hello,
i am part of an anonymous twitter role play community and there is someone there whom i want to infect with a keylogger, so i can reach his real identity (i will explain why at the end).
"long detail part"
here is what i can tell you about the situation:
the are 2 websites that u interact with to be part of the role play community,
-Site A = asianfanfics (you get to select and register for a role play community there and get the linked to the main twitter account of that said community so you follow and other members follow you)
-Site B= basically twitter, you make a fake account with your fake identity and interact with the people.
the target is a guy who gets in multiple role play groups and pretend to fall in love with girls there with the ultimate goal of getting them to trust him and send him nudes, i found out about that once i checked his account on site A and found out he is registered to other groups, i checked his twitter accounts on those groups and found out he is in relationship with 4 girls in the same time and already asked 1 girl for her nudes then made them public to hurt her.
i told the girl who he is dating in our group about this but the guy said he is sharing his Site A account with a friend and his friend is the one on the other accounts, now i know this is a lie because he says exactly same words on all of his accounts + there is more.
now i want to keylogg him to be able to reach his real identity and prove he is the same person + be able to reach his location/facebook account etc.
"details end"
so what i can do to my target is get him to open links, i am assuming he uses windows pc + phone, i can use something like grabify link to find out exactly which.
i want to know where to look and if there is some 1 willing to help here.
thank you i appreciate it.
I cant help not feel sorry for stupid people. I mean, why are you sending naked pictures to someone you dont even know like that in such a platform? Life is all about choices. That doesn't excuse the jackass making them public. But anyway.
You technically can gain access to his entire computer if you make him download a zip file with some "naked pics", if you catch my drift. I wouldnt do this, but these are some ideas. Make a Windows cabinet file. These are self extracting archives that can also run a command upon extraction. Bind some fake pictures with Netcat. Make the hidden extract command to move nc.exe to c:\windows\system32\. This will keep the pictures in one place but NC in an executable path. Then chain another command to send a reverse TCP connection back to a listener on your computer. You will have to port forward in order to receive the connection.
Years ago i made this program but only tested it locally on Windows 7 and 8.1. I am not sure if it still works due to the changes to security standards. Although i never sent it to anyone, I was pretty sure I could do damage with it. The cool thing was that is used all native Windows tools so I did not have to worry about AV. You are responsible for your own actions.
(Jul 15, 2018 12:58 PM)f1re_w1re Wrote: I cant help not feel sorry for stupid people. I mean, why are you sending naked pictures to someone you dont even know like that in such a platform? Life is all about choices. That doesn't excuse the jackass making them public. But anyway.
You technically can gain access to his entire computer if you make him download a zip file with some "naked pics", if you catch my drift. I wouldnt do this, but these are some ideas. Make a Windows cabinet file. These are self extracting archives that can also run a command upon extraction. Bind some fake pictures with Netcat. Make the hidden extract command to move nc.exe to c:\windows\system32\. This will keep the pictures in one place but NC in an executable path. Then chain another command to send a reverse TCP connection back to a listener on your computer. You will have to port forward in order to receive the connection.
Years ago i made this program but only tested it locally on Windows 7 and 8.1. I am not sure if it still works due to the changes to security standards. Although i never sent it to anyone, I was pretty sure I could do damage with it. The cool thing was that is used all native Windows tools so I did not have to worry about AV. You are responsible for your own actions.
people fall in love and trust others easily sadly, anyway not sure i can get him to download a zip, normally he asks for the pictures in twitter direct messages so its jut copied to there most of the time, and dont want to risk any option that is not guaranteed dont want him to be careful, thats why i wanted a keylogger.
Jul 15, 2018 04:06 PM
(This post was last modified: Jul 15, 2018 04:08 PM by dvlpr.)
(Jul 15, 2018 04:26 AM)okamiaku Wrote: hello,
i am part of an anonymous twitter role play community and there is someone there whom i want to infect with a keylogger, so i can reach his real identity (i will explain why at the end).
