22:25
My goal is to make more of an all-inclusive intro to carding guide to help people get started. Keep in mind however, this is meant to guide you along the way, and will not be a tutorial on how to card specific sites, though I may give a few specific site examples along the way.Points that will be covered in this guide1.Introduction to Carding + Accronyms You May Encounter2.Security Basics/Methods to Stay Safe3.Basics of a Credit Card and the Different Types4.The Ordering Aspect - Before and After5.Links to applications I have mentionedIntroductionCarding (or scamming as some would call it) is an art, and as such, expect to fail a few times while you are getting started. The key to being successful is to not give up and keep trying different sites, methods etc. When you fail, DO NOT automatically start asking people to "teach" you how to card, or asking people for their methods. Most carders have endured tireless periods of 'trial and error' which is how they eventually came upon specific methods that work for them, and they will not just give away their hard earned work to someone who hasn't worked equally hard to find their own methods.**One point I need to make early on and will repeat it at the end is this:PAYPAL IS NOT ACCEPTED ANYWHERE IN THE CARDING SCENE SO DO NOT ASK TO PAY WITH IT!!*There are also many accronyms and terms are you likely to encounter in the carding scene, here are some of the most frequent:LR - Liberty Reserve - an online form of currency that is most widely accepted in the carder sceneWU - Western Union - another form of payment that is acceptedWMZ - WebMoney - yet another form of payment that is somewhat acceptedCVV - Most often used to describe a credit card that you buy, includes cardholder name/address/ccn/cvv2. I'll go more into this laterCVV2 - Credit Verification Value - The number on the back of the card used for verification purposes. 3 digit number for visa/mc and 4 digit for AMEX (American Express) (There is also CVV1 which is a verification number that is written into the mag stripe on the back of the card that is read when the card is swiped)Drop- an address where you can send carded goods, NOT YOUR OWN HOUSE OR FRIENDS/RELATIVES!!CCN - Credit Card Number - Includes the number of the card and expiration date, no name or address.MMN - Mothers Maiden Name - Comes in handy when bypassing security measures on VBV/MCSC.DOB - Date of Birth - Used to bypass some security measures.SSN - Social Security Number - Same as both above, used to bypass security measures.COB - Change of Billing - Some stores will only ship large/high priced items if the shipping and billing info match, these can be obtained through some cvv sellers, usually in the form of a 'Full'Fulls - Same info as CVV but with more info eg. security question answers, SSN, DOB, MMN, etc. which can be used for COB, etc.AVS - Address Verification Service - System that checks the billing address entered against the credit card company's records.VBV - Verified by Visa - Extra verification process initially added by visa, there are different types of authentication used, most notably would be a password, date of birth, social security number, or mothers maiden name.MCSC - MasterCard SecureCode - MC (MasterCard) adopted this process after VBV came out, basically the same thing but with mastercards.POS - Point of Sale - Terminal at a physical shop where the card is swiped/readDump - The information that is written onto the magnetic stripe on the back of the card, the only way to get these is with a skimmer, comes in different 'tracks' which I will not be explaining - a dump would look like 4131980030032319=11101010000000006460Skimmer - A device that is normally attached to an atm where you insert your card, which records your card information (there are other varients, that is the most common)Embosser - A device that 'stamps' the cards to produce the raised letteringTipper - A device that adds the gold/silver accents to the embossed charactersMSR - Magnetic Stripe Reader/Writer - Used in the carding scene for writing dumps (and drivers license, student ID) info to blank cards or giftcards (if you want to use blank white cards, you will need a printer for the card template, embosser/tipper also, which can get costly to buy)BIN - Bank Identification Number - The first 6 digits of a card number (this will be gone over in more detail later on)Novs - Novelty ID - AKA a Fake ID - Commonly used for signing at drops, store pickups, WU Drops, Bank Drops, etc.
