All in One Cracking Guide: (Updated) (Updated) (New)
All in One Cracking Guide: (Updated) (Updated) (New)
All in One Cracking Guide: (Updated) (Updated) (New)
2019 -Update 3-
- Cracking Accounts
● How to use SentryMBA (Basics)
● How to use STORM (Basics) [Updated]
● How to use SNIPR (Basics) [Updated]
● How to use OpenBullet (Basics) [New]
● Cracking Spotify Accounts
● Cracking WWE Accounts
● Cracking Netflix Accounts
● Cracking Mail Access Accounts
● Cracking Steam Accounts
● Cracking uPlay Accounts
● Cracking Origin Accounts
● Cracking NordVPN Accounts
● Cracking Minecraft Accounts
● Cracking GTA V (Social Club) Accounts
● Cracking Mega.nz Accounts (Cloud)
● Cracking Fortnite Accounts
● How to Generate Netflix Gift Cards [New]
● Keep cracked accounts for life [New]
● How to Upgrade your own Spotify account [New]
● Cracking Resources (Tools etc.)
● Cracking Configs [New and Improved]
Made by Psych0path© With Love
2019 -Update 3-
- Gathering Proxies
● Usage of Proxy Scrapers
● Tools to grab and check Proxies
● Proxy Sources
● Websites to buy HQ Proxies
- Hashes[New]
● What is a Hash?
● Different types of hashes
● Find type of a certain hash
● Best way to 'decrypt' a single hash
● How to 'unhash' whole combos
- Get your (own) combos
● SQLi Dumper
● Dorks [improved]
→ What are Dorks and for what we use them
→ Where to get dorks
→ How to create dorks using a dork generator
→ How to handwrite dorks
● (Pastebin) Slayer Leecher (not recommended)
Introduction
Cracking Accounts
- Disclaimer
- Cracking FAQ
• What is a combo?
A combo is a list of hacked logins. Mostly email:pass, but also user:pass –
We use them to check for working accounts on different websites.
• Why do we need proxies?
We need proxies because the site we try to crack accounts from blocks our
IP if we try to login multiple times with the same IP as security feature.
• Why do we have to use VPN?
For your own security. You don't want the cops at your door or retards
doxing you.
• Is cracking really that easy?
I guess, if I manage to do it, it is.
Made by Psych0path© With Love
2019 -Update 3-
You gonna learn now – how to crack accounts of your choice easily –
how to load Wordlists and Proxylists in Sentry MBA, and how to use
progression and History.
First of all you have to chose your Sentry Version. I use a modded
Sentry (v.1.4.1 by The Old Warrior) – search one that looks fine for
you and you're good to go.
Then let's startup Sentry – when not on RDP and cracking proxyless
– like always enable VPN!
Made by Psych0path© With Love
2019 -Update 3-
If 'Do not use proxies' is selected, we know our config doesnt need
proxies. If it's not selected – next thing we gonna do is load our
proxies. For this we go to Lists Tab → Proxy List
Made by Psych0path© With Love
2019 -Update 3-
When there, click the folder icon next to the wordlist panel and choose
your combo file.
Made by Psych0path© With Love
2019 -Update 3-
<PROTO>
<COMBO> - The hit combo
<SITE> - Site your cracking – pretty useless
<KEYS> - Keys captured – most likely your capture
<COOKIE> - Cookie captured
When this stuff is done – We finally head over to progression and can
start the bruteforce engine. Choose the bots depending on the config
and website. Usually people add how many bots you should use when
they post a config.
If you are done with checking we head over to History. There you can
see all the hits.
We gonna save our hits with our filter by pressing the disk icon and
choosing our filter.
When saved you can regex the hits file however you want e.g.
removing no-sub hits.
.*None.*\r?\n
Replace All with Notepad++
You gonna learn now – how to crack accounts of your choice easily –
how to use STORM in a proper way and how to not use it (Based on
my experience)
After downloading – put all config files you got in the Configurations
folder, when done let's startup STORM.
