[Jean Bon]

Hello,

I'am curious about some practical aspect of hacking, maybe my ideas are totally different from the reality due to movies and series.
So if some of you took the times to answer me, i would be glad :)
I guess the first step is take a VPN? Does it really work to hide your identity? Are some better than other?
You use bitcoin or other crypto to hide / whitewash money? Does some exchange market are better than other? You need to be a genius programmer to do some hacking? Or you can buy someone else program and use it?
You can hide a malware in a QRCode. If you acheive to make someone scan a QRCode you can install a malware on their phone? You can hide a malware in a PDF. Someone who download a pdf can download a malware without noticing it?
Is hacking really profitable?

Thanks

[skull]

Hello,

I'am curious about some practical aspect of hacking, maybe my ideas are totally different from the reality due to movies and series.
So if some of you took the times to answer me, i would be glad :)
I guess the first step is take a VPN? Does it really work to hide your identity? Are some better than other?
You use bitcoin or other crypto to hide / whitewash money? Does some exchange market are better than other? You need to be a genius programmer to do some hacking? Or you can buy someone else program and use it?
You can hide a malware in a QRCode. If you acheive to make someone scan a QRCode you can install a malware on their phone? You can hide a malware in a PDF. Someone who download a pdf can download a malware without noticing it?
Is hacking really profitable?

Thanks

VPN is just one layer of security, this doesn’t make you or your actions invisible.
There can be various flaws, DNS leaks and such.
It could also be that you have various profiles associated with this VPN IP, therefor this IP would be traceable back to you.
In addition, VPNs could log you actions and usage.
It’s not a fix-it-al tool, but it does add some layer of protection.

I don’t think we may discuss money laundering.

Hacking comes in many levels, but it’s ofcause it’s easier when you understand the tools and vulnerabilities behind it. Not required but very much easier.

I can’t tell if you can do some malware directly with a QR, but you can inject in apps and such.

PDF, there was some exploit ages ago. I’m not the best to tell wether or not it’s still around.

I work in cyber security analysis, one of the good guys. My profit on this is quite good. But all depends on knowledge and which way you go with it. I will recommend you to go the good way, and not do any illegal hacking.

[atreides.dat]

Movies often make a big deal about being a "hacker," but you really don't need to be a genius; you just need to think outside the box.

Startup VPNs aren't completely anonymous; some companies keep logs, and that, my friend, is bad if you want to remain anonymous.

As for the rest, you don't need to be a genius programmer. I highly doubt you'd download malware from a QR code, and yes, it is possible to hide malware in a PDF.

And to answer your question about whether hacking is profitable... yes, it is, and very much so.

[Depicide]

Hello,

I'am curious about some practical aspect of hacking, maybe my ideas are totally different from the reality due to movies and series.
So if some of you took the times to answer me, i would be glad :)
I guess the first step is take a VPN? Does it really work to hide your identity? Are some better than other?
You use bitcoin or other crypto to hide / whitewash money? Does some exchange market are better than other? You need to be a genius programmer to do some hacking? Or you can buy someone else program and use it?
You can hide a malware in a QRCode. If you acheive to make someone scan a QRCode you can install a malware on their phone? You can hide a malware in a PDF. Someone who download a pdf can download a malware without noticing it?
Is hacking really profitable?

Thanks

I suggest you start with the basics of stuff before you start taking on large projects. It's taking baby steps until you realize how far you have walked.

VPNs are just one step to hiding your identity but learn how it works and alternatives, like Tor service, proxy chains, IP changers. There are a lot of methods to changing your IP and adding layers between you and the Internet.

In the end it depends on what you are doing. Know the difference between cold and hot wallets and find what works best for you and what service you will go with.

No you don't need to be a genius or master to learn coding and programs. Alot of it is exposure. Getting familiar with a terminal and scripts is what makes you understand how they work and how to use them properly. OSINT tools are a great start because you can conduct workups on people you know or yourself to verify you know how to follow a correct path and how to run scripts. The. From there creating simple scripts like email generators or web scraper for a site, etc.


