Tuesday, 15 May 2018

Hack like A BLACKHAT ... with PROXY Chains!

What is Proxy-Chains???



ProxyChains is a UNIX program, that hooks network-related libc functions
  in DYNAMICALLY LINKED programs via a preloaded DLL (dlsym(), LD_PRELOAD)

  and redirects the connections through SOCKS4a/5 or HTTP proxies.
  It supports TCP only (no UDP/ICMP etc).

 
On most Linux Distro's just 

sudo apt-get install proxychains

Or 

git clone https://github.com/rofl0r/proxychains-ng.git
 
# needs a working C compiler, preferably gcc
  ./configure --prefix=/usr --sysconfdir=/etc
  make
  [optional] sudo make install
  [optional] sudo make install-config (installs proxychains.conf)

  if you dont install, you can use proxychains from the build directory
  like this: ./proxychains4 -f src/proxychains.conf telnet google.com 80

Configuration:
--------------

proxychains looks for config file in following order:
1) file listed in environment variable PROXYCHAINS_CONF_FILE or
 provided as a -f argument to proxychains script or binary.
2) ./proxychains.conf
3) $(HOME)/.proxychains/proxychains.conf
4) $(sysconfdir)/proxychains.conf  **

** usually /etc/proxychains.conf

Usage Example:

 $ proxychains telnet targethost.com

in this example it will run telnet through proxy(or chained proxies)
specified by proxychains.conf

Usage Example:

 $ proxychains -f /etc/proxychains-other.conf telnet targethost2.com

in this example it will use different configuration file then proxychains.conf
to connect to targethost2.com host.

Usage Example:

 $ proxyresolv targethost.com

in this example it will resolve targethost.com through proxy(or chained proxies)
specified by proxychains.conf
After install it look at the following :
https://github.com/sleeyax/Chainforger
INSTALL IT!

This is a tool that will help you create the needed proxychain.conf file.

eXAMPLE:




eNJOY!!!

VPN setup for Ubuntu .... or Kali ....

VPN setup for Ubuntu .... or Kali ....

This is the shit!!!!

vpngate-with-proxy

VPN GATE client for linux
  • Be able to connect to open vpn servers at http://www.vpngate.net/en/ directly or through proxy
  • Auto add DNS to fix DNS leak.
  • Auto filter out dead VPN servers. (updated on August 16th)
  • Can execute user defined script after vpn_tunnel is established or broken.
For Ubuntu and Kali 

sudo apt-get install gir1.2-appindicator3-0.1 gir1.2-notify-0.7 python-gobject

Dependency:

  • python 2.7.x: should already be shipped with your linux
Except python 2.7.x, all below dependencies should be automatically installed at first run.
  • openvpn$ sudo apt-get install openvpn
  • python-requests$ sudo apt-get install python-requests
  • python-urwid 1.3+$ sudo apt-get install python-urwid , for tui version (terminal user interface)
  • wmctrl$ sudo apt-get install wmctrl, for Indicator of tui version, use for focusing window from indicator.

How to use:

0. Pre-installation

  • If your network is behind a proxy
  $ export http_proxy="http://your_proxy:your_port"
  $ export https_proxy="http://your_proxy:your_port"
  • If you has just installed your os, please update your os for it to fetch packages list and know where to download other packages later.
$ sudo apt-get update && sudo apt-get upgrade
  • Please check the os clock and calendar if it is correct for openvpn authentication to work properly.

1. Installation:

Using git:
$ sudo apt-get install git
$ git clone https://github.com/Dragon2fly/vpngate-with-proxy.git
If your network is behind a proxy:
$ sudo -E apt-get install git
$ git clone https://github.com/Dragon2fly/vpngate-with-proxy.git
You can also download the zip file It contains the "vpngate-with-proxy" folder. Extract it into anywhere you want eg: $HOME.
user_script:
Within this folder, there should be a file user_script.sh. This file allow you to run extra commands to fit your need. You have to manually edit this file and don't change the file name. Commands are divided into 2 groups:
  • up: execute after vpn tunnel is established successfully.
  • down: execute after vpn tunnel is broken/terminated.

