UNDERCODE COMMUNITY
2.68K subscribers
1.23K photos
31 videos
2.65K files
80.1K links
πŸ¦‘ Undercode Cyber World!
@UndercodeCommunity


1️⃣ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2️⃣ Cyber & Tech NEWS:
@Undercode_News

3️⃣ CVE @Daily_CVE

✨ Web & Services:
β†’ Undercode.help
Download Telegram
πŸ¦‘ why to create a carding channel when we can send in 1
> USE FOR LEARN ONLY
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘CARDING ATTAINING HIGHER LEVELS OF ANONYMITY:
t.me/UndercodeTesting

1) Safety is key. No one wants to give the federalles the satisfaction of busting us and shutting down production, so we gotta stay as anonymous as possible.

2) First let me start off by saying theres no 100% safe way to card. Dont let people fool you into thinking that. You can be behind all the proxies, wingates, socks, and whatever else in the world, but you leave "digital fingerprints" wherever you go. For my personal benefits, I use a carded ISP combined with an anonymizer account ( www.anonymizer.com) and a level 1 proxy. But I dont reccomend that for everyone.

3) www.anonymizer.com: offers excellent services for those that want to remain anonymous. The setback is that its a service, and like any other service provided, you have to pay for usage and they will restict your account due to fraudulent usage. Just card another one rite? If youre planning to use anonymizer, just concentrate on keeping your IP secret from their services instead of the site youre carding. The only set-back to the service is that they have some issues with sites using Java Applets, meaning you might have to skip out on some major sites that require JAVA.

4) proxies and such: I use a private hidden proxies, and dont really **** with any other proxies, so I cant comment too much on this topic (maybe someone will paste a seperate proxy faq?) As far as I'm told (thx red and hit), proxies differ from level 1 to level 3, 1 being the most anonymous, 3 being the least. You can also get free proxies from www.anonymitycheker.com/page1.htm this is a descent site which ranks their proxies from "transparent" (leaks your ip) to "highly anonymous." they also do real-time proxy tests and other ****.

5) Stealther: Theres a prob out there that will actually link your proxies together for maximum anonymity. This program is called Stealther. Stealther can be registered via key (so you can go to #serialz on efnet and get a key) and is a descent anonymous program.

6) EvidenceEliminator: If you're really serious about carding, this is a program you NEED to have installed on your HD at ALL TIMES! Federal agents have several programs that allow them to extract information from your PC, such as the pages you have visited, the files you have deleted, and the emails you have written. Everytime your PC restarts, EE kicks in, providing you with the safety of erasing any tell-tale logs and history files. You always want to be prepared for the worse.

7) JAVA: Reguardless of what stealth method you are using, always be sure to disable JAVA on your browser.

8) CARDED ISP: I dunno if carding an ISP is safe or not. I've heard mixed feedbacks about this idea. However, I can testify that I've had expirience with such a matter and I havent had a problem as of yet. Some popular ISPs to card are Earthlink Pre-paid (you can pre-pay it up to a year, look for the link on their confusing website) and America Online (better used for a quickie card, just get out one of their 849308490383904 free 10000000 hour cds and input a few ccs into that *****)

9) These arent the only stealth methods out there: these are just the popular ones ATM. If you feel you have an anonymity method that works, by all means try it out. You never know what works and what dosent until you experiment.

10) If you need to know how anonymous you really are, there are some simple ways of testing this.

www.whatismyip.com: the first (and most basic) test you should take. whatismyip.com is a simple method of knowing what your ip is on the web. This does not run though JAVA so you cant really tell if your anonymous or not from this site alone.

> hxxp://www.sinfulcherries.com/?aid=525390: This is actually a pr0n site protected by ibill. When you try to sign-up, there is a java applet that tells you "your current IP of blahblahblah is being recorded. Any fraudulent blahblahblah will be reported." If its not your real IP, you p***ed the second test. (you can also check your ccs @undercodeTesting)
> hxxp://www.multiproxy.org/env_check.htm: this is a basic check of your anonymity level. Must have JAVA enabled -- the true purpose of the site is to promote their software (multiproxy) which works in similar fashion to stealther.

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘ ANONYMITY CARDING
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘carding DROPS AND VERIFICATION TECHNIQUES:
T.ME/uNDERCODEtESTING

1) The right drop is essential to your scamming needs. Finding legitamite drops inside and outside of the US is hard. Many people keep your **** and dont send, or some people dont pick up the package at all! (theres nothing worse than watching your hard-earned laptop going back to the store because it was refused by the recepient)

2) If you live inside (or even outside) the USA, youre better off scoping a drop out on your own. A drop is basically an empty home that looks to be inhabited. This is the shipping address you use for your carding needs. Your items should only picked up at night.

