Lecture #18 - Working with Brutus (carding training 2024)

Carding

Professional
Messages
2,871
Reaction score
2,342
Points
113
Lecturer: Soul
Today the lecture is devoted to the topic of brute force, namely, we will focus on brute force of shops and working with brute accounts.
Let's start with the very definition of brute, and then talk about methods, methods and other points related to today's topic.
I will try to provide the material as clearly as possible and without abstruse terms.
What is Brute:
Brute is an automated method of obtaining accounts (hereinafter referred to as brute accounts) of various shops, by enumerating combinations from a list (base) of mail password and login password, using a program specially written for the shop or a universal brute force project like "Private Keeper"
In order to start moving in this direction and get ourselves material for work, we need to have:
1. The shop itself - which we will brutalize
2. Software - a program for Brute or a project on a private keeper.
3. Base - lines mail password or login password depending on the method of logging into your shop account
4. Proxy - list of proxy servers
5. Windows server/dedicator with average configurations and good internet
Now let's look at all these points in more detail:
1. The shop itself - which we will brutalize
To work with brute accounts of shops, we also need to find the most suitable shops, namely their accounts must have an internal payment system
Suitable ones are those that have a CC linked to your account or its internal balance, which will be used for you to enter goods from this store
I would like to draw special attention to shops in accounts where CC is linked
There are some that may require you to enter a CVV code or full card number when paying with a linked CC
Usually I immediately throw away such shops, it’s almost impossible to work with this material.
Looking for such shops is actually not a problem at all; everything is done quite simply. You can Google yourself, for example, USA shops, register accounts in them and see what is inside the account
2. Software (brute/checker) - a program for brute or a project on a private keeper
After we have found a shop that suits us, we need to get a brute force for it, for example the same project on a private keeper
You can order it from the guys who develop them for little money (where to look for a coder? - there is a forum, for example, BHF (there are many schoolchildren who are ready to throw in $2.84, so always use GARANT and it’s better on our forum)), depending on the protections and other problems available in the store
Also, upon your request, the Brute will be accompanied by an information checker, which will display information about the account in the txt file log about the presence of a card linked to the account, or the presence of a balance for convenience.
In the log, ask for information about the CH address and its orders, so that you can evaluate the account without unnecessary logins and select the right drop/sox.
3. Base - lines mail password or login password depending on the method of logging into your shop account
They look like this:
Mail password: ashleynicolebrock@gmail.com:neg4b45n5
Login password: ashleynicolebrock:neg4b45n5
When purchasing a database, you should pay attention to its theme; if you brutalize a shop, then, accordingly, its theme should be shop’s. This way you are more likely to find suitable material.
Many different databases are freely available here: https://leakbase.io/
And on the same BHF (https://bhf.ee/)
If you come across a more or less good Shop database, for example, 300k lines, you can make yourself material from it for weeks, or even months, in advance. Everything again depends on the traffic to your store and the quality of the database.
There are also valid and invalid databases
Valid - you can log in to your mail using your login and password
Invalid - email password does not work
For shops, I most often use invalid databases, I just flood CH’s email if necessary
4. Proxy - list of proxy servers
A proxy list is an IP address in the IP:PORT format through which your databases will be searched in the program (brute force), the greater their quantity (pool) and quality, the more comfortable the brute process will be.
Proxies are relatively inexpensive, but prices still vary. From $5 to $300 and above - subscription per month. And from my own experience, if you work in unpopular shops, those that cost $5-$10 may be enough
Examples of services:
- asocks.com
- astroproxy.com
5. Windows server/dedicator with average configurations and good internet
I recommend using the server on Windows OS. Approximate minimum configurations for comfortable work: 4 cores, 8 RAM, from 100MB of Internet. And of course, you should check with your seller in advance whether brute force is allowed on them, in order to avoid turning it off and not lose all the data right during the brute process
We found a suitable shop - ordered/made a brute force for it - stocked up on databases and proxies - put everything on the server and collected the material. In principle, the formula is not complicated)
Next we can talk about more detailed work with brute accounts themselves
I would like to say right away, based on personal experience, that working with brute material is quite comfortable and much easier than with the same CC, since entering from brute accounts does not require fine tuning of the system
In many ways this is true and in general only an IP address for the country is enough
From the pile of material you have collected, you should pay attention to accounts in which there are a large number of orders made by CH. This way, shop fraud will be most loyal to the order we have already placed, and if several CCs are attached, then this is generally great)
What are the benefits of working with balances:
Well, firstly, we already know the exact amount for which we can place an order, looking at the account balance.
Also, when driving from the balance, we largely avoid fraud and our success in driving in is close to 95%.
Judging by my experience, the main and perhaps in many ways the only reason for canceling an order when entering from the balance remains only on the vigilance of the account owner, so SPAM YOUR EMAIL WHEN WORKING WITH BRUTAL ACCOUNTS)
Of the minuses, this is probably that accounts with balances are more difficult to find than accounts with a linked SS, but if your store has both, then ask the person who does the brute force for you to also do a separate sorting of accounts with SS and accounts with balances in different txt files
Working with brute accounts in which CC is linked:
1. By driving into the CH followed by a reroute or pickup
2. By hitting a drop or an intermediary
I note that in many shops the addresses of intermediaries are blacklisted and their protection system can simply automatically cancel orders with the intermediary’s address.
I prefer to hit the drops. The formula is just as simple:
I take a Brute account with a CC, the more CC is linked the better and the same with orders in the account. Then I log in to my account (IP for the country, or better yet, for the state).
I don’t poke around the shop a lot, fill in cookies, then change or add the address of the drop in the account, it’s also advisable to select the drop according to your state.
Then I find the product I need and add it to the cart, again I poke around the store for a couple of minutes and try to place an order.
If he allows me to place an order, I immediately start spamming CH’s mail in order to try to hide the letter that dropped to him about the order made and not receive a cancellation on his initiative
It happens that when shops change or add a new address, they start asking for CVV or the full card number. But this does not mean that such shops are useless to us.
They can be worked out for reroute or pickup.
The sequence is the same, we place the only order on CH, after which we contact the callers and ask them to reroute to the address we need, or to hold the pack under the pickup
Again, it all depends on the particular shop.
Many people use brute accounts to insert their own material into them, their CC. Since if the account already has orders, fraud will also be more loyal than from a newly registered account
I’ll also add a little on the general topic of Brutus. In terms of working with shops, this is perhaps the most cost-effective option financially.
Brute accounts of various shops themselves cost on average 1-2 dollars, as if the cost is not the same if you take CC separately and beat it from self-regs.
But if you extract the material yourself, run the brute shops yourself, then the costs are generally reduced to a minimum, as I said above, from one day of brute production you can procure yourself material for weeks, or even months, in advance. Again, depending on the traffic of stores and the database.
Now you can ask questions, friends, I advise you to re-read the lectures).
Serpentin666 20:00
Where can I buy ready-made brutal shop accounts?
Soul 20:01
Serpantin666, I have no right to recommend you someone specific.
ya8no 20:01
How are proxies used during brute force? change in turns? How many proxies are needed for brute force standards so that everything goes ok?
Soul 20:04
ya8no, the more the better. I would recommend that you load at least 100 pieces, so the likelihood of hitting a block and not catching it will be higher. Yes, requests will come from different IP addresses, thereby eliminating suspicions of brute force on the part of the service. From a technical point of view, I don't know how everything happens, I'm not a coder
vitoscanelli 20:05
Based on the lectures, is this one of the easiest ways to carding?
or are there any pitfalls?
in your opinion, it’s just very interesting
Soul 20:05
vitoscanelli, one of the simplest, right. But there will be subtleties and various moments in any direction, here they are the least, in my opinion
Snork 20:12
How long have you been on the subject of Brutus? What is your experience and successes over the past six months?
Soul 20:15
Snork, now 90% have left the brut, because the direction of logs has become popular, when normal logs stopped being sold, then someone returned to the topic of brut) In general, something like this. I've been interested in Brutus since 2016; I haven't been working with it as actively for the last year. Only for selected services and not related to clothing items
nlf 20:15
“The brute accounts of various shops themselves cost an average of 1-2 dollars” what is the reason for such a low cost?
Brutal account - necessarily with an attached CC or balance? or most often empty
Soul 20:18
nlf, the cost of production is not that high and is usually sold in packs, now the average price is $3-7, unknown guys sell for $1-2, they are building up their reputation, so to speak. No, not necessarily, you can choose when purchasing if the seller checks for it, you can take it for luck, if, again, such an opportunity is provided by the seller
rus616 20:18
Do you brute the grandfathers yourself or buy them? If a stick is tied, then we also throw away the acc? At the end, can I share my story of Brutus, maybe I’ll give someone an idea
Soul 20:20
rus616, gives his person who can get them) No, I remember the time when accounts with PP were valued by me. But I repeat that I have been ordering Brutus for completely different services for a long time. Of course, after the lecture, tell the guys about your experience, everyone will be interested, I’m sure
If there are no more questions, then let's finish. You and I will still have lectures, I will be glad to see everyone. Thanks for the questions, friends.
 
Top