How do blackhats come to be?

Druggo here. Currently writing a cyberpunko story to help expand my creativity skills. Whitehats are pretty boring in my opinon. >complete ethical hacking course™ >get certified™ >go work for said corporation™ So where can I find actual blackhats on the internet or a place where they conduct business (no, I'm not asking them to perform hacks for me). I just want to know the process of breaking bad, are they just loners like any other? do they have mentors to teach them? does it require having links to the government? How do APT groups form and learn their methods? How does a kid armed with a computer, alone in their bedroom make the headlines for a major hack or for running a cybercriminal operation? its obvious they already possess the necessary computer skills but what triggers the darkside? there are plenty of computer science graduates that skilled in the art of software and technology yet they wouldn't dare go down to the underworld of The Wired.

>>22322 darknet sites like dread. there's a lot of children

>>22322 They usually start out as skids with enough skills to be dangerous who gradually learn and improve or as genuinely knowledgeable people (self trained or with degrees and certs) who just want to make a buck. A lot of the kids you see making the headlines aren't always super skilled their just know enough and apply their limited knowledge in clever ways. >there are plenty of computer science graduates that skilled in the art of software and technology yet they wouldn't dare go down to the underworld Because schools and universities are designed to pump out professionals who are unthinking and slavish in nature. They want to be part of the system not break its rules and getting a job in the field is low risk. Also there is no underworld of the wired really. A lot of scammers and ransomware type stuff is run by real world criminal networks and established organized crime families. Your fiction doesn't have to be super accurate, only compelling. If you write about a comp sci graduate going rouge then that's fine. Nobody's going to come out and tell you that doesn't happen.

>>22323 Yeah, i’ve been there a while ago and its not any different to the regular net in terms of content, as you said its full of kids and wannabe cybercriminals wanting to be spoon fed every single detail and wallet predators looking to make a quick buck off them, I had to dig deep to find some posts of value. I suppose Russian forums are my best bet. >>22324 >A lot of the kids you see making the headlines aren't always super skilled their just know enough and apply their limited knowledge in clever ways. 100% true. I did notice this trend, even that pompompurin kid who I intially thought was pretty skilled turned out to be retarded, do you think the feds planted CP on his machine because maybe he refused to cooperate or was it a genuine charge? also that kid who hacked Twitter not too long ago seemed to be skilled initially but his business tactic and exit strategy was tragic. > A lot of scammers and ransomware type stuff is run by real world criminal networks and established organized crime families I assume they operate similarly to a legal company in terms of structure. I’m more interested in the lone wolf types like Phineas Phiser or small groups to be honest

>>22325 >feds planted CP worth pointing out that this can be done in tricky ways. The Defense Distributed guy was arrested for like, statutory rape with an underage prostitute or something, who was almost certainly working with law enforcement? CP could be planted on your machine if a woman who happens to be 17 sends you nudes while claiming/implying she's older, but it will get called CP to make it sound like you're into 6 year olds. IDK about this guy you're mentioning in particular but I'd be very skeptical...

>>22322 >So where can I find actual blackhats on the internet #infosec on irc.furnet.org The "New to Neopets" subforum on the Neopets.com forums between the hours of 1 a.m. and 5 a.m. Pacific (but you have to call it the "Newbies Chat" or they won't help you) go to #learnprogramming on Freenode, I mean, LiberaChat and ask lazy/stupid questions. Whoever gets salty fastest should be probed privately for more info. perlmonks.org ssh new@sdf.org Xah Lee's discord server but only in the channel that says it's about pushups

>>22326 Also, even if you just happen to stumble upon it on your browser, you can be charged for it as it is technically saved to your computer, even if you didn't intend it as such. Scary stuff.

