Hey there, this is going to be a short but sweet tutorial on what you can actually do with the password logs that get sent to your ftp server when using password stealing trojans such as iStealer. For the purpose of this tutorial I am using parts of Casi's Password Dump, which can be found in the dark members section of the forum. To unlock the dark members section you must achieve 100 posts with no spamming, and be an active member of CyberXtreme. A preview of the dark section can be viewed here. Okay so lets have a look at the log:
Program Protocol / Url Username Password
Firefox 3 ACCUTANE : Compare => Choose => Buy csavino3 weiland
Firefox 3 https://www.vanns.com csavino3@yahoo.com 7GPnKdzP
Firefox 3 https://accounts.craigslist.org csavino3@yahoo.com weiland
Firefox 3 https://www.fandango.com csavino3@yahoo.com weiland
Firefox 3 http://signin.ebay.com clakey3 kitty0
Firefox 3 Download music, movies, games, software! The Pirate Bay - The world's most resilient BitTorrent site BugMeNot666 BugMeNot666
Firefox 3 Target.com – Furniture, Patio Furniture, Baby, Swimwear, Toys and more carlo_savino@dell.com weiland
Firefox 3 DSL · Cable · VOIP · Security · Satellite · Fiber · News · Tips · Reviews · Community · Tools - dslreports.com csavino3 weiland
Firefox 3 Your Company Name csavino3 weiland
Firefox 3 https://wellsccn.fnfismd.com csavino3@yahoo.com weiland1
Firefox 3 https://www.linkedin.com carlo_savino@dell.com weiland
Firefox 3 - myspace.com/mail csavino3@yahoo.com weiland
Firefox 3 AnandTech Forums - Powered by vBulletin csavino3 weiland
Firefox 3 YouTube - Broadcast Yourself. csavino3 weiland
Firefox 3 https://www.netflix.com csavino3@yahoo.com weiland
Firefox 3 TVShowsOnDVD.com bobrob917@spambob.com wiseman
Firefox 3 http://forums.ifilm.com csavino3 weiland
Firefox 3 https://webmail.atl.earthlink.net csavino3@earthlink.net weiland
Firefox 3 https://controlpanel.newshosting.com csavino3 weiland
Firefox 3 https://store.apple.com csavino3@yahoo.com weiland
Firefox 3 http://www.unitrindirect.com 1267777 WEILAND
Firefox 3 http://mypw.freeforums.org csavino3 csavino3
Firefox 3 https://secure.fitnessmagazine.com savino4@yahoo.com carlo1
Firefox 3 https://www.bedbathandbeyond.com csavino3@yahoo.com weiland
Firefox 3 Home | goonmap Polluxx Troy weiland
Firefox 3 https://myaccount.earthlink.net csavino3@earthlink.net weiland
Firefox 3 https://www.forever21.com csavino3 weiland
Firefox 3 http://www.paypal.com carolyn_lakey@hotmail.com kitty000
Firefox 3 ngindex.com : The alt.binaries newsgroup/usenet search engine truthpro trhjth
Firefox 3 https://www.amazon.com carolyn_savino@dell.com carlo1
Firefox 3 Torrentspy csavino3 weiland
Firefox 3 http://whammy.us csavino3 weiland
Firefox 3 https://www.myaccount.cingular.com 3460 weiland
Firefox 3 https://www.txgas.com 9.10E+17 2746
Firefox 3 https://qspace.iplace.com csavino3 weiland
Firefox 3 https://secure.eluxury.com csavino3@yahoo.com weiland
Firefox 3 https://www.google.com csavino3 weiland1
Firefox 3 http://www.news.earthlink.net csavino3@earthlink.net weiland
Firefox 3 Netflix: Rent as many movies as you want for only $8.99 a month! Free Trial csavino3@hotmail.com weiland
Firefox 3 ONEOK 910058593134788427 2746
Firefox 3 Log in Polluxx Troy WEILAND1
Firefox 3 SIRIUS Satellite Radio - Everything worth listening to is now on SIRIUS csavino3@yahoo.com pan15837
Firefox 3 https://secure.www.oldnavy.com csavino3@Yahoo.com weiland
Firefox 3 https://www.wireless.att.com 5124975101 carlo1
Firefox 3 https://www.myfico.com csavino3@yahoo.com weiland1
Firefox 3 https://www.redchairstore.com csavino3@yahoo.com weiland1