3) As awlays, be sure to have a cover-story in case someone asks why youre snooping around an empty home. "I'm picking up a package for the person that used to live here" is a legit excuse.

4) Or even "my father is the real-estate agent." is good. Just keep in mind that if you order anything over $500, it will USUALLY need to be signed for, (this statement is based upon FEDEX/UPS policies. I've gotten feedback from people that state they have gotten their local UPS employee to drop merchandise worth 1k at thir doorstop using a note, but these are uncomfirmed rumours.) Wether youre willing to sit and wait all day on the doorsteps of your drop, or you rather leave the postman a note that says you'll pick it up at the nearest postal station, its up to you. (Dont panic if you have to pick up a package at the station. When you walk in, you need to be calm so it dosent arise suspicion. If the clerk asks you to wait more than 3 minutes, PLEASE dont stand there waiting to get busted, tell him/her you have a prior engagement and quickly exit stage left. )

5) If you live outside the USA, youre just gonna have to trust someone. The easiest way to get a legit drop in the USA is to ask around for people that have had successful experiences with a drop. Most drops hold a 50/50 or "you card something you card me sommething" policy. If youre talking so someone thats trying to cut themselves in to the deal "Ie yes, I know someone but you have to card me something too" just move on, they're wasting your time.

6) Just a quick note, if youre carding something like a plasma television, youll have better luck using a drop from the same state, changing the billing addy (you can change a billing addy with a level 2 card, youll need a L2 card for carding a plasma tv neways) and acting like you just moved. (have that mindset when you call in: I am (name of cardholder) and I just moved from (city a) to (city b)) Once you have the item in your possession, you SHOULD GUESS THAT YOUR DROP HAS BEEN FLAGGED. What does this mean? YOU SHOULD NOT - I REPEAT SHOULD NOT RETURN TO A DROP ONCE YOUVE CARDED EXPENSIVE **** TO IT. Reguardless of wether your drop is flagged or not, do you really want to take the chances?

7) The cellular phone: The anonymous cell phone is the carders sword. With it, you will make several calls to several companies using several names. You should keep this cellular phone for carding ONLY. (just in case you become confused and forget who youre talking to.) If you have a phone phreaking connection, youre a lucky SOB. For the rest of us, we gotta go out and get a pre-paid cellular phone. (a phone which dosent require much info to purchase and use.)

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘THE SITES: WHATS CARDABLE AND WHATS NOT?
youtube.com/Undercode

1) Ok, so you got your ccs, your drop and youre as anonymous as you can make yourself. Now what sites are cardable? This is the easiest question I have to answer on this FAQ.

-ANY AND ALL SITES ARE CARDABLE- (THX CIA AND `Q_)

2) Why do I say that? because it's true. Like I said in chapter two of this little tutorial, its not about how many cards you have, its what you can do with them. Alot of this has to do with your mindset as well.

3) If you have a card from Johnny Knoxville from Texas, you must be Johnny Knoxville from texas. Depending on the information that you have acquired from Johnny Knoxvile, you must convince merchants and I-stores that you A R E Johnny Knoxville.

4) When approaching these I-stores, you want to scope things out first. Ask yourself a few questions:

-whats their policy on different shipping address than billing addess?

If they have a "must call" policy, make sure to give them an anonymous number where you can be reached (have your anon cell phone ready for this.)

-do they accept other payments besides credit?

5) If they accept other payment methods, sometimes its easier to card with a different payment method. (Ive had more luck on Dell.com with online checks that I have with credit cards.)

6) Whatever you card, make sure that you have all your info prepped before carding it. If youre carding something over 1k, get on your anonymous celly and call up the banking institution of the person's card youre holding. Make sure to let them know that youre making a purchase of a large limit, so they dont deny your card.

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘CARDING TERMS- A quick overview of what online carding is
t.me/UndercodeTesting


1) - SOCKS and why we use them
- Finding a cardable site and what cardable means
- Carding "non cardable websites" with fake CC scans and other fake documents

2) Carding while on the job
- Getting CC, CVV, CVV2 through use of mobiles
- Skimming whilst on the job
- Using carbonless receipts to get details (pretty outdated method)

3) Trashing
- Trashing for receipts and credit reports (pretty outdated although still works)

Phishing over the phone
- Phishing over the phone for details

Keylogging for CVV2s
- Hardware keylogging

4) Carding Instore
- What instore carding is (very brief)
- How it's done
- How to act and present yourself instore

5) Carding over the phone
- Carding over the phone

6) IRC
- Services provided in IRC
- Advantages to using IRC for info
- Disadvantages
- How to find carding channels (Will not go too much into this as there are secrets between fellow carders which we like people interested enough to find out for themselves)
- Vendors and how to approach them
- How to rip in IRC (EVERY vendor, reliable or not has ripped some n00b

7) who acted like they knew what they were doing)
::::WU BUG BULLSHIT and how to rip n00bs and gain more::::

8) Phishing for Change of billing
- What COB is and why it's useful
- Use through phishing pages
- Use through keylogging

9) Drops and what you need to know about them
- Drops and what you need to know about them

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
πŸ¦‘ DON'' T CLONE UNDERCODE TUTORIAL !!
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ The new carding is summed up quickly is the act of obtaining someone's credit card information, from the CC#, CVV, CVV2, CVN, and the billing address, along with the expiry date and name of the person the card belongs to along with a signature.
t.me/UndercodeTesting

1) Online Carding
Online carding is the purchasing of goods done over the internet with the CVV2.

