| Welcome, Guest |
You have to register before you can post on our site.
|
|
|
| Way To Check CC Without Blocking It |
|
Posted by: Blackhatking - 02-27-2020, 04:26 PM - Forum: Public Carding Tutorials
- No Replies
|
 |
This is just a simple method.
First of all go to the website [To see content please register here]
Just create any random account and purchase the membership if transaction completed the card is valid otherwise not
|
|
|
|
| Free ProtonVPN For Lifetime |
|
Posted by: Blackhatking - 02-27-2020, 04:24 PM - Forum: Public Carding Tutorials
- No Replies
|
|
Free ProtonVPN For Lifetime
Method
1.Go to [To see content please register here] m/ and make a free Email.
2.After the email is done get here [To see content please register here] m/ and make a free account based on your protonmail email.
3.Activate the free trial.
4.After the Trial ends , make another email and repeat the process.
|
|
|
|
| Carding - Introduction - 4 Beginners (FREE) |
|
Posted by: Blackhatking - 02-27-2020, 04:21 PM - Forum: Public Carding Tutorials
- No Replies
|
|
Hi BHC Members.
Sorry, but don`t have time for fancy and colorful letters and other shit.
Just knowledge.
Let’s start with the Basics
Introduction to Carding and Key Points
There are multiple definitions available per different views.
Carding itself is defined as the illegal use of the card (Credit/Debit) by unauthorized people (carder) to buy a product. For educational purposes, I will now show how a carder is able to go about their illicit activities. Remember – carding is highly illegal, and should not be attempted under any circumstances.
1. 1 Key points in carding method
2. Let start to understand each point one by one
2.1 Computer (PC):
For doing carding always use a computer. I know some methods using a mobile device, but it is less secure and involves more risk.
2.2 SOCKS:
SOCKS stands for SOCKet Secure. It is internet protocol which allows client and server traffic pass through a proxy server, so real IP is getting hidden and proxy IP get reflected.
This is useful while carding because carder wants to use the credit card holder’s location while doing it.
Users can buy SOCKS.
2.3 Mac Address Changer:
MAC stands for Media Access Control. It is the unique address of every Network Interface Card (NIC).
A MAC address changer allows you to change the MAC address of NIC instantly. It is required to be anonymous and safe J
2.4 CCleaner:
It is very useful tool help in cleaning your browsing history, cookies, temp files, etc.
Many people ignore this part and get caught, so be careful and don’t forget to use it J
2.5 RDP (Remote Desktop Protocol):
RDP allows one computer to connect to another computer within the network. It is protocol developed by Microsoft.
Basically, carders use it to connect to computers of the geolocation of the person whose credit card carder want to use. It is used for safety and stay anon. Here carders using others’ PC for doing carding instead of their own.
2.6 DROP:
DROP is an address which the carder uses for the shipping address in the carding process.
Let me explain in details with an example:
If I am carding with US credit card, then I use USA address as shipping address then my order will be shipped successfully, and I will be safe. If you have relatives/friends, then no problem, otherwise use sites who provide drop services only we have to pay extra for shipping it.
2.7 credit card (Credit Card):
This part is very much important so read it carefully. Any credit card it is in the following format:
| credit card Number |Exp Date| CVV2 code | Name on the Card | Address | City | State | Country | Zip code | Phone # (sometimes not included depending on where you get your credit card from)|
e.g.: (randomly taken number/details)
| 4305873969346315 | 05 | 2018 | 591 | UNITED STATES | John Mechanic | 201
Stone Wayne Lane | Easternton | MA | 01949 |
Types of Credit Card:
Every Credit card company starts their credit card number with a unique number to identify individually like shown below
American Express (AMEX Card) – 3
Visa Card – 4
Master Card – 5
Discover (Disco) – 6
Company wise credit card details:
Visa
1. Classic: The Card is used worldwide in any locations designated by Visa , including ATMs, real and virtual Stores, and shops offering goods and services by mail and telephone.
2. Gold – This card has a higher limit capacity. Most used card and adopted worldwide.
3. Platinum – Card is having limits over $10,000.
4. Signature – No preset spending limit – great bin to get
5. Infinite – Most prestigious card with having virtually no limit. There is less in circulation so be alert when buying these. Use only with reputable sellers!
6. Business – it can be used for small to medium sized businesses, usually has a limit.
7. Corporate – it can be used with medium to large size businesses, having more limit than a Business card.
8. Black – It has limited membership. It has no limit only having $500 annual fee, high-end card.
MasterCard
1. Standard – it is same as classic visa card.
2. Gold – it is same as visa gold card.
3. Platinum – it is same as visa platinum card
4. World – it has a very high limit.
5. World Elite – it is virtually no limit, high-end card.
Amex Card
1. Gold – it usually has around a 10k limit.
2. Platinum- is usually has a higher limit (around 35k).
3. Centurion – it has a High limit (75k+). It is also known as the black card, note: do not confuse with visa black card.
Q1. What is BIN?
It is known as Bank Identification Number (BIN). It is a 6-digit number e.g.: 431408.
Some of the reference sites which give BIN info which I also refer:
[To see content please register here]
[To see content please register here]
[To see content please register here]
Simply go to the site ([To see content please register here] )àenter BIN number and click on find to get the details. I have added first 4 digits only.