Firefox 3 Invitations, Free eCards and Party Planning Ideas from Evite carlo_savino@dell.com weiland
Firefox 3 https://www.creditexpert.com csavino3 PVQDEETH
Firefox 3 http://ssl2.papajohnsonline.com csavino3@yahoo.com weiland
Firefox 3 EarthLink - News csavino3@earthlink.net weiland
Firefox 3 Home | goonmap Polluxx Troy weiland
Firefox 3 http://www.myepisodes.com csavino3 weiland
Firefox 3 NZBMatrix: NZB Usenet Newsgroups Search Index : NZBs csavino3 weiland
Firefox 3 http://www.howardstern.com frank445 0
Firefox 3 Dell - Rebate and Coupon Care Center carlosavino tumbleweed
Firefox 3 http://pcloser.independencetitle.com Savin SavB26765
Firefox 3 http://www.papajohns.com csavino3@yahoo.com weiland
Firefox 3 https://online.wellsfargo.com 9391
Firefox 3 Shop Sirius Satellite Radio csavino3 weiland
Firefox 3 New York News | Gossip | Sports | Entertainment | Photos - New York Post neglect_this@yahoo.com parrot
Firefox 3 https://www.aa.com T945T80 weiland
Firefox 3 https://www.brylanehome.com csavino3@yahoo.com weiland
Firefox 3 https://www.cingular.com 3460 weiland
Firefox 3 BlueServo csavino3@yahoo.com weiland
Firefox 3 BigPond GameArena - Game News, Game Reviews, Videos Trailers, Ladders and Servers, Game Forums and more... lamearena IUiKOEM2
Firefox 3 https://onlinecare.cingular.com csavino3 weiland
Firefox 3 https://www.accountonline.com carlo_savino weiland12
Firefox 3 https://www.z1motorsports.com csavino3@yahoo.com csavino3
Firefox 3 https://www.statesman.com dwan8@dodgeit.com dwandwan
Firefox 3 homebrewhowto.com csavino3 weiland
Firefox 3 Wikipedia, the free encyclopedia csavino3 weiland
Firefox 3 Ninan is not a news reader : Ninan csavino3 weiland
Firefox 3 GEICO | GEICO Car Insurance. Get online auto insurance quotes and save today. Free motorcycle quotes as well. 2006481770 weiland
Firefox 3 EBSCOhost - world̢۪s foremost premium research database service mtlib_5_892 discovery
Firefox 3 SternFanNetwork - Powered by vBulletin csavino3 weiland
Firefox 3 Sallie Mae: Private Student Loans, Federal Student Loans, Private College Loans csavino3 weiland1
Firefox 3 https://www.skymall.com csavino3@yahoo.com weiland
Firefox 3 Online Coupons | Deals from DealTaker.com Buggers50 fifty
Firefox 3 YouTube - Broadcast Yourself. csavino3 weiland
Firefox 3 iLounge Forums csavino3 weiland
Firefox 3 https://my.autotrader.com csavino3@yahoo.com weiland
Firefox 3 LinkedIn | Relationships Matter carlo_savino@dell.com weiland
Firefox 3 http://www.epcgaming.com csavino3 weiland
Firefox 3 Hydrogenaudio Forums - Portal csavino3 weiland
Firefox 3 Smartphone Forum: PinStack.com - Best Smartphones, Apps, Reviews csavino3 csavino3
Firefox 3 https://www.graduateconnections.com csavino3 weiland
Firefox 3 https://secure.homedepot.com csavino3@yahoo.com weiland
Firefox 3 Xbox 360 Hacks – Hacks, Cracks, Mods, Homebrew, Utilities. csavino3 csavino3
Firefox 3 http://bitznpieces-games.com csavino3 weiland1
Firefox 3 https://www.kennethcole.com csavino3@yahoo.com weiland
Firefox 3 Nissan 350Z Forum : 350Z / 370Z Tech Forums csavino3 weiland
Firefox 3 http://www.msxsecurity.com csavino3 weiland
Firefox 3 Welcome to Anthropologie*-*Anthropologie.com csavino3@yahoo.com weiland
Firefox 3 The Internet Movie Database (IMDb) csavino3@yahoo.com weiland
Firefox 3 Serials 2005 - Powered by vBulletin Populus_5 bugmenot
Firefox 3 Ford Explorer (console) adac320n adac320n8
Firefox 3 I Prefer carlo_savino@dell.com weiland
Firefox 3 Scenyx Entertainment Community (Powered by Invision Power Board) csavino3 weiland
Firefox 3 https://www.etsy.com csavino3 csavino3
Firefox 3 https://workcenter.s...probusiness.com carolyn_savino Romanfever1!