I will tell you my story. Undiagnosed autism, social outcast. Most narcissistic and psychopathic people would bully me in elementary school. Would get in a lot of fights. Was a straight A student, even going as far as to go on math contests regionals. My dad would bully me, my sister too. My mother used to be on the sidelines and would ignore it all. I would just close myself off in the room most of the times. Trying to ignore the world I would get into my head and was a deep psychonaut from young age even when I didn't have any drugs. Lucid dreaming, mnemonic excercises, n-back, memory palace, corsi, cwmp, trainihg eidetic memory, training synesthesia, tulpaforcing.... I liked to explore and modify my mind as much as possible. During this time of internal exploration I did stumble upon 4chan when I was 14. It was height of 2007 /b/ era of lulz and chaos. Hacking then was a style of revenge against people we deemed had it coming. Justice, something I lacked in my own life due to constant bullying and harassment of my family and school mates. So I latched on. It gave me sense of control and power I didn't have in my own life. I started small, as everyone does. Getting LOIC and being a part of DDoS campaign against some company because someone on/b/ made a really well manered tutorial and explanation as to why and how. Then cyberbullying of those I believed deserved it, like Amanda Todd (something that still haunts me to this day) that's when I started to incorporate my psychonauty into psychology and sociology and with kix of desire for revenge I got into antisocial behaviour of trolling. Then I started to hack my so called friends Facebook pages. Either through some RAT maker exe or I would guess their passwords or I would recover them using that old timey recovery system of taking note of their friendlist and personal info and then reciting it to the recovery system when asked. That all got boring after the initial hurdle, obviously my hunger for power and control grew stronger. My teenage years now, I isolate myself more. Still a straight A student, school wasn't that hard to me. I ignored most of it though and focused on my hacking, day and night. Start reading up on computer privacy and security, learn they can track you through IP/MAC, make a script that changes MAC on every new bootup of my laptop, decide to not use my home network to hack from anymore. Hack into my neighbours wifi (WPA is easy to crack), get into his network, administrator panel bruteforce the admin pass by making a simple script, open up ssh, get into filesystem of router, dump it to my own laptop.... get bored.... hunger for power and control, start reading up the filesystem of the router, learn its really vulnerable to simple command injection (there are hundred of thousand routers like my neighbours wifi router on the ISP of my country). Well damn, realization hit home. Make a simple script, make it scan the ISPs network and automagically try the os command injection, get about 20k bots connected to my IRC based command and control server. Shit was cash. But now what? IM BORED. what was the end goal? Power, right. Lets DDoS main web seller site in my country and then email to tell them "I know who is DDoSing you, I'll keep them safe from all the bad guys, just give me bit of cash cuss I need to appease the guy". It was laughably small amount of money, all made in those Steam gift cards. DDoS afew other sites for fun of it. Deface few company websites. Ahh, power. Big company under my thumb. Feeling a bit powerful, but I have some kind of moral desire to change the world for good, lets go on chatroullette and blackmail pedos, bait them with hypercam and then dox them, make them pay me some small fee or I will deatroy their lives. Fun times, seen grown men cry. Lmao. Re-induce my antisocial behaviour by watching gore videos daily, laugh at destruction and humiliation of humanity, do drugs (mainly weed and phenibut I bought off ebay, extract codeine from OTC pills using cold water extraction method), isolate myself even more. Get bored of bullying, get fùcking jacked in local gym. Since all I do is either hack while I am closed off in my abusive household or study while I am in school or psychonaut when I am out of it all, I get fuarrrking jacked. Bullies ask me nicely now, men fear me, women fear me, I am the bully now. Power, control. Ahhh. Few fights cuz when you get jacked people want to test you. Destroyed their faces. Straight As got me into best college, but seems I have no discipline or work ethic so I fail my first 2 tries, father gets belligerent, says he will kick me out. Drugs (mostly benzos, do a bit of speed), depression, start running (couch to 10k), get a gf cuz virgin and believe its true love. A game mode on. Straight As in college the third time. Get scholarship. Bored, hack hundred of thousand of printers to print my manifesto like that edgy nazi jew guy. Bored, start lockpicking and stealing from old warehouses and beverage/food storages. Finished college. Bored, get a good fùcking job. Bored, change it. Bored, change it again. Bored, ransomware few dozen thousand computers. 10+ years of hacking and thievery behind me now, destroyed plenty lives, or at least hurt them. Get paranoid. Hella observant and paranoid, "they're onto me, they will catch me any moment now". To protect myself more I need to read more psychology and sociology. Read people on "hello". Now I feel at ease, somewhat. Get dumped cuz I am a fùcking antisocial autistic jacked freak who is paranoid 24/7. Turns out no matter how much I can hide it for others I can't for those nearest (most of her friends hated her cuz I was sweet and thoughtful to them). Get more depressed, hack whoever whenever, don't care about privacy and security anymore. Don't care about anything really. It isn't about power and control anymore, its just about vengance. See I am well on my path of self destruction cuz I got fired now, no money have to come back to fùcked up parent house. Hate my life, not hacking anymore. Decide I need to do something or I will kill myself soon. Do shrooms, do LSD and meth. Just something man, anything. Have a breakthrough. Stop doing bad things that hurt me and people around me, start respecting myself and my body more, start helping people, start being more empathetic, go to therapist, yada yada bla bla bla My fingers hurt, but yea, thats about it. Now I have a new gf, who I truly love. I am diagnosed eith autism/paranoid schizophrenia and ASPD but I am making breakthroughs. Got a job, work from home gig in a really organized company that appeases my tism. Wanting to go back to college to possibly get a PhD cuz I wanna be a scientist n shieet (tm). Life's good. I can smile now.

