Hello everyone,
I am new here so I desided to contribue with a bit of interesting info.
I have seen some people asking qustions like: "How to send a keylogger?"
Well the truth is that scamming is art and everybody has their own ways of doing things.
I will tell you a way that helped me a lot.
First step:
Create a nice email like: no_reply_secure@yahoo/gmail/mail/whatever.com
Second step:
Find a nice vulnerable website and do an "sqlmap" and dump users information.
Third step:
Now comes the interesting part, some people say that I am overdoing it but everybody can do
what they want. So first I try the email and the pass on facebook(I mean the once we got from sql injection)
and you realy won't believe how stupid people are to use the same passwords... Okay but facebook is not stupid
and it will send an email that someone has triedto login into their acc. Which is what we need :D As soon as you
get the message to verify your identity just close the browser.
Fourth step:
Now we know that the user recieved an email of someone with ip"blabalbla" did .......
so we open the setoolkit and send an email which will be very similar to the one we recieve when we get a code
for login or we login from a new device but it will say " somebody tried to login into your account from ip"blablaba"
download report (link here) and tadaaa you did it. I am saying that we should use setoolkit but it's not that important
the only thing is that you can send a html code copied from previous emails and just change it a little bit. Later we can
send phishing emails depending on what banks or maybe paypal, skrill etc they are using. And we will see that from the
logs we recieve.
Obviously you can always spam thousands of emails but when you did a long preparation your success will be more
than 50% there is no point sending your keylogger to a 100 000 emails if nobody opens the files. It is easier to lie
when you first say the truth.
Thanks for reading I hope the info was interesting and you find it useful. And i hope other people share their own ways
to send keyloggers or payloads.
Social engineers are the gods of internet!!!
I am new here so I desided to contribue with a bit of interesting info.
I have seen some people asking qustions like: "How to send a keylogger?"
Well the truth is that scamming is art and everybody has their own ways of doing things.
I will tell you a way that helped me a lot.
First step:
Create a nice email like: no_reply_secure@yahoo/gmail/mail/whatever.com
Second step:
Find a nice vulnerable website and do an "sqlmap" and dump users information.
Third step:
Now comes the interesting part, some people say that I am overdoing it but everybody can do
what they want. So first I try the email and the pass on facebook(I mean the once we got from sql injection)
and you realy won't believe how stupid people are to use the same passwords... Okay but facebook is not stupid
and it will send an email that someone has triedto login into their acc. Which is what we need :D As soon as you
get the message to verify your identity just close the browser.
Fourth step:
Now we know that the user recieved an email of someone with ip"blabalbla" did .......
so we open the setoolkit and send an email which will be very similar to the one we recieve when we get a code
for login or we login from a new device but it will say " somebody tried to login into your account from ip"blablaba"
download report (link here) and tadaaa you did it. I am saying that we should use setoolkit but it's not that important
the only thing is that you can send a html code copied from previous emails and just change it a little bit. Later we can
send phishing emails depending on what banks or maybe paypal, skrill etc they are using. And we will see that from the
logs we recieve.
Obviously you can always spam thousands of emails but when you did a long preparation your success will be more
than 50% there is no point sending your keylogger to a 100 000 emails if nobody opens the files. It is easier to lie
when you first say the truth.
Thanks for reading I hope the info was interesting and you find it useful. And i hope other people share their own ways
to send keyloggers or payloads.
Social engineers are the gods of internet!!!