Firefox 3 https://www.paypal.com carolyn_lakey@hotmail.com kitty000
Firefox 3 XBMC csavino3 53905568
Firefox 3 Coupons, Deals, and Cash Back Shopping - FatWallet.com PolluxxTroy weiland
Firefox 3 NCAA Football 11 Rosters | NCAA 2011 Rosters | PS3 - Xbox 360 - PS2 nobugs nobugs
Firefox 3 https://secure.bhg.com bettyholmes@example.com eatcake
Firefox 3 https://secure.buy.com csavino3@yahoo.com weiland
Firefox 3 https://membership.dell.com carlo_savino@dell.com weiland1
Firefox 3 http://www.vidilife.com bugmenot bugmenot
Firefox 3 Joystiq [Xbox] carlo_savino@dell.com weiland
Firefox 3 http://goon-toons.com csavino3 weiland
Firefox 3 AVS Forum csavino3 weiland
Firefox 3 HowardForums: Your Mobile Phone Community & Resource csavino3 weiland
Firefox 3 Airline Tickets and Airline Reservations from American Airlines | AA.com T945T80 weiland
Firefox 3 Stickam - The Live Community, Live Streaming Video csavino3@yahoo.com weiland
Firefox 3 Mister Car Wash csavino3 weiland
Okay it is fairly self-explanatory, the first words is the program the passwords were stolen from. Second word is the website. Third word os the username. Fourth word is the password. What we look for in the logs is for any websites where you buy things. You should login and see if any payment details are saved or credit details or paypal. Most the time you won't find anything that way, but in my opinion it is always worth a shot. The thing you really look for though is two things.
1) Look for an ebay signin
2) Check if all their passwords are the same, or if there is a password that is used more than others.
With that in mind, we search the above log and find: || Firefox 3 || http://signin.ebay.com || clakey3 || kitty0 || Now the next step is to sign into the ebay account, but hold on! Use your brains! Probably not a good idea to sign into someone elses ebay account that you have stolen with your IP address. You should ALWAYS USE A PROXY without fail! There is a good program which can be found here which will hide your IP address and give you safety. So now lets sign in. Follow these instructions:
1) Signin to the ebay account. (check your proxy is working
Code:
http://www.tracemyip.org/
2) Buy any item. (literally just pick the first item you see and select buy now)
3) Click pay now. (this will redirect you and ask you to sign in with paypal, and they fill in the email address bit for you)
This bit is what we need. His paypal email. Which ebay very kindly gives us. Now go to the paypal website. This is where a bit of common sense and trial and error comes in. Paypal passwords require more than seven letters and at least one number I think. So we now have to take a look at the password log and pick out a few potential passwords as his paypal password. I made this list and placed them in order of what I think would be most likely his password:
- weiland1
- kitty0
- kitty000
- csavino3
So now we would try the passwords and see which one would work. Hopefully we have guessed right and it will sign in to his account. From there most of it is obvious. I would have a new paypal account prepared, with no bank details or credit card details entered. Then I would send some money to my new paypal account. Then buy something and have it sent to your school or something like that under a name that isn't yours, but let the school know that they will get some post and it is for you, but under Michael Jeremy Dudemeister or something like that. Then it will be very hard to get traced back to you. Be imaginative there are other ways. That is all.