You can filter out the option as per requirement shown below
We got most of the information from the site. Now the question is how to know the balance of CC. is it possible? and answer is Yes, I will let you know step by step using normal as well as Skype method J
Q2. What is the meaning of VBV, NON VBV and MSC?
VBV (Verified by Visa ) – Extra level protection is added by Visa to protect the Card from fraud.
Like DOB, password, Social Security Number and Mother’s name, etc. also sending OTP (one-time password) as extra security level to card owner mobile number to validate the transaction.
NON VBV (Verified by Visa ) –Handy to use. No need extra information as specified in VBV card while doing the transaction.
Note it down (IMP)- Carders mainly buy and use NON VBV cards for carding .
MSC (MasterCard Secure Code) – security level same as VBV card.
Q3. What is AVS?
It stands for Address Verification System
It is the system which is used to identify the credit card holder original address with billing address provided by the user while shopping or online transaction.
The system is used to identify the online fraud over the internet.
Q4. How to check credit card is live or dead?
There are many sites available on the internet to verify credit card is live or dead, but they charge for it approx. $0.001 (price may vary). Also, 80% websites kill the credit card so never use it.
There are tools also available on the internet to check the credit card status, but most of them are a backdoor or Trojan so prefer not to use it.
As such there is no easy method to check it. Carder uses own ways to find it out. One of the ways is…
Most carder go to Porn sites, buy a membership and confirm the credit card is live and proceed with carding .
Q5. How to check the credit card is live or dead? (Skype Method)
(Note: method is posted on March 16)
Login into Skype account and call on Magic number +18005xx5633 (masked). You will connect to voice mail (lady’s voice). Start by entering the credit card number, and voice mail lady will stop automatically.
After that enter Expiry date of a card like 01 16 (mm: yy format).
If your credit card is live then voice mail lady will speak like “Thank you for calling, we really appreciate your business, since u are a 1st-time caller we would like to connect you .. blah blah” then just hang the call.
But if the credit card is used and voice mail lady speak like “Ohh I’m sorry please re-enter your credit card number now” then the card is dead. You can repeat the same process as many time you want.
Note: You need a good internet connection for Skype calls.
Q6. What is Bill=ship/Bill=CC/Ship=your Address?
Kindly pay attention here as it is also the main portion in carding process. Any mistake will cancel the order and id get blocked.
BILL=SHIP (Billing address: Shipping address)
Take a scenario of normal online shopping scenario, when you are doing carding you will use billing address and shipping address are same. Means in both u will use your address. No need to use credit card address.
Bill=Shipping address, Ship=your address
When you are doing carding , you will use credit card holder address as your billing address, and shipping address will be your address. Most sites use this method.
Now we cleared basic concepts and start with the actual process of carding .
Setup SOCKS proxy in Firefox:
Follow the steps à open Firefox à go to options àadvanced options à network à
A pop-up will come. It will show options
No proxy 2. Auto Detect 3. Use system proxy 4. Manual proxy configuration
Select manual proxy configuration. Enter socks host: <<proxy ip>> and port: <<proxy port>> e.g.: 141.141.141.141: 8080. Press ok and restart Firefox. Now you are connected to secure Socks5 J
Note: when you buy a socks always match with credit card holder address. If credit card holder is from California, USA then try to get SOCKS5 at least matching state, country J
Guys now time to start the Carding process. Kindly follow the steps:
1. Create the email id matching with credit card holder name. If his name is John Cena (the random name was taken), then email id should be [EMAIL=The contents of this section are hidden for your group]The contents of this section are hidden for your group[/EMAIL]
Register or Login or near about.
2. Now Run RDP and connect to the credit card holder location system to proceed. If you didn’t have RDP, then follow following steps.
3. Open MAC changer and change the address randomly.
4. Run CCleaner and clean all the unwanted data (cookies/history/temp data etc.).
5. Setup SOCKS5 proxy in Firefox. <<Already explained>>.
6. Be sure to use SOCK5 is matching to the location of credit card holder and be aware not to use blacklisted IP. Check with [To see content please register here]
7. Open the site for shopping. I want to recommend a website shop from your country because you don`t need to wait a lot for your package.
8. Register with credit card holder information (John Cena), name, country, city, address, and email.
9. Shop and choose your item and add to cart. Precaution: Select item not more than $500 at first step.
10. In shipping address add your address or drop address where the product is going to deliver.
11. Then go to the payment page and choose payment method like a credit card.
12. Enter all details of credit card manually because most of site having copy paste detector script.
13. Finally, in billing address add credit card owner address info and then proceed with the payment process.
14. If everything all right then the order will get successfully placed.
15. Once the order arrives at the shipping address, receive it from delivery boy.
16. (Few carder arrange fake id if delivery boy ask for proof).
Carding method using mobile:
Extra pro carder uses mobile for doing carding . If you followed steps carefully, you would also do that.
