👨‍🏫 Tutorial How we use 𝚁𝚘𝚋𝚕𝚘𝚡 to control häçked devices or for häçking | Explained Very Simple (original method)

[I2Chan]

This is the simple method also there are many ways tto häçk sa 𝚁𝚘𝚋𝚕𝚘𝚡 but this one is like yung revolving concept, it's explained simpler. Not sure if kami ang first nagle-leverage ng 𝚁𝚘𝚋𝚕𝚘𝚡 for häçking pero surely meron din iba pero private lang. Anyways whatever, if curious ka malaman paano either programmer, häçker or reader kalang. You're welcome. For this case, we will control an infected device or make 𝚁𝚘𝚋𝚕𝚘𝚡 act as C2 (Command and Control).

What else you can do sa 𝚁𝚘𝚋𝚕𝚘𝚡

• C2 (Command and Control) Server
• DDoS
• Website häçking
• Many More

Why

• 𝚁𝚘𝚋𝚕𝚘𝚡 Server are very fast.
• 𝚁𝚘𝚋𝚕𝚘𝚡 Server have a low IP score (safe, less malicious detection).
• Security and Privacy.

Diagrams​

Proxy = Middleman

Normally (ito yung hindi naka based sa 𝚁𝚘𝚋𝚕𝚘𝚡 or walang concealation, it's a bad idea haha unless airgapped network yung side ng sayo)


Without Proxy


With Proxy



𝚁𝚘𝚋𝚕𝚘𝚡 is both a game and a game studio. Now, all "game studio" ay merong function maka request sa internet. This is important kasi for information retrieving if may gusto kang kunin or isend sa internet, ng linear. Meaning pagkatapus ng connection, mag end na kaagad wala ng kasunod. AND dahil sa complication ng game studios meron talagang documentation. So gi search namin ang 𝚁𝚘𝚋𝚕𝚘𝚡 documentation and found the function para sa requesting purpose https://create.𝚁𝚘𝚋𝚕𝚘𝚡.com/docs/reference/engine/classes/HttpService



Wow meron siya lahat na kailangan natin. GET para maka retrieve lang ng information, POST para makasend at maka retrieve ng information. Now don't get excited, di pa natin alam yung other capabilities niya na importante pang send ng data so binasa namin lahat. AND impressively sa https://create.𝚁𝚘𝚋𝚕𝚘𝚡.com/docs/reference/engine/classes/HttpService#methods meron siya lahat. It's a fully capable function to do anything as a requester.

Pero we are still not satisfied kasi baka may mga limitasyon kung anong mga domains o website o server kalang makasend, or restricted network. So gi test namin, it seems like you can request to any domain na walang firewall for example You do not have permission to view the full content of this post. Log in or register now. or any domains na hindi suspicious. The result ng test namin is

• You can't request to IPs.
• You can't request to a website na may firewall.
• You can't request to a website na may suspicious domain.
• You can request to a website na may clean name na gawa mo.
• You can't request to a honeypot web.

-- Services
local HttpService = game:GetService("HttpService")

-- Functions
local response
local success, err = pcall(function()
    response = HttpService:GetAsync("https://example.com/")
end)

-- Main
if success then print(response) else warn(err) end

Pero dahil ang pag request lang sa internet ay linear, meaning temporary lang. Gi search namin ulit kung merong functionality para sa pag connect para dynamic ang connection. Simpler, para you can control yung pag send mo ng data without interruption or ending unless i-end mo yung program. Pero unfurtunately walang functionality na ganun sa 𝚁𝚘𝚋𝚕𝚘𝚡.

Pero it doesn't matter really matter naman, kasi we can leverage a proxy for communication between 𝚁𝚘𝚋𝚕𝚘𝚡 at sa Infected Device. Maraming website para dito like hostinger, fly or netflix at mag register anonymously ay madali lang masyado. Pero paano kasi 𝚁𝚘𝚋𝚕𝚘𝚡 only has the functionality for retrieving at sending at hindi naman possible mag send sa isang IP diba? Meron ditong simple na bypass at yan ang reason a proxy is needed. Explanation:

• Infected Device
  
  • We can make our malware send an information doon sa proxy kung meron siyang data about sa "current" device or yung infected.
  • Pag wala, we send the data. Pag meron we listen sa proxy.
  • We can use a free SQL database sa internet. You can search sa internet. We need a database to store kung existing yung data at mag retrieve efficiently.
  • If yung infected device data ay sa database, we will let the malware know para maka move on siya sa pag listen. What do you mean listen? If merong bagong data doon sa path, it will execute at pag na-execute na it will check if na-execute na yung command else ignore. Repeat. Para malaman ng server yung executed data we can post back. Example Format:
    • [SERVER] whoami
    • [CLIENT] root

Keep in Mind for Better C2

• Make sure to not spam.
• Make sure to use secure headers.
• Make sure to encrypt your payloads, so if 𝚁𝚘𝚋𝚕𝚘𝚡 server can read packets, it should not be able to detect yung payload or command mo (this is most likely).

Make the entire process as legit as possible and you should be good na. Magic! Now meron kanang fully functional na server, proxy and malware that based sa 𝚁𝚘𝚋𝚕𝚘𝚡 as C2.

 

[Jellycatbudo]

Ganda talaga mga content mo boss

 

[D-MOCR1TUS]

Solid bossing support