[Zayzo]

With people out there trying to cause you harm, or the simple government who utilize a $52 billion budget used for intelligence, it is important to maximize your safety & maximize your privacy.

Please build up on what I suggest,
"Each layer is like a blanket, the more blankets you wear the warmer you are." - A Good Friend



Step 1: Attaining a Secure VPS
Making sure, you don't work on your main computer is a huge first step. The best thing you can do is work/conduct your activities off a VPS. Now many VPS's are DMCA compliant/not off-shore. These two key components allow you to be tracked much, much easier.

First head over to this site: https://maxided.com/dedicated-servers/dmca_ignor

I already selected the filter option for only VPS's that ignore DMCA to show up. Your job is to buy a VPS from this list, make sure the VPS is hosted off-shore.

Once purchased follow the steps, you can access your VPS details via the program "Remote Desktop Connection". By inputting the server details that will be sent to you after payment.

Step 2: Ascertain a Secure VPN
Now, most VPN's advertise no logs, but actually do contain logs and use this line "No Logs" as a marketing scheme. I won't be calling out any VPN's but it is pretty obvious if you have the slight bit of intelligence. (Side Note: The goal is to ascertain a VPN that contains no logs & is not DMCA compliant)

With this in mind, I can make the recommendation to

https://www.ipvanish.com/anonymous/index...a1=sidebar

I would recommend purchasing this VPN, for your VPN of choice. Not DMCA compliant, truly does not contain any logs (to my knowledge) best over-all-fit.

Now, this is an easy alternative to my MAIN suggestion. My MAIN suggestion would be to create your own VPN on your own server utilizing openswan. Now I will not go into that today, however in the near future I plan to. That is a tutorial on its own.


Step 3: Having SOCK5 Proxies Available
Personally, I have only used vip72 proxies for personal preference. As well as they are the proxies that I trust the most as well as the most safe in regards to privacy.

http://www.vip72.com/





Step 4: Utilizing a Secure Browser
Many browsers, for obvious reasons; track you. 99% of browsers, the government is able to track you with ease. There are definitely plugins for each browser & settings you can utilize to minimize the ability of you being able to be tracked. But let's just skip the plugin tbh.

https://www.torproject.org/

I would recommend downloading Tor, for your browsing purposes. Now to say Tor is 100% secure, is false. However, Tor is indeed pretty secure, and will hide you for the most part.

In conjunction with all our other steps, you will maximize your safety behind Tor.



Step 5: Using Our Tools
Now we have all our Tools set up for safety.

My process goes: VPS > VPN > Sock5 being routed > Tor

Now this is a pretty easy setup that is not very complex. Fairly easy to follow, and will maximize your safety. You can maximize your safety by throwing in: Using a cracked wifi, utilizing SSH tunneling, using multiple VPS's for different purposes, and really there a plenty of other ways to maximize your safety and add on to this fairly standard setup.

I can say that this is my standard day to day set up, and if I realm into anything more serious extra precautions are taken.




Last Steps
Now you have all the tools, you have the setup.
1. You need to make sure that you have different passwords, for everything you use; emails, aliases, clients etc.. (16 char atleast for all PW's)
2. Do not mix PW's.
3. Do not mix BTC addresses
4. Do not use the same aliases/emails/ANYTHING on your main computer with your VPS activities.
5. The most important thing is to keep your identities seperate. With each identity, is a set of PW's, BTC Addresses, IP's etc and you need to keep this ALL seperate.
5a. If need be, buy multiple VPS's




Conclusion
There are plenty things to consider and analyze on your route to becoming fully anonymous. I believe anything past this setup (for the average internet user) starts wandering in the realm of complex.

I will continue to update this tutorial, and add in variations to this setup with more complex plugins in mind.

Side Utilities
1. Be familiar with PGP Encryption as I have recently been familiarizing myself with it too.
2. For all IM communication please check out XMPP/Jabber and the client "Pidgin" to safe guard all your messages when communicating with someone else.
3. I recommend everyone crypt a partition where you store sensitive information, with Veracrypt.

[alphaalex]

hey zayo, i think your the person i need to help me with a problem i have been having with a cheater. i made this profile just to find someone with your skill set so i cannot private message you. Is there any way i can get in touch with you?

[Ooze]

Posting to read this later tonight,
Any programs for managing passwords?
Also what encryption software do you recommend

['OverSight]

Posting to read this later tonight,
Any programs for managing passwords?
Also what encryption software do you recommend

Keepass/Veracrypt are pretty good.
Also about getting a VPS thats hosted in china or russia, I figured that would be a bad idea as they actually care alot? Ru for sure is hard for cyber crime and China... well im not sure about them.