This information should only be used for educational purposes and I hold no responsibility for what any person/s do with the information.
Program Protocol / Url Username Password
Firefox 3 ACCUTANE : Compare => Choose => Buy csavino3 weiland
Firefox 3 https://www.vanns.com csavino3@yahoo.com 7GPnKdzP
Firefox 3 https://accounts.craigslist.org csavino3@yahoo.com weiland
Firefox 3 https://www.fandango.com csavino3@yahoo.com weiland
Firefox 3 http://signin.ebay.com clakey3 kitty0
Firefox 3 Download music, movies, games, software! The Pirate Bay - The world's most resilient BitTorrent site BugMeNot666 BugMeNot666
Firefox 3 Target.com – Furniture, Patio Furniture, Baby, Swimwear, Toys and more carlo_savino@dell.com weiland
Firefox 3 DSL · Cable · VOIP · Security · Satellite · Fiber · News · Tips · Reviews · Community · Tools - dslreports.com csavino3 weiland
Firefox 3 Your Company Name csavino3 weiland
Firefox 3 https://wellsccn.fnfismd.com csavino3@yahoo.com weiland1
Firefox 3 https://www.linkedin.com carlo_savino@dell.com weiland
Firefox 3 - myspace.com/mail csavino3@yahoo.com weiland
Firefox 3 AnandTech Forums - Powered by vBulletin csavino3 weiland
Firefox 3 YouTube - Broadcast Yourself. csavino3 weiland
Firefox 3 https://www.netflix.com csavino3@yahoo.com weiland
Firefox 3 TVShowsOnDVD.com bobrob917@spambob.com wiseman
Firefox 3 http://forums.ifilm.com csavino3 weiland
Firefox 3 https://webmail.atl.earthlink.net csavino3@earthlink.net weiland
Firefox 3 https://controlpanel.newshosting.com csavino3 weiland
Firefox 3 https://store.apple.com csavino3@yahoo.com weiland
Firefox 3 http://www.unitrindirect.com 1267777 WEILAND
Firefox 3 http://mypw.freeforums.org csavino3 csavino3
Firefox 3 https://secure.fitnessmagazine.com savino4@yahoo.com carlo1
Firefox 3 https://www.bedbathandbeyond.com csavino3@yahoo.com weiland
Firefox 3 Home | goonmap Polluxx Troy weiland
Firefox 3 https://myaccount.earthlink.net csavino3@earthlink.net weiland
Firefox 3 https://www.forever21.com csavino3 weiland
Firefox 3 http://www.paypal.com carolyn_lakey@hotmail.com kitty000
Firefox 3 ngindex.com : The alt.binaries newsgroup/usenet search engine truthpro trhjth
Firefox 3 https://www.amazon.com carolyn_savino@dell.com carlo1
Firefox 3 Torrentspy csavino3 weiland
Firefox 3 http://whammy.us csavino3 weiland
Firefox 3 https://www.myaccount.cingular.com 3460 weiland
Firefox 3 https://www.txgas.com 9.10E+17 2746
Firefox 3 https://qspace.iplace.com csavino3 weiland
Firefox 3 https://secure.eluxury.com csavino3@yahoo.com weiland
Firefox 3 https://www.google.com csavino3 weiland1
Firefox 3 http://www.news.earthlink.net csavino3@earthlink.net weiland
Firefox 3 Netflix: Rent as many movies as you want for only $8.99 a month! Free Trial csavino3@hotmail.com weiland
Firefox 3 ONEOK 910058593134788427 2746
Firefox 3 Log in Polluxx Troy WEILAND1
Firefox 3 SIRIUS Satellite Radio - Everything worth listening to is now on SIRIUS csavino3@yahoo.com pan15837
Firefox 3 https://secure.www.oldnavy.com csavino3@Yahoo.com weiland
Firefox 3 https://www.wireless.att.com 5124975101 carlo1
Firefox 3 https://www.myfico.com csavino3@yahoo.com weiland1
Firefox 3 https://www.redchairstore.com csavino3@yahoo.com weiland1
Firefox 3 Invitations, Free eCards and Party Planning Ideas from Evite carlo_savino@dell.com weiland
Firefox 3 https://www.creditexpert.com csavino3 PVQDEETH
Firefox 3 http://ssl2.papajohnsonline.com csavino3@yahoo.com weiland