This is a big project because you need to know a lot of your target. What phones are the primary majority in your area, what is the malware you want to upload, testing. Those are large projects when you are building from scratch or have minimal experience with it. You have to be careful as well as to not infect your own computer and system as well.

It can be profitable. Some people make careers out of it and have legitimate jobs with fortune 500 companies or the government. Some take the scamming approach. It all depends on your skill sets of where you can fit in at.

[DramaKing]

Hello,

I'am curious about some practical aspect of hacking, maybe my ideas are totally different from the reality due to movies and series.
So if some of you took the times to answer me, i would be glad :)
I guess the first step is take a VPN? Does it really work to hide your identity? Are some better than other?
You use bitcoin or other crypto to hide / whitewash money? Does some exchange market are better than other? You need to be a genius programmer to do some hacking? Or you can buy someone else program and use it?
You can hide a malware in a QRCode. If you acheive to make someone scan a QRCode you can install a malware on their phone? You can hide a malware in a PDF. Someone who download a pdf can download a malware without noticing it?
Is hacking really profitable?

Thanks

• Strong encryption with no leaks will effectively combine your traffic with other users in a untraceable manner as long as the provider doesn't record or log connections.
  


• Bitcoin can be tracked, but it still works for illegal money laundering.
  


• Some hackers are better than others and have different skillsets. 'Nuff said.
  


• QR codes are a known phishing method. I've thought of taking some flyer with a QR code, copying it with my own QR code, and posting the copy. Spreading malware, however, is very rarely simple, especially on phones. Would you scan a QR code that downloads an APK from some website and go "Oh, I'm supposed to sideload this harmful app. On my iPhone." These are the questions that you must ask when doing social engineering.
  


• You can, but you'll probably corrupt the PDF. Or the PDF reader will ignore it. Or the PDF will open in a secure browser that will isolate any executable code.
  


• It can be an expensive hobby.
  

[Shrdw]

VPN is just one layer of security, this doesn’t make you or your actions invisible.
There can be various flaws, DNS leaks and such.
It could also be that you have various profiles associated with this VPN IP, therefor this IP would be traceable back to you.
In addition, VPNs could log you actions and usage.
It’s not a fix-it-al tool, but it does add some layer of protection.

I don’t think we may discuss money laundering.

Hacking comes in many levels, but it’s ofcause it’s easier when you understand the tools and vulnerabilities behind it. Not required but very much easier.

I can’t tell if you can do some malware directly with a QR, but you can inject in apps and such.

PDF, there was some exploit ages ago. I’m not the best to tell wether or not it’s still around.

I work in cyber security analysis, one of the good guys. My profit on this is quite good. But all depends on knowledge and which way you go with it. I will recommend you to go the good way, and not do any illegal hacking.

I agree more so on the legal route as the best option crime pays until you get arrested then good luck getting a good job unless you have lucky four leaf clover wrapped around your very soul o.o.

QR code wise, You can do this still but it requires a website to be open and force a download to the device ie loads up the camera to scan it then it loads the link.

You visit it offers you what ever you may be offering example, Study guide for other students then once you install the APK or whatever it injects with malware.

This is something that happened at the college i was teaching at a few years ago pretty interesting method but i doubt it works on everyone plus they had to design the Android apk, explain how to install from unknown sources and so on. So it wasn't an instant infection similar to the old java drive byes from days of old lol.

PDF. Well 4chan was recently hacked using the pdf upload so its still used depending on what you are attempting to do with it? The zero day level stuff and other macros are above what i do anymore. ie, legal software a cyber security person would be better to answer this preventing it from being an issue at all can be difficult depending on the companies work flow.

Images are still easy to inject into on windows just by injecting the payload so when the file runs but detection rate no idea. Either way this is another simple way to do this most crypters will pack into other excutables, images are loaded by software running on the OS.

[Pr0m3th3us]

Welcome to the forum

[Jean Bon]

Thanks all for your answer.

I beleive i can do a good social enginering in some group of populations.
I'am sure the QRCode strategy can work, If I print some type of stickers.

So a VPN is a good way to hide but I must get one who doesn't record the log. Hum.