2) Now for you n00bies you're probably wondering what a CVV2 is, it's simply just the database of basic info for the card such as the card type (e.g. Mastercard) First and last name, address and post code, phone number of the card owner, the expiry date (and start date if it's a debit card or prepaid CC), the actual CC number and the CVC (card verification code, which is the 3 digits on the back of the card).

3) This is the format you usually get them in when you buy off IRC:
:::MC ::: Mr Nigerian Mugu ::: 1234567890123456 ::: 09|11 ::: 01/15 ::: 123 ::: 123 fake street, fakeville, ::: Fake City ::: DE24 TRH ::: 01234-567890 :::

4) SOCKS and why we use them
Now with ANY fraud at all you have to take precautions so you don't make it easy for anyone to catch you in your wrong doings. As usual I swear against TOR for carding/scammin because most nodes are blacklisted by websites and because TOR cycles through various different proxies; and even if you configure it to go straight through an exit node of your choice it's still not worth it. You can use JAP but make sure you're using some constant sock proxies from the same city, town or area that the card is from; also go wardriving and use a VPN (don't trust anyone off IRC with these, you'll have to do some searching around yourself for a highly trusted one and one which won't comply with LE).

5) You can get good SOCKS from anyproxy.net (people are selling accounts for the site in IRC all the time), that's the best place but even I ended up losing the account eventually (unknowingly I was sharing it with some Nigerian dude who became selfish).

6) So we use SOCKS because they stay constant. But don't let that get your guard down, you want FRESH proxies everytime you card.

7) Finding a cardable site and what cardable means
Basically a cardable site holds these characteristics and what you should be looking for to determine an easily "cardable" website:

- The top one you need to look for on the site's TOS is that they send to any address and not just the one registered on the card (although you can easily get around this if they don't, with a COB, photoshopped verification (will go into detail later) or some social engineering over the phone).

- The next important to look for is if they have a visa verification code or mastercard secure code (most of the time if you ask your vendor they'll include them in your CVV2 details textfile), if they do have one of these you have to put in and you don't have them then don't waste your time

- If they ship internationally (for obvious reasons, but you can just stick to local websites and order to your local drop)

- If they leave packages at the door when no one's in, or around the back in a safe area (I know of one site in the UK that has all these qualities including this one, it is perfect for carding clothes)

- Also you can't forget to see what other security checks they need to do (if they need to call you up to verify or want a utility bill, passport or a scan of the actual CC)

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘ CARDING Keylogging for CVV2s


1) Hardware keylogging
First of all it's best if you use hardware keyloggers here that you put into the keyboard of a computer belonging to an area where a lot of people are going online a lot and logging into e-mails, ebays, paypals etc, pretty much giving you enough info for you to go searching through if you get in their e-mails, or maybe you're lucky enough to get someone who is buying something online anyway. Get the keyloggers

2) And come back within 2 days time or so and collect the keylogger after doing some browsing yourself (as to not look suspicious just coming in and then leaving a few seconds later).

3) Or of course you could set one up in a business and do the classic call in and do some social engineering from the credit card company or secret service and have them go to the bank online and have them log in to verify, or maybe even have them log in to a fake bank online made by yourself that will collect anyone's info who logs in on it.

4) Carding Instore
Instore carding is the act of skimming a credit card and writing the dumps and track1+2 to a CR-80 piece of plastic and then either cashing out at the ATM or shopping for goods instore, as long as you have the PIN as well through whatever method you choose to use.