Basic requirement:
1. Require rooted Android mobile.
2. Install few application require for carding (proxy apps, CCleaner, IMEI changer, Photo and Android ID changer).
3. You can use any VPN for carding I recommend HMA or Zen mate.
4. You can use SOCKS5 proxy with proxy droid apps.
5. Also, proceed with IMEI and Android ID changer and do it.
6. Now connect with proxy droid with SOCKS5 proxy and connect it.
7. Now follow all the steps explained above J
Reference sites:
CC from shop à [To see content please register here]
Buy SOCKS from à [To see content please register here]
Download CCleaner software à [To see content please register here]
Download MAC address changer à [To see content please register here]
Download SOCKS checker à [To see content please register here]
* Acronyms:
* BIN: Bank Identification Number
* CC: Credit Card
* CCN: Credit Card Number
* CVV/CVV2: Credit Verification Value (Card Security Code)
* SSN: Social Security Number
* MMN: Mother Maiden Name
* DOB: Date Of Birth
* COB: Change of Billing
* VBV: Verified by Visa
* MCSC: MasterCard Secure Code
* POS: Point of Sale
* VPN: Virtual Private Network
* BTC: Bitcoin
* Personal Advice:
1. Normal users: Keep your credit card safe hands. Keep changing the credit card PIN on a monthly basis. Do not make the online transaction from unknown system/mobile.
2. Who want to learn carding – I observed many of the newcomers try to be smart and got ripped multiple times. Don’t do it, it’s finally your loss.
3. Carding is Illegal activity. Do not do it. If get caught, then, you will be in trouble.
4. Be safe and have fun
Chapter 2 : Ebay , Paypal.com
Ebay
As you will probably know , ebay.com is an online auction site where goods can be sold and bought by people over the world.
This site is one of the most visited shopping sites , because of its large variety of goods and prices , which can be lower then store prices.
Now the question is : how to contact the seller and arrange the fraudulent deal.
Well , to contact the seller you will need an ebay buyer account.This means you have to register yourself athttp://www.ebay.com , and do NOT use your real information , because
they will ask you to provide a creditcard and that one has to match with the adress on the card , so just use thecardholder’s info.
Also use a valid email adress , a yahoo or hotmail one for example , because you have to confirm your registration , and also the seller(s) will reply to you on that email adress.
If you see an item and you want to buy it , first ask the seller a question.
A question which will work well is the following one :
Hi there,
i am from USA and i am interested in purchasing this item from you .
i would like to pay this item with my paypal
But the item is a gift for my cousin in Belgium
can you gift wrap the package and calculate shipping costs for 2-3 days delivery?
please reply me with a total price and your paypal adress.
With this message i received alot of items , including cellphones , a PDA , shoes , a laptop , software, etc.
Paypal
Now i will (finally) explain the meaning of the word Paypal.
Paypal.com us an online payment method , which is used by alot of ebayers , and can be funded by bank transfers or creditcards (whoohoo)
All you need for this is a USA cvv2 (see chapter 1) and a valid email adress.
Visit [To see content please register here] & click on Register/Sign up.
Fill in the form with the creditcard info (name , adress, city, state, zipcode , country , etc) and the email adress you are using for Ebay.
On the bottom of the page they will ask you to pick 2 security questions and give an answer on those questions , in case you forget your password.
Pick any random question and fill it in with random info , paypal cannot verify it .
After you have signed up , go to your email inbox & click on the paypal email .
Inside you will find a link which you’ll have to click in order to confirm the registration. You’ll visit a page which will ask you to confirm your paypal password.
Fill it in, click on submit , and paypal will ask you to add a bank account. We aren’t interested in this , so click on Skip.
Then you’ll see your account overview. In the left menu , click on Add a Credit Card.
On that page it’ll ask you the cardholder’s name , the ccnumber , type of creditcard (see chapter 1) , the expiry date and the Cvv2 (cfr. Chapter 1)
If all information is valid , click on Submit and hopefully you’ll get a message saying : you have succesfully added acreditcard . Blablablaa…….
If you are unlucky , you’ll get one of the following errors :
* This creditcard has already been assigned to another paypal account , please use a different card.(no explenation needed)
* You have entered an invalid or partial credit card number (cc number is incorrect)
* Your card has been declined because we could not verify the 3-4 digit code on the back of your card . (cvv2 is invalid)
* This card has been declined by your bank issuer . (card is invalid)
After you have successfully added a card , look in your email inbox for some replies from sellers which will contain a full price for the item.
Go to your paypal account, click on Send Money.Fill in the recipient (seller’s paypal email) , the amount , and pick Auction Goods (non Ebay)
on the next page create a item number (10 digits maxium) , and a buyer ID (johndoe4852 for example). As auction site , select Other.
Then click on Continue , it’ll bring you to a new screen to confirm the information you entered.
As funding source , you’ll see that the credit card is selected .
On bottom you ‘ll see that paypal automatically selects the credit card adress as shipping adress. Leave this indicated like this , it’ll give the transaction a very legit look.
Then click on Confirm and hope for the best . If your purchase was succesfull , you’ll get a message saying you’ve sent cash or you paid for an online auction.
Then return to your paypal account & Log Out . Go to your inbox , tell the seller the money has been sent and provide the shipping adress in the email.
Also ask him to mail you back once the package is shipped .
If everything is ok, you should have the package in 1 week (including the weekend and holidays) .
After a while , the seller might mail you to tell you the payment has been reversed and asking you to send it again.
Simply ignore these emails by marking them as spam.
