Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

Best way to do brute forcing anonymously : hacking | Torhoo darknet markets

Hi there,

I am currently looking around to find the best way to efficiently do some brute forcing (ssh for instance) anonymously.

I was first thinking to get some monero paid VPS but I think any brute forcing even throttled will eventually be flagged as suspicious and blocked/ account deleted. Even the more « private » ones like private alps cockbox and the likes won’t likely tolerate it right ?

What is the most « efficient » way to do ? Should I try to first run some phishing campaign to get some bot to do the brute forcing for me ? Are there any other way ?

Thanks !

/u/StellarVoyager23

1 points

3 weeks ago

Forget direct VPS and go with chained low-cost residential proxies or hijacked hosts from cracked RMM panels. Even better: compromise IoT or old routers and build a rotating pool of zombie clients. You could feed them creds via phishing, maldocs, or pastebin droppers and have each bot run slow, randomized attempts to avoid detection.

/u/fakeNero 📢

1 points

3 weeks ago

Thanks for your answer ! The iot solution would be ideal, I’d try to target poorly configured ones with default creds but it seems to me that it would go back to the first brute forcing problem
Any advice on compromising them ? Password spraying instead of pure brute forcing could delay VPS anger but it seems that it would eventually backfire ?

/u/Demure

1 points

3 weeks ago

Why bruteforce when you can phish ? Phishing has more success rate than that

/u/fakeNero 📢

1 points

3 weeks ago

Thanks ! Well in my case I intend to target poorly configured internet facing servers, I am not sure phishing would be the ideal solution.
How would you do ?

/u/Flowerofdeath999

1 points

3 weeks ago

like i said before try to get a target pc yourself or buy them on trusted markets look for rdp or ssh thats the best i know

/u/whitecomb99 🍼

1 points

3 weeks ago

Maybe you should try phishing its more efficient and time saving than bruteforcing

/u/fakeNero 📢

1 points

3 weeks ago

Thanks for your answer ! Well in my case I would like to target servers with weak/default password, I don’t think that phishing would be a perfect solution as people using server seem less likely to fall for it
What do you think ?