[Armada]

Written By: ȺʁɱªÐą

Introduction:
Spoiler (Click to View)

When it comes to the world, there is an old saying that stands true to this day. "It takes all kinds". This sadly applies to all walks of life, and unusual perverted fetishes. Anyone who has spent some time online knows very well there is a very large range of unusual sexual fetishes out there. But one almost universally agreed upon is Pedophilia and the exploitation of children is unacceptable, in any measure.
All of this being said, it is however a reality for Hackers that we are exposed to such individuals on a more frequent basis than any would ever really wish to deal with. Our activities and uncensored access to systems across the internet effectively make us the first line of defense against such individuals.

So what do we do when we encounter a Pedophiles system?

The First Line of Defense:
Spoiler (Click to View)

Hackers will typically encounter Pedophiles in 2 scenarios:

Scenario #1 - System Discovery
In this scenario, the Hacker has secured a client machine with their Binary and through whatever course of action, discover the end user is a Pedophile (File searching, Keylogging, Remote Desktop, etc.)

Scenario #2 - User Reveal
In the second scenario the end user reveals through conversation or discussion they are a Pedophile. This scenario is very typical in E-whoring or Public Chat situations.

Regardless of the situation that presents itself, the Hacker ultimately has 2 options.

• The choice to engage the Pedophile in an attempt to gather information and evidence to report to authorities for legal consequence and prosecution.
  
• The choice to withdraw from the situation
  

Your choice should be based on your comfort level on handling a situation such as this. Those users who feel they may not be able to correctly handle a Pedophile are urged to contact someone else who is better suited to deal with these situations.



The Social Responsibility:
Spoiler (Click to View)

There is a sort of irony to this discussion when I talk about a Hackers Social Responsibility. A large portion of the time when a Hacker will encounter a Pedophile, they themselves are involved in less than legitimate activities themselves. However, it is in this same degree called upon each and every Hacker, Cracker, Ratter, Exploiter, etc. That when we encounter these individuals, it is our responsibility to ensure they are reported to the correct authorities, and exposed in the most effective fashion possible.

It is at this point, I find it extremely important to discuss the emotional and psychological toll engaging Pedophiles can run against the Hacker.
Users who encounter Pedophiles, and pedophilia material while engaged in Hacker activities can and will go through a wide range of emotions. Much of this type of content is extremely disturbing and can among other emotions, cause users to become angered or enraged. I can only say this is a natural human reaction to this material, discussion and topic.

If the end user (Hacker) does in fact choose to engage the Pedophile in an attempt to seek legal justice against them, it is very important to not allow their personal emotions to affect their social responsibility. Obtaining the needed information and secure the correct evidence against the individual should become top priority over any other.

Anger and Rage Causes Errors, and Detection.

The Rules of Engagement:
Spoiler (Click to View)

• NEVER allow yourself to become emotionally invested in the situation.
  - This can be harder than expected many times.
  
• NEVER interfere with the Pedophiles activities, any manipulation or user intervention would give them indication of a system breach. Pedophiles are aware what they are doing is highly illegal and socially unacceptable thus leading them to be very paranoid individuals, usually taking elaborate steps to conceal their activities and saved media. Any indication of a Hacker being in their system would cause them to go in hiding and delete any evidence on their system which could lead their their criminal prosecution.
  
• NEVER download suspected pedophilia media, content or files.
  
• NEVER screen capture explicit content. This is considered replication by proxy.
  

• ALWAYS document all original file paths to all media found on the system
  
• ALWAYS always complete a full complete DOX against the individual by examining their document directories, desktop, secondary drives and backup files. This will provide us vital information on the persons true identity, and which legal authority it is best reported to.
  

Predator Logger:
Spoiler (Click to View)

Predator Logger v.1.0

Predator Logger is a script I wrote to log important system information and secure vital evidence for submission to legal authorities.
The script is composed of a Single WinRAR SFX archive and 3 containing files.

• process.bat - the batch file which gathers and process the information to be gathered
  
• files.lst - a listing of files to be collected for evidence
  
• rar.exe - the command line version of winrar to archive all information in to password protected archives
  

PROCESS.BAT

Code

@echo off
cls
systeminfo >> systeminfo.nfo
msinfo32 /nfo msinfo32.nfo
nslookup myip.opendns.com resolver1.opendns.com >> ipinfo.nfo
ipconfig >> ipinfo.nfo
dir >> filelist.nfo
rar a -inul -hppedophilesysteminfo systeminfo.rar *.nfo
rar a -inul -hplegal_evidence evidence.rar @files.lst
rename evidence.rar evidence.cab
del *.nfo /q
del *.exe /q
del *.bat /q
del *.lst /q
cls
end

FILES.LST

Code

*.mp4
*.wmv
*.avi
*.webm
*.mkv
*.flv
*.vob
*.ogv
*.ogg
*.drc
*.mng
*.mov
*.asf
*.mpg
*.nsv
*.mp3
*.wav
*.amr
*.3pg
*.act
*.sln
*.wma
*.JPEG
*.jpg
*.gif
*.bmp
*.png
*.svg

Scripts Use:

1. Upload Predator.Logger.exe to directory containing pedophile media
   
2. Remotely Execute Predator.Logger.exe when the system is IDLE\Not in use
   -The script produces a command prompt and other various dialogs which are not suppressed, it is vital to only execute this when the machine is IDLE and the remote user is not at the terminal.
   