Write a technical book to leave your experience in history. For the sake of archiving knowledge.

>>22330 Very interesting read, lainanon, many thanks. I can't verify if its all true or not but sounds like you may have consumed some meth and told the truth but that doesn't really matter, still interesting. It was kinda hard to read because its just a huge block of text of small letters though. Arigato gozaimasu!

>>22332 Oh I got something in the works. >>22328 Thank you man. >>22326 >>22329 Terrifying stuff.

>terrifying stuff Yeah gives creeps. I have an idea. Using operational system where all changes go to tmpfs. Reboot = good luck trying to prove literally anything. But I'm not sure how effective it's going to be in practice.

>>22322 You can find people on hacking forums, dreadforums, some IRCs and mucs on XMPP. Bear in mind that it's 99% dumb teenagers on hacking forums which is precisely the reason there is so much drama within all hacking forums. As for dread, imagine reddit on the dark net. People on dread will just say things and not provide any reasoning for their beliefs. The people there are worse than stupid, many of them are actual children. I think to begin learning that you have to put yourself out there, you have to leak data, and put yourself at risk of compromise in order to effectively learn more about hacking. The majority of hackers on the internet are idiots, using VPNs, Discord, running operations off their base OSes, all the while with their smartphone at the same desk as their computer. Over the progression of time they learn to avoid certain things, I'm trying to refrain from using the term "opsec" because I hate that term, but you could just say their opsec is soykaf and it can improve over time if they're not a complete cretin. I for one am unwilling to put myself out there. I am a paranoid-schizo darknet autist. I virtualize everything. All of my traffic is torified. I will not enable javascript in my web browser. Something as simple as my refusal to enable javascript has left me unable to access all hacking forums, and most CTF sites such as hackthebox, overthewire, etc, places which may have the potential to provide me with a point to begin learning effectively, and just to communicate with other people. Or perhaps they don't have anything to offer me, I wouldn't know since I can't use them. I know most CTF sites really only serve to educate absolute beginners. At the same time you can still learn with nothing but your own devices, it just takes time. Either way, there isn't a set path to becoming an experienced hacker. There's no tangible, reproducible formula set in stone. Most of it is self taught. I'm not all that motivated to learn in the first place which is the greatest reason why I know next to nothing when it comes to conducting offensive digital action. >>22325 I doubt that child porn was planted on pompompurin's drive given that he attempted suicide while incarcerated before the child porn had been discovered. I see no utility in them planting such material on his drive, he's not a genuine threat to the state in the same regard as a whistleblower.

>>22322 It seems the authorities are trying to catch the neophytes early by intercepting them before they've learned enough to become actual hackers. In Europe, we have a kind of early intervention program similar to soykafty counter terror "deradicalization" garbage where they identify kids in high school who might have hacker or hacker adjacent tendencies, put them under surveillance, send them for mandatory therapy and extra training sessions, force them to take extra classes, and push them into a legitimate comp sci related career. Basically you catch them when their young and dumb and suffocate the trend. Maybe you can work that into your cyberpunko story. "the wild west is dying" but with linux machines and backlit keyboards.

>>22342 >in practice Ay, there's the rub -- this is why they do no-knock raids and freeze the RAM so it can be moved to a machine+OS meant for RAM forensics and dumped to storage

>>22322 >Whitehats are pretty boring in my opinon. If you want more elaborated plot, make some whithats corrupt, and being paid by CISOs to hide problems. >>22322 >So where can I find actual blackhats on the internet or a place where they conduct business Sorry to disappoint you, these people don't "hangout" on the web bragging about their crimes, usually they pass as whitehats (I Find this term cringe, both of them are) on the web. You meet people based on their interests, and most of them are low level criminals, like people who sell and buy credit cards in online forums. If you want to buy exploits, is much easier to sell it legally to a broker nowadays, it is all private. Want to buy a DDoS? Some big players usually use escrows and other things so they don't have to handle day to day "customer services", and just execute the attacks. Based on this, will be pretty hard to find someone openly (and legitimately) talking about their crimes. >>22322 >How do APT groups form and learn their methods? You would be surprised that most APTs are just people who are paid full time for it, so they have way more resources (time & money) than your average hacker. So they have plenty of time to perfect their trade. >>22322 >How does a kid armed with a computer, alone in their bedroom make the headlines for a major hack or for running a cybercriminal operation? The kid lures a high level politician that is a pedophile into opening some files, along with it a malware and then the kid takes access over his computer and copies all his communications (emails, messages, etc...). This is a feasible and not far fetched scenario.

