[0101010111100010000]

Hey guys, apologies if its a question that has been repeatedly asked, I've not been able to find the time to scroll through this thread. Basically what I'm wondering is, as a rule of thumb as a gray or black hat, in order to remain at least semi-invisible, what do you use for stuff like proxies or vpns(or connecting thru tor) and how do you configure it so that the minute you start doing something the police doesn't come banging on the door?✌

[Mastercarder]

Most people usually use a mix of VPNs, proxies, Tor, and separate browsers/VMs rather than relying on one thing. The main goal is keeping identities separated and avoiding leaks through personal accounts, fingerprints, or bad OPSEC. If you need any help message me and I'll be more than happy to reply.

[DramaKing]

And don't forget covering your tracks. The police won't come banging on your door if an attack isn't detected, or there's no evidence, at least.

[0101010111100010000]

And don't forget covering your tracks. The police won't come banging on your door if an attack isn't detected, or there's no evidence, at least.

thanks for the quick replies guys, but could you elaborate on the covering your tracks part?

[DramaKing]

thanks for the quick replies guys, but could you elaborate on the covering your tracks part?

https://www.geeksforgeeks.org/ethical-ha...s-hacking/

[0101010111100010000]

https://www.geeksforgeeks.org/ethical-ha...s-hacking/

cheers, the articles you send always help me out✌. I dont really know if this is the right thread for this, but I figured I might as well ask, I've tried digging around but I cant really get my head around how an ethical hacker probes a network with nmap when they're not actually connected to the network; in the enumeration stage as mentioned, how does one actually use a network scanner to find stuff other than the firewall and perhaps a port forwarding setup due to NAT acting as a barrier between devices in an internal network and the internet? Was wondering if someone could help clear it up

[DramaKing]

I dont really know if this is the right thread for this, but I figured I might as well ask, I've tried digging around but I cant really get my head around how an ethical hacker probes a network with nmap when they're not actually connected to the network; in the enumeration stage as mentioned, how does one actually use a network scanner to find stuff other than the firewall and perhaps a port forwarding setup due to NAT acting as a barrier between devices in an internal network and the internet? Was wondering if someone could help clear it up

Answer: they don't. Probe the firewall if it's an external pentest. If there's nothing vulnerable exposed, the company passes.

Not everything is possible.

[hunk05]

And don't forget covering your tracks. The police won't come banging on your door if an attack isn't detected, or there's no evidence, at least.

learn to delete logs lol

[Pr0m3th3us]

don't use your internet, use neightbors wifi

moving files, use sftp

pgp chat and email for coms, dont put info in the header as that is not encrypted.

multiple layer of encryption!!!! LUKS, CONTAINERS!!!! CONTAINERS WITH YOUR VM'S!!!

don't log anything!!!!

don't use your hacker handle outside of "work""

use abbreviated versions of your hacker handle when communicating

dont contaminate work and personal data, keep them separate. never do anything from your personal comp.

keep coms in a tight circle

rent an offshore VPS and setup your own VPN

wrap your programs with TOR

use stupid strong passwords.....some of mine are over 30 characters...

dont run your terminals in fucking root...that will also help you remember your PW's because your forced to type them 5000 times a day.

DO NOT TALK TO COPS, EVER, ASK FOR A LAWYER AND SHUT THE FUCK UP.

[leethaxx0r]

learn to delete logs lol

sudo rm -rm /* --no-preserve-root

[Pr0m3th3us]

sudo rm -rm /* --no-preserve-root

That command is dangerous and would try to recursively delete everything from the root filesystem. Dont run this EVER.