2. First run:

If you have configured system wide proxy or proxy in firefox, it'd better to turn it off. After vpn tunnel is established, the programs that use system wide proxy may failed to connect to the internet using your proxy.
Launch vpngate-with-proxy by
$ cd vpngate-with-proxy
$ ./run [arg]
  • arg could be either none or tui or cli.
  • vpnproxy_tui.py has better UI, colorful and easier to use. Run when arg is none or tui
  • vpnproxy_cli.py is normal terminal application, lightweight and is aim to run on server (RaspberryPi ?). Run when argis cli
Then the program will first setup a configuration file config.ini by asking you for proxy if needed to connect to the Internet. After that it will show the default configuration of the program. Change any parameter to suit you and press Enter to continue. Next time launching this program, you won't see this configuration again. Either modify config.ini or check 5. Some notes
If no thing goes wrong, the vpn server's list will show up.

3. Interaction:

  • Connect to a specific vpn server by typing its index number (eg: 3) and then Enter. If nothing went wrong, a successfully message show up.
  • Your currently chosen server will be highlighted with dark blue color.
  • All connected servers before the current one is show in dark red color.
  • Change your desire setting by press the F# key corresponding to that setting. Hit that F# key again to discard all changes and close setting popup. Setting will only be saved when you hit <OK> or Enter.
    • F2Proxy, use http proxy? address? port?
    • F3DNS, change DNS when connecting to vpn? which dns to change to?
    • F4Country, looking for a specific country or all that available?
    • F5Sort by, sort these servers by what parameter?
  • Vpn command: As you mentioned above, give an index of the server then hit Enter will open a vpn tunnel from your to that server. And there are still some more.
    • rrefresh: fetch new server's data from vpngate.net or mirrors
    • restore: will restore your system DNS back to original one
    • kill: send SIGTERM to all openvpn processes
    • q: terminate vpn tunnel, then quit the program
    • log: check if current season is logged or not. Log file is vpn.log and is in the same folder with this program. Every time you start the program, log file is rewritten (old content will be lost) if log is turned on.
      • log on: turn on logging
      • log off: turn off logging
  • Other keys and combinations:
    • Up, Down, PgUp, PgDown: scroll the server list
    • F10 : toggle logging on/off
    • Esc : clear the text in any input form (vpn commandProxyCountry)
    • Ctrl + F5: the same as r or refresh command
    • Ctrl + r : the same as restore command
    • Ctrl + k : the same as kill command
    • Ctrl + c : if connected to vpn server, terminate vpn tunnel, turn back to normal state. Else, quit the program

4. After VPN Tunnel is established successfully:

A successful connection doesn't mean you have access to the Internet. If you can access the Internet through selected vpn server, that doesn't mean you are totally safe.
  1. Check if you can access the Internet:
  • try browse some websites. Low score VPN servers tend to block you out of the Internet
  1. Check DNS leak:
If you are serious about privacy, this is necessary. DNS server knows the web addresses that you connected to, unless you type IP address directly.
To know your current DNS provider, https://www.dnsleaktest.com or https://ipleak.net
If DNS is not changed, make sure that you have turned off your system wide proxy and try again. While using the ethernet for vpn, connected to wifi may reset your DNS.
You could also use below command in Ubuntu to see trace route:
$ mtr -rw google.com

5. Some notes:

  • To view or change settings before the program fetches server's list, use one of below:
$ ./run config
$ ./run cli config
$ ./run tui config
  • (vpnproxy_cli.py only) To view or change settings at server's list: type Vpn command c or config then Enter
  • Ctrl+z: Try not to press this combination while program is running. It will not terminate the vpn tunnel nor kill the program properly. Which means iptable may be left messed up, DNS won't reset to original, you may be still in vpn.
  • The program only shows the last log line at the bottom of terminal. In fact, there is 20 last lines of the log. To view these lines, you just need to extend the high of the terminal window. log The log is shown up side down so the latest information will be in the highest place
  • If your terminal looks weird after program crashed or Ctrtl+z$ reset would help


Example :



Friday, 11 May 2018

The DARK WEB aka Deep Web....