>So where can I find actual blackhats on the internet or a place where they conduct business if you're good enough - they'll find you. The wired is inhabited by people watching traffic. If you do something to peak their interest - they'll find you. Criminal soykaf is freelancing and gets around via sneakernet. The easiest method is to rip off Darkweb dealers as they have less recourse and have closer ties to criminals and feds alike. Also, have fun in prision - you are posting your intent to commit crimes on a public forum. If you think lainchan isn't cyberhumped - you're wrong. >are they just loners like any other? do they have mentors to teach them? likely they are loners if someone teaches them - then they have a close relationship - generally that's bad if you want to not get caught. >does it require having links to the government? commiting crimes on a computer? no >How do APT groups form and learn their methods? by breaking the same soykaf - causing them to 'meet up' and begin working together. >How does a kid armed with a computer, alone in their bedroom make the headlines for a major hack or for running a cybercriminal operation? see above >its obvious they already possess the necessary computer skills but what triggers the darkside? money, internet clout, lulz >there are plenty of computer science graduates that skilled in the art of software and technology yet they wouldn't dare go down to the underworld of The Wired. There are plenty of people very skilled at shooting that don't go shooting people or lock picking that dont steal bikes... The reality is most criminals are retards but some corporations have security teams that are just slightly more stupid. The media adds a lot of flare - the reality is blackhats are mostly skiddies and Indian call center scammers. A lot of them get in via: A. soykafty social engineering plot B. dumb luck - (for example: a bruteforce from rockyou worked)

Are there any good books on the topic? But I'd like something recent, like 2010s+. All the most popular hacker books like Ghost in the wire are about some oldschool 80s hackers. Hard to find something recent

>>22365 Bruce Sterling's Hacker Crackdown is pretty good. It came out in 1992 so it's not recent but worth the read anyway.

If you want cybercrime, then it is no card present transactions. Currently they are hitting chocolate companies but airlines used to be a favorite mark.

>>22328 >Whoever gets salty fastest should be probed privately for more info is that in general something to look for? if so what does this entail? do security people have little patience or what?

>>22383 He is taking the piss, don't listen to him.

Listen to some episodes of Darknet Diaries, OP.

A realistic start is being involved in the cheating scene for games. A lot of the kids who have been arrested for notable crimes have some storyline that's basically 1. Be a dumb kid playing online game 2. Get taken advantage of by a cheater or scammer in game 3. Decide to cheat or scam in the game themselves 4. Find forum for cheating in that game 5. Get exposed to account theft, RATs, phishing, data dumps, etc on this forum. 6. Move on to more profitable venues. The skid who simswapped his way into twitters network to post those "doubling bitcoin" scams on famous accounts started out as Minecraft cheater and learned simswapping from a forum for stealing and selling coveted usernames. Two of the people suspected of being involved in the Ashley Madison hack are former runescape gold sellers who also dabbled in selling stolen accounts. It's pretty funny how often the way that "serious" cybercriminals get doxed is by someone finding info about them in an old runescape, wow, minecraft, or roblox hacking forum's database dump. There's also a number of people who start out as teenage internet trolls, get exposed to hacking as a form of trolling or means of doxing, and grow from there. The guy who founded raidforums started out as just some kid who liked trolling twitch streamers. There are also plenty of people who were inspired by seeing hacktivists in the news and took it up for political reasons. Similarly, some are inspired just by seeing media that portrayed hackers and just thought it was cool. (You are obligated to watch the movie Hackers before you write your story) Some are also state sponsored. North Korea's government is assumed responsible for a lot of cryptocurrency hacks. China regularly sponsors hacks into the private sector to steal intellectual property. Russia hacks for political reasons, and they also have a lax policy towards civilians hacking western countries so there's plenty of Russian millionaires who made their money carding westerners. USA hacks for political reasons. And everyone does it for "intelligence" reasons aka spying. People involved in state sponsored hacking may be in it out of patriotism, or just because it's one of very few legal ways for them to do what they enjoy. >>22388 Seconding this. CrumbRS on YouTube also has some good videos. He used to just so runescape botters, scammers, and hackers, but has branched into general cybercrime recently. Krebs on security has some okay writeups on some hackers.

Something interesting that you're not likely to uncover if you're trying to speak with them is that many do actually have normal jobs. In poorer countries, you'll find that even basic telemarketing scams have a legitimate portion of their operation. Skids living in their parents basement get caught most of the time nowadays. Many do speak some amount of english, but you're not likely to get anything interesting out of them because anyone worth their salt in that realm will think you're a fed. If I let you know even how I started or what languages I've learned, I've narrowed down what you can look for. I've got normal accounts in forums that I've been using for years, and I don't need you sniffing any closer. If you want to learn structure, stick to a specific country. You'll find that they frequently jump ship to other operations when their org gets turbo-clapped or there is a disagreement/someone gets stiffed on a payment. You can glean a lot from leaked chats or source code to get a decent idea as to their inner-workings. Many security researchers have already picked apart their roles in the groups already, so you don't even need to do much sifting of broken english to get the picture. (1/?)

