Supreme 【TUTORIAL】Cracking Guide ┃ Ultimate Basics | Updated as 2024

[5.845]

 

 Introduction

 

Beginner guide regarding account pentesting

 

General Concepts 

 

Common Words

 

C.P.M
Check Per Minute
How many checks are made by minute.

Combos / Wordlists
Combination of Email:Pass, User:Pass, Phone:Pass to vulnerate accounts and get valid accounts.

 

Proxy / Proxies
A web proxy server, also known as a proxy is an application-level gateway
Server sits between you and the Internet.
The proxy server replaces sent data as original sending server.

Proxy Protocols
For only cracking related you would use Socks4, Socks5, HTTP and HTTP/s
HTTP (Hypertext Transfer Protocol) Proxy, HTTPS (HTTP Secure) Proxy, SOCKS (Socket Secure), FTP (File Transfer Protocol) Proxy, SMTP (Simple Mail Transfer Protocol) Proxy, POP3 (Post Office Protocol 3) & IMAP (Internet Message Access Protocol) Proxy

Network layers
Pentesting Related: IPV4, IPV6

 

 

Proxy Type

Datacenter Proxies [ Might be banned from some API's ]
Datacenter proxies come from secondary corporations, not ISPs, offering high anonymity and private IP authentication.

Residential Proxies [ Best for cracking as usual ]
With residential proxies, pick a specific location and browse as if you were a local, hiding your true IP behind a legitimate user ISP.

Rotative Proxies [ Rotative doesn't means it's good, just it rotates through an IP-Pool ]
Rotative proxies switch your IP either at set intervals or every request, cycling through a pool provided by the supplier.

Static Proxies [ Static isn't bad, just not so good for cracking / account pentesting ]
Static proxies keep your IP the same for every request, maintaining your original IP throughout.

Sticky Proxies [ Might be useful related to making account creation and not checking ]
Sticky proxies are a type of Datacenter proxy that maintain the same IP for a session or a specified period.

 

Cracking Concepts
Common Words Inside Cracking Community

 

Config
OpenBullet configuration made from loliscript.
it uses the API, headers and requests to do massive requests at target and test each account to provide a valid account.

Checker
Same function as a openbullet configuration
Can be customized with custom threading, format and more.

Dumper [ SQL Injection Exploit ]
Tool used to exploit the SQLI vulnerability.
Used to get Rows from Databases
A.K.A Combos.


Google Dorking
This refers to using Google search techniques to hack into vulnerable sites or search for information that is not available in public search results.

Dork Parser

Tool used to parse URL's to get vulnerables websites using any search engine.

Vuln Scanner

canner made to get Vulnerable Website with injection vulnaribilities.S

Example of vulnerable DataBases

 

How to start?
Guide step at step

First of all you need to get a checker or OpenBullet.
You can get OpenBullet in github or just click here
I like more "SilverBullet" than Openbullet, but is my opinion.

You can get OpenBullet configs in Config Section or buy configs in Sellers Marketplace
Remember:
Most of OpenBullet Mods (Like SilverBullet) have their own extension
Default extension for OpenBullet config is ".Loli"
Extension for SilverBullet is ".SVB"
Extension for Anomaly is ".Anom"
Extension for CyberBullet is ".CYB"

After you get some configs, drag all of them to the Configs Folder (Follow the video)
Rescan to get your configs

Get some Combolists and add to your openbullet
Follow the video


Get Proxies and add to your openbullet
Follow the video

Make a runner and start checking!
The bots are the threads, more threads = More PC usage (RAM and CPU) but gives more CPM
Follow the video

Combolist Section

Show ContentSpoiler:

To add

Avaliable

[404]

top notch work

CLICK HERE TO BUY CHEAP RESTORED PAYPAL
_______________________________________________________________________________________

[582]

HQ :D

[Image: 2AG1xFV.gif]
Best fren sig^
Please leave a rep if you appreciate my content :3
Have a nice day <3

[27]

like and reply

[7]

Super cool

[30]

Damn ty

[31]

wowww

[50]

 

Introduction

Show ContentSpoiler:

What is this?

This is a full cracking guide, i will teach you all the basics of cracking / pentesting.

Are you gonna to give the tools?
Yes, i'm gonna to post all the tool links.

This guide was helpful, how i can help you?
Just leave a like and comment something positive.

Terms / Concepts

Show ContentSpoiler:

CPM
Check Per Minute, how many accounts has been checked in the minute

Combolist | Wordlist

Combination of Email:Pass, User:Pass (Can be another type but still calling ComboList / WordList)

 

Proxy (Proxies in plural)

A web proxy server, also known as a proxy is an application-level gateway, a server sits between you and the Internet. The proxy server is replacing that data and that way hiding you in a web.

Protocols:

HTTP, HTTP/S, SOCKS4, SOCKS5
(The best are HTTP and HTTP/S)

Header Fomats:
IPV4
(Good for normal targets)

IPV6
(Good for mail targets like: Aol, Yahoo, Coinbase, etc..)

 

Type of proxies:
Datacenter
Datacenter Proxies are proxies that are not affiliated with an Internet Service Provider (ISP). They come from a secondary corporation and provide you with completely private IP authentication and anonymity.

Residential
Residential proxies allow you to choose a specific location (country, city, or mobile carrier) and surf the web as a real user in that area. Proxies can be defined as intermediaries that protect users from general web traffic. They act as buffers while also concealing your IP address.
(These are the best type of proxies)

Rotative
Changes the ip's every "x" time or per request
The ip's come from a IP pool with millons of IP's

Static / Sticky
Don't change the IP

Config
Openbullet configuration, works with the "Loliscript (The code with the API, instructions and etc..)

Checker
Same as configs for openbullet but in .exe format

Dumper
SQL injection tool that scans web applications for SQL injection vulnerabilities that scans the vulns and exploit them
(You can get combos from this way, and SQL exploit isn't the only option, you have another type of injections like LFI or RFI)


Dorks
Google Dorking or Google hacking refers to using Google search techniques to hack into vulnerable sites or search for information that is not available in public search results.

Parser
A parser is a compiler or interpreter component that breaks data into smaller elements for easy translation into another language. A parser takes input in the form of a sequence of tokens, interactive commands, or program instructions and breaks them up into parts that can be used by other components in programming.
A parser usually checks all data provided to ensure it is sufficient to build a data structure in the form of a parse tree or an abstract syntax tree.
(You can get urls from this using dorks)

Vuln Scanner
Vulnerability Scanner, check the vulnerabilty of a website. 
you need URL's for this and can get vulns like:

MySQL
MsSQL
PostgreSQL
Access
Oracle
SQLite
HSQLdb
Informix
Frontbase
Derby
Firebird
WAF

How to start?

Show ContentSpoiler:

First of all you need to get a checker or OpenBullet.
You can get OpenBullet in github or just click here
I like more "SilverBullet" than Openbullet, but is my opinion.

You can get OpenBullet configs in Config Section or buy configs in Sellers Marketplace
Remember:
Most of OpenBullet Mods (Like SilverBullet) have their own extension
Default extension for OpenBullet config is ".Loli", Extension for SilverBullet is ".SVB", Extension for Anomaly is ".Anom", Extension for CyberBullet is ".CYB"

After you get some configs, drag all of them to the Configs Folder (Follow the video)
Rescan to get your configs

Get some Combolists and add to your openbullet
Follow the video


Get Proxies and add to your openbullet
Follow the video

Make a runner and start checking!
The bots are the threads, more threads = More PC usage (RAM and CPU) but gives more CPM
Follow the video

 

This isn't even the half of all, if you want to contribute just left a like.

tq