3. Predator.Logger.exe will erase majority of its files, outputting 2 files.
   systeminfo.rar - This file is a passworded archive file containing all vital and critical system information for DOX purposes. - This file is safe to download for DOXing and logging and reporting purposes.
   evidence.cab - This is a passworded WinRAR archive renamed to a .cab file, this file contains critical media files for evidence in legal prosecution. - DO NOT DOWNLOAD THIS FILE.
   - This file is to be moved to a secure location within the system (Example: c:\windows\system32\)
   
4. Download systeminfo.rar and Move evidence.cab to a secure folder location on the remote system.
   
5. Ensure the media directory is left as originally found (remove any residual files from execution of the script)
   

Download Predator Logger v.1.0

Profiling and Reporting A Online Pedophile\Predator:
Spoiler (Click to View)

1. Gather as much information on the individual as possible. (DOXing)
   In this effort we want complete information on the individual in question, including Full name, address, social security number, phone number, work, relatives, friends, social media and personal life.
   - Search Document folders, backup drives, desktop, pull all passwords from the system and check online social media and email accounts using reverse SOCKS proxy.
   - Verify country of origin, regional authorities as well as country authorities.
   
2. Obtain a complete file listing of media which can be used as evidence. - Remember! Never download media to your local controlling machine under any circumstances.
   
3. Secure complete system information and pedophile media as evidence by upload and execution of Predator.Logger in media directory.
   
4. DOWNLOAD systeminfo.rar and DELETE from remote clients machine.
   
5. MOVE evidence.cab to a secure directory on the remote client (Example C:\windows\system32)
   - Ensure to log exact file path to evidence.cab file
   
6. DELETE residual files from Predator Logger Script
   
7. Secure all chat logs or other evidence on remote host
   
8. Using Reverse SOCKS Proxy and obtained passwords report the users activities to local and international authorities accordingly. - Use of their e-mail account and connection is highly recommended.
   
   Code

   https://tips.fbi.gov/
http://www.ic3.gov/complaint/default.aspx
http://www.interpol.int/Crime-areas/Crimes-against-children/Crimes-against-children
   
   Report to as many authorities as possible for maximum exposure
   
   Provide as much information as absolutely possible, including all DOXed information, IP# address information, file location and system information, and evidence.cab file location
   
   
9. Pedophiles try to place themselves in positions where they are close to children or minors to carry out their fantasies. This includes but not limited to Youth social clubs, Cubs\Scouts\Girl Guides, Youth Sports Teams, etc.
   If it is discovered this is the case in your investigations it is also recommended to utilize their e-mail contacts to further notify all parents, contacts, relatives and co workers of their activities as well. - This single action can prevent a child from being victimized.
   
10. After you have completed your reporting to all authorities and contacts using Reverse SOCKS proxy, Completely UNINSTALL your Binary to avoid any detection or trace back to your origins.
    

Wrap Up:
Spoiler (Click to View)

In this articles closing I would like to notate although this is a difficult topic to read and consider, it is important to understand that as Hackers who have such uncensored access to private machines there is a Social Responsibility we need to observe in removing such people from your global society. If as a end controller you end up in a situation involving such individuals you are always best advised to either seek more professional assistance, or remove your binary and self from the equation entirely.

Pedophiles run an already extremely high risk of being traced and arrested by authorities, it is as Hackers our responsibility to simply expedite the process by providing the authorities information they would otherwise be unable to legally obtain without search warrants.

Any involvement with Pedophiles should be taken with EXTREME CAUTION.
Every absolute possible security precaution should be taken to accomplish the designated task while maintaining the furthest distance from the target.

Remember - NEVER DOWNLOAD suspected pedophilia media.

v.1.0

[Optimal]

Great info, i actually encountered one once while in a chat room and not knowing what to do i just blocked him.

[beachkid]

i encounter alot of those people in facebook groups actually

[Aur3xis]

Well, will deffinitly come in handy.

Good guide!

[josh-dmww]

Good guide, and good advice!

Hope I'll never have to use it though

[Strayta]

Well done man! This is a very good guide

[SOSA_]

Good guide OP, check the PM I sent you. BTW I repped you

[hiatusvi]

hope this is a really nice guide !

[fancynacy2015]

great guide!! hopefully will help out a lot of people and put a lot of bad people away

[Bo Burnham]

Loving the guide armodano!

Armada is actually my father and he knows the good shit.
RIP my asshole.

[UglyMeister]

Good tutorial man, gonna save this just in case

[Gruja]

Pretty good, man. I am sure it will be of use.
But there is one problem. When it comes to read the list file and take all data with those extensions, it will only search in that particular place where the script was executed. Is there an additional option where it will search whole computer or you need to execute it in both C: and D: drive?

[Armada]

Pretty good, man. I am sure it will be of use.
But there is one problem. When it comes to read the list file and take all data with those extensions, it will only search in that particular place where the script was executed. Is there an additional option where it will search whole computer or you need to execute it in both C: and D: drive?

I just obtained a script for this, working on improving the Predator Logger scripting within the net couple days.
I wrote the Predator logger to be dropped in to the base directory of the pedophiles media content. I have noticed Most if not all pedophiles tend to store their cache in one single directory, not across their system.

Remember, they know what they are doing is highly illegal, so they dont want that material just floating all around their own system either. 🤝
But a updated version of Predator logger will be posted hopefully by end of the week after I get a chance to refine some scripting down.

[Gruja]

Actually, it only scans files that are stored in the folder where script was executed not the entire C: or D: drive.

I am looking forward to seeing updated script.:D

[Armada]

Actually, it only scans files that are stored in the folder where script was executed not the entire C: or D: drive.

I am looking forward to seeing updated script.:D

Yes, only the directory the script\exe is placed.
- Again designed to be uploaded to the base media directory which the hacker wishes to capture for evidence.

The updated script should address these issues of multiple directories etc.