[Ooze]

Keepass/Veracrypt are pretty good.
Also about getting a VPS thats hosted in china or russia, I figured that would be a bad idea as they actually care alot? Ru for sure is hard for cyber crime and China... well im not sure about them.

Ya but Russia won't care if you are hacking in the us I believe

['OverSight]

Ya but Russia won't care if you are hacking in the us I believe

but that means they know im from the us... lol rip

[Voxi]

VPS > Tor > VPN > Socks5
Open Tor first because it anonymize's you and then your VPN because it encrypts your data, if you opened tor afterwards no data after Tor would be encrypted. Correct me if I'm wrong.
My person preference is VPS > Tor > VPN > Socks5

[Peptide]

VPS > Tor > VPN > Socks5
Open Tor first because it anonymize's you and then your VPN because it encrypts your data, if you opened tor afterwards no data after Tor would be encrypted. Correct me if I'm wrong.
My person preference is VPS > Tor > VPN > Socks5

Honestly it should be VPN > VPS > TOR > SOCKS5

[Voxi]

Honestly it should be VPN > VPS > TOR > SOCKS5

Yeah Its up to you if you want to use the VPN in your vps or not.

[Mr. Robot]

My process goes: VPS > VPN > Sock5 being routed > Tor

I personally connect to a btc paid VPS with a RAT for control then follow your setup.


One more important note to add, the FBI have stated they are able to connect your online times of your handles with when your vpn traffic is online.

[A NEW ERA...]

hey zayo, i think your the person i need to help me with a problem i have been having with a cheater. i made this profile just to find someone with your skill set so i cannot private message you. Is there any way i can get in touch with you?

You're fucking sad, go learn some decent dignity before you get with a female. Without trust there is nothing in your relationship.
[img]http://thesource.com/wp-content/uploads/2016/04/Screen-Shot-2016-04-27-at-1.43.46-PM.png[/img]

Overall though, great simple tutorial for all the hacking newbies Zayzo. Should add something about paying for all these with BTC, and furthermore tumbling that BTC.

[Mr. Robot]

Posting to read this later tonight,
Any programs for managing passwords?
Also what encryption software do you recommend

Don't use any of those password managers. I personally hash:salt my own passwords for example.

TheJ0ker2016HackforumsUb3rKidH4x0r

Encrypted with MD5 and the salt 04302016 which is todays date.

Would then become a890e6655023173b093c433e48ea8154

Then that password goes into the website and gets encrypted with what ever that website uses.

[__JoeL]

This should probably help quite a few users.

Thanks for the share.

[Zayzo]

Posting to read this later tonight,
Any programs for managing passwords?
Also what encryption software do you recommend

Never trust any program to manage passwords. Write down ALL your passwords.

Keepass/Veracrypt are pretty good.
Also about getting a VPS thats hosted in china or russia, I figured that would be a bad idea as they actually care alot? Ru for sure is hard for cyber crime and China... well im not sure about them.

Not true at all, those are great off-shore countries for a VPS to be located.

Don't use any of those password managers. I personally hash:salt my own passwords for example.

TheJ0ker2016HackforumsUb3rKidH4x0r

Encrypted with MD5 and the salt 04302016 which is todays date.

Would then become a890e6655023173b093c433e48ea8154

Then that password goes into the website and gets encrypted with what ever that website uses.

No, still would not advise you to do this. Write down ALL Pw's.

[Mr. Robot]

No, still would not advise you to do this. Write down ALL Pw's.

See that's the thing. If I do use plain text for example.

ZayzoSaysToWriteDownPasswords5232016

I would encrypt that before writing it down.


For the above example that you quoted me on -
TheJ0ker2016HackforumsUb3rKidH4x0r

I would write down TheJ0ker2016HackforumsUb3rKidH4x0r and the salt on a piece of paper, when I want to login to the website, I encrypt it again and login.

If possible on the webpage, try use spaces in passwords as it can help bypass keyloggers (even though you shouldn't be infected in the first place)
You can try KeyScrambler for scrambling your input through a enigma type system when entering information to help bypass keyloggers too.


One other thing I didn't mention, try use ( ) for example in the above passwords you could do:
(TheJ0ker2016HackforumsUb3rKidH4x0r)

As your password


Or then encrypt in something else with a salt of your choosing.


- Last but not least one of the biggest issues with passwords like these is idiots who use them on multiple websites.
Doesn't matter the websites encryption or how tough your password is to get if it's used elsewhere and this is why.

SPAM stored passwords in plain text.
Plain text passwords get added to a dictionary file used for decrypting hashes.
Website gets hacked using say Hash:Salt of any variety.
Dictionary used against the hash:salt list and guess what. Your password is in there.