[img]http://s28.postimg.org/8kj8l87il/How_to_stay_anonymous.png[/img]
The most important topic we discuss is anonymity.
A basic thing about anonymity is making sure other's can't track you. This all starts with your username.
Make sure you only use that username for things related to hacking, make sure you don't post that username anywhere else.
People can use that to dox you and using that, retrieve information about you.
It's also important to watch out with usage of passwords with some things.
You can use the same password for hackforums, gmail, hotmail. All fine. But watch out with a booter / stresser.
Chances are the owner will release the info or use it for malicious reasons. These chances exist, but it's more likely
that the booter / stresser get's hacked by a 3rd party. In that case, the database is dumped and your hashes are free to be cracked.
That's why we will discuss password security & Hash encryption / Decryption as well in this FAQ
The three top methods to stay anonymous are: Proxies, VPN, and Tor.
Proxies: You can configure your browser to use a proxy. A proxy is actually a computer (server) between you, and the website where you connect to.
A normal connection goes like this: you > ISP > Website; with a proxy: you > ISP > Proxy-server > Website.
That makes that the website sees the IP of the website, and not yours one.
Firefox > Preferences > Advanced > Network > Settings use proxy (to use a proxy in yout browser).
People post daily proxies in this section:
VPN, Proxies, and Socks
VPN: A Virtual Private Network works kind of the same as a proxy, the only difference is that a proxy only covers the application using the poxy, and not all the other traffic. A VPN secures your whole traffic!
Often VPN also encrypts your traffic for your ISP.
[censored] is a good free VPN.
Tor: The Onion Router is in my opinion the best way to stay anonymous.
Unlike a proxy and VPN, it does originally don't keep logs.
Of course there are some servers who try to log your info and decrypt it, but it's unlikely that will work out for them.
Tor originally works like this:*
You > ISP > Tor-server 1 > Tor-server 2 > Tor-server 3 > Tor-server ... > Website
Multiple encryptions, multiple servers between you and the website,...
Tor also has some extra features and things you should know.
Tor encrypts your traffic even before it reaches the ISP (like as by a VPN - sometimes), so no one can view it.
Best of all, almost every Tor user gets an unique algorithm/key for that encryption, so it's almost impossible to crack.
Tor often switches it's path (changes the server between the first and last node).
If people are able to crack the first server, they only know who has used it, but not what you've done. If they crack the last server (exit node) they know what you're doing, but not who's doing it.
This is a small compensation of a VPN and Tor:
Specs ||
VPN |
Tor
------
Logs: ||
Yes |
No
Speed: ||
Fast |
Bit Slower
Safety: ||
Low |
High
Encryption: ||
Yes |
Yes, multiple
Servers: ||
1 |
multiple
Price: ||
most paid |
Free
Why people think Tor isn't safe:
"NSA logs who download Tor" - Use a proxy while downloading.
"Tor servers keep logs" - Not true, only a few who are controlled by the NSA. And if they keep logs it's unlikely they can decrypt your data, if they can decrypt it they only know what you're doing (request you send to websites etc), not who it is doing (you're location is still safe).
"Tor browser is back-doored" - It's open-source, disable JavaScript + route your data through the original Firefox then.
"Tor can get cracked" - View all answers above + only version 2.2 was known to be able to get cracked.
[img]http://s28.postimg.org/4665vn7kd/How_to_search_for_answers.png[/img]
How to search for answers?
This may seem an idiot question, but it isn't!
Some people really don't know how to use Google, or the search function on HackForums.
Let me first show you a bit on how to search on Google.
Google: First of all, don't use Google! It's a damn anti-privacy company.
We will use another Search Engine instead, Startpage.
Startpage gives the same results as Google (based on Google); but it has taken out the logs and track methods the original Google delivers.
http://startpage.com
Search results are based on keywords, keywords are small words who describe what you want; it's easier as you may think.
If I for example want to look-up how to do cookie-stealing, I just type:
Cookie-stealing
Or
How to do Cookie-stealing
If you want to get more info about cookie-stealing, Wikipedia is probably the website we want to be looking on.
An easy to get Wikipedia results is by just typing Wikipedia is keyword:
Cookie-stealing Wikipedia
And there your result comes up.
Another way is by using Dorks, with a dork you specify what result should come up, anything not matching that; should come up.
Example:
Cookie-stealing inurl:wikipedia.org
And you'll get a really specific result.
Another dork I want to show, is searching for free e-books!
It's one of my favourite ways.
Our search-query would look like this:
pdf: C++ fundamentals
pdf: malware removal guide
pdf: start with ethical hacking
pdf: How to do SQLi
...
And you get thousands, and thousands of free e-books!
On Hackforums:
https://hackforums.net/search.php
You have to work with very selective and descriptive keywords, for more specified results choose the section as well.
Here you can search for members:
https://hackforums.net/memberlist.php
Sort by: username
May be more interesting as joining date. :)
[img]http://s28.postimg.org/4znd202z1/How_to_spoof_or_crypt_a_file.png[/img]
If you want to spread malware, spoofing and crypting are essential parts. Let me first explain some terms:
Spoofing: Faking an extension from a file, but keep that file acting like it's original extension.
Converting: Making a file extension, act like another file extension, so it actually changes type.
Crypting: Making a file FUD/UD for protection tools (like: Anti-Viruses, Anti-Malware,...).
FUD: Fully UndetectAble - No protection tools don't detect the malware, not when downloading nor when running.
UD: Only a few protection tools don't detect it, and only in few cases.
Anyway, all of these processes can easily be done by using tools.
Search Hackforums for "Free spoofer" for example.
In the Cryptography section and Hacking Tools and Programs section you can also find thousands of these tools.
If these all are done right, your victim gets infected with your malware.