Made by Psych0path© With Love
2019 -Update 3-
You can also set (If not set by config) or edit the time for STORM to
wait after all proxies are banned to unban them again – and continue
checking.
When done – switch back to Main Tab and start cracking – that's all!
And that easy – thanks to STORM.
Made by Psych0path© With Love
2019 -Update 3-
Picture: STORM when cracking, you're able to see the combo line
Picture: Stats, you can see the Hits and Capture of the Hits in STORM, very cool, very nice
design.
Made by Psych0path© With Love
2019 -Update 3-
It got cracked, however I advise you, use the paid version. Because the
Cracked version is Ratted
SNIPR includes:
- Many official built in configs
- Many community submitted configs
- Email Checker with Keywords – Very good – way better than All in
one Checker
- Inbuilt Proxy Scraper and Checker
- Inbuilt combo tools
In the picture you can see there are green and blue configs. The
difference between those 2 are proxies.
Green configs = PROXYLESS
Blue configs = Proxies are requiered
So if you wanna start cracking accounts, first of all you have to choose
what you want to crack by clicking on the config name. When done
you have to go to the your proxies if required.
When you loaded your proxies and combo, started cracking you are
going to see your hits like this:
Also you can see the progress and the stats of your cracking session:
Picture: Cracking Fitbit and Grammarly Accounts with SNIPR
When you are done cracking or wanna stop you have to save your hits
by pressing the save button.
If you wanna start scraping proxies with SNIPR you go to the Proxies
leecher Tab and click the Search Button in the right
Made by Psych0path© With Love
2019 -Update 3-
corner.
It will start scraping proxies from the inbuilt sources or the sources
you provided in the sources file.
When done you can save the results, reload the proxy tab and check
them by pressing the play button.
Made by Psych0path© With Love
2019 -Update 3-
OpenBullet OB is the most advanced and easy to use cracking tool out
there
Things you need:
• A combolist (Email:Pass or User:Pass – depending on website
you crack)
• A config
• Proxies (Depending on website you crack)
First you go the the folder and go to configs and put all the configs in
Configs Folder
Click on Add then click on that little folder and choose the combo
from your computer
Made by Psych0path© With Love
2019 -Update 3-
You’ll have to do the same process with Socks4 And Sock5 Proxies ..
Made by Psych0path© With Love
2019 -Update 3-
Or if you want to use your own proxies from your computer you could
locate them and choose type then accept
You go back to Bruteforcer and could press New and add as many
configs running as the same time as you want
I’ll be doing 3
Made by Psych0path© With Love
2019 -Update 3-
Made by Psych0path© With Love
2019 -Update 3-
Now you can see your hits and copy them to wherever you want
If you want to go back to the all the running configs .. click on that
little (+) Next to Bruteforcer
Made by Psych0path© With Love
2019 -Update 3-
Family Owner
Family member
Premium
Studen
Free
To get Mail Access combos – Also good ones for Netflix Checking –
we gonna use All In One Checker – but we gonna come to that later.
For All In One Checker – we dont want to use email addresses from
providers with much security. For example we don't want to check a
Hotmail combo.
– Hotmail
– Gmail – not many hits
– yandex.ru – Captcha Block
Made by Psych0path© With Love
2019 -Update 3-
So, also a nice feature those 2 tools got – You can check for keywords.
For example lets say you want email accounts from a person playing
GTA V.
We gonna add @rockstargames.com to our keywords.
So it checks the email box for rockstargames emails and it creates a
file with those.
You can also check with multiple keywords. Here you see the keywords
I use:
steampowered.com;bitcoin;mojang;minecraft.net;realitykings.com;bangbros;mofos;nordvpn.com;hidemya
ss.com;mega.nz;dropbox.com;paypal.com;instagram;facebook.com;aimware.net;x22cheats;skeet.cc;crackin
gking.com;cracking.org;crunchyroll;amazon;ebay.com;steamcommunity.com;steampowered.com;coinpot;b
lockchain.com;netflix;spotify;expressvpn;selly.gg;hackforums.net;roblox;hypixel;origin;ea.com;dogecoin;eth
ereum;rockstargames.com;fortnite;epicgames;brazzers;reddit.com
Feel free to just copy and paste them into your keywords field – and you're
good to go!
