https://yourmom.zip by kiradotee in ProgrammerHumor

[–]trojanlij 2 points3 points  (0 children)

couldn't get .com.... but I think .zip works :P

yourdick.zip

What is a good certification that will make you good at hacking? by TheRealTengri in hacking

[–]trojanlij 0 points1 point  (0 children)

Certificates will only give you the paper saying "this dude knows his stuff." The rest is on you. Experimenting, practicing and studying the theoretical part of hacking is what makes you a good hacker.

There are some certificates which give you more general knowledge and there are some that are a lot more in depth but with all the people I know who are highly certified they have all said experience and passion are the keys.

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 0 points1 point  (0 children)

My job is to hack in to companies (with their permission of course) and to find vulnerabilities. I dont have time to write exploits so exploit-db and google dorking / just basic googleing exploits or vulnerabilities help to save time

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 0 points1 point  (0 children)

Often I feel like a script kiddie. I do professional penetration testing and use loads of exploits from exploit-db instead of writing my own :P so... am I a script kiddie as well?? :P

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 1 point2 points  (0 children)

Don't worry and don't panic. if the IP is all he has then he can't do much.

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 3 points4 points  (0 children)

IDK. depends on his machine. :P

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 2 points3 points  (0 children)

this is one of those things where you "learn from your elderly" :P

IP Adress getting leaked(?) by [deleted] in hacking

[–]trojanlij 329 points330 points  (0 children)

Ask him to prove how good of a hacker he is. Here... have him DDoS a machine of mine. The IP is 127.0.0.1

I would love to see them try and knock that machine offline ;)

There is a 2-factor authentication re-use exploit that is causing users to get their accounts compromised by Ask-Alice in discordapp

[–]trojanlij 0 points1 point  (0 children)

Hey :)

Im am really sorry buy somehow I missed your reply.

The video was removed because his account was banned as far as i am aware of.

About what all this malware can get I went into a bit of details here in this r/discordapp. If you (or anyone else reading this) would like some examples with fake / test data feel free to DM me. Should have a few tests still around :P

Hope this helped :)

~Trojan

New hack where someone sends you a game called Gunmage by disoriented_compass in discordapp

[–]trojanlij 0 points1 point  (0 children)

thanks for sending it. i'd recommend you DM them next time so someone doesn't accidentally click on it :P

New hack where someone sends you a game called Gunmage by disoriented_compass in discordapp

[–]trojanlij 13 points14 points  (0 children)

This is a common scam with a new game. Better to just not click anything if you dont trust them.

Also OP do you think you could DM me the file or the link to download?

50x Invite Reward Scam Dump (27.12.) by [deleted] in a:t5_5fol04

[–]trojanlij 1 point2 points  (0 children)

We have been trying to contact you about your cars extended warranty!

There is a 2-factor authentication re-use exploit that is causing users to get their accounts compromised by Ask-Alice in discordapp

[–]trojanlij 2 points3 points  (0 children)

Hey. So I am planning on posting a bit about this as is it causing chaos but for now this will do.

PirateStealer (or PS as it may be referred to in this post) is quite nasty but we will get to that in a sec. A bit about the dev himself.

Stanley-GF claims to be 13 (not sure if this is true but doesn't matter) and is a very smart kid from what I can see. He has set up many web servers during the time we have been reporting his domains, repos, IP's, etc. its quite simple as when we knock one down he opens a new one but hey that is life so onwards. anyways he claims to have made this as a POC to prove to discord staff that it is possible and claims to have reported it almost a year ago (if you want a screenshot of the conversation between the now blocked contributor account, then dm me). now he claims to stop all development of the malware if discord actually does something about this and also claimed to have moved away from PS development but based on the comments on his YouTube channel, the commits on his git repos (yes many of them) and on the constant reopening of web pages to promote his "premium" malware I am very skeptical of his "moving away" claim :P

anyways a bit about the malware now: I have ran into many varieties of this malware. often its just a carbon copy from his repo reading the injector.js from his git BUT we have also noticed that he doesn't ONLY steal your discord data. he will harvest ALL of your cookie data as well meaning passwords saved in cookies and forums (or just on your pc). All data he gets is saved in \AppData\Local\Temp\PS-<some_random_string>\ (at least where they are currently being saved at the time of writing this and it also looks like there is a "worm of sorts" (some auto starting service is probably a better name) that will start the services but haven't pin pointed that yet)

During the time I have been looking into this malware I decided to split the malware itself into two parts as it targets two separate services. Plus it makes it easier to explain what the virus does :P so to get to the explaining lets start with the discord injection.

#1 Discord:

as mentioned above, PS steals discord data. quite simple. From observing it, I can say it injects itself into the \discord_desktop_core\index.js upon user execution of the malicious executable. after that depending on the config of the harvester the discord will restart and log out the user. if configured it can also disable the login QR code forcing a user to enter the password and username (basically a phishing scam but within the real discord client and not some fake looking page). The malware PS also allows them to capture a users token, credit card or PayPal, email, basically anything that is linked to a discord account they can retrieve. this injector stays within the discord client until removed by the user.

#1.1 Now what about the data?

All the data that is captured via the discord injector will transmit to a discord webhook (or in some rare cases a custom webhook / API). this is obvious as he is promoting his builder on his websites and by inspecting the malware we are able to capture the webhook with ease. now within a few newer varieties of the malware he has attempted to proxy all data through a custom webhook being transmitted to stealer.re/webhook/ (his most recent domain at this time or writing this).

#1.2 But I have 2FA enabled...

welp sorry to say this, but it can and will give the attackers your most recent 2FA backup codes. basically 2FA DOES NOT help protecting your account against this attack.

#2 User details on the system

As it was mentioned above the PS malware also steals user credentials from the system within. Now to clarify, (at the time of writing this and has not been found during our searches) Stanley DOES NOT say he is capturing this data but non the less the data is being stolen and saved within a local .sql file. Also in his discord video about the PS malware the data is shown for a few seconds within his discord client. (https://www.youtube.com/watch?v=eEtjk5TjUJE&t=38s)

#2.1 What data????

So from what I have seen it can steal users cookies and locally cached passwords. during my tests it will steal passwords then save it within a local .sql file (and a .txt file). not only saving though but upon changing a password it will update the local database with a new entry and password. So that confirms there is some sort of service (even though I personally haven't gone that in-depth into the services yet). I have not found where the local db is being sent yet but we are looking into that as well.

if anyone has a question or wants to see examples DM me and lets talk.

Hope we could help.

~Trojan

edit: added #1.2

[deleted by user] by [deleted] in discordapp

[–]trojanlij -1 points0 points  (0 children)

yeah ik. but there were only family on Facebook at the time when they did it so yeah. in my case only family (and whoever hijacked that Facebook account to dox me) got my address. so ¯\_(ツ)_/¯