Chapter 3 Methods w/ carding
Method 1:
Following Sites Provide Free VPS:
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
[To see content please register here]
Method 2:
Enter [To see content please register here]
Press F12 and open Network
Follow these Images:
Code: The contents of this section are hidden for your group
Register or Login
Method: 3
Requirements:
- Google account
- Credit Card (Can use Yandex VCC)
1. Go to Google Cloud | [To see content please register here]
2. Register and fill out all the details.
Cool, Now you have 300$ free in a VPS which you can have 32 cores on, etc. enjoy)
Method 4:
Go to:
turbo.net
Now Register an account:
Select Program you want to use (Preferably Google Chrome)
Enjoy Free RDP!
Method 5:
1. Go to: [To see content please register here] ...de=0e0f79a9d02f
2. Register and verify your email
3. Select what kind of OS you want - windows server/ubuntu
4. Now Wait for 30 minutes for the server to build
5. Now go to the control panel and get the user/pass for remote desktop
6. Cool, Congratulations Now you have a free VPS
Method 6:
Get a Lifetime Free VPS:
1. Order the 'BackupHD Classic Free' euserv.com/en/cloud/reinforcement HD-free.php
2. Log in into client board and check if the contract has been made.
3. Wait until the contract has been handled (this take a few hours). You will get an email when it's done.
4. Click on select behind your contract
5. Click on Innovation and Test-Center in the left menu
6. Click on Requested Participation behind CBCI closed Betatest
7. Wait for your contract has been handled (this can take few-hours). Presently you can install your server through customer panel, and you have a little backup space as well.
Method 7:
Get a Free VPS/RDP under 5 Minutes:
1. Go to serveroffer.lt and peruse their site for one moment or so until you get a message like this [To see content please register here]
2. Answer them pleasantly.
3. They will ask you on what bundle you need
4. Pick one of their services, like VDS-10 It's excessive; I think VDS-3 or VDS-4 if possible
5. Attempt with different servers on the off chance that you need
6. They will likewise request an account, simply make it with fake data (fake info)
7. They will also get some information about the OS, pick a Debian 9 since Windows commits to have an OS running and it's a waste of resources
8. You will get your server info in your email
Method 8:
First, open the following Link and Sign Up to get your $10 credit.
(For non-ref interface - > [To see content please register here] [This does not give you $10 credit]
While filling your billing details, click on "Have a Promo Code?" at the bottom of the page.
Enter any of the Promo codes to get additional credit:
DOPRODUCT15 (Get $15 FREE)
From the first step, you will get your first $10 credit, and by utilizing extra promotion codes, you can get up to $35 of all-out credits.
Note: Some codes give more credit on higher plans.
Note: If your code doesn't work at that point open a ticket and your issue ought to be solved.
For Creditcard - > Utilize a VCC with low an incentive inside (For check), the rest you can utilize fakenamegenerator to fill in the details.
Multi-month VPS = $5
So you'll get 5 months VPS
Method 9:
1. Go to [To see content please register here]
2. Register and Confirm account from your email.
3. Go to the VPS segment - FREE VPS
4. Select Rule One - Rule One
5. Select the free plan
6. Select the Desired Server.
7. Your FREE VPS is Ready
From Collection of all these Free VPS/RDP Sources. Few may not work depending on altering their TOS with time.
——————————————————————————————————————
Disclaimer: Yes the setup does require some personal information, but the VCCs are anonymous and customizable.
Privacy.com is a service that allows you to create multiple VCC's using any name and billing address that you'd like. For each account they offer the following customizable options for each VCC Created. Use any or all options to customize your VCC.
• Merchant Cards: VCCs that can be used only with a specific merchant.
• Single-Use Cards: Cards that self-destruct 2 minutes after the first charge to that particular card.
• Spending Limit Cards: Set a spending limit of as little as $1 to the card, and no further charges can be made to that card.
• Cards will work with any name and billing address.
Follow these steps to create your account and VCCs:
1 Go to privacy.com
2 Sign up using a valid email address and password.
3 Confirm email. Then fill out information page.
4 Verify your phone number. You can use textnow if you prefer a burner.
5 Connect your USA bank account. (I know, this part sucks).
6 Once your account is created you are free to create as many VCC's as you'd like.
7 Just click on "New Card," pick a nickname for the card, and assign it the restrictions/customizations that suite your needs.
——————————————————————————————————————
Requirements :-
HideMyAss! Pro VPN - Download
Mozilla Firefox - Download
Credit Card (Amex/Visa/Master Card)
Steps To Card Amazon Using Android :-
1. First of all connect your VPN to the Credit Card owner's country.
2. Open Mozilla Firefox.
3. Go to Gmail.
4. Make a new account with CC owner's name.
5. Don't put your number for verification.
6. Now visit Amazon.com and Login Amazon.in
7. Make new account with CC owner's name.
8. Now add to cart any product Sign Out.
9. Do not disconnect the vpn.
10. Sign in after 15 minit.
11. Proceed to checkout.
12. Put the address of cc owner in the billing address and your address in the shipping address.
13. But make sure the delivery of the product is available in India. If not then change the product.
14. Check Gift option, if available.
15. Place the order.
16. Don't sign in again.
17. You will get the shipping details in gmail so dont sign in through amazon.
18. Wait for the product.
19. Done.
Reason If Product Not Shipped :-
1. The Credit Card is dead.
2. VPN not connected for 15 minit.
3. Steps not followed correctly.
Teaching Carding Selling Carding Tools
Chapter 4 How to
How to card:
1. Make a email (gmail, hotmail, etc.) with CC matching name. For example If CC name is John Wild then make like [EMAIL=The contents of this section are hidden for your group]The contents of this section are hidden for your group[/EMAIL]
Register or Login
2. Run Remote Desktop Connection and connect with your RDP Host. If u don’t use rdp then do the following steps in your pc.