Firefox 3 EarthLink - News csavino3@earthlink.net weiland
Firefox 3 Home | goonmap Polluxx Troy weiland
Firefox 3 http://www.myepisodes.com csavino3 weiland
Firefox 3 NZBMatrix: NZB Usenet Newsgroups Search Index : NZBs csavino3 weiland
Firefox 3 http://www.howardstern.com frank445 0
Firefox 3 Dell - Rebate and Coupon Care Center carlosavino tumbleweed
Firefox 3 http://pcloser.independencetitle.com Savin SavB26765
Firefox 3 http://www.papajohns.com csavino3@yahoo.com weiland
Firefox 3 https://online.wellsfargo.com 9391
Firefox 3 Shop Sirius Satellite Radio csavino3 weiland
Firefox 3 New York News | Gossip | Sports | Entertainment | Photos - New York Post neglect_this@yahoo.com parrot
Firefox 3 https://www.aa.com T945T80 weiland
Firefox 3 https://www.brylanehome.com csavino3@yahoo.com weiland
Firefox 3 https://www.cingular.com 3460 weiland
Firefox 3 BlueServo csavino3@yahoo.com weiland
Firefox 3 BigPond GameArena - Game News, Game Reviews, Videos Trailers, Ladders and Servers, Game Forums and more... lamearena IUiKOEM2
Firefox 3 https://onlinecare.cingular.com csavino3 weiland
Firefox 3 https://www.accountonline.com carlo_savino weiland12
Firefox 3 https://www.z1motorsports.com csavino3@yahoo.com csavino3
Firefox 3 https://www.statesman.com dwan8@dodgeit.com dwandwan
Firefox 3 homebrewhowto.com csavino3 weiland
Firefox 3 Wikipedia, the free encyclopedia csavino3 weiland
Firefox 3 Ninan is not a news reader : Ninan csavino3 weiland
Firefox 3 GEICO | GEICO Car Insurance. Get online auto insurance quotes and save today. Free motorcycle quotes as well. 2006481770 weiland
Firefox 3 EBSCOhost - world̢۪s foremost premium research database service mtlib_5_892 discovery
Firefox 3 SternFanNetwork - Powered by vBulletin csavino3 weiland
Firefox 3 Sallie Mae: Private Student Loans, Federal Student Loans, Private College Loans csavino3 weiland1
Firefox 3 https://www.skymall.com csavino3@yahoo.com weiland
Firefox 3 Online Coupons | Deals from DealTaker.com Buggers50 fifty
Firefox 3 YouTube - Broadcast Yourself. csavino3 weiland
Firefox 3 iLounge Forums csavino3 weiland
Firefox 3 https://my.autotrader.com csavino3@yahoo.com weiland
Firefox 3 LinkedIn | Relationships Matter carlo_savino@dell.com weiland
Firefox 3 http://www.epcgaming.com csavino3 weiland
Firefox 3 Hydrogenaudio Forums - Portal csavino3 weiland
Firefox 3 Smartphone Forum: PinStack.com - Best Smartphones, Apps, Reviews csavino3 csavino3
Firefox 3 https://www.graduateconnections.com csavino3 weiland
Firefox 3 https://secure.homedepot.com csavino3@yahoo.com weiland
Firefox 3 Xbox 360 Hacks – Hacks, Cracks, Mods, Homebrew, Utilities. csavino3 csavino3
Firefox 3 http://bitznpieces-games.com csavino3 weiland1
Firefox 3 https://www.kennethcole.com csavino3@yahoo.com weiland
Firefox 3 Nissan 350Z Forum : 350Z / 370Z Tech Forums csavino3 weiland
Firefox 3 http://www.msxsecurity.com csavino3 weiland
Firefox 3 Welcome to Anthropologie*-*Anthropologie.com csavino3@yahoo.com weiland
Firefox 3 The Internet Movie Database (IMDb) csavino3@yahoo.com weiland
Firefox 3 Serials 2005 - Powered by vBulletin Populus_5 bugmenot
Firefox 3 Ford Explorer (console) adac320n adac320n8
Firefox 3 I Prefer carlo_savino@dell.com weiland
Firefox 3 Scenyx Entertainment Community (Powered by Invision Power Board) csavino3 weiland
Firefox 3 https://www.etsy.com csavino3 csavino3
Firefox 3 https://workcenter.s...probusiness.com carolyn_savino Romanfever1!
