TECHNICAL TIPS FOR CARDING

Teacher

Professional
Messages
2,669
Reaction score
818
Points
113
1️⃣ Spoofing ?

Spoofing was originally defined as the falsification of IP packets, whereby these carried trusted sender addresses. Nowadays, all methods are called spoofing, where fake addresses or hostnames are used to deceive authentication and identification procedures

2️⃣ Metadata In Mails ?

To view the metadata in your Gmail account, open an email, then click the down arrow in the upper right corner. In the drop-down menu (under Reply, All Replies, Forward, etc.) you will find "Original View". In Apple Mail, select a message and then choose : View > Email > All Headers. In Yahoo Mail, go to "more" and then to "download entire header". There is a similar option in other email programs

3️⃣ View IP Address ?

If you want to see your own Ip address, you can simply enter "IP Address" or "What is my IP" at Google.

4️⃣ Messaging Apps ✍️

There are many apps that promise to be safe, I have taken the trouble to pick some out for you.

https://otr.cypherpunks.ca/

5️⃣ Disable GPS (iOS +8.2.x-13.x.x)?

Go to settings, "Location Services" All of the services currently using the GPS feature of your phone. Touch "Location Services" field to disable GPS Tracking. The field now shows "off".

6️⃣ SS7 ?

SS7 is an international protocol. The Signaling System Protocol, together with a few other things, ensures an uninterrupted connection for mobile phone calls, even if, for example, you are driving on a motorway and therefore constantly change from one tower to another. But it can also be used for listening purposes. SS7 basically provides everything that is necessary to transmit a phone call, such as

★ establishing a new connection for the call
★ cut the connection as soon as the call is ended
★ charge the right one of the two callers for the call
★ Manage special functions such as call forwarding, display of caller names and numbers, three-way conferences and other functions of the so-called Intelligent Network
★ wireless services, including user identification, provider and roaming

PIDGIN + OTR INSTALL (ICQ JABBER ETC) ?

Having Pidgin with the add-on called OTR installed is one of the best ways of instant messaging while keeping ANON (ICQ JABBER ETC).

Many vendors within the markets and forums will use this for them reasons, I will guide you through the install of both Pidgin and OTR,if you are unsure how it works,dont worry by the time you have finished following my step by step you will have a fully working Pidgin and OTR with no leaking IP you will find the step by step guide later in the guide.,please find both links below


(install the OTR Plugin .. gz file)

SETTING UP A ICQ ACCOUNT

This is actually quite a simple task steps below

1️⃣ Head over to https://web.icq.com

2️⃣ Enter a burner phone number like textnow, or dm me for number verification for cheap price, and then 1st and last name (always use fake)

3️⃣ After this we can change number also easily, but now we have our ICQ account.

4️⃣ Go to Settings > Privacy, you can do nobody can call you or add you in groups, you can also see your session list.

INSTALLING ICQ ON LINUX

Code:
$ sudo apt install snapd -y

$ sudo snap install icq-im

SETTING UP A JABBER ACCOUNT METHOND 1

This is also a simple process, there are many Jabber providers but for this guide I will be using the provider I use.

1️⃣ Head over to https://lsd-25.ru:5280/register/new

2️⃣ Enter the username you desire

3️⃣ Under the username box you will see "server:" copy this down to a text file you will need this.

4️⃣ Enter a password

5️⃣ Enter your password again for "Password Verification:"

6️⃣ Enter the capture

7️⃣ Press Register

8️⃣ You now have a Jabber account
We will be installing Pidgin and OTR in the next part of the guide, and then adding our ICQ and JABBER account to it.

SETTING UP A JABBER ACCOUNT METHOND 2

1️⃣ Head over to https://www.xmpp.jp/

2️⃣ Click "Account Registration"

3️⃣ Enter Username (make sure username has no uppercase letters!)

4️⃣ Enter Password & Password verification

5️⃣ Do Captcha & Hit Register

SETTING UP PIDGIN + OTR + ADDING ACCOUNTS

I will now be showing you how to setup Pidgin with the OTR plugin, to be used with both your ICQ and your JABBER account, most vendors and members on the Darkweb use ICQ and JABBER but will only speak to you if you have the OTR plugin installed.

The OTR plugin allows a safer encrypted conversation which is definitely needed when communicating with persons from the Darkweb or even any conversations which are "sensitive".
Please also note that pidgin can leak your IP if you are not using when connected to a VPN/or Socks

photo_2020-06-12_18-37-02.jpg


Head over to https://www.pidgin.im/ and download the latest version of Pidgin

In Windows:
Download from here https://sourceforge.net/projects/pidgin/files/Pidgin/2.14.1/pidgin-2.14.1.exe/download

In Linux:
Code:
$ sudo apt update
$ sudo apt install pidg
in #application
$ sudo apt install pidgin-otr #off the road plugin

Termux you can install:
Code:
$ pkg install pidgin

photo_2020-06-12_18-41-46.jpg


Install OTR For Pidgin On Windows From Here: https://otr.cypherpunks.ca/pidgin-otr-4.0.2.tar.gz

photo_2020-06-12_18-46-05.jpg


Click "Add"

While you are using pidgin, you can select many protocols, such as icq, jabber, aim and irc.

photo_2020-06-12_18-47-19.jpg


photo_2020-06-12_18-48-17.jpg

As you can see finally we've setuped our XMPP account

photo_2020-06-12_18-51-10.jpg


While you are here, go to tools > plugins, or simply hold CTRL+U

photo_2020-06-12_18-51-39.jpg


Enable OTR

SETTING UP PGP ?

PGP is an encrypted message solution, not for conversations but for times when you need to give sensitive information, such as an address to a vendor.