3. Run MAC address changer, change all MAC address.
4. Run CCleaner. Analyze and clean.
5. Set socks5 in Mozzila firefox. It was explained how to do it above.
6. Restart Firefox and goto [To see content please register here] and check your ip is blacklisted or not and as same as CC holder address.
7. Now open shopping site. We want to recommend a website shop from your country. Why? Because you dont need to wait a lot for your order to be shipped.
8. Register with credit card holder information, name, country, city, address, and email you made one just for this order.
9. Choose your item and add it to cart. Never choose big amount at start.
Try to card small amount item first within not more than $500.
10. In shipping address enter your address or your drop address, where you want to deliver product.
11.Go to payment page, choose Credit Card as payment method
12.Enter your CC details. Like CC Number, CC holder name, CVV/CVV, Exp. Date. Don’t copy-paste info. Type it one by one. Because most of sites have a copy-paste detector script.
13. Enter CC holder address into Billing address. Now proceed to payment.
14. We are sure if you do everything right then order will be successfully placed.
15. Wait for order to arrive to your shipping address. When they will deliver the courier boy will call you. They ask for any ID card. If you can make a fake ID card then good. Otherwise show your any ID card (Adhar Card, Voter ID, College ID card).
Basic reqirements for carding from Mobile :
1. Mobile must be rooted. (offcourse ew recommend any Android smartphone)
2. You must install few apps : IMEI changer, Phone ID changer, Android ID changer, Proxy Droid, CCleaner
3. You can use HMA VPN for carding in mobile.
4. You use SOCK5 proxy with Proxy Droid apps.
5. You must change IMEI, Android ID etc evrything before starting carding .
6. Now connect proxy droid with SOCKS5 proxy and connect it.
7. Now follow all steps of carding that mentioned above…
Ok, so you got your cc, your drop and try to be anonymous as you can make yourself.
Now what sites are cardable?
THE ANSWER IS: ANY AND ALL SITES ARE CARDABLE
Why do We say that? because it’s true. Whatever you card, make sure that you have all your info prepared before carding it. If you don’t get success first time then you have to use other BIN CC and Others Method. Have use your brain & find different Logic for different site. You may Kill 2-3 CC's when trying any sites. But you will find out the working method for any site.
|
|
|
|
| Cracking Method Using My Knowledge |
|
Posted by: Blackhatking - 02-27-2020, 04:09 PM - Forum: Public Carding Tutorials
- No Replies
|
|
There will be a Mediafire link to download the programs, as well as a VirusTotal link. The programs we will be using are:
1) SQLi Dumper
2) Notepad++
3) Dork Generators by N3rox and JohnDoe
4) Sentry MBA
5) Gather Proxy
6) Online Reverse Hash Tool
download all these toools here [To see content please register here]
also download sandboxie seperate [To see content please register here]
DISCLAIMER: IN THIS GUIDE I AM USING SANDBOXIE TO OPEN THE PROGRAMS FOR MAXIMUM SECURITY. I HIGHLY RECOMMEND USING SANDBOXIE TOO OR A VIRTUALBOX/RDP. I AM NOT RESPONSIBLE FOR ANYTHING THAT HAPPENS TO YOU FROM THESE PROGRAMS. MOST OF THE ANTIVIRUSES WILL FLAG THE FILES AS VIRUS AND DAMN RIGHT THEY ARE, MOST OF CRACKED PROGRAMS ARE FULL OF VIRUSES. JUST ADD AN EXCEPTION AND ALWAYS RUN IN SANDBOXIE/VB/RDP. DOWNLOAD AT YOUR OWN RISK.
Now this is long but you can make $$ profit
Making the dorks.
Dorks are used in SQLi to create a list of URL's where we can analyze and find which ones can be exploited. So, let's learn how we can create our own dorks, shall we?
Firstly, open the two dork generators by N3rox and JohnDoe, as well as the Notepad++.
Step 1: Go to the dork generator by JohnDoe and click the letter D, If they are already clean, skip this step.
Step 2: Now go to the Grabber tab and press Load.
Step 3: Load the url text i included in the zip file. (The program interface sucks, sorry for that, its JohnDoe to blame)
Step 4: Wait for the program to complete loading.
Step 5: Copy the Page types p.2 contents.
Step 6: Go to Notepad++ and make two new files.
Step 7: Paste in the contents of the box we copied just a second ago.
Step 8: Go to Search > Replace.
Step 9: Press the "Space" button on the first box and "Backspace" on the second box, so we can remove all the spaces from the lines. Click Replace All.
Step 10: Now, search all the lines and remove any weird marks, until there are only words like "example=".