Before You Get Started - Security AspectsSecurity (some may disagree) to me is a key aspect in carding. However, an important thing to note is that IF THEY WANT TO GET YOU THAT BADLY; THEN THEY WILL NO MATTER WHAT. Here are a few key security aspects you should take into consideration before getting started:RDP - Remote Desktop Protocol - These are normally hacked or bruted desktop computers that you connect to from your computer.If you buy them, you will get an IP Username/Password, which you connect to by going to start>run>typing 'mstsc' without the '', you will be presented with the login screen, and voila you are on someone else's computer.Socks5 - Is a proxy protocol, which you insert in your browser (on firefox via Tools>Options>Advanced>Network>Connection Settings>Manual Proxy Configuration>SOCKS Host>Tick Socks v5 and insert the IP and Port Number). When you have a CVV, the next step is to get a socks5 in either the same city and state as the card holder, or as close to it as you can find. There are a few different vendors and suppliers that I will give at the end of this guide.VPN - Virtual Private Network - This will change your IP to wherever the location is of the VPN server. This is used with a application rather than through your browser as with socks. Watch out as some VPN providers will keep logs.Hacked Routers - These are used more to just stay anonymous while browsing, unless you can get a router in the same city+state as your CVV. The upside to these is that you are on a dedicated line that is less likely to go down and isn't oversold much like many VPN's, and these are rarely blacklisted much like many socks5.TrueCrypt - A program used to encrypt your hard drive, which requires a password to decrypt upon booting your computer up. I definetly recommend this software, and would also recommend you encrypt your entire hard drive. Remember though, use a STRONG PASSWORD, mixed case, special characters, etc and keep it a min. of 15 characters if you can.TMAC/SMAC - These are programs used to change your MAC (Media Access Control) address, which is a unique identifier given to your NIC (network interface) card (the card in your computer used to connect to the internet). Also recommended by me.CCleaner - A VERY handy tool to clean your browsing history (temp files, cookies) and also your Flash cookies, which many people neglect or don't even know about. Flash cookies are stealthier than regular cookies. Flash can install cookies on your computer without your permission by default, and store the same info that regular cookies do (when you visited etc).Other security aspects to keep in mind- Don't shit where you sleep, meaning if at all possible, don't card from your home network. If you have a laptop and a means of transportation and somewhere with free public wifi, then by all means USE IT!- I personally use firefox since it is stable, easy to use, you can load many unique and helpful plugins (tamper data, sniffers, etc).- Many carders get sloppy over time and will neglect to clear history, or instead of shutting down their computer just put it to sleep so they dont have to wait for it to decrypt, etc. Moral here? DON'T BE A LAZY FUCK!- Lastly, remember, if they want to get you, they will. If you get arrested, then that usually means they have enough information on you already without even needing your computer, that would just be a plus, so encrypted really doesn't matter at this point. However, it is still a good practice to follow since if they do get it un-encrypted there will probably be more charges to follow.- Emails - I personally use a new email for every site I card. Either Gmail or Yahoo work good for me.Basics of a Credit CardTypes of CardsEach credit card company starts their cards with a different number:3 - American Express (AMEX)4 - Visa5 - MasterCard (MC)6 - Discover (Disco)Each card company has their own specific types of cards, here are some of the basics:VisaClassic - a universal payment tool, which was adopted worldwide in any locations designated by the logo of Visa, including ATMs, real and virtual stores, and shops offering goods and services by mail and telephone. This card is intended for those who already have experience in the use of bank cards. She also enjoys popularity among consumers of middle-income, as guaranteed convenience, choice and financial flexibility.Gold - One of the leading products, has been adopted worldwide and allows you to enjoyan impressive financial freedom (aka higher limit)Platinum - These usually have limits over $10,000 (but remember, just because it has a high limit, doesn't mean it isn't already maxed out)Signature - No preset spending limit - great bin to getInfinite - Most prestigious card, virtually no limit. Though there are less in circulation so be cautious when buying these, stick with reputable sellers!Business - Used for small to medium sized businesses, usually has a decent limit.Corporate - Medium to large size businesses, larger limit than Business.Black - limited membership, $500 annual fee, high end card, no limitMasterCardStandard - comparable to visa classicGold - comparable to visa goldPlatinum - comparable to visa platWorld - very high limitWorld Elite - virtually no limit, high end card.AmexGold - usually around 10k limitPlatinum- usually higher limit, around 35kCenturion - High limit, 75k+ (also known as the black card, not to be confused with visa's black card)**There are many more cards than this, these are just some of the basics. If I made a mistake on the card descriptions feel free to correct me as I gathered this information from other tutorials, online sources, so some may be outdated/wrong.When you buy a cvv on a forum such as blackservice, it will usually come in a format such as this (probably not the same order though)| credit card number | cvv2 code | exp date | name on the card | address | city | state | country | zip code | phone # (phone # sometimes not included depending on where you get your cvv's from) |Example:
Code:4862362667787439 | 693 | 07/10 | scott j. sawyer | 10566 parkington lane |highlands ranch | Colorado | United States | 80126 | 7203140318 |If we dissect this a little bit we can find out more -- The first string of numbers is the credit card number.- From the first digit we see that it is a Visa.- The first 6 numbers of that string is the BIN number.- So from this example the bin is 486236- Searching for this bin in a BIN Database we find this information:Code:486236, Capital One Bank CREDIT PLATINUM USA Richmond VirginiaPlatinum - Credit, so this is a nice card. Platinum is better than Classic so we would have a better chance of carding higher priced items with this. And Credit is always better since it's a line of credit instead of debit where the card holder needs to have the money physically in the bank in order to use that card.Things to Keep in Mind When Getting CardsAVS - Address Verification System - a system used to verify the identity of the person claiming to own the credit card. The system will check the billing address of the credit card provided by the user with the address on file at the credit card company. This was an attempt to help identity theft and fraud over the internet. This is a system we as carders dont have to worry about since we have the billing address of the credit card holder. I mentioned it since it is good to be aware of it and that almost every site has this system. It emplifies the importance of typing in the address correctly.**If you get Non-AVS cvv's, then that means you can put in whatever you want for the billing address**VBV - Verified by Visa - Extra verification process initially added by visa, there are different types of authentication used, most notably would be a password, date of birth, social security number, or mothers maiden name.**In order to get by VBV you need the password, if you want to reset the password then you will need the DOB (date of birth), MMN (mothers maiden name), and SSN (social security number).MCSC - MasterCard SecureCode - Same thing as VBV, with same info needed to bypass.Checking the CVV's - Most shops/sellers/vendors that you get your cards from will give you the option if you want checked, or unchecked cards. Checked, depending on the method used, may kill the card, as some checkers will charge a small amount ( >$1 ) to the card, if it goes through = card is good. I won't get into all the codes that cards can return, but when starting out, it's better to just get checked cards, as most of the checkers now won't kill the cards.Balance Checkers - I have seen some services around for balance checkers, which how they work is (this is an older method, but to my knowledge still works) by checking out on a site with however much you want to test the card for, when it comes time to enter the card info, put in fake billing information. If it says the card is declined then the card doesn't have high enough balance, but if it says something about AVS mismatch, then you know the card is good, with a high enough balance.Using the Cards (finally, right?)This is where a drop comes into play. When carding directly, you always want to use a drop, so if it is investigated, they won't be led straight to your house. Also, sometimes, when you order high priced items from the same company too many times they may blacklist the address.A drop is usually an abandoned house/house for sale where you can have items sent to, and either the delivery guy will leave it there, or depending on the sites terms that you ordered from, you may have to be there to sign for it when it arrives. I won't go much more into detail as this guide is meant for beginners, and if you are beginning then just use someone else's drop for now, there are a few sellers offering drops right now in the marketplace. The key thing to remember is toNEVER USE YOUR OWN ADDRESS OR THE ADDRESS OF ANY FRIENDS OR RELATIVES!When you find a site you would like to card, check the Terms and Conditions and make sure that:- They will ship to an address other than the billing address (some sites will but don't say this directly)- Check if they require a signature on pickup- Check they payment processors that are accepted- Check if they do next day shipping- Check the company they use for shipping (UPS, Fedex, USPS)- Check if they require phone verification (some sites that sell virtual items such as Runescape Gold require it)Things to Remember- Next day shipping is ALWAYS BEST!- If they require a signature, don't count them out as many droppers can do signatures- If they do require a signature, coordinate with your drop so you know the name to send it to as they may ask to see ID- Always try to put your orders in before noon with next day shipping, that will give most companies time to process and ship it out the same day.- Use CCleaner BEFORE AND AFTER you do the carding. (remember to clear flash cookies also)- Only create/use the disposable emails while on your vpn/socks- It's good practice to keep a disposable phone around in case you do need phone verificationSteps to Take Before and AfterStart with a fresh formatGet on a hacked or public WiFiDownload and install FireFox, TrueCrypt, CCleaner in that order then clear the history with CCleanerScope out the site you want to card, checking all the info I mentioned earlierUse CCleaner, clean everythingGet your CVV and socks5 that you should have by now readyConnect to a RDP if you are using oneStart up your VPNOpen FF and insert your socks5 (I gave a 'how-to' earlier)Create an email (gmail/yahoo/hotmail doesn't matter where) with the same name as your CVV info (doesn't really matter, just easier IMO)Checkout on the site (should be doing this in the morning, with next day shipping)Use your freshly created email if they need it for verification purposesOrder goes through - use CCleaner againRemember to take the socks5 out of FFExit the VPN/RDPCome back on here and post a pic when you receive your item in the 'Recent carded items' thread :tounge:There are a few more points I would like to briefly go over before this guide comes to an end.- Giftcards are sometimes easier to card than directly carding sites, so if you have problems carding the site directly, try to card a giftcard instead and go that route.- Start with easier sites such as Fandango and Thinkgeek carding giftcards/movie tickets to get the hang of it- Don't try to card $1000 worth of shit on your first day of carding, wait a while until you feel confident in your abilities- NO ONE ACCEPTS PAYPAL!Links to Products/Applications I have mentioned during this guideLiberty Reserve - http://www.libertyreserve.comWestern Union - http://www.westernunion.comWebMoney - http://wmtransfer.com/TrueCrypt - http://www.truecrypt.org/TMAC - http://www.technitium.com/tmac/index.htmlCCleaner - http://www.piriform.com/CCLEANER
Hi To All The
Requirements:-
1. Backtrack 5 or any Linux Distro Having msfencoders
2. your own virus/rat/keylogger engine mine is test1.exe
follow The commands shown in figure:-
perform all steps having root permission
Note:- click on image to see a bigger image
if You Have Any Query Write in Below Comments...
We Will Try To Figure out