Firefox 3 https://www.paypal.com carolyn_lakey@hotmail.com kitty000
Firefox 3 XBMC csavino3 53905568
Firefox 3 Coupons, Deals, and Cash Back Shopping - FatWallet.com PolluxxTroy weiland
Firefox 3 NCAA Football 11 Rosters | NCAA 2011 Rosters | PS3 - Xbox 360 - PS2 nobugs nobugs
Firefox 3 https://secure.bhg.com bettyholmes@example.com eatcake
Firefox 3 https://secure.buy.com csavino3@yahoo.com weiland
Firefox 3 https://membership.dell.com carlo_savino@dell.com weiland1
Firefox 3 http://www.vidilife.com bugmenot bugmenot
Firefox 3 Joystiq [Xbox] carlo_savino@dell.com weiland
Firefox 3 http://goon-toons.com csavino3 weiland
Firefox 3 AVS Forum csavino3 weiland
Firefox 3 HowardForums: Your Mobile Phone Community & Resource csavino3 weiland
Firefox 3 Airline Tickets and Airline Reservations from American Airlines | AA.com T945T80 weiland
Firefox 3 Stickam - The Live Community, Live Streaming Video csavino3@yahoo.com weiland
Firefox 3 Mister Car Wash csavino3 weiland
Okay it is fairly self-explanatory, the first words is the program the passwords were stolen from. Second word is the website. Third word os the username. Fourth word is the password. What we look for in the logs is for any websites where you buy things. You should login and see if any payment details are saved or credit details or paypal. Most the time you won't find anything that way, but in my opinion it is always worth a shot. The thing you really look for though is two things.
1) Look for an ebay signin
2) Check if all their passwords are the same, or if there is a password that is used more than others.
With that in mind, we search the above log and find: || Firefox 3 || http://signin.ebay.com || clakey3 || kitty0 || Now the next step is to sign into the ebay account, but hold on! Use your brains! Probably not a good idea to sign into someone elses ebay account that you have stolen with your IP address. You should ALWAYS USE A PROXY without fail! There is a good program which can be found here which will hide your IP address and give you safety. So now lets sign in. Follow these instructions:
1) Signin to the ebay account. (check your proxy is working
Code:
http://www.tracemyip.org/
2) Buy any item. (literally just pick the first item you see and select buy now)
3) Click pay now. (this will redirect you and ask you to sign in with paypal, and they fill in the email address bit for you)
This bit is what we need. His paypal email. Which ebay very kindly gives us. Now go to the paypal website. This is where a bit of common sense and trial and error comes in. Paypal passwords require more than seven letters and at least one number I think. So we now have to take a look at the password log and pick out a few potential passwords as his paypal password. I made this list and placed them in order of what I think would be most likely his password:
- weiland1
- kitty0
- kitty000
- csavino3
So now we would try the passwords and see which one would work. Hopefully we have guessed right and it will sign in to his account. From there most of it is obvious. I would have a new paypal account prepared, with no bank details or credit card details entered. Then I would send some money to my new paypal account. Then buy something and have it sent to your school or something like that under a name that isn't yours, but let the school know that they will get some post and it is for you, but under Michael Jeremy Dudemeister or something like that. Then it will be very hard to get traced back to you. Be imaginative there are other ways. That is all.
This information should only be used for educational purposes and I hold no responsibility for what any person/s do with the information.
0 comments:
Post a Comment