Are you trying to find out how to access the dark web and what is it?

What is the Dark Web?

The dark web is the World Wide Web content that exists on darknetsoverlay networks that use the Internet but require specific software, configurations or authorization to access.[1][2] The dark web forms a small part of the deep web, the part of the Web not indexed by web search engines, although sometimes the term deep web is mistakenly used to refer specifically to the dark web.[3][4][5][6][7]
The darknets which constitute the dark web include small, friend-to-friend peer-to-peer networks, as well as large, popular networks like TorFreenet, and I2P, operated by public organizations and individuals. Users of the dark web refer to the regular web as Clearnet due to its unencrypted nature.[8] The Tor dark web may be referred to as onionland,[9] a reference to the network's top-level domain suffix .onion and the traffic anonymization technique of onion routing.
---- this means that it's all the servers and sites that has not been indexed ("Crawled") by search engines like Google or Bing.

A word or warning "Be Careful ! ... its the REAL WORLD NET ... with real MONSTERS!"  
Step 1: Go and get yourself a good VPN (Virtual Private Network) here, use it ALL of the time, matter if you are on TOR or not. This site here reviews the best VPN’s for use with TOR.You should be taking your anonymity and security very seriously if you are visiting the Dark Net, especially if you are viewing any Darknet Markets.
Do not fool yourself and think that the ISP’s (Internet Service Providers) and Law Enforcement are not trying to track those who use Tor to access the Dark Web, they are, and they are good at it so don’t make it easy for them.
It should be brought to your attention that there was a recent Tor vulnerability which leaked your REAL IP address leading back to your real location. If you already have the Tor Browser then UPDATE it immediately. Vulnerabilities like these are happening more often to Tor.
VPN for Dark Web AccessBy using the simple VPN app, your darknet activities will be hidden from your ISP and government agencies as all of your internet usage will be encrypted. No one will even know you are using TOR, let alone browsing for darknet markets.
What’s even better is that the VPN will give you a fake IP address, in another country if you like, so even if Tor is compromised then the trace just leads back to somewhere else that can’t be linked to you.
The other benefit of using a VPN is to prevent hackers stealing your identity and or personal files and photos from your computer.
You need to use a good VPN that keeps NO LOGS, fast performance, preferably accepts bitcoin as payment, has a kill switch for DNS leaks, and is compatible with TOR.

Your Privacy Is Vulnerable!

IP Address

196.210.32.45
Location

Pretoria, South Africa
Browser

Chrome on Linux
Screen Resolution

1366x768
Become Anonymous with a VPNProtect your identity from governments, ISP's and hackers with a click of the mouse.
Then install your VPN, if you buy one of the better VPN’s then it is usually just a one click install and one or two clicks to turn it on.
Step 2: You can’t access the deepweb just using a common browser like Internet Explorer or Google Chrome. To get dark net access you will need to download the dark web browser called TOR browser bundle. Only get it from the official TOR website, never download it from anywhere else!
Now close all of your browsing windows and all apps connecting to the world wide web like Google Drive, Skype, OneDrive, iCloud etc.
Then open your VPN app and connect to another location other than where you are at, make sure to use the OpenVPN protocol as it is the most secure.
Open up your normal favorite browser and then download TOR

Step 3: Install the TOR browser bundle on your PC or Mac. When the download is complete, double-click the downloaded file, choose the destination folder (the folder where you want to extract tor browser), and choose extract.
Step 4: Start TOR Browser. Open the folder where you extracted TOR browser and double-click “Start Tor Browser”. The TOR start page will open in a browser window (it’s actually a portable version of FireFox stripped down).
From here, you now have a good level of anonymity and security and you are able to gain access to .onion websites through your dark web browser.
tor-folder

Congratulations…

Next, you will want to visit a dark web site.
Now you have dark net access you should Click HERE to view the Darknet Market List so you can visit some of the best black market websites on the DeepWeb.



silkroad
Silk Road ( Dark web screenshot )