>>22390 APTs vary by location/adversary/cause. Some are just straight state-sponsored arms. Some just have common enemies, like any former soviet countries can pretty much go after the west without impunity but will get swept up the moment that they fuarrrk with their own country. Some aren't even 'real' and are just a subsect or weekend project for a couple guys in a bigger one but haven't been publicly attributed to them, or one group doing a false flag. We have seen fewer hacktivists in recent years that aren't just lone actors, so you're primarily going to get criminals and govts. You've gotten a lot of really good info as far as "how someone starts," so I won't beat that dead horse. (2/??)

>>22389 >There's also a number of people who start out as teenage internet trolls, get exposed to hacking as a form of trolling or means of doxing, and grow from there. The guy who founded raidforums started out as just some kid who liked trolling twitch streamers. Yeah, this tracks. My path was Yahoo Chat -> Yahoo Chat / YIM "booters" (i.e. "IM/DM window flood" and "FIN/RST packet spoofing" but packaged with bonus free spyware) ->TOTSE+Zoklet+etc. pretty much concurrently with lurking /b/, /i/, /x/ and others on 4/7/711/12/420chan etc. in the mid-2000s, never fully appreciating at the time how lucky I was to be there for "ebaums world did it", stadium v&, Habbo, EFG, Subeta, the beginnings of SCP and The Holders, choklit reign, the No Cussing Club, Cotton-Eyed Joe and falling dongs, Chanology... At the same time as I was cheating on Totse with the chan users, I lived a double life on Neopets but it all ended up being nothing but variety in paths to the same place -> bypassing HTML filters, forum filters and flood control, stealing accounts, trying to counterattack people running cookie stealers or phishing -> getting into Linux -> shell account servers -> renting shared hosting -> VPS -> dedicated server and so on and so forth until one day a bunch of little fragments of stuff I learned when I needed to get something done just up and coalesced into a semi-coherent skill set. From spending hours turning my WinME box into Swiss cheese just to hear on voice chat the dingdingdingding of dozens/hundreds of separate IM windows opening and the rabid swearing that would start up soon after, to being trusted with a root prompt on production firewalls at the edges of Fortune 100/500 networks. And it can happen to you too as long as you do the wrong thing and are irresponsible like me.

>>22381 Please elaborate further cause what the fuarrrk do you mean by "chocolate companies"

>>22330 I enjoyed your story. People like you are fascinating. You've inspired me to delve into the psychonauts realm more. I'm always distracted by computers and soykafe. You got a couple women over the years, but did you ever make any hacker guy friends? Seems like you'd be fun to talk to

For me all it takes is social anxiety, inability to tolerate wageslavery, and intelligence. Basically the only way you can make a living via computer skills without going to the office or talking on zoom is to be a blackhat, where people will work with you with dignity, via text and with privacy. How else am I meant to be food on the table when i cant talk to people verbally?

>>22365 Closest thing I can think of is "Stealing the Network" but it becomes bad at the end

>>22330 I keep thinking about your post. How have you done all this, specifically uni and job hopping several times if you're only 20 years old? You said you were 14 in 2007, that makes you 2023 - 2007 + 14 = 20. Why would you consider doing meth when you have such talent? How bored could you be, really? Did you grow up in a poor area, surrounded by unintelligent thinkers, thus normalizing it? Drugs are terrible, it's interesting a smart man would do that. I'm glad your life has improved. How much of it would you say is due to becoming more moral sound in your actions? Does having nothing to hide really help that much?

>>22455 >2023 - 2007 + 14 = 20 Wrong, it's 30

>>22456 I found that part of the post interesting. Why would you even do that? You look at it, 7+6=13. 13+10=23. 16 + 14 = 30. All of this is done in a single step in your head, even my foggy mind will do it.... you just get the span between two numbers, you're not an equation. You don't need to zero it. I think formalism may well be a detriment.

>>22391 And finally, I'm sorry that you think whitehats are boring. I think your idea as to the vanilla corpo SOC analyst isn't indicative of the variety in the whitehat space. Whitehatting is matter of perspective anyway, especially when you consider the fact that some APTs are feds of their respective country. Both the blackhat and whitehat realms are flooded with skids and drones if you look at the surface level, but there is a distinct difference in skill level if you take feds into account. Professors with their fancy doctorates and whitepapers get tapped by their respective defense industry all the time. I personally see these experts as whitehats, since that is how they see themselves and function most of the time, especially since they're just as likely to publicly release what they've got as they are to sell it if approached. Some prime examples of when there is crossover of fedspace with true blackhats would be the purchase of a 0day that hasn't hit academia or snagged by any contracting companies, renting a vps, or use of established bot farms for dis-info.