Step 11: Now go to Page Types box in JohnDoe's generator and copy all the contents, and paste them in the second file you created in Notepad++, search all the lines and delete all the bad types until there are only good ones left. Just like we did before, we keep only the good lines. If you didn't understand what "bad types" meant, just write down the same page types as mine.
Step 12: Now go to the N3rox's generator and write down some words in the first box on the left, for example "steam, money, LoL, bf1... etc" and separate them in their own lines. Also, copy and paste the clean page types and page types p.2 we made a while ago from Notepad++ to N3rox generator, in their own boxes Click Generate. (i used translated page types p2 and keywords to German, so i had German dorks. Use any language you like, the best and most common is English. I will also show you how to translate them in a few steps below.)
Step 13: The dorks file should be in the folder where you placed the n3rox generator. If it isn't there, check the Sandboxie folder, like i showed you a few steps above. Congratulations, you just made your own dorks and you didn't even pay for them.
Step 14: If you want to make dorks in other languages so you can get accounts of that nationality, go to the Translator tab in JohnDoe's generator and write your keywords in the Name of Pages tab, select the language, press Translate and wait for the process to finish. After that, you can copy the translated contents and paste them in N3rox's generator.
So, what we did basically was generate the Page Format and Page Types from the URL's and we used them to make new dorks. We cleaned them and we also translated them so they are even better. We used JohnDoe's generator to generate the Page Formats and Page Types, and we used N3rox's dork generator to generate the dorks, with those Page Formats and Page Types. You can also import your own URL's after finishing with SQLi Dumper, as i will show you later on, so you can generare more Page Formats and Page Types. This is the hardest part of all the process of account cracking and it's not even that hard lol. What you need is some imagination for the keywords and that's all the fuss. Let's move on to the next chapter.
Making the combolists.
Now is the time to use the dorks we made, to make our combolist. We will be using SQLi Dumper to make some good combos so we can test them later on. Let's begin.
Step 1: Open SQLi Dumper
Step 2: Now, open your dorks text file with Notepad++ and copy your dorks. (Don't copy more than 15k because your SQLi Dumper will crash 100%). Now click Start Scanner and wait until you have about 10-20k URL's. If your SQLi dumper does not get any URL's, make sure you have it unblocked from your firewall and antivirus and restart the program. If it still doesn't load any URL's, load the ones i gave you in the .zip file by clicking the Import button, and press Start Scanner. If it still doesn't work, then GG. See you in a while, after you get some URL's. After you see it has about 10-20k Valid Added, press the Cancel button. It doesn't stop at 100%, that's why we have to do it manually, based on the Valid URL's added. If the valid added stay the same number after 15 mins, click cancel. If you Loaded 20k dorks and you got 1k URL's after 3012831280441279410274 days, you have bad dorks.
Step 3: Now go to the Exploitables tab and press Start Exploiter. Use as many threads as you want, i use about 30.
Step 4: After it has completed exploiting, (you can see if a process has completed by looking at the bottom of the SQLi Dumper, it says Exploited thread done, exploitable detexted: X. If you dont see such message, then you need to wait until it's done. ) it should look like this. (keep in mind that antivirus messages may pop up, saying that a webpage was blocked. Thats ok, nothing to worry about.)
Step 5: Go to the Injectables tab and press Start Analizer. I use about 30 threads again. Wait for the process to complete. Note that your SQLi Dumper may crash during any of these processes. If it does so, just recover the files in Sandboxie and reopen the program and continue from where you were left.
Step 6: After the Analyzing process is complete, your Dumper should look like something like this.
Step 7: Click the Method tab, until we have all the Unions sorted from the Errors.
Step 8: Click The [+] box in the bottom left corner of the dumper.
Step 9: Check 2 boxes out of 4. Write in what you want your combolists to be about. I used username and password because i want my combolists to be of usernames and passwords. You can also have 1 box checked. You can also write in anything you want, such as email and password, name and lastname, credit card name and credit card number, etc
. Also make sure Current DB is checked and Collumns as default.
Step 10: Select all the Unions with the SHIFT button and click Start. A new window will pop-up. Wait for the process to finish. Don't close this window. EVER.
Step 11: Scroll down until you find a database with a good number of Username or Password rows. If both Username and Password have the same number, its perfect. If you only see Username or Password, its ok too, but the database may not have good combos. Its all about luck here. Select a database with more than 5k rows.
Step 12: After you found what database you want to crack, select the URL's name and click Go to Dumper > Dumper Form.
Step 13: This is the time where you need to guess. Click on a column you think the combolists will be at and press Get Columns.
Step 14: I found mine, so now i click on what i want to dump. In this case i only want to dump usernames and passwords. Check on anything you want to dump and press Dump Data. If you had a large number of rows, this is gonna take a while to complete. Also, if the Dumper crashes here, i feel sorry for you son, you cant do something about that, you need to restart dumping the data from the beginning.
Step 15: As you can see, i got very shit combos. If you get bad combos too, press X which is under Schema tab and search for a new URL.
Step 16: After you dumped your data, press Export data. A new window will pop up, just make sure it is as mine. Press start when you are done.