If you do want to check out some darknet markets then you should follow the guide for that specific market as it will show you step by step what to do to sign up, browse etc.
If you are looking for the biggest list of hidden deep web links go hereso you can find exactly what you are looking for. (some also call them dark web links). We have compiled one of the biggest lists of tested .onion sites on the dark net complete with a search function, website name, description, categories, site status and even a screenshot of the landing page so you can see if your site is online or dead.
Now we have shown you how to access the dark web we have some very important tips to share…

Bitcoin and Buying on the Dark Web:

If you are on the dark net to buy something, and most of us are, then you will need to use cryptocurrency to do so and Bitcoin is the most used cryptocurrency on the dark web.
Buying cryptocurrencies is another topic altogether, so we won’t go into it here but this site has made an easy to follow guide on buying bitcoin, but we will give you one GOLDEN tip on how to go under the radar and not have your crypto exchange account shut down and lose money.
NEVER send cryptocurrency directly from your exchange account (where you buy the coins) to a market or anywhere on the dark web, also never send coins directly from anywhere on the dark net to your exchange. They are onto this right away as they can tell where the coins came from and they WILL shut you down and you will be recorded in a list for sure.
You must send your coins from your exchange to a wallet (find out how to in the guides) then from the wallet to the dark web and vice-versa.

Bonus Security Steps For the DarkNet:
cyber-security

Step 5: DO NOT change the TOR browser window size unless you like living dangerously. The FEDS have programs that can match identities on random things such and matching time online and other things with the browser window size, I shit you not. If you don’t change the size then it is the same as most other people.
Step 6: Please remember that TOR isn’t necessarily 100% anonymous, you should turn off JavaScript within the dark web browser settings to help.



tor-javascript-setting
Block Javascript in TOR Browser

Step 7: Disconnect your webcam or block the camera with some black tape. Hackers and governments have ways of getting into your computer and turning on the video and cameras.
You can have intimate images of you be used as blackmail or extortion, or even worse, used by the feds.



zuckerberg
Covered camera and mic?

Step 8: Disconnect your microphone or cover it with tape to muffle it good. The same goes for the microphone as the camera, the last thing you want is to be recorded saying incriminating things at home. It doesn’t even have to be while on the dark net. Even the Facebook creator Mark Zuckerberg does it as he knows the dangers.
Step 9: NEVER use your real name, photos, email, or even password that you have used before on the dark web. This is the fastest way to be tracked. Use an anonymous email account and aliases that have nothing to do with you that you have never used before.
Step 10: If you are using TOR on the dark web for anything other than looking at cute pictures of kittens, you should think seriously about your privacy and security. Jolly Roger has put together a comprehensive guide on how to stay safe on the deep web, view the guide here.
If you have read through this how to access the darknet guide and thought to yourself WTF? Then you are probably new to this and need a bit of background and information to get you up to speed. Please remember to share this post so everyone that wants to have a look on the Dark Web can do so and do it safely.

What is the Clear Web? (Surface Web)

Firstly, there is the Clear Web/Clear Net/Surface Web. This is the normal internet / world wide web where you do everyday things like check Gmail, Facebook, and Twitter and buy things from Amazon etc. All websites and web pages that a search engine like Google can find are on the Clear Net.

What is the Deep Web?

Then we have the Deep Web. This is a sub-set of the internet that can not be indexed (found) by search engines like Google. This includes all web pages that are behind membership logins, all company and organization web pages used internally and other data. The majority of the deepweb does not have anything illegal on it.



deep-web-dark-web-differences
Deep Web and Dark Web

What is the Dark Web (also called dark net)?

Then we have the Dark Web. This is a sub-set of the Deep Web that contains all sorts of websites, both legal and illegal. The types of sites include black markets that sell things like drugs, counterfeit goods, and weapons, you also have hacking sites, X-rated sites, bitcoin tumbling, and even sites for hitmen. The variety of sites on the Dark Web is quite astonishing. For now there is no dark web search engine that works as well as Google does for the clearnet.
For all you who likes movies: 
https://www.youtube.com/watch?v=6CC6_tFR9m0