>>22459 btw this is my thread https://www.lainchan.org/drug/res/12813.html

>>22488 MAKING OF A VARSITY ATHLETE MAKING fuarrrk me right in the dinghole, soykaf fuarrrk asshole

>Any notable black hat hackers that got caught? Vile DOT sh was the first thing that came to my mind how the fuarrrk did those teenagers even coax police into giving out info of their targets? RIP scene i guess. >>22328 >furnet i thought fur users like soatok secretly loved working for law enforcement and FEDS in general unlike the "anti globohomo" rhetoric mass media depicted? ive seen some high profile furries organizing pride parades and rainbow themed github projects while cyberhumping some random open source repo with pronouns. Do these so called "animal lovers" even have a functioning ethical compass these days? How come we never see these wannabe PETA supporters expose corporations or large scale meat factories? inb4 schizo or underage .t fellow pirate blackhat

>>22325 >100% true. I did notice this trend, even that pompompurin kid who I intially thought was pretty skilled turned out to be retarded, do you think the feds planted CP on his machine because maybe he refused to cooperate or was it a genuine charge? also that kid who hacked Twitter not too long ago seemed to be skilled initially but his business tactic and exit strategy was tragic. They intended to make him lose his reputation from the forums breached and raid, with that anyone would throw more evidences and other soykaf to furthermore their investigation into the other kids, including shinyhunters & dedale

>>22483 Considering I get paid to know, don't tell my boss that I'm actually a hack and a fraud. I quite like my job.

>>22326 Wait, really? I've heard a bit about defense distributed, which guy was arrested?

>>22531 Cody Wilson, but he got better.

>>22322 I think it's like in real life with drugs, somewhat at least. If you spend a certain amount of time with kids doing drugs, youll do drugs too. And sometimes it not an affinity for something but rather an aversion for something else that gets you in certain groups or places. For me I just disliked the normalfilth attitude of so-called "ethicals hackers". "Ethical Hackers", "Security Experts" or whatever all had jobs, a loving family, good friends, were in good health and had all graduated high school or college or something. Meanwhile the people at places like Nanochan, 8chan/g/, et al were all complete losers at life, but had some good computer skills. Quikly I learned how to use NetBSD, FreeBSD, Linux, how to write exploits in C, Assembly and Perl, how to use tools like objdump, gdb, gcc, ld (a linker can be used for much more than just the standard segments), nasm and nmap. Unlike some people want to make you believe I think those people doing blackhat stuff are actually far more skilled than your typical tryhackme-kali-linux-metasploit-clean-corporate-9-5-worker In a nutshell most of the people doing blackhat stuff just are shunned losers, outsiders, lunatics and people who are additionally obsessed with the inner workings of your computing machine. The same way a kid chooses to become goth or punk as a reaction to a lack of social life, bad grades in school or not going to school at all and maybe mentall illness, some computer-obsessed people turn into cyberpunks. read >Neuromancer >Johnny Mnemonic >The Difference Engine and >join some /g/, /tech/ and cyberpunk IRCs, Discords, XMPP chats or what else there is

>>22487 Any good recommendations for psychological experimentation communities. A lot of the ones I can find are heavily focused around drugs, and I'm really more interested in the meditation side of things, like many of the practices you mentioned. I can see how psychedelics could be useful to someone looking to explore the mind, but sometimes those claims just seem like cope.

>>22557 check out the work of jack 'ziz' la sota of website: (https://sinceriously.fyi ). Looks like his site is down now but its on internet archive. He and his friends seem to have done some interesting soyspresso but its also all insane.

>>22557 In all honesty all I did is read up on tulpaforcing when it was heavily spammed on /mlp/, n-back and other practices I studies individually when I wanted to expand my intelligence. Also I loved to read scientific papers on things like training awareness of magnetic north and synesthesia training Akashic records are something I wanted to read but never went about reading them and talking with subconcious came directly to me

>>22345 can't trust any machine. you need to encode everything you type using a key that your brain can apply, this is stuff that every autist in history has done, which is why most historical texts seem non-sensical (they're writtten in code or allegorical)

>>22552 >Quikly I learned how to use NetBSD, FreeBSD, Linux, how to write exploits in C, Assembly and Perl, how to use tools like objdump, gdb, gcc, ld (a linker can be used for much more than just the standard segments), nasm and nmap. Can you give a novice hacker tips on how to learn all of that stuff super quickly?

