣𝔦𝔠𝔢, 𝔦𝔫𝔣𝔢𝔯𝔫𝔞𝔩 𝔥𝔞𝔱𝔢 𝔡𝔢𝔳𝔦𝔠𝔢, 𝔖𝔞𝔱𝔞𝔫'𝔰 𝔤𝔬-𝔟𝔢𝔱𝔴𝔢𝔢𝔫, 𝔨𝔫𝔢𝔢𝔩 𝔞𝔫𝔡 𝔡𝔦𝔢 𝔟𝔢𝔣𝔬𝔯𝔢 𝔱𝔥𝔢 ℑ𝔫𝔱𝔢𝔯𝔫𝔢𝔱 ℌ𝔞𝔱𝔢 𝔐𝔞𝔠𝔥𝔦𝔫𝔢! I still remember the /i/nsurgency days fondly. Probably the most fun I ever had was during those days. Of course I was still a teenager back then, so my memory can't be trusted.

>>20140 >skid software You don't have to make your own tools. It's enough to understand what they do and why it works. Then you are not a skid

>>19708 https://www.iblocklist.com/lists