"long detail part"
here is what i can tell you about the situation:
the are 2 websites that u interact with to be part of the role play community,
-Site A = asianfanfics (you get to select and register for a role play community there and get the linked to the main twitter account of that said community so you follow and other members follow you)
-Site B= basically twitter, you make a fake account with your fake identity and interact with the people.
the target is a guy who gets in multiple role play groups and pretend to fall in love with girls there with the ultimate goal of getting them to trust him and send him nudes, i found out about that once i checked his account on site A and found out he is registered to other groups, i checked his twitter accounts on those groups and found out he is in relationship with 4 girls in the same time and already asked 1 girl for her nudes then made them public to hurt her.
i told the girl who he is dating in our group about this but the guy said he is sharing his Site A account with a friend and his friend is the one on the other accounts, now i know this is a lie because he says exactly same words on all of his accounts + there is more.
now i want to keylogg him to be able to reach his real identity and prove he is the same person + be able to reach his location/facebook account etc.
"details end"
so what i can do to my target is get him to open links, i am assuming he uses windows pc + phone, i can use something like grabify link to find out exactly which.
i want to know where to look and if there is some 1 willing to help here.
thank you i appreciate it.
It is truly scummy what this guy is doing but there may be other ways to educate your community than maliciously attacking him. I mean in short, regardless of your intentions and what he is doing, this is ultimately still illegal.
A dox would go farther than a keylogger and would be a more legal option. With a keylogger, yes you will gain access to his fake accounts, but you would have to hope the keylogger gives you access to more than just the fake accounts you know he already is running. I also do not think he will fall for opening the file and getting overly creative with this task will cost you.
Plenty of people on here will do doxing for you but be careful as once you start waving money, the scammers come knocking.
Best of luck!
(Jul 15, 2018 04:06 PM)dvlpr Wrote: It is truly scummy what this guy is doing but there may be other ways to educate your community than maliciously attacking him. I mean in short, regardless of your intentions and what he is doing, this is ultimately still illegal.
A dox would go farther than a keylogger and would be a more legal option. With a keylogger, yes you will gain access to his fake accounts, but you would have to hope the keylogger gives you access to more than just the fake accounts you know he already is running. I also do not think he will fall for opening the file and getting overly creative with this task will cost you.
Plenty of people on here will do doxing for you but be careful as once you start waving money, the scammers come knocking.
Best of luck!
i am not familiar with the term dox just looked it up and got a general idea, can you tell me in further details how it would work and how the people would do it?
(Jul 15, 2018 04:40 PM)okamiaku Wrote: i am not familiar with the term dox just looked it up and got a general idea, can you tell me in further details how it would work and how the people would do it?
Doxing is a term associated with the act of discovering and chasing leads on an individual. Basically, it is the act of uncovering information on an individual and building intelligence. Private investigators use this throughout their career.
In your case, you would ask someone to dox the individual at question. You provide as much information as you could, including links, aliases, names, etc., and then someone uses that to build a profile. It is legal as long as you do not use the information gained for mal-purposes.
We could discuss further if you are interested in following this through. I can PM you.
(Jul 15, 2018 04:48 PM)dvlpr Wrote: Doxing is a term associated with the act of discovering and chasing leads on an individual. Basically, it is the act of uncovering information on an individual and building intelligence. Private investigators use this throughout their career.
In your case, you would ask someone to dox the individual at question. You provide as much information as you could, including links, aliases, names, etc., and then someone uses that to build a profile. It is legal as long as you do not use the information gained for mal-purposes.
We could discuss further if you are interested in following this through. I can PM you.
ya i am interested, pm me since my account still new and cant do that. i will get back to you on pm once i am off work and free
DO NOT DEAL WITH THIS MEMBER
You CAN use BeEF-xss in order to perform a live keylogging session with a little bit of javascript or php. If you can somehow get him to open a link or applet that allows him to type into it, then you can capture all the live keystrokes. Otherwise, you can take the traditional route by getting him to download a keylogger stub and having it on his system. I doubt that he is on sites such as these with his desktop, so you'd most likely need an apk or whatever iOS uses. Good luck, OP. Jabber me if you have any questions.
I hate to say that you are only going to hack this guy through client-side attacks. If you can't even make him download an archive through social engineering, you are out of luck my friend.
(Jul 15, 2018 06:40 PM)f1re_w1re Wrote: I hate to say that you are only going to hack this guy through client-side attacks. If you can't even make him download an archive through social engineering, you are out of luck my friend.
my main goal is to reach his real identity like real name,location,job,etc. is there any way to be able to reach his facebook account by sending him a link if he have 1? those normally have lots of details + friends.
|