>>22861 Use those tools and RTFM. You can't take a shortcut to skill.

>>22867 What about bug bounties, CTFs, pdfs, etc?

>>22868 You can learn the tools involved in finding bugs or exploits, but it's its own type of skill. You have to learn this stuff by doing it, otherwise you have no experience to test your knowledge. Books can give you a lot of great knowledge, but they are a compliment to experience.

>>22322 >So where can I find actual blackhats on the internet or a place where they conduct business (no, I'm not asking them to perform hacks for me). I just want to know the process of breaking bad, are they just loners like any other? It seems today most Blackhats are just for profit criminals. You take someone who is either educated or trained and they use that knowledge to make money. I ran a honeypot and some of these are gangs of people not even mostly that skilled, I managed to talk to a few people who broke in and they basically told me they have a script they run and then they log in and add the machine to an irc botnet and it's their job. One of them was reasonably educated and we had a good talk about my honeypot and what he was doing and it was all very friendly which was cool. A lot of them were extremely sloppy and gave me custom tools and lists of compromised accounts totaling in the thousands :) as nothing they deleted from the honeypot was ever actually deleted. In the golden age of blackhats there were kids, usually with some bad things happening at home or school and they would take to hacking because it was exciting to be powerful and in control and a real thrill to know that you'd outsmarted some trained professional somewhere. Usually these were the least malicious form of blackhat but they could be pretty vicious with trolls or pranks.

>>23014 what did you honeypot involve? some type of VPS hosting a juicer looking website with purposefully soykaf security?

>>22322 Me personally, I just started out doing development work on OGUsers and similar forums. Ended up joining a few SIM swapping chatrooms where I eventually picked up on what my clients were doing with the tools I was writing for them and started doing it myself (And yes, SIM swapping is faaaar more involved than just calling a carrier like the news makes it out to be. To actually make money, you usually need to compromise the email associated with the exchange you want to get into, and the password to the exchange account if there's over $50K on it)

>>22322 Question is, why would anyone teach you their know how? Let's say I am a darkhat, and lets say that I earn a pretty penny by me being smart and cunning and cut throat. Why the fuarrrk would I give you what I know? What is in it for me?

>>22330 i resonate with what you said profoundly. i was put in a mental institution against my will and then on heavy antipsychotics because it was fun for my dad to fuarrrk around with my mind - each time i had "undesirable" emotions, i would be given mind-altering pills a person that once was the closest left me to date a fvcking liberal either way i carried a lot of pain and still do whats your MAC changing script/ system? could you drop the article on the matter we're setting up a community for leftist underground intellectuals and cybersec and if i dont get the sec it all gets fvcked i want you btw it hosts ppl with influence worldwide. i pick them up while traveling, some are hacktivists, some top scholars, SV, etc let me know 051634aa4dd2f4943555d690e8d6f261f3568cec9a3ba46c01eebe2c9dcb922f04 session >>22344 whats the name of this program? >>22467 whats the purpose of VPS blackhat handshake w govt? expand attack net? >>22487 ive also done plenty of psychonauting, wondering if you got close to get your hands on the tesla papers (the ones about tuning into the cosmic theta field and the actual "Wired"). lmk

>>22487 it's actually insane i've stumbled upon you - my life and that of some of my friends is very similar in a way that people dont believe it, i've also had to conceal my story for a good part of life, so people wouldnt ask too many questions or think im schizophrenic. im glad you wrote this post

>>23762 >i was put in a mental institution against my will and then on heavy antipsychotics Everybody on this board raise your hand if this was you. *raises hand*

>>23756 >Question is, why would anyone teach you their know how? Simple. Some people are just more altruistic than others by nature. You have a whole range of people who go from completely competitive, only in it for myself types, to completely cooperative, let's all help each other out types. There's even a psychology term for it "dark triad" and "light triad". A lot of it is just genetic. The "triad" in dark triad is psychopathy, narcissism, and machiavellianism. It's probably better to be somewhere around the middle of the scale for maximum adaptability.

>>22552 Do many XMPP servers exist for this stuff. I never found anything of real value. I was hoping Lainchan had some sort of XMPP server but sadly not.