Spoiler Show
Step 17: Click save and find the text document you just saved. Check the Sandboxie location if you cant find where you saved it. Open the text file and remove the first lines until you only have your combos in there. If your passwords are not encrypted, you can skip chapter three and you can go straight to chapter four. If your passwords have a weird format like mine, we need to find out which type of Hash it is and we need to dehash it.
Dumping data from a database is all about luck. If your SQLi Dumper keeps crashing, you can dump databases with SQLMap, that never crashes (i cannot post how to do it because SQLMap keeps updating and the commands keep changing all the time. You can search on google or youtube how to install SQLMap and how to use it. I am currently using it on Kali Linux 2016 on VMWare Workstation 12). You will either get good combos or you will get shit. Just never give up, and always keep trying. You can also save your Trashed URL's to generate new combos with JohnDoe's generator.
Dehashing the passwords from a combolist.
Step 1: Open ORHT ad click Ok. If you have opened ORHT and you cant find the window or you minimized it accidentally, you can find it in the tray menu.
Step 2: Click Main Menu > Start From File, and load the Combo you dumped. My hash encyption was MD5, so i have checked MD5 as Hash Type on the window.
Step 3: Make sure your ORHT looks like mine. Click OK and after some time, a message will pop up saying how many hashes were decrypted. Click OK again.
Step 4: Go to Main Menu > Save to File and make sure your OHRT looks exactly as mine. Click Ok and wait for the process to finish. A message will pop up that will say sucess. Click OK and save your DEHASHED combolists.
Basically thats it, if you dumped 100k combos, its most likely that 30% of it to be dehashed, but thats on luck again.
There is also another method to dehash combos that is alot faster and has much more success rate on dehashes (I have 98% most of the time). Though it requires MANY Gigabytes of your drive (mine is currently 115Gigs). There is already a guide on Nulled made by Calix and can be found Here so i will not rewrite how to do it. If your combos were not encrypted then what are you doing on this chapter?
Checking the combos.
Before we start checking the combos with sentry, we need some proxies.
Step 1: Make a new text document and name it proxies. Then open Gather Proxy and go to the Advance tab and change the settings same to mine.
Step 2: Go to Gather Proxy tab and press Start and wait for the program to finish. After its done, press SHIFT to select all combos and copy and paste them in your proxies text document.
Step 3: Open Sentry MBA and go to Settings > General > Load Settings from Snap Shot and load the config of the site you want to check your combos. In my case, i will be using the NA League of Legends server because my database was from a site from the US Wink. In the .zip file i have all the League of Legends configs. If you dont want to check your combos for league or if you your combolist is email and password (emailass) form, you can find all the configs you need here from Nulled. I will not be posting them here.
Step 4: Go to Lists > Proxylist > Clear List and then Load the proxies from the text document you made earlier.
Step 5: Go to Lists > Wordlist and press clear combo if the upper left box is not clear. Press Open a Combolist and choose the combolist we dehashed a while ago.
Step 6: Go to Progression, set the bots to a high number (i go for about 90-110), click Start and Click start one more time.
Spoiler Show
Step 7: Wait for the program to finish, when all combos were checked as we can see from the bottom of the window, we can click Stop. Press SHIFT and select all the contents from the Hits tab and right click and save them to clipboard. Make a new text document and paste them there. Congratulations, you have your ready combos that work for that specific website/game, etc... In my occasion it was for League of Legends.
The whole process is similar to the oil process. We take all the shit we can find and we filter it to a good result. If you read carefully this whole tutorial, you have now learned to:
1) Make your OWN dorks.
2) Dump your OWN data.
3) Make some good out of it
|
|
|
|
| Cc TopUp Tutorial |
|
Posted by: Blackhatking - 02-27-2020, 04:05 PM - Forum: Public Carding Tutorials
- No Replies
|
|
Tools needed...
1. Drop(The cc you're topping up)
2. Log (I have a farmers bank business log with $3m on it)
3. HMA VPN
4. Good Laptop
5. Good Data Connection (I use smile)
Loading Tech By Disturbing Chase
So there are two ways of topping up cc
With online access
without online access...
That's is with login username and password and without login and password
Talking about cc with online details esp Yankee banks like capital one or chase bank credit card...all u need is just username and pass and verification code from client email or he gives u the email and pass but its advisable you take every information about the credit card in case the client start misbehaving... You can load the account and use to shop phone online (that part is another diff work entirely.. That's Carding ) or pay for dating sites
Logging into the credit card
For example.. If its Chase Credit Card...you'll use chase.com
And after entering the logon details; It will ask you to collect verification code frm email or phone number
Then if client provide you the email and pass...login and pick the code sent from chase from the email or ask the client to pick it from phone or email for you then u enter it: So it allows you in
Same goes for capital one credit card and other Yankee credit card
Then when you're in...you'll find something like Pay Card...
Then click on "Pay Card"
It will redirect you to a page where you'll be asked to choose account you want to pay from, the amount you want to pay and the date will automatically come up
Then click on "add account" or something similar to that phrase depending on the card issuer...then enter the routing number and account number and it generate the bank name itself... Enter the amount u wish to pay then click "okay" or "proceed" then confirm payment
From there you'll be asked to confirm payment... Just do
Then wait for 12-24 hours...payment will be made
|
|
|
|
| AMAZON CARDING 100% |
|
Posted by: Blackhatking - 02-27-2020, 04:02 PM - Forum: Public Carding Tutorials
- No Replies
|
|
Well I'll explain them 2 ways
That thing you need is to card?