5) How it's done is through the use of thejerm software or any other magstripe utility software (thejerm is the best to use). And you do it like this:


1. Load up thejerms software

2. hit settings tab

3. hit "Defaults" in Leading Zeros box

4. hit "75 bpi" in Set Track 2 density box

5. go bak to actions

6. hit LoCo or HiCo in Coercivity box, depending on which you want to do

7. input your tracks 1 & 2 (without the % ; or ? symbols because the program already does it for you)

8. hit Write Card and swipe your card. (i usually do a read card afterwards to make sure everything went ok)

9. GO SHOPPING!!!

written by undercoder
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘FRESH ELITE PROXIES :
twitter.com/UndercodeNews

175.43.34.51 9999 1 hour ago
1138 ms 2% (76) cn China - Quanzhou Elite -
161.35.76.56 3128 1 hour ago
2851 ms 29% (69) us United States - New York Elite -
140.227.173.230 1000 1 hour ago
3161 ms 14% (75) jp Japan Elite -
91.203.176.204 8081 1 hour ago
3240 ms 24% (68) ru Russia - Smolensk Elite -
111.222.141.127 8118 1 hour ago
1735 ms 27% (68) cn China - Shenzhen Elite -
103.119.145.138 8080 1 hour ago
3567 ms 22% (69) id Indonesia - Jakarta Elite -
125.94.44.129 1080 1 hour ago
5072 ms 5% (85) cn China Elite -
91.205.174.26 80 1 hour ago
571 ms 72% (57) de Germany - Munich Elite -
91.209.25.157 8080 1 hour ago
2214 ms 24% (73) fr France - Maurepas Elite -
5.59.145.129 8080 1 hour ago
4027 ms 11% (94) ru Russia - Novocherkassk Elite -
220.135.165.38 8080 1 hour ago
781 ms 8% (67) tw Taiwan Elite -
221.1.205.74 8060 1 hour ago
2642 ms 31% (53) cn China Elite -


36.37.177.186 8080 1 hour ago
3734 ms 15% (71) kh Cambodia Elite -
49.81.26.214 4216 1 hour ago
2828 ms 56% (65) cn China - Xuzhou Elite -
47.52.231.140 8080 1 hour ago
1522 ms 28% (69) hk Hong Kong Elite -
51.255.103.170 3129 1 hour ago
1620 ms 80% (43) gb United Kingdom Elite -
60.251.40.84 1080 1 hour ago
821 ms 38% (53) tw Taiwan - Keelung Elite -
181.118.167.104 80 1 hour ago
728 ms 98% (40) cl Chile - Santiago Elite -
159.138.22.112 80 1 hour ago
3246 ms 14% (68) hk Hong Kong Elite -
165.22.27.244 3128 1 hour ago
3855 ms 21% (73) us United States Elite -
188.40.183.184 1080 1 hour ago
3387 ms 64% (52) de Germany Elite -
103.86.50.186 8080 1 hour ago
3612 ms 43% (54) th Thailand - Bangkok Elite -
105.247.171.202 8080 1 hour ago
4039 ms 22% (71) za South Africa - Durban Elite -
123.194.231.55 8197 1 hour ago
1072 ms 12% (81) tw Taiwan - Taipei Elite -
159.8.114.34 8123 1 hour ago
383 ms 75% (44) fr France - Clichy Elite -
161.202.226.195 8123 1 hour ago
411 ms 96% (43) jp Japan - Tokyo Elite -
173.192.128.238 8123 1 hour ago
364 ms 93% (42) us United States - Seattle Elite -
173.192.128.238 25 1 hour ago
284 ms 100% (39) us United States - Seattle Elite -
88.99.10.254 1080 1 hour ago
3047 ms 46% (68) de Germany Elite -
85.172.104.162 8000 1 hour ago
846 ms 69% (54) ru Russia - Gelendzhik Elite -
85.10.219.99 1080 1 hour ago
3510 ms 53% (46) de Germany Elite -
101.231.104.82 80 1 hour ago
857 ms 40% (58) cn China - Shanghai Elite -
85.10.219.96 1080 1 hour ago
3800 ms 44% (55) de Germany Elite -
90.154.223.204 8080 1 hour ago
3061 ms 24% (64) bg Bulgaria - Varna Elite -
103.242.44.80 8080 1 hour ago
2664 ms 41% (54) mn Mongolia Elite -

▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁

πŸ¦‘CARDING RECOMMENDATION
t.me/undercodeTesting

1) recommend using spoofcard for verification over the payphone, if they need to verify (if they won't send without some verification which is usually the case).

2) IRC

> Services provided in IRC

> IRC is the main gathering for fellow carders, scam artists and rippers. To put it in a nut shell, IRC is THE black market, unlike craigslist and eBay which are just black markets. You can get anything illegal off IRC from CP to warez to CC details (which is what we want).

3) To concentrate on carding though you can buy:
CVVs
CVV2s
SSNs
Utility bill scans
CC scans
COB (a service to get someone to call up the victim's bank and get the billing address changed to your drop)
Payment for using someone else's drop and then sending to you
Spyware
Fake ID/ ID scans
DUMPZ
Phisher pages

written by undercode
▁ β–‚ β–„ ο½•π•Ÿπ”»β’Ίπ«Δ†π”¬π““β“” β–„ β–‚ ▁
This media is not supported in your browser
VIEW IN TELEGRAM