INSTALL

Start off by downloading GPG4win http://www.gpg4win.org/

1️⃣ Now run the setup

2️⃣ Select the language

3️⃣ Click next and next again

4️⃣ Unselect everything but Klepatora,GPA,GpgEX

5️⃣ Now pick your destination folder
Finish the installation.

6️⃣ You have now installed GPG4win now its time to get setup

Linux :

1️⃣ Install dependencies

Code:
$ apt-get install gpa gnupg2 -y

$ gpg --full-generate-key

Please select what kind of key you want:
   (1) RSA and RSA (default)
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
Your selection? 1

2️⃣ Next select the keysize. I recommend to use 4096, 3072 will default value.

Code:
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (3072) 4096
Requested keysize is 4096 bits
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 0
Key does not expire at all
Is this correct? (y/N) y

3️⃣ Fill out fake name and real email address.

GnuPG needs to construct a user ID to identify your key.

Code:
Real name: MrBlackX
Email address: xxxx.xxxxx@protonmail.com
Comment:
You selected this USER-ID:
    "MrBlackX <xxxx.xxxxx@protonmail.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O

4️⃣ Now it is asking for a password phrase. Don't enter a easy password! Enter a good one which is not guessable easily.

SETTING UP YOUR KEY

So now we have installed the software, we are going to be using GPA so follow the steps below
We already created for linux users our key so this is now for windows users, please keep reading!

1️⃣ Go to programs and run GPA

2️⃣ You will now be asked if you want to create a "Private Key" if this box did not come up for you go to the menu at the top and select Keys - New Key.

3️⃣ A new window will have opened called “Generate Key” asking your for a name just put any name you want even a nickname (please note it has to be a minimum of 5 characters) then press forward

4️⃣ It will now ask you to insert an email, just insert a fake one and press forward

5️⃣ You will now be asked if you would like to make a backup select create backup and then click forward

6️⃣ You will now be asked to enter a passphrase enter one you will not forget but it must not be easy (write a backup of your passphrase somewhere just incase , it will show you how strong the passphrase is

7️⃣ You will now be asked to re-enter you passphrase

8️⃣ Now a new window will open called "Backup Key To File" select anywhere (I recommend a USB pen) then click save, your backup has been saved

9️⃣ The software may freeze and close, don’t worry this is quite normal and you will not have lost your key and will still be setup. You have now set-up your PGP Key

FINDING YOUR PUBLIC KEY AND HOW TO USE

A "Public Key" is the key you give out so people can send you messages.

To get your Public Key, open Notepad then drag and drop the "Backup File" you saved from when you setup your key, once you have the file open you will see "-----BEGIN PGP PUBLIC KEY BLOCK-----" and a load of random letters etc then you will see "-----END PGP PUBLIC KEY BLOCK-----" This is your "Public Key" copy and paste all of it and save it in a new file so you have easy access to your "Public Key" for example
when you need to give it somebody or just copy and paste to your profile on the Forum or Market.

DECRYPTING A MESSAGE USING YOUR KEY

The whole point in having GPG is so that you can "Send and Receive" messages that only you and the Recipient/Sender can view, so how can you view them?

1️⃣ Open GPA

2️⃣ Select "Clipboard"

3️⃣ Paste the received message into "Clipboard"
Press "Decrypt"

4️⃣ Type in your "Passphrase"

5️⃣ You will now be able to see the encrypted message.

SENDING USERS ENCRYPTED MESSAGES

Sending encrypted messages is perfect for "sensitive" data such as your address for receiving products you have purchased from a vendor, to do that please follow the steps below

1️⃣ Find the users Public PGP key it's almost always in the profile if not just ask them and copy it

2️⃣ Open GPA

3️⃣ Press CTRL + V the key should now show in the list

4️⃣ Click on clipboard

5️⃣ Enter the information you wish to send

6️⃣ Press “Encrypt”

7️⃣ Select users Key

8️⃣ Press ok

9️⃣ It will ask you if you "Really Want To Use The Key" just select "Yes"

? You will see clipboard opened again with a "-----BEGIN PGP MESSAGE-----" just copy everything and send it to the person who the message is for Thats it you have sent a Encrypted message to somebody

USEFUL STUFF TO KNOW (EXTRAS) ?

● IF YOU JUST WANT TO BROWSE THE WEB ANON THEN TOR CAN ACT AS YOUR VPN BUT DO NOT USE THIS FOR ANY OTHER REASON SUCH AS MARKET PLACES, CARDING ETC
YOU WOULD DEFINITELY NEED BETTER SECURITY SUCH AS VPN AND SOCKS

● I RECOMMEND FIREFOX TO BE YOUR NUMBER ONE CHOICE BROWSER WHEN DOING CARDING OR ANY ILLEGAL ACTIVITY
I HAVE NOTICED THIS ONE TO BE THE EASIEST TO CLEAN (VIA CCLEANER)

● GOOGLE CHROME STILL HAS COOKIES EVEN THOUGH YOU HAVE RAN IT THROUGH CCLEANER (MANUAL CLEAN IS REQUIRED)
I DO NOT RECOMMEND CHROME ANYWAY

● VIP72 HAS SOCKS THAT COME AND GO OFFLINE FOR EXAMPLE DAYTIME IN THE UK THERE ARE LOADS OF UK SOCKS BUT AT NIGHT THEY DROP BY A LOT SO ALWAYS TRY TO HIT THE COUNTRY YOU NEED IN THERE "DAYTIME" HOURS

● PAYPAL’S SECURITY CAN SEE THE FOLLOWING
IP - TIME ZONE - KEYBOARD LANGUAGE - HDD SERIAL - PC ACCOUNT NAME
 
Last edited by a moderator:
Top