>>22322 > its obvious they already possess the necessary computer skills but what triggers the darkside? It's mostly skids developing from there. Shittalking someone on roblox, realizing they can get his IP, realizing how easy it is to doxx, keep in mind that's not a default boundary for children, fuarrrking someone over because of a video game. Next logical steb is looking into data breaches, open data banks, linking accounts, all that's no occult knowledge and mostly consists of OSINT stuff. Once they go down that route, they meet new people, also interesting in trolling and hacking, exchanging stuff they have learned. Shit can snowball from there. The other Lainon mentioned something about cp-bait. Most of that is jet again social engineering stuff so no real coding experience required. I don't think that most of the kids you see on TV had a genius level of knowledge considering exploits or code. stuff happens. >there are plenty of computer science graduates that skilled in the art of software and technology yet they wouldn't dare go down to the underworld of The Wired. I mean, that's a easy question. happens when people have skills but don't get paid for it as they see fit.. from there its a cost/reward equation.

>>22322 Blackhat here. Usually it depends on the type of cybercrime since they all have different communities that have different backstories. The data leaking community (one I'm from) originated from 4chan's old raiding scene. I was just your standard autistic (diagnosed) troll, I was part of a troll hacker group with friends I met on 4chan, and my friend from there introduced me to Raidforums, and the friends I had made were figuring out how to dump website's databases. For sim swappers, it's a bit of a different story. Usually most sim swappers I know ended up getting into it because they played Minecraft HCF before the pandemic and when someone dumped the database to some Minecraft server, people started abusing the data leak to dox an swat their competition in-game, eventually getting into sim swapping. Tldr. autistic, early teens, fell in with the wrong crowd online.

>>22322 Never really liked the labels or terminology surrounding the community, as anyone can be a black hat at any time with the proper motivation. Anyone, at any time, can be a black hat, but the situation of the individual dictates this. If someone has the proper motivation, skill, and time to execute a harmful action against an individual or buisness, then they will do it. However, there isn't much motivation for skilled people, both young and old, to put their freedom on the line for fun or monetary value, especially in the west were skills like these are in demand and there are roles for these people to fill. You can apply this model to a lot of computer smart people. Usually, a bright teenager who is skilled in computers will be guided towards a college/work program where they can hone those skills for a role in the workforce. Usually, a programmer, network engineer, sysadmin, security engineer etc have the skills neccisary to have a decent paycheck and a path to a cushy white collar lifestyle if they play their cards right. Usually, white hats are among this group as well, as they use their skills to get paid the legal, stable way, despite some of them being ridiculously skilled. These people will usually be paid handsomly and regularly by corporations and governments to find problems. Black hat work usually requires a higher skill level and less of a stable income, higher risk, higher time investment, higher reward, and the real threat of not having an income at all if your targets don't pay. Income aside, people usually aren't malicious for the hell of it. Surely, there are people skilled enough right now to poison a water supply (see Florida town water supply hack), shut down a power plant, ransomeware a company, or cause mayhem on Amazon's home page, but why would you do that? Most people don't want to do petty distruction for a rush, and the dumb/young ones that do it for clout will eventually be caught (see rockstar hacker). That leaves the military/government cyberwarfare cells for defense, and the machivellian out there left that conduct this sort of behavior, speaking from the perspective of a developed western economy. These are the stories you here sensationalised on the news. Why do you think APTs and big hacking stories all come out of Russia? Russia has a large, distinct actively practicing hacking underground because incentives are high there to do illegal soykaf. You have an educated, computer literate population in Russia that grew up in a time of massive instability from the fall of the soviet union, along with western economy meddling and intervention and a patriotic sentiment. From the late 90s onward Russia had a huge cracking scene for western media and software once the borders all opened to trade with the west. Additionally, Russia literally doesn't care if you hit the west with a cyberattack. They won't arrest you for it. You can hit banks, you can hit retailers, the Russian government doesn't give a fuarrrk as long as it isn't them. The Russian government and standalone Russian hackers benefit from this arrangement. NATO gets hurt and you can make a decent living. The US and western nations at large do not have these conditions (yet lol) so the black hat hacking scene is usually limited to very select, very private groups. You can still brush shoulders with these individuals if you know where to look. I've brushed shoulders online and with US based crackers who live for free software and love soykafting on the DMCA. Legit black hatting and cracking in US circles is primarily done by political activists (see the furry hackers right now hitting groups like the heritage foundation and the DMCA haters) who have that drive to do it despite the cost

>>23756 >retired folks giving their knowledge to others >people with an ego, wanting to have their name known or something >what >>25558 said about altruism >sharing techniques that solely you use can be a good thing in case you get caught, having some deniability because its a 'known technique' to name a view possible reasons

i wouldn't say im a blackhat but more of a greyhat. i remember years ago when i found sites like hackthissite and other ctf sites because i was curious about how hacking works. i remember while using random google dorks i found an open server belonging to a cartoon network employee with a bunch of art and animation books. also i remember finding a leaked database with phone numbers and made a script to text message all the numbers random youtube videos i found funny. i know this isn't epic hacking but i mainly learn that kind of stuff to pull pranks and nothing more.