1 . Cvv2 to address, Full Name, Phone, Zip, City, and State of the cc.
2 . you need is a sock 4 or 5 which is the state of the cc (I hope the city) And this sock must never have used before to create an amazon account. If you do not know what a sock google it!
3 . you need is a program to clean up cookies. At the end of the post I put it.
METHOD 1
Well, first go to amazon. Create an account with the sock.
Now they have to act like a normal buyer. Although they reviewed everything seems stupid for something is more difficult now in amazon card. They must add to cart sign out after. Wait a few hours after entering the car denuevo delete add etc anything. You get the point. Act as a buyer either. DO NOT ADD ALL OF A PURCHASE AND Altira. Well the main thing is that the first purchase has ke be between $ 30-100.
But a little part of Social Engineering. first since they already paid. closed session, Wait 5 minutes and come denuevo and can send an email to support. Saying thing you need is to buy as soon as possible because your child reaches the other day from college and you want to give what you bought to put an approved university happy because bla bla. Ahi invent what you want.
Then depending on what time it is very fast You will receive a response from amazon to tell. Well we will look quickly your order and send it.
If they say they called the phone number of cc.
And if you are lucky and no one answered then told that a problem had changed their home or nose And they call to another phone.
After your order arrives. Your account becomes an account credited and after that can get started to place orders between $ 500-800 obiamente the cc has to be fresh and cash.
METHOD 2
Well same as above using the sock account is created. This form is easier and the more I use. But it is a bit less effective. First buy something very cheap $ 2 at most. (Something very important, never ask speedy delivery Next Day Saber) Always ask for the cheapest or slow. Well once your order was approved the same as above becomes your own account ACCREDITED
I recommend the ship to choose FedEx as it does not have as much security as UPS
When the package if they do sign say it is impossible to you for any reason and that thing you need is the package because it is medicine for your dog or yourself etc. Inventenle take something that delivers sympathy with the package.
Once this is done we can buy things between 600-800 $.
In any case we do not recommend ordering $ 200-500 because that is less suspicious.
Another thing you can do. If you have a botnet as zeus or SpyEye etc.
You can use an account that has fallen from amazon. With the mail of the person. It is very easy in those cases that go orders because the account is already established.
Very important:
Clean up your pc, Flash cookies, MAC address, everything!.
Make it realistic not believe the account and buy some $ 300 Altira.
Amazon cancel your account if you do.
Program to clean Flash cookies:
Code: The contents of this section are hidden for your group
Register or Login
|
|
|
|
| CARDING Cdkeys.com FULL TUTORIAL with bin |
|
Posted by: Blackhatking - 02-27-2020, 04:00 PM - Forum: Cardable Websites
- Replies (2)
|
|
BIN: 492182 465942 465901
Method
Step 1. GET UK / Canada / Germany without postal code Vbv / cc status (work containers above)
Step 2. Configure your system (ccleaner, Mac address changer, download dns through cmd, socks that match the cc postal address, change the time zone and keyboard language to the ip location time zone of socks)
Step 3. Verify anonymity at: Whoer.net Check2ip.com Whatleaks.com Doileak.com
Step 4. After completing the anonymity check, check the status live on brazzers.com
Step 5. Create a Gmail or Outlook account with the cc holder details
Step 6. Go to cdkeys.com and load 2 to 3 different iTunes steam psn cards or any other combo, but keep it different and below $100 for the first order
Step 7. Then finish the purchase (NOTE: do not end the purchase as a guest) Create an account with them Complete the billing details correctly and finish the purchase "Thank you" is what you should receive And the digital cards are sent in 10 minutes by email. If cc is still live, hit it again and enjoy your egift cards
|
|
|
|
| Best way to LOGIN into Amazon Accounts (E-Mail Access Only) |
|
Posted by: Blackhatking - 02-27-2020, 03:57 PM - Forum: Public Carding Tutorials
- No Replies
|
|
First of all, i'm sharing this because i just discovered it (This means it's not mine) and i thought this could be very helpful for those who are buying or trying to login into Amazon Accounts and they get their accounts blocked.
1. You need to have E-mail access to the account
2. Always make sure, you are using fresh /live/not blacklisted SOCKS5.
3. To get access on email, use MOZILA THUNDERBIRD - [To see content please register here]
4. Step 1 - [To see content please register here]
Step 2- [To see content please register here]
5. To make a password reset, go to zappos.com do it from login page [To see content please register here]
6. Delete password reset email from inbox, and do not change email password, otherwise owner will catch you
I remember you this is not from my property, all credits to the autor.
|
|
|
|
| How to Check Balance on Credit Card? |
|
Posted by: Blackhatking - 02-27-2020, 03:56 PM - Forum: Public Carding Tutorials
- No Replies
|
|
There are many sites that claims to help check CC balance but many of them are fake and backdoors, and many of them do make valid CC dead.
So Follow Steps Mention Below, the Steps will only work with US and UK Based CC’s.
It will automatically tell you the CC balance.
|
|
|
|
|