Made by Psych0path© With Love
2019 -Update 3-
Also, like I already said, you can use those hits for other checkers – For
example netflix.
Combo type needed: EMAIL:PASS – Obviously
Tools you can use: SNIPR, All in one Checker, MailStalker
Proxies needed: Most likely NO
Cracking Steam Accounts was the first thing I was interested in. You
can get pretty nice accounts with games like CS:GO etc. as many
people STILL dont use Mail Guard – also you can get lowdig accounts
– worth money too.
– Steam requires HQ proxies, you can use public ones too but
cracking is very slow then, I recommend fineproxies.
For cracking steam accounts you need good proxies – otherwise you
gonna check slow af, and have to deal with it, like I did.
When you got your steam hits, there are some private tips from my
side:
1. Always remember, if you change any details on steam, the owner
gets messaged and can lock the accounts = You can't trade, play on
VAC secured servers etc.
2. Check if the email linked to the account exists, if yes try to access
it, if not feel free to change any details
3. If the email exists, make someway sure the owner does not use
the account anymore – so he won't lock the steam account
4. Depending on the account purchase history and email verified
etc. you can change the email if:
◦ Purchases were not made with card (You need to provide last 4
digits of the card)
◦ Email is not verified
You could also check steam with Mail Access combos, to login to
accounts with Mail Guard → Steam Checker by X-Slayer automatically
converts the email:pass to user:pass (removes the email domain)
You’ll need
• Onyx NORDVPN checker link is here
• Combo Email/User:pass
• Proxies
There are many different tools – DMC is probably the best. It got
many features like checking if the accounts have a cape, minecon,
hypixel stuff or badlion stuff.
To get Social Club accounts people use All In One Checker to get Mail
Access accounts and check for @rockstargames.com keywords.
It's like exploring random houses and you can do whatever you want.
Also you don't need proxies for cracking mega, and it's fast even with
free tools. However it needs CPU Performance since mega uses hashes
to login and to generate them needs CPU Power.
It can be also very profitable because some people store bitcoin wallets
there, pictures of cards, girlfriend pictures, etc. etc. etc.
Made by Psych0path© With Love
2019 -Update 3-
application and it's easy to use. Just paste your combo.txt in the folder
and start the program. (Since there is a STORM config now, you rather
use STORM since it's fast AF)
When done or when you got enough hits we gonna scan through the
hits file with a scanner which got capture function. I use the
MegaChecker[byJayP] for this.
Rename your hits file to combo.txt again and paste in the folder. Then
you get a hits.txt file with capture.
This means in the file you can search through the files of the cloud
accounts. This is very nice so you don't have to login to every account
and check what it contains. Also you can see how many gigabyte are
used.
You can also use only one checker (The Mega.nz Checker from Malex)
but I personally don't like it.
Made by Psych0path© With Love
2019 -Update 3-
It's also easy and even working with public proxies with a decent
speed.
In the checker you can see if an account has an Payment done – if yes
it means the account has probably vBucks or Skins or Save the World
Mode – pretty dope.
PASSWORD
1. Go to https://www.randomcodegenerator.com/en/generate-codes
Requirements
Method
TIPS :
Do not change anything, do private navigation and you will have you
account for years.
Nulled.to Forum:
https://nulled.to
STORM website:
https://stormapp.org (Closed) But you could download it Here
Pass; thestorm.app
SNIPR website:
https://snipr.gg
- Cracking configs
Thanks to @Jurrasic on Nulled for these configs pack, he said he will keep them updated and
he gave me the right to use them.
Made by Psych0path© With Love
2019 -Update 3-
Gathering Proxies
There was also an 1€ Proxy tool on nulled, some people said it's
nice but I didn't try it myself.
Checker only:
socksproxychecker.com
(very nice checker)
- Proxy Sources
Video Tutorial Link: https://streamable.com/4k6bh
There are many nice sites, which give you fresh proxies everyday.