---

No you don't need to be a genius or master to learn coding and programs. Alot of it is exposure. Getting familiar with a terminal and scripts is what makes you understand how they work and how to use them properly. OSINT tools are a great start because you can conduct workups on people you know or yourself to verify you know how to follow a correct path and how to run scripts. The. From there creating simple scripts like email generators or web scraper for a site, etc.


This is a big project because you need to know a lot of your target. What phones are the primary majority in your area, what is the malware you want to upload, testing. Those are large projects when you are building from scratch or have minimal experience with it. You have to be careful as well as to not infect your own computer and system as well.

It can be profitable. Some people make careers out of it and have legitimate jobs with fortune 500 companies or the government. Some take the scamming approach. It all depends on your skill sets of where you can fit in at.

Good news because i'am clearly not a genius.

By the way i'am not on your buddy list :)

[skull]

PDF. Well 4chan was recently hacked using the pdf upload so its still used depending on what you are attempting to do with it? The zero day level stuff and other macros are above what i do anymore. ie, legal software a cyber security person would be better to answer this preventing it from being an issue at all can be difficult depending on the companies work flow.

Oh yeah, why didn’t I thought about 4chan 😅
Anyhow, their issue was that their board software hasn’t been updated in years.

So yes, there may still be issues like this around the web, even for older exploits.

I’m amazed it took this long for 4chan to be hacked with this 😅 But I’m left to wonder

[Shrdw]

Oh yeah, why didn’t I thought about 4chan 😅
Anyhow, their issue was that their board software hasn’t been updated in years.

So yes, there may still be issues like this around the web, even for older exploits.

I’m amazed it took this long for 4chan to be hacked with this 😅 But I’m left to wonder

Using outdated mysql_ and poorly done everything by modern standards.

I think they have been hacked before not everyone gives a crap to disclose when it happens. Many companies do this no matter it's illegal or not. They pay a fine if found out and play the blame game.

At least in the US overall this is the normal both for computers and idiots at work. I disagree with it but 4chan, Experian, Stratford, sony, hell my local bank got sued recently over it too.

Lol it happens.

[Jean Bon]

• Strong encryption with no leaks will effectively combine your traffic with other users in a untraceable manner as long as the provider doesn't record or log connections.
  


• Bitcoin can be tracked, but it still works for illegal money laundering.
  


• Some hackers are better than others and have different skillsets. 'Nuff said.
  


• QR codes are a known phishing method. I've thought of taking some flyer with a QR code, copying it with my own QR code, and posting the copy. Spreading malware, however, is very rarely simple, especially on phones. Would you scan a QR code that downloads an APK from some website and go "Oh, I'm supposed to sideload this harmful app. On my iPhone." These are the questions that you must ask when doing social engineering.
  


• You can, but you'll probably corrupt the PDF. Or the PDF reader will ignore it. Or the PDF will open in a secure browser that will isolate any executable code.
  


• It can be an expensive hobby.
  

For the QR Code i'am thinking about downloading the menu of some restaurants and when people scan the qrcode it's like they are downloading the menu but witht he malware.
It's risky as i have to go the restaurant directly.

[DramaKing]

For the QR Code i'am thinking about downloading the menu of some restaurants and when people scan the qrcode it's like they are downloading the menu but witht he malware.
It's risky as i have to go the restaurant directly.

It's not just risky due to cameras; it makes no sense. What? You're going to change restaurant menus? You're probably unaware of how malware works yet, but menus are generally text or images, not software.

[Jean Bon]

It's not just risky due to cameras; it makes no sense. What? You're going to change restaurant menus? You're probably unaware of how malware works yet, but menus are generally text or images, not software.

but would people notice when they scan the QRcode?

[DramaKing]

but would people notice when they scan the QRcode?

That they are asked to download an app instead of shown a menu? That would be some really terrible social engineering, even if you tried to indicate that users have to download and sideload an app to view the menu.

[Jean Bon]

That they are asked to download an app instead of shown a menu? That would be some really terrible social engineering, even if you tried to indicate that users have to download and sideload an app to view the menu.

i will check next time, but on a phone i'am not sure it's always clear what you are downloading