Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
53.4K subscribers
7 photos
6 videos
8 links
Occasional posting on web3/crypto-related tools & vulnerabilities. If something is not listed on-market you can pay for research. Ask: Goal, Deadline, Coin.
Download Telegram
Keystone 1-click 0day | Mass-Phishing

* Premade & fully customisable.
* Update the message
keyst.one customers see and be able to delete it from their tables completely.
* Message text, url, time etc are all controlled by you. You could point users to "
keystone.support" if you wanted to, for example.

$x,xxx - $xx,xxx+ (offer, quicksale) |
@moschata

PATCHED - I'll try and see if there's another method.

NOTE: ONLY SELLING TO ONE SINGLE PERSON. DO NOT TRUST ANYONE WHO SAYS THEY HAVE THE SOURCE. NOBODY HAS BOUGHT AT ALL AS OF YET.
Forwarded from Module
@Module | Trezor 1-Click Signer Takeover — $4,000

Hello all, we're releasing an in-app trezor-focused EVM signer takeover kit. Single-click delivery into the native desktop wallet flow; once the target confirms, you hold an active signing session on supported EVM chains.

* Features:
— One-click handoff into the in-app confirmation flow
— EVM signer takeover (personal sign, typed data, transactions)
Customizable pre-confirmation layer (branding, copy, service presentation, icons)
— Source included (readable, non-obfuscated)

* Requirements:
— Public host or tunnel for delivery
— Basic setup on your side (we provide walkthrough after purchase)

NOTE: The target must complete the native wallet confirmation prompt, execution stays inside the desktop app from there. No further technical detail will be shared publicly on this listing.

* → Screenshot attached is a sample configurations only, overlay styling, labels, and presentation are fully customizable.
* → POF required before any technical walkthrough or implementation specifics. Serious inquiries only.

Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid).

For more information, join @module or PM @lmaowtf17.
Okay bro, which dipshit netdumped on bots to bot this channel & @module G.
Forwarded from 0day Valhalla
Stripe(.)com - PII Disclosure Vulnerability | @valhalla0day

Functionality:
• 6k CPM with 10 threads
• Captchaless

Disclosure:
• Phone number hints
• Linked payment methods
• 2FA
• & More

Price: $2,500 (one-time).

What you get with the purchase:
• Full source code
• Step-by-step setup guide
• Support with any issues

Middleman welcome, @cupid or @scrizon

PM: @valhallaadmin2
This media is not supported in your browser
VIEW IN TELEGRAM
Stansberry VM | t.me/stackframe

VM for Stansberry. Accurately report valid accounts from a list of emails, captchaless, browser-native WAF, no solver or creds needed. Target is never emailed.

Works best with rotating residential proxies. However it scales hard on worker count.

* Definite registered / unregistered verdict per email
* ~3k (single, no proxies) - 15k–20k+ CPM multi-worker + proxy
* Session cache, avoid running the same line twice
* Auto-retry on any errors
* Existing emails show live in registered panel
* Live TUI, themes, masked output, peak CPM frozen on completion
— s run/stop · p settings · t theme · q quit

$1,500 | @moschata
This media is not supported in your browser
VIEW IN TELEGRAM
Funnel | t.me/stackframe

Local desktop sweeper, 4 families. Paste seed(s)/key(s), see balances on 10 chains, funnel to wallet(s) in one pass.
no ENS/emails/exchange, seeds + raw keys only, public nodes wired, private RPC optional.

* Auto-family: one hex key maps to EVM + Tron + BTC + SOL
* 3 EVM paths, slip-10 SOL, bip84/44 BTC, Tron
* Batch import: paste or file .txt/.csv/.key/.json
* Multicall3 EVM + tokens, SPL, BTC utxo, trc20 USDT
* Gas ferry: gas-poor wallets refueled from donors
* Multi-output, weighted split, per-chain outputs
* Dry-run first, txs key-recovered, spike caps, csv export
* Multi-profile: outputs, history, address book
* ETH | Polygon | BNB | Arb | Base | OP | Avax | SOL | BTC | TRX — all supported

$900 |
@moschata
Forwarded from Module etc
Bitgo(.)com VM [Captchaless] — $1,500

This tool checks whether or not an email is registered on Bitgo(.)com.

* Features:
— 4000+ CPM
Completely captchaless.
— No false-positives whatsoever.
— Caching to prevent VM'ing the same line twice.
— Fully unobfuscated source code with all endpoints.

* Requirements:
— Rotating residential proxies

For more information, join @module or PM @lmaowtf17
@Module & @Stackframe | Ledger Wallet 0day (In-App) — $x,xxx

Hello everyone, we're releasing a Ledger Wallet 0day that renders a full recovery flow natively inside the application. The target remains within Ledger Wallet for the duration of the session.

* Features:
— In-app execution via Ledger Wallet
— Source code included (non-obfuscated)
— Custom overlay templates available on request

* Requirements:
— Public host or tunnel for overlay delivery

NOTE: The target must accept a deeplink popup to open Ledger Live, the recovery flow then runs in-app from there. No further detail will be provided on this point.

* → Screenshots attached are for demonstration only, the overlay shown is a sample template, not the only layout available. Custom templates are available upon request.

Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid).

For more information, join @module or PM @lmaowtf17 | @moschata
I'll be away for roughly two weeks. If you have any inquiries about any products, please be patient, as I'm sure to be a bit slower to respond.

Products listed by @lmaowtf17 can be bought from them if I don't respond. Much more will be posted very soon!