Here im gonna list some:
Hashes
- What is a hash?
For example lets say we hash the string 'Hello123' in MD5. The
result is: D0AABE9A362CB2712EE90E04810902F3
Now if we check an database and find a user with the same hash,
we know his password is Hello123.
There are some kind of hashes. Here im going to give you info
about the most important hashes.
Next to MD5,
MD2, MD4 also exist.
Made by Psych0path© With Love
2019 -Update 3-
There are also special hash functions which were created for
password hashing. Those make the hashing process extremly
handy to prevent brute force attacks.
- LM-Hash
- PBKDF2
- Bcrypt
-Scrypt
If you got a hash, and wanna find out which type of hash it is, we
are going to use this website:
http://md5decrypt.net/en/HashFinder/
Made by Psych0path© With Love
2019 -Update 3-
This website gonna tell you, which hash type it could be, making it
easier for you to find out the hash type.
Most of the time it's the most common hash type from the
results you get there.
Since you can't decrypt hashes, you have to compare them with a
wordlist / hash database.
First of all you have to find out what hash type your hash is. If you
found it out, then we going to use this page to check if the hash is
available in a wordlist / hash database:
https://github.com/danielmiessler/SecLists/tree/master/Password
s
So when you downloaded the wordlist you put your combo in the
hits.txt (into the HashCat folder) and then u drag your wordlist
onto the hashcat application. It will open an CMD window and you
can see the hashes are getting cracked.
You can also launch hashcat with special settings by opening cmd
and cd-ing to the folder and typing hashcat64 or hashcat32.
-help to see all available options.
- SQLi Dumper
SQLi Dumper – the most famous tool people use to dump Databases
Made by Psych0path© With Love
2019 -Update 3-
Since it's its pretty easy to use you probably gonna be able to do it
with this tutorial only too:
1. Paste your dorks and Start the scanner – it starts looking for
Made by Psych0path© With Love
2019 -Update 3-
websites with google etc. (Make sure you have google passed proxies
2. When you got some, you can cancel if you want and then go to
Made by Psych0path© With Love
2019 -Update 3-
5. If you got some – select all and click search columns, then we
search for emails
6. When you get results, you can check how many emails / pass
Made by Psych0path© With Love
2019 -Update 3-
whatever lines are available, right click the url you wanna dump then in
the list or in search results and click „Go to Dumper“
7. It opens an dumper instance
8. When opened, click get databases / dump data if available
9. It loads all available databases and their columns in the left box,
check the email and password columns and press export data
10. The export window opens – check the email (Or username if you
want username : pass combo) and password columns again – select
plain text format and custom char should be : (because we want it
combo format)
Made by Psych0path© With Love
2019 -Update 3-
11. Done!
Things you need:
● Dorks
● (Google passed proxies)
● Time
Made by Psych0path© With Love
2019 -Update 3-
- Dorks
We have 3 ways to get dorks. 2 not special ways and 1 special one.
The secret is all 3 ways are easy to do.
The first method is leeching dorks off from nulled or any other
cracking forum, or pastebin or youtube. There are many places where
you can get dorks. This way also contains buying dorks, as you are able
to buy dorks, since some people who are 'specialized' on making dorks,
offer them.
The second method is using a dork generator. The most famous dork
generator is Work with Dorks / Dork Generator by John Doe though
nowadays people advise you to use TSP Dork Generator.
The third method is handwriting dorks. It's the best and how users say
'most hq' method, as when you are handwriting your dorks, you are
Made by Psych0path© With Love
2019 -Update 3-
able to write really specific google search queries, which may get you
the combo you need. Normal dorks just give you results from random
websites which you can dump and use as combos but handwritten
advanced dorks target the sites you want to dump.
Example of dorks:
accinfo.php?cartId=
acclogin.php?cartID=
add.php?bookid=
add_cart.php?num=
addcart.php?
addItem.php
inurl:shop.php?id=
inurl:“gallery.php?id=“ + allintext:“fortnite“
add-to-cart.php?ID=
Since you are probably lazy, you don't wanna handwrite dorks yourself
or generate them yourself.
https://www.nulled.to/forum/188-dorks/
Nulled Dorks Section
https://pastebin.com/search?q=dorks
Pastebin Search
Made by Psych0path© With Love
2019 -Update 3-
After launch we are going to check the Info Tab so we know the
meaning of each variable.
