How I Cracked a Keylogger and Ended Up in Someone's Inbox • Hacker News Board

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#41

Post by zyx321 » Sat, Jul 02, 2016, 9:39 PM UTC

libeclipse wrote: post #11

Aha I love those little messages at the end telling users to update their software to the latest version. It's a cry to the void.

On one hand, the average user will never update his software unless you literally force them to.

On the other hand, your free upgrade to Windows 10 is ready. Would you like to install it right now or later tonight?

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#42

Post by 13of40 » Sat, Jul 02, 2016, 9:39 PM UTC

cosarara97 wrote: post #31

lossolo wrote: post #16

Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…

> found vulnerability in the application that was running on it Could you give more a more detailed explanation on how you did that?

Go to http://sectools.org and look under "vuln scanners" on the left side menu.

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#43

Post by hw24 » Sat, Jul 02, 2016, 9:53 PM UTC

Hacker World is professional hackers for hire that providing professional hacking services such as Web/database hacking, Email password hacking & recovery like Yahoo, gmail password, Hacking Hotmail or facebook account. You are in the right place If you are looking to hire a experienced and skilled hacker.

Contact :

Mail : Hackerworld@sigaint.org

Website : http://yyuahqvtgzbkwvdf.onion/

Do you wanna ask for some service? please feel free contact ?

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#44

Post by hw24 » Sat, Jul 02, 2016, 9:53 PM UTC

Hacker World is professional hackers for hire that providing professional hacking services such as Web/database hacking, Email password hacking & recovery like Yahoo, gmail password, Hacking Hotmail or facebook account. You are in the right place If you are looking to hire a experienced and skilled hacker.

Contact :

Mail : Hackerworld@sigaint.org

Website : http://yyuahqvtgzbkwvdf.onion/

Do you wanna ask for some service? please feel free contact ?

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#45

Post by wtracy » Sat, Jul 02, 2016, 10:00 PM UTC

Koahku wrote: post #36

Using Volafile to host the keylogger executable seems like a pretty bad choice considering that this website will delete your files after only 2 days. Or maybe this shouldn't surprise me so much considering the "skills" of the attacker.

They probably expect to upload a new build every few days, anyway. Note the login credentials hard-coded into the executable.

Presumably, people who take more than 48 hours to open their email were deemed an edge case not worth worrying about.

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#46

Post by LoSboccacc » Sat, Jul 02, 2016, 10:29 PM UTC

matt_wulfeck wrote: post #12

> It also attempts to steal password manager credentials and Windows keys. Ugh I hate reading this. I keep everything in my password manager. If I lose that I'm hosed. I wish more sites supported 2FA.

or had no authentication at all, just authorization. imagine having only a openid password to memorize... one can dream right

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#47

Post by rmsaksida » Sat, Jul 02, 2016, 10:33 PM UTC

popey456963 wrote: post #2

Is the header sticky for anyone else? It seems to take up ~30% of my screen (Windows 7, Chrome Stable) [0]. [0] http://puu.sh/pNYUH/d42d8395fc.jpg

Yep. Had to right click, inspect element, delete the header element. Article is unreadable otherwise.

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#48

Post by darekdk » Sat, Jul 02, 2016, 10:59 PM UTC

Fantastic write up! Good work.

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#49

Post by kalleboo » Sat, Jul 02, 2016, 11:04 PM UTC

krallja wrote: post #40

popey456963 wrote: post #2

Is the header sticky for anyone else? It seems to take up ~30% of my screen (Windows 7, Chrome Stable) [0]. [0] http://puu.sh/pNYUH/d42d8395fc.jpg

Yes. Firefox Reader View fixed that problem for me.

Safari Reader Mode worked a treat over here

Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox

#50

Post by sidarape » Sat, Jul 02, 2016, 11:18 PM UTC

nchelluri wrote: post #21

a few questions I'm wondering about, if anyone can help: - how do those PW stealers work? are they similar to the Steam one, where it'd delete existing creds and then sniff newly entered ones? - can this thing detect certain apps like FileZilla and then say "user entered " and send individual fields, and is that what is meant by supporting say FTP and FileZilla? - what does PHP support mean? maybe looks for common st…

> - can this thing detect certain apps like FileZilla and then say "user entered " and send individual fields, and is that what is meant by supporting say FTP and FileZilla?

FileZilla simply use a file in your personnal directory to store passwords exactly like your browser too.