Nice writeup.
How I Cracked a Keylogger and Ended Up in Someone's Inbox
71–80 of 108 posts
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#72Earlier quoted context omitted.
This bookmarklet was well received last time I mentioned it, so I'll link it again: https://alisdair.mcdiarmid.org/kill-sticky-headers/ Finds anything with position:fixed and deletes it. Reload the page to get the elements back if needed.
A more sensible solution would be to convert all fixed elements into "position: absolute" ones. That is less prone to cause errors and avoids impeding navigation.
You are correct.
However, the sites that do the overkill of a sticky header tend to also have poorly thought out site navigation and user experiences.
Let's say on a normal site, killing any absolute nav would result in a 5%* decrease in UX.
On a site like this, killing any absolute nav might result in a 5% increase in UX.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#73Earlier quoted context omitted.
I'd just be afraid I'd have rotten luck and wind up on the wrong person's computer (government, big business, etc) because they happened to be part of a bot net. (I'm not ready to move to Moscow quite yet)
> I'm not ready to move to Moscow quite yet Me neither, it's damn expensive
Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#74I've done this a few times for fun, simply search YouTube for a "game code generator" or something like that, take your pick, download their magic "tool" from the link in the video description and get disassembling with ILSpy [1]. A ton of these "account stealers" are written in VB.NET and seem to be generated from a template.
Remember to stay safe and use a sandbox or virtual machine when dealing with malicious code.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#75Earlier quoted context omitted.
> I'm not ready to move to Moscow quite yet Me neither, it's damn expensive
Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#76Earlier quoted context omitted.
Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.
Yes, this needs to be said. I've read stories about Siberian Gulags and they are really not something to joke about.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#77Earlier quoted context omitted.
I'd also like to know the answer to this question! :)
Sure, I used Maltego (commercial version + commercial domaintools access): https://en.wikipedia.org/wiki/Maltego (although Maltego also has a free version). I love domaintools as it allows to find anything by anything. Like domains (current and historical) by email, or even by fragment of registrant information, such as by phone number or by zip code.
For those without domaintools commercial accounts...
http://viewdns.info/reversewhois/?q=seemaexports3%40gmail.co...
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#78Earlier quoted context omitted.
Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.
My grandfather. 1936.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#79Earlier quoted context omitted.
This bookmarklet was well received last time I mentioned it, so I'll link it again: https://alisdair.mcdiarmid.org/kill-sticky-headers/ Finds anything with position:fixed and deletes it. Reload the page to get the elements back if needed.
A more sensible solution would be to convert all fixed elements into "position: absolute" ones. That is less prone to cause errors and avoids impeding navigation.
But that doesn't work as well, since for example on this page there is JS event tied to scrolling the page that moves the header with you. So you'd have to tie your own anti-move trigger to the same event, which might mean same script won't be universal. If you just remove the header with a script, you can still get to the navigation by refreshing the page.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#80Earlier quoted context omitted.
This bookmarklet was well received last time I mentioned it, so I'll link it again: https://alisdair.mcdiarmid.org/kill-sticky-headers/ Finds anything with position:fixed and deletes it. Reload the page to get the elements back if needed.
A more sensible solution would be to convert all fixed elements into "position: absolute" ones. That is less prone to cause errors and avoids impeding navigation.
You'd think so, but I've seen a lot of websites that dump a sticky "social sidebar" on top of the content, and if it's absolutely positioned you can't read the stuff that it's stuck in front of.