KW is the Keyword you are searching for
PT is the Pagetype you are looking for | Example:
PF is the Pageformat | Example: .asp, .html, .php etc.
SF is Search function → Google Operators we wanna use.
(If you wanna know what Google Operators are go to the Handwriting Dorks
Part)
DE Domain extention | Example: .de .us .com etc.
My favourite feature is, you are able to create your own presets. You
decide which domains you want to look for and can save it as a preset.
Made by Psych0path© With Love
2019 -Update 3-
So this tool is basically already perfectly configured for you, you can
just choose which domains you want and then after inserting your
keywords you can start creating the dorks.
Keywords are basically your search terms. For example:
fortnite
Free games
battle royale
etc. etc.
Handwriting dorks
Google Operators are special strings which make your search request
more advanced.
You probably are asking yourself now 'So what does this inurl:
operator thingy do??'
You can look up the most important google search operators also here:
https://www.searchenginejournal.com/google-search-operators-
commands/215331/
Or the complete list:
https://ahrefs.com/blog/google-advanced-search-operators/
Here I am going to list the most useful google operators and for what
we are using them.
inurl:
Most used search operator
Makes it able to search for one or many things in website URLs. For
example you want to look for websites who have gallery id and page in their
URL you can use:
inurl:“gallery.php“ + “id=“ + “page=“
Made by Psych0path© With Love
2019 -Update 3-
intitle:
Very useful to target a group of things.
Used if you want certain Text in the title of the website
Example, intitle:"best game of 2019" will return URLs with the following
term in the title of the website.
allintitle:
Inaccurate version of the intitle Operator.
Useful to target a group of things.
intext:
My personal favourite operator.
Used if you want to target pages which contain certain text / keywords.
allintext:
Searches whole website for certain text. Inaccurate so it's not
recommended but I still like it.
allinurl:
With that operator you are able to search results with search pages from
other websites. Since it can be very inaccurate not recommended.
Made by Psych0path© With Love
2019 -Update 3-
Get results from certain keywords which are being linked to other
pages / text:
inanchor:
Results you websites which are being linked to with specific anchor
keywords.
Example: inanchor:“weed hash“
Is going to give you inbound links, which are connected to the keywords
you provided.
allinanchor:
Basically the same as inanchor but only results you websites which contain
ALL text / keywords you provided.
If you still wanna use it – start the program, insert your keywords and it
scans pastebin for Combos, parses it and then ez profit!! Keywords should
be search terms for stuff you need (E.g. Minecraft Alts)
user:pass
email:pass
steam hacked
mega.nz hacked
email list
password list
combolist
minecraft email:pass
minecraft hacked
yahoo hacked
1m email:pass
@yahoo.com
@hotmail.com
@gmail.com
@aliceadsl.fr
@citromail.hu
@mail.ru
@free.fr
@zoho.com
@aol.com
@yandex.com
@yeah.net
@interia.pl
@orange.fr
@wanadoo.fr
@op.pl
@club-internet.fr
@qip.ru
@noos.fr
@pisem.ne
@numericable.fr
@t-online.de
@vtomske.ru
@tiscali.it
Made by Psych0path© With Love
2019 -Update 3-
@virgilio.it
@bol.com.br
@163.com
@t-online.de
@freenet.de
@zoho.com
@mail.ru
@live.ru
@gmx.de
@inbox.lv
@comcast.net
100k Combo
Email:Pass Combo
Made by Psych0path© With Love
2019 -Update 3-
If you really wanna hide your identity fully there are some things you have
to do:
Now that's pretty cool huh? The problem is some VPN providers save
logs on their servers. So if the feds contact them, they will be like 'You
need data? - Sure no problem friends' and they hand your IP + things
you did to the feds – We don't want that of course, so we have to use
a No Log VPN like NordVPN. There are some good providers, find
yourself the one you like.
Made by Psych0path© With Love
2019 -Update 3-
Also make sure your VPN protects IP Leak possibilities like WebRTC
leaks or DNS Leaks.
A dns leak is, when your VPN doesnt route all the traffic through the
VPN server, because the computer uses the default DNS Settings. To
Some change your user agent, some got a inbuild proxy, and then
theres also TOR, routing you through a few servers with the onion
principe – but we come to that later.
always!
3. The best antivirus is your brain! Don't run random shit which you
don't trust. If you think you are not able to do that, then get an
antivirus like BitDefender or Malwarebytes.
4. Reverse engineer programs → You can decompile some
programs using ILSpy, to see their source code if you have last doubts
about it
To be safe, you keep files you don't want feds or others to see in an
encrypted container.
Also, when deleting files on windows, you can easily restore them. We
don't want that, so we use a program like Secure Eraser.
Download: http://secure-eraser.com/
Advantages:
– See what programs want to do
– Don't let them change things you don't want to get changed
What you can do with a Virtual Machine and how does it work?
don't want to spend money on a virtual pc, you use a windows copy
and activate with a default key or linux.
- Usage of TOR
For sure you already heard about TOR. TOR is a program which hides
your IP behind many servers with the onion principe.
With TOR you can access the Darknet, where you can find special
forums, darkboards, buy drugs, weapons, all kinds of illegal things,
watch illegal vids, etc.
I hardly recommend not to explore it alone if you fear evil things etc.
- Account Security
Account Security is a thing which most people just don't care about.
That's the most common problem why people use their accounts.
Im going to show you some very nice ways to get rid of your accounts
and make money with them.
Method #1:
Selling on cracking forums
I think you all know this method, it's easy and you most likely won't
get scammed if you trade with verified people there.
You register or if you are already registered you just create a thread in
the selling section of the forum.
- Make sure the thread looks good, if you're able to make a nice looking
Made by Psych0path© With Love
2019 -Update 3-
Method #2:
Selling on discord
Just join big communities or ask some friends if they know people or
communities – then dm people there and ask if they need [Account
type your selling] for a cheaper price / your price.
If they are interested make sure they go first – so you don't get
scammed – or use a middleman – and boom – easy good profit since
people don't know about cracking there.
Made by Psych0path© With Love
2019 -Update 3-
Many people use discord to sell fortnite accounts and I think discord is
the best way nowadays to sell your accounts.
Method #3:
Selling via Twitter, Instagram, etc.
Social networks are always good places to sell your accounts. However
I think twitter is the best choice.
I know many people who used to sell there, and they had lot of buyers
and made great money. Usually they upload a list of their prices and
available accounts to pastebin / hastebin / ghostbin, whatever and
keep the link in their bio.
This always works good and I did it myself and easily gained fast
followers.
Make sure people who won in your giveaways or bought accounts post
noscam tweets so more people trust you and you make more money.
Also you can work together with giveaway pages so they promote your
shop / your twitter page. Very good deal.
Made by Psych0path© With Love
2019 -Update 3-
Method #4:
Opening an account generator
You can promote your account generator there to gain more buyers.
You should keep your prices under 25€ / $ so it's not to expensive.
You should decide yourself if you wanna offer lifetime, however you
have to remember it's not a good business modell.
Account generators can get you very much money, I know people who
had some and made in total 7k+€ in 3 months which is pretty dope in
my opinion.
Also again you can work together with giveaway pages on twitter
because many of them fancy account generators.
Made by Psych0path© With Love
2019 -Update 3-
- Link Monetization
Link Monetization is a way which doesn't give you much money, but it
can get you at least some money.
You simply post things in groups / forums which people want – you
don't even have to post real content, just make sure your adf.ly link or
any money site link is working and post it there.
If people click it, they see ads and you get money for people clicking it
– easy money and it's even legal!
Scamming can be pretty useful for you – however it's annoying if you
get scammed yourself.
To make sure